Security Engineer

Summary of responsibilities

• Lead security solution initiatives, from architecture, design, deployment to operationalizing and other technical security assessment and implementation (at various layers)
• Ensure sound security protections are in place commensurate to business operation and risk posed
• Collect and document of business requirements for project and process improvement/automation effort
• Key contributing member of the projects they manage and are not only accountable for the project success, but also the deliverables required by Deliver Lead

Key Responsibilities:

1. Automate solutioning to support both strategic and tactical plans, which includes operations and engineering initiatives related to cyber security such as :
2. Establishing automated security assessments and reporting (e.g Vulnerability / Host assessments , Penetration Testing etc)
3. Enhancing existing threat intelligence modes of operations
4. Ideally , able to analyse and uplift existing processes with AI/ML
5. Owning and assuming full responsibility of project assigned/ tasked which includes engineering, testing (including code analysis/SAST for vulnerabilities, code smell etc.) and release by building custom integrations and tooling with existing CI/CD pipeline
6. Keep abreast with industry security best practices for technology adopted by PayNet
7. Initiate and manage special ad hoc projects related to information security which may be needed

Key Requirements:

• Degree in Computer Science; with a minimum of 3 years working experience in relevant areas, with 3 or more years managing large and complex IT projects, migrations or transformational initiatives
• Experience in banking or IT related sector would be an added advantage
• Development capabilities across multiple IT domains

1. Scripting experience and strong understanding for Python, Java , Go
2. Administrative experience with Open Source Databases such as PostgreSQL
3. Comfortable working on a Cloud base Platform (AWS)
4. Solid experience with CI/CD and GitOps toolings (GitLab, Dockers, Kubernetes)
5. Overall awareness of DevOps Process and Best Practices

• Understanding of regulatory requirements in the financial sector is a plus (BNM RMIT , PCI-DSS)

Additional Requirements:

• Able to work with minimum supervision and under pressure
• Able to effectively lead and manage a team of engineers and business analyst outside of direct reporting line
• Able to work well with people at all levels, whether IT or non-IT
• Have good problem-solving skills
• Have excellent communication skills (both verbal and written)

CORE COMPETENCIES

Acts with Integrity & Professionalism

• Holds oneself to the highest standards of ethical behaviour and professional conduct
• Protects and upholds PayNet's reputation in internal and external interactions
• Takes responsibility and ownership for self, teams and organisation's commitments (including mistakes)

.

Fosters Collaboration

• Understands the interdependencies and unique requirements of key PayNet stakeholders
• Builds personal rapport and mutual relationships for work effectiveness & optimal delivery
• Collaborates, being inclusive and provides proactive support and guidance, to individuals or teams within and beyond the organisation

Strives for Excellence

• Benchmarks against the best, sets challenging targets and strives to deliver beyond set targets
• Maintains high quality work standards while continuously pursuing improvement
• Vigorous and continuous self-driven development with an optimistic demeanour in overcoming challenges and self-limiting beliefs

Embraces Change & Innovation

• Identifies opportunities, new ideas and drives execution for improvement and growth
• Acts as change agent and is flexible to adapt to internal and external changes
• Prioritises and allocates resources based on importance and urgency of change initiatives

Focuses on Customer

• Builds understanding of customers unique needs and preferences
• Strives to go beyond customers requirements without compromising PayNet's interest
• Strives to enlist customers trust without compromising PayNet's interest

Effective and Open Communication

• Adjusts one's interaction style to suit target group preferences
• Demonstrates patience and listens attentively to others opinions and suggestions
• Uses multiple communication strategies and methodologies to promote dialogue, create understanding and gain buy in from stakeholders