Security Engineer – Threat Monitoring & Incident Response

About the role

We are looking for a Security Engineer to strengthen our cyber‑defence posture. You will monitor security events, respond to incidents, and work closely with cross‑functional teams to ensure compliance with industry standards.

Key responsibilities

• Monitor and analyse security events across networks, systems, applications and cloud platforms using SIEM, IDS/IPS and EDR tools.
• Perform incident triage, containment, investigation and remediation coordination, and produce detailed incident reports.
• Conduct proactive threat hunting based on threat intelligence, behavioural patterns and the MITRE ATT&CK framework.
• Assist in developing, implementing and reviewing security policies, standards and procedures to meet MAS TRM, PDPA, NIST, ISO 27001 and CIS Controls.
• Collaborate with IT, compliance, risk and business units, translating technical findings into clear business impacts.
• Evaluate and recommend new security tools, support cloud security operations (AWS, Azure) and automation/orchestration (SOAR).
• Prepare daily/weekly incident summaries, monthly posture reports, threat‑intel insights and vulnerability/risk assessments.
• Support internal and external security audits and follow‑up remediation activities.

Required profile

• Bachelor’s degree or higher in Computer Science, IT, Cybersecurity or a related field.
• Minimum 3 years of experience in IT technical support, presales consulting or security solutions.
• Strong understanding of network security technologies such as firewalls, IDS/IPS, VAPT and MSSP.
• Proven solution‑design ability to translate customer requirements into technical implementations.
• Excellent communication and collaboration skills, able to work under pressure both independently and within a team.

Required skills

• SIEM platforms (e.g., Splunk, QRadar)
• IDS/IPS and EDR tools
• Firewalls and VAPT tools
• Cloud security (AWS, Azure)
• SOAR automation tools
• MITRE ATT&CK framework
• Threat hunting and forensic analysis techniques
• Microsoft Office and technical documentation tools