Security Engineer - Entry / Associate Level
Summary
Entry/associate-level cybersecurity engineer at a security services firm in Penang, working under senior engineers to protect client environments: deploying next-gen firewalls, enforcing NAC/AAA access control, monitoring SIEM/XDR alerts, running vulnerability assessments, and supporting incident response and ISMS documentation.
Position Summary / Job Responsibility
As a Junior / Associate Cybersecurity Engineer, you will play an essential role in protecting our clients' IT and network environments against evolving cyber threats. Working alongside senior engineers, you will bridge the gap between network infrastructure and security—deploying Next-Generation Firewalls, enforcing network access controls, monitoring SIEM/XDR alerts, conducting vulnerability assessments, and supporting incident response.
This role is built for someone with a strong passion for cybersecurity and a proactive, self-driven mindset. You will be given real hands-on exposure across multiple security domains, supported by mentorship from senior engineers, while taking personal ownership of your continuous learning.
Key Responsibilities
As a member of our technical delivery team, you will help translate security strategies into practical, day-to-day protection for our clients. Your responsibilities will include, but are not limited to:
1. Network Security Incident Response
-Act as the technical escalation point for the ticketing Person-in-Charge (PIC) when network support cases exhibit suspicious or malicious characteristics.
-Document comprehensive incident timelines, maintain clear and timely communication with clients during active investigations, and assist senior engineers in executing containment, eradication, and remediation steps.
-Contribute to post-incident reviews and root-cause analysis (RCA) documentation to help prevent recurring security issues.
2. Firewall Deployment & Strengthening
-Assist senior security engineers in the design, deployment, and configuration of Next-Generation Firewalls (NGFW) across diverse client environments.
-Process and evaluate client firewall policy change requests, ensuring all new rules strictly
adhere to the principle of least privilege and corporate security standards.
-Conduct regular firewall rule-base audits to identify, remediate, or decommission shadowed, redundant, or overly permissive rules.
3. Enterprise Network Edge Security
-Support, and maintain enterprise Network Access Control (NAC) platforms using AAA frameworks (RADIUS/TACACS+) and 802.1X protocols to enforce secure wired and wireless network admission.
-Troubleshoot endpoint authentication issues, manage device profiling policies, and ensure unauthorized or non-compliant devices are properly quarantined or restricted.
4. Risk and Vulnerability Assessment
-Execute assigned risk and vulnerability assessments across client networks and systems using established security scanning and assessment tools.
-Analyse scan findings to compile clear, actionable Vulnerability Assessment (VA) reports that prioritize risks and outline practical remediation steps for clients.
-Execute or assist client IT teams with technical remediation actions—such as system patching, configuration hardening, or applying virtual patches—when required.
5. Governance, Compliance, and Documentation
-Assist the owner of Information Security Management System (ISMS) documentation, ensuring that security policies, Standard Operating Procedures (SOPs), asset inventories, and risk registers are version-controlled and kept up to date.
-Coordinate and collect technical audit evidence (such as firewall review logs, incident reports, and vulnerability scan records) to demonstrate continuous compliance during internal and external audits.
Required Qualifications
-Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related field, or equivalent experience.
-0 to 3 years of working experience in IT support, network administration, or information security. Fresh graduates with final-year security/networking projects or relevant internship experience are strongly encouraged to apply.
Core Technical Requirements
-Networking Fundamentals: Solid grasp of core networking concepts, including the OSI model, TCP/IP, subnetting, VLANs, routing, and switching.
-Firewall & Perimeter Security: Basic understanding of firewall rules, NAT, VPNs (IPsec/SSL), and the principle of least privilege.
-Identity & Access Control: Familiarity with authentication concepts such as AAA (RADIUS/TACACS+), 802.1X port-based authentication, Active Directory/LDAP, and Multi-Factor Authentication (MFA).
-Vulnerability Assessment Concepts: Awareness of common security vulnerabilities, CVE/CVSS scoring, and how vulnerability scanning tools (e.g., Nessus, Nmap) identify network and host weaknesses.
-Threat Monitoring & Detection (SIEM/XDR): Foundational understanding of centralized log management, Security Information and Event Management (SIEM), and Extended Detection and Response (XDR) concepts—including how security telemetry from endpoints, networks, and firewalls is correlated to detect anomalies and investigate alerts.
-Security Governance & Compliance: Basic awareness of the CIA Triad (Confidentiality, Integrity, Availability) and information security frameworks.
Soft Skills & Operational Requirements
-Analytical Troubleshooting: Methodical mindset when isolating network anomalies, reading system/firewall logs, and assisting in incident escalation.
-Client-Facing Professionalism: Good interpersonal and communication skills to interact clearly with client IT teams during on-site deployments and active support escalations.
-Field Mobility: Willingness to travel to client premises for site surveys, hardware deployments, and troubleshooting as required (possessing a valid driving license and own transport is preferred).