NexTbil Tech

Security Engineer

• Design, deploy, and maintain security controls across AWS, Azure, and GCP environments
• Manage IAM, network segmentation, encryption, key management, and centralized logging
• Develop and tune cloud-native detections in SIEM, CSPM, and CWPP platforms
• Identify misconfigurations, anomalous activity, and indicators of compromise
• Lead investigation and containment of cloud security incidents
• Partner with SOC analysts and incident responders to resolve incidents
• Build automation and infrastructure-as-code patterns using Terraform, CloudFormation, and scripts
• Enforce security baselines at scale and prevent configuration drift
• Perform vulnerability assessments and configuration reviews of cloud workloads, container platforms, and Kubernetes clusters
• Embed security guardrails into CI/CD pipelines
• Partner with DevOps engineers on secure-by-default reference architectures
• Document standards, runbooks, and architecture decisions
• Support audit and compliance activities for ISO 27001, PCI DSS, and SOC 2
• Coordinate with regional and global stakeholders through a Follow-The-Sun operating model
• Maintain awareness of cloud threats affecting relevant industries

Cloud Security Engineer

Architect

• Design and maintain enterprise IAM security architecture focused on Microsoft Azure, Microsoft Entra ID, Microsoft 365 identity integrations, and hybrid identity environments
• Architect and govern Entra ID capabilities including Conditional Access, MFA, Identity Protection, Privileged Identity Management, Access Reviews, Entitlement Management, and lifecycle workflows
• Define and enforce Zero Trust and least-privilege access models across users, administrators, service principals, managed identities, applications, groups, and Azure resources
• Lead secure authentication and authorization design using SAML, OAuth 2.0, OpenID Connect, SCIM, federation, SSO, and application access integration patterns
• Govern Azure application registrations, enterprise applications, API permissions, consent settings, secrets, certificates, service principals, and workload identities
• Design privileged access controls, just-in-time elevation, approval workflows, break-glass account controls, privileged access reviews, and administrative role hardening
• Develop identity security standards, reference architectures, design patterns, roadmaps, and control requirements aligned with policy, regulations, and audit readiness
• Partner with security engineering, cloud platform, infrastructure, application, GRC, SOC, and business teams
• Support identity risk assessment, control validation, incident response, and remediation involving compromised accounts, excessive privileges, risky sign-ins, misconfigured applications, or identity governance gaps

IAM Architect

Operations

• Process joiner, mover, and leaver lifecycle events in Microsoft Entra ID and downstream applications
• Handle access requests, role and group memberships, and entitlement changes through approval workflows
• Administer MFA registration and resets, conditional access support, password support, and self-service troubleshooting
• Support periodic access reviews, access recertification campaigns, and segregation-of-duties checks
• Document access review outcomes for audit
• Investigate and resolve identity-related incidents and service tickets
• Escalate complex issues to senior IAM engineers according to defined runbooks
• Support 24/7 IAM operations through shift work and structured handovers
• Maintain records of access changes, approvals, and exceptions in ticketing and case-management systems
• Collaborate with HR, IT, security, and business application owners on provisioning
• Enforce least-privilege access and escalate identity-related anomalies for investigation

IAM Operations Analyst

Platform Engineer

• Lead advanced triage, investigation, and analysis of high-severity alerts and incidents across SIEM, endpoint, network, email, identity, and cloud security platforms
• Perform deep-dive log analysis, event correlation, threat hunting, and root-cause analysis
• Identify attack patterns, indicators of compromise, and control gaps
• Administer and maintain security platforms, including configuration updates, rule tuning, alert logic validation, data source onboarding, connector health checks, and access administration
• Develop, refine, and maintain detection use cases, correlation rules, dashboards, playbooks, standard operating procedures, and response runbooks
• Coordinate incident response with security engineering, infrastructure, cloud, network, identity, application, and business teams
• Provide technical guidance, quality review, and mentoring to L1 and L2 SOC analysts
• Document investigations, evidence, actions taken, lessons learned, and control recommendations in ticketing and case management systems
• Support 24/7 SOC operations through structured handovers, shift support, service level adherence, and collaboration with global Follow-The-Sun teams

