Security Operations Engineer

Job Summary:

Our organization is seeking a skilled and experienced Security Operations Engineer to join our team. The function will be responsible for day-to-day security operations that includes management of security tools, developing, implementing, and fine-tuning security configurations for our infrastructure, ensuring that our organization's data, network and infrastructure are protected against any unauthorized access, vulnerabilities, intrusion and breaches.

Responsibilities:

1. Overall management of day-to-day security operations.
2. Develop, implement, and fine-tune security configurations for the existing systems and applications, including firewalls, routers, switches, security devices and servers (hardware, software, services, and networks security hardening & baselines, platform/brand independent).
3. Analyze and assess system vulnerabilities and develop strategies to mitigate and execute them.
4. Implement security standards, policies, and procedures to ensure compliance with industry standards and regulations.
5. Collaborate with cross-functional teams, including IT security/Infra/Application teams, and compliance (CISO Office), to identify and resolve security issues.
6. Develop and maintain security-related documentation, including procedures, guidelines, and standards.
7. Stay up to date on the latest cyber security trends, threats, and best practices, and make necessary implementation and enhancement to the current environment to improve organization’s cyber security posture.
8. Must be able to troubleshoot and solve complex technical problems.
9. Conduct training/workshops on security hardening/baseline/configuration for IT teams and ensure successful implementation of the task.
10. Perform other related duties as assigned.

Requirements:

1. Bachelor's or master’s degree in computer science, Cyber Security, or related field.
2. Minimum of 5 years of experience in security configuration or related field.
3. Strong knowledge of security configuration standards and best practices, including firewalls, routers, switches, and servers.
4. Experience with vulnerability assessments and risk management.
5. Familiarity with industry standards and regulations, such as NIST, CIS, ISO, and PCI-DSS.
6. Excellent analytical, problem-solving, and communication skills.
7. Ability to work well in a team environment and collaborate with cross-functional teams.
8. Relevant certifications such as CISSP, CISM, CEH, CCSP, GSEC, CCNA, or CompTIA Security+ are preferred but not mandatory.

#JACMYKL
City: Kuala Lumpur