Cybersecurity Engineer

Silentmode Sdn. Bhd.

Malaysia

1-2 Years

This job is no longer accepting applications

Posted 13 months ago

Job Description

Requirements & Qualification

Bachelors degree in Computer Science or any relevant qualification from a recognized university.

Understanding of creating, interacting with and supporting APIs (REST, JSON/HTTP) and experience working with teams of software, system or application development.
Knowledge of security compliance and technology including Javascript, NodeJS, ES6, and at least one of the following database/cache technologies: MongoDB, Postgres, MySQL, Redis.
Experience with SonarQube, Nginx, Linux System Administration, Docker, AWS Services and security tools, software, system or application such as vulnerability scanners and penetration testing tools.

Proficient in source code management using Git.

Meticulous and good analytical skills.
Interacts well with all levels of Employee.
Familiarity with security compliance framework & regulatory requirements such as ISO/IEC 27001 Information Security Management systems, IACPA Trust Services Criteria, Payment Card Industry Data Security Standard implementation would be an added advantage.

Experience as an Internal Auditor for a minimum of 1 year would be an added advantage.

Good interpersonal and presentation skills.
Good written and oral communication skills for both Bahasa Malaysia and English.
High working level computer literacy, and the ability to use information mapping would be an added advantage.

Able to work independently with very minimum supervision.

Responsibilities

To assist Asset Owner in the development, implementation, monitoring, and maintenance of the organizations products regarding security compliance internally/externally (i.e., projects).

To facilitate performing activities related to product and services associated with ensuring ongoing conform the relevant framework & regulatory requirements e.g., ISO/IEC 27001 Information Security Management systems, IACPA Trust Services Criteria, Payment Card Industry Data Security Standard to be adhered to internally/externally (i.e., projects).
To monitor the findings, continual improvement, open item from management review meeting, security measurement, incident management, etc. that related to the implementation on organizations products.
To monitor organizations products and network for any suspicious activities.

To advocate the response and recommendation of findings, continual improvement, open item from management review meeting, security measurement, incident management, etc. that related to the implementation on organizations products for improving security.

Investigate and analyze security findings or incidents to determine the cause and extent of the breach.
To conduct security and vulnerability assessment e.g., scanning or penetration testing to identify potential weaknesses in an organization's security infrastructure.
To analyze security and threat to identify risks and prevent incidents in an organizations product security compliance.

To educate and train Employee on application of security compliance in organizations product.

To address concern or question from Employee on compliance of SSBs products.
To participate and assist other Employee in the development of product knowledge.
To review documentation of product knowledge for current and future applications or internal/external project deliverables.