Security Platform Engineer

Application Engineer

• Perform security assessments of web, mobile, and API-based applications through manual testing and automated scanning
• Conduct threat modeling and secure design reviews during application architecture and design phases
• Review source code manually and with SAST tooling to identify and remediate vulnerabilities
• Integrate and tune SAST, DAST, SCA, and IAST tools within CI/CD pipelines
• Partner with development teams to triage findings, prioritize remediation, and provide secure-coding guidance and training
• Track and report application security metrics, vulnerability trends, and remediation SLAs to engineering leadership
• Support incident investigations involving application-layer issues
• Contribute to root-cause analysis and preventive controls
• Maintain awareness of OWASP Top 10, CWE/SANS Top 25, and emerging threats relevant to gaming, fintech, and digital services
• Collaborate with global engineering, product, and operations teams

Application Security Engineer

• Define, implement, and lead the application security program across products, platforms, and the software development lifecycle
• Set application security strategy, standards, secure coding guidelines, and policies for web, mobile, API, and application security
• Drive threat modeling, architecture security reviews, and secure design consultations
• Own SAST, DAST, SCA, IAST, secrets scanning, and fuzz testing toolchains and integrate them into CI/CD pipelines
• Manage the application vulnerability lifecycle, including triage, prioritization, remediation tracking, SLA enforcement, and reporting
• Lead manual secure code reviews and coordinate penetration testing engagements
• Operate the bug bounty program and validate findings
• Build and deliver secure coding training, developer enablement programs, and security champion networks
• Partner with DevOps and platform teams to harden build pipelines, container images, cloud-native workloads, and backend services
• Monitor application security threats, trends, and relevant Southeast Asia regulatory expectations

Application Security Manager

Analyst

• Plan, scope, and execute red team engagements, penetration tests, and breach simulation exercises
• Test networks, web and mobile applications, cloud environments, endpoints, Active Directory, and internal infrastructure
• Emulate adversary tactics, techniques, and procedures aligned to MITRE ATT&CK
• Test SOC and incident response detection and response capabilities
• Conduct authorized phishing, vishing, and, where in scope, physical intrusion testing
• Develop and maintain custom tooling, scripts, and payloads for offensive operations
• Identify, exploit, and document vulnerabilities, misconfigurations, and control weaknesses
• Produce technical findings and executive-ready reports with prioritized remediation guidance
• Collaborate with blue team, detection engineering, and incident response on purple team exercises
• Maintain engagement scope, methodology, evidence, exploitation steps, escalations, and remediation records
• Monitor emerging offensive techniques, threat actor TTPs, vulnerability disclosures, and relevant tooling

Breach Simulation Analyst

• Design and maintain enterprise IAM security architecture focused on Microsoft Azure, Microsoft Entra ID, Microsoft 365 identity integrations, and hybrid identity environments
• Architect and govern Entra ID capabilities including Conditional Access, MFA, Identity Protection, Privileged Identity Management, Access Reviews, Entitlement Management, and lifecycle workflows
• Define and enforce Zero Trust and least-privilege access models across users, administrators, service principals, managed identities, applications, groups, and Azure resources
• Lead secure authentication and authorization design using SAML, OAuth 2.0, OpenID Connect, SCIM, federation, single sign-on, and application access integration patterns
• Govern Azure application registrations, enterprise applications, API permissions, consent settings, secrets, certificates, service principals, and workload identities
• Design privileged access controls including just-in-time elevation, approval workflows, break-glass account controls, access reviews, and administrative role hardening
• Develop identity security standards, reference architectures, design patterns, roadmaps, and control requirements aligned with policy, regulation, and audit readiness
• Partner with security engineering, cloud platform, infrastructure, application, GRC, SOC, business, and other teams
• Support identity risk assessment, control validation, incident response, and remediation involving compromised accounts, excessive privileges, risky sign-ins, misconfigured applications, and identity governance gaps

