Security Engineer

• Own information security and technology risk for doit Holdings, a regulated investment platform in Malaysia.
• Hold board-appointed responsibility for day-to-day technology risk oversight and deliver the board's cyber security strategy.
• Build technology risk and cyber security frameworks, the risk appetite statement and underlying policies; keep them approved and current.
• Run security operations across monitoring, vulnerability and patch management, access control, data protection, cryptography and secure development.
• Own incident response from detection through recovery, including same-day reporting to the Securities Commission.
• Lead independent technology validation required for platform registration and close identified findings.
• Take ISO/IEC 27001 from scoping through certification.
• Deliver the annual cyber security awareness programme for the board, senior management and staff.

Chief Information Security Officer

• Serve as the cybersecurity subject matter expert for offshore environments
• Design and architect end-to-end cybersecurity solutions for FPSOs, FSOs, FPUs, PMS, DCS, SIS, telecom, electrical, subsea, and digital network systems
• Develop secure ICSS architectures and integrate ABB systems with third-party OT platforms
• Assess client cybersecurity maturity, identify vulnerabilities and risks, and recommend mitigation strategies
• Build and maintain relationships with offshore operators, EPCs, and key stakeholders
• Act as the primary interface between customers and ABB cybersecurity teams
• Lead cybersecurity strategy, digital roadmaps, solution scoping, proposal development, and technical bid support
• Collaborate with cross-functional specialists throughout solution design, implementation, support, and project delivery
• Ensure compliance with IEC 62443, NIST, IACS UR E26/E27, and Class Society requirements
• Monitor industry trends and emerging threats

Cybersecurity Application Consultant

• Define, implement, and lead the application security program across products, platforms, and the software development lifecycle
• Set application security strategy, standards, secure coding guidelines, and policies for web, mobile, API, and application security
• Drive threat modeling, architecture security reviews, and secure design consultations
• Own SAST, DAST, SCA, IAST, secrets scanning, and fuzz testing toolchains and integrate them into CI/CD pipelines
• Manage the application vulnerability lifecycle, including triage, prioritization, remediation tracking, SLA enforcement, and reporting
• Lead manual secure code reviews and coordinate penetration testing engagements
• Operate the bug bounty program and validate findings
• Build and deliver secure coding training, developer enablement programs, and security champion networks
• Partner with DevOps and platform teams to harden build pipelines, container images, cloud-native workloads, and backend services
• Monitor application security threats, trends, and relevant Southeast Asia regulatory expectations

Application Security Manager

• Configure, deploy, maintain, and optimize enterprise-grade firewalls, IPS/IDS, VPN concentrators, and load balancers
• Ensure appliance performance, availability, and health across sites and cloud environments
• Develop, implement, audit, and review firewall and IPS/IDS policies and rulesets
• Monitor logs and alerts, respond to security incidents, and detect threats
• Design and maintain application load balancing for high availability, traffic distribution, and performance optimization
• Configure and support site-to-site and remote access VPNs
• Monitor device health, performance, and threats; investigate incidents and conduct root cause analysis
• Deploy and manage cloud security appliances, WAFs, and VPNs in AWS and Azure
• Develop and maintain Python, Bash, and PowerShell scripts for automation, backups, and reporting
• Maintain appliance configuration documentation, SOPs, and change logs
• Ensure compliance with ISO, PCI, GDPR, and internal security requirements
• Collaborate with Security, Infrastructure, and ServiceDesk teams on network security projects
• Provide escalation support and knowledge transfer to IT staff
• Conduct security assessments and vulnerability scans
• Recommend and implement security best practices, technologies, and process improvements

Security Engineer jobs in Malaysia

Chief Information Security Officer

Cybersecurity Application Consultant

Application Security Manager

Network Security Appliance Engineer

Manager, Security Solutions – Commercialisation