IAM Security Architect

• Lead the design, implementation, and continuous improvement of cloud security controls across AWS, Azure, and GCP
• Define and maintain cloud security architecture standards, reference patterns, baselines, and guardrails aligned with CIS Benchmarks, NIST, and Cloud Security Alliance frameworks
• Operate and mature CSPM, CWPP, and CNAPP tooling, including detection, prioritization, and remediation of misconfigurations and vulnerabilities
• Partner with engineering, DevOps, and platform teams to embed security into Infrastructure-as-Code, CI/CD pipelines, container, and Kubernetes deployments
• Implement automation, policy-as-code, and shift-left security practices
• Lead investigation and response to cloud-related security incidents with SOC, incident response, and platform teams
• Drive root-cause analysis and preventive improvements
• Manage cloud identity and access security, including IAM hardening, privileged access controls, federation, secrets management, and continuous entitlement review
• Support audit, regulatory, and compliance activities by maintaining cloud control evidence
• Monitor evolving cloud threats, attacker techniques, and platform changes affecting AWS, Azure, GCP, and SaaS services
• Coordinate with global security operations, infrastructure, application, and business stakeholders

Cloud Security Manager

• Design and maintain secure Azure cloud architecture standards, reference architectures, and reusable security patterns
• Define and govern Azure landing zone security controls, management group structures, subscription governance, Azure Policy, resource tagging, network segmentation, security baselines, and compliance guardrails
• Architect identity and access security using Microsoft Entra ID, privileged access controls, conditional access, role-based access control, managed identities, and least-privilege principles
• Provide security architecture guidance for Azure networking, including hub-and-spoke models, private endpoints, network security groups, Azure Firewall, DDoS protection, application gateways, and secure connectivity patterns
• Define data protection and cryptographic controls, including Key Vault, encryption, secrets management, certificate management, backup, recovery, and secure data storage
• Advise DevSecOps teams on infrastructure as code, secure configuration, policy-as-code, vulnerability management, container security, and automated compliance checks
• Partner with security operations teams to incorporate Azure logging, monitoring, threat detection, Microsoft Defender for Cloud, Microsoft Sentinel, and incident response requirements
• Review cloud solution designs, identify security risks, document architecture decisions, and provide remediation guidance
• Collaborate with cloud engineering, infrastructure, application, DevSecOps, security operations, risk, and business teams

Cloud Security Architect

Security Operations

• Monitor security alerts and events across SIEM, endpoint, network, email, identity, and cloud security tools
• Perform alert triage, investigation, enrichment, impact assessment, threat hunting, and root-cause analysis according to role level
• Identify false positives, suspicious patterns, indicators of compromise, repeated attack activity, and control gaps
• Escalate suspected or confirmed incidents to incident responders, platform owners, infrastructure teams, and business stakeholders
• Document alerts, investigations, evidence, response actions, closure rationale, lessons learned, and recommendations in ticketing and case management systems
• Administer and maintain security platforms, including access updates, configuration changes, log source onboarding, connector health checks, alert tuning, rule updates, and dashboard maintenance
• Develop and maintain detection use cases, correlation rules, dashboards, playbooks, standard operating procedures, and response runbooks
• Coordinate incident response activities to support timely containment and remediation
• Provide technical guidance, quality review, mentoring, and investigation coaching to L1 and L2 analysts
• Support 24/7 SOC operations through structured shifts, handovers, service-level adherence, and Follow-The-Sun collaboration with global teams
• Maintain awareness of current threats affecting enterprise environments

SOC Analyst, L1 / L2 / L3

• Monitor threat intelligence sources, open-source intelligence, dark web sources, social media, data leak sites, threat feeds, and external attack surface indicators
• Conduct VIP intelligence monitoring for senior executives and designated high-risk individuals
• Identify impersonation, credential exposure, doxing, reputational threats, targeted phishing, and physical-digital risk indicators
• Collect, validate, and enrich indicators of compromise, threat actor activity, vulnerabilities, campaigns, and emerging tactics, techniques, and procedures
• Prepare intelligence reports, alerts, watchlists, and situational updates
• Escalate credible threats, exposed credentials, impersonation attempts, brand abuse, and VIP-related findings according to playbooks and severity criteria
• Support cyber threat investigations by correlating external intelligence with internal security telemetry, cases, alerts, and incident response activities
• Maintain accurate records of intelligence collection, validation, analysis outcomes, escalations, and stakeholder communications
• Maintain awareness of cyber threats affecting Malaysia, Southeast Asia, multinational organizations, senior executives, and relevant business sectors
• Coordinate with global security operations, incident response, executive protection, and business stakeholders

Threat Intel Analyst, L1

Engineer

• Administer joiner, mover, and leaver processes in alignment with HR systems, back-office systems, and IAM policies
• Provision, modify, and deprovision user, service, and privileged accounts across directories and integrated applications
• Maintain accurate identity attributes according to corporate IAM and HR policies
• Administer accounts, roles, and permissions across enterprise systems, cloud environments, and product back-office platforms
• Implement and maintain least privilege, RBAC, and just-in-time access policies
• Review and audit user access for internal and regulatory compliance
• Coordinate onboarding and offboarding with HR and IT teams
• Integrate IAM systems with HRIS, directory services, and cloud identity providers
• Manage IP whitelisting for product providers, payment gateways, and business-critical systems
• Maintain documentation and governance of IP access rules
• Collaborate with network and application teams to troubleshoot and validate connectivity
• Manage PIM/PAM solutions to protect privileged credentials and monitor administrative access
• Enforce session recording, password rotation, and MFA for privileged accounts
• Conduct privileged account reviews and remediate access issues
• Monitor access and data movement using DLP and CASB tools
• Investigate and respond to unauthorized data access or transfer alerts
• Define and enforce data classification and protection policies
• Support IAM integrations with SaaS platforms, Microsoft 365, Intune, collaboration tools, and third-party applications
• Troubleshoot authentication, SSO, MFA, and access issues
• Participate in IAM projects, including onboarding the new back-office system, enhancements, and tenant improvements
• Maintain IAM processes, standards, documentation, and access matrices
• Ensure IAM configurations comply with security policies, audit requirements, and hardening standards
• Identify and remediate access violations, orphaned accounts, and policy deviations
• Support internal and external audits with access evidence and compliance reports
• Drive IAM process improvements and automation

Identity and Access Management Engineer

Product Manager

• Define and communicate product vision aligned with business goals and customer requirements
• Prioritize and maintain the product backlog
• Refine user stories and acceptance criteria with stakeholders and development teams
• Collaborate with business leaders, engineers, designers, and customers
• Lead sprint planning, reviews, and retrospectives
• Monitor industry trends, competitor products, and customer feedback
• Collaborate with architects and developers on technical feasibility and scalability
• Track product performance metrics such as KPIs and ROI
• Report progress to senior leadership
• Identify and mitigate product delivery and quality risks
• Own products including Angular websites, Flutter mobile apps, payment systems, and CRM systems

Product Owner

Administration

• Manage user identities, licenses, and groups using Azure AD and Microsoft 365 Admin Centers
• Administer Exchange Online, including mailboxes, distribution groups, mail flow rules, public folders, and anti-spam/malware policies
• Oversee SharePoint Online and OneDrive for Business sites, permissions, storage, and external sharing policies
• Configure and manage Microsoft Teams environments, policies, channels, apps, and integrations
• Implement and manage Microsoft Intune for device and application management
• Administer Azure AD Conditional Access, SSO, and MFA services
• Monitor and manage Microsoft 365 security features, including threat protection, DLP, and eDiscovery
• Provide Tier 2/3 technical support for Microsoft 365 services
• Diagnose and resolve account, mail flow, SharePoint, Teams, and device-management issues
• Collaborate with end-users and IT teams to support productive use of Microsoft 365 applications
• Implement security best practices and compliance policies
• Conduct security audits and maintain system integrity
• Monitor service health, security alerts, and audit logs
• Develop and maintain PowerShell scripts for provisioning, reporting, and license management
• Use Power Automate to streamline Microsoft 365 processes
• Create and maintain configuration, process, and troubleshooting documentation
• Help develop and deliver end-user training materials
• Participate in planning, testing, and deployment of new Microsoft 365 features and services
• Contribute to on-premises-to-cloud and tenant-to-tenant migration projects
• Evaluate and recommend technologies to improve the Microsoft 365 environment