Information Security Engineer (Operations & Infrastructure Security)

apartmentPinecone Technology Sdn. Bhd. placeKuala Lumpur scheduleFull-time calendar_month 
Job Requirements |(岗位要求)
  1. 3年以上系统或网络运维经验,有信息安全经验优先
Minimum 3 years of system/network administration experience; security experience preferred
  1. 熟悉企业网络架构及防火墙配置(策略控制、端口管理等)
Strong understanding of enterprise network architecture and firewall configuration
  1. 熟悉 VPN 技术(IPSec / OpenVPN 等)
Hands-on experience with VPN technologies such as IPSec or OpenVPN
  1. 熟悉 Linux 安全加固,包括:

Solid Linux security experience, including:

  • SSH 安全配置(密钥登录、禁止 root)
  • 防暴力破解(fail2ban 等)
  • 系统补丁与漏洞管理
  1. 熟悉 Windows 系统管理及基础安全策略
Familiar with Windows administration and security policies
  1. 熟悉网络隔离设计(VLAN、办公网与服务器网分离)
Experience in network segmentation (e.g., VLAN, network isolation)
  1. 具备基本安全攻防知识(如暴力破解、钓鱼、木马等)
Understanding of common security threats (brute force, phishing, malware, etc.)
  1. 具备日志分析能力,能发现异常行为

Strong log analysis skills to identify anomalies

加分项(Added Advantages)
  1. 云平台经验(AWS / 阿里云 / 腾讯云等)
Experience with cloud platforms (AWS, Alibaba Cloud, Tencent Cloud)
  1. 熟悉身份认证系统(Microsoft Entra ID 等)
Familiarity with identity management systems (e.g., Entra ID)
  1. 有从0到1搭建企业安全体系经验
Experience building security systems from scratch
  1. 掌握脚本语言(Shell / Python)
Scripting skills (Shell / Python)
  1. 有安全项目经验(等保 / 渗透测试对接)
Experience in security projects (compliance, penetration testing coordination)
  1. 持有认证(CISSP、CEH 等)

Relevant certifications (CISSP, CEH, etc.)

核心能力 | Key Competencies
  1. 能独立负责整体 IT 与安全环境
Ability to independently manage IT and security environments
  1. 具备风险意识,能主动发现问题并解决
Strong risk awareness and proactive problem-solving mindset
  1. 良好的文档能力(流程 / SOP / 安全制度)
Strong documentation skills (SOPs, policies)
  1. 能在安全事件中快速反应与处理

Ability to respond effectively under security incidents

岗位定位 | Role Positioning

本岗位为偏运维的安全岗位(Hands-on Security Operations Role),而非纯安全研究岗位:
  • 需要动手解决实际问题(Execution-focused)
  • 需要从0到1建立安全体系(Build from scratch)
  • 需要长期维护系统稳定性(Long-term ownership)
岗位职责 | Responsibilities
  1. 负责公司整体 IT 基础设施的安全建设与日常运维,包括办公网络、服务器及终端设备
Responsible for the security architecture and daily operations of the company’s IT infrastructure, including office networks, servers, and endpoints
  1. 设计并维护企业网络安全体系(防火墙策略、网络隔离、访问控制等)
Design and maintain enterprise network security systems, including firewall policies, network segmentation, and access control
  1. 部署与管理 VPN 系统,保障远程办公的安全性
Deploy and manage VPN systems to ensure secure remote access
  1. 负责 Linux / Windows 服务器安全加固(权限控制、端口管理、补丁更新等)
Perform security hardening on Linux and Windows servers, including access control, port management, and patching
  1. 管理账号体系与权限控制,结合 Microsoft Entra ID 实现统一身份认证与 MFA
Manage identity and access control systems, leveraging Microsoft Entra ID for unified authentication and MFA
  1. 负责安全日志收集、分析与审计,识别异常行为并及时响应
Collect, analyze, and audit security logs to detect anomalies and respond accordingly
  1. 管理终端安全策略(如 Kaspersky、防病毒策略、软件安装控制等)
Manage endpoint security policies, including antivirus (e.g., Kaspersky) and application control
  1. 制定并执行数据安全策略(备份、权限隔离、防数据泄露等)
Develop and enforce data security policies, including backup, access isolation, and data protection
  1. 处理安全事件(病毒、入侵、异常账号行为等)
Handle security incidents such as malware infections, intrusion attempts, and account anomalies
  1. 建立并优化信息安全制度与流程(账号管理、权限审批、离职流程等)
Establish and optimize security policies and procedures, including account lifecycle management
  • EPF
  • SOCSO
  • Annual Leave
  • Medical and Hospitalisation Leave
  • EIS
  • Medical Insurance
apartmentKumpulan Wang Simpanan Pekerja (KWSP)placeAmpang Jaya, 8 km from Kuala Lumpur
learning institutions.  •  Minimum 7 - 10 years of experience in IT security, risk management, or cybersecurity advisory roles.  •  Strong understanding of information security principles, risk assessment methodologies, and regulatory frameworks (e.g., ISO...
apartmentHiredly XplaceKuala Lumpur
Management  •  Strong experience with Hybrid Identity Architecture  •  Hands-on expertise in Ping Federated Identity  •  Deep integration knowledge with Microsoft Entra ID (Azure AD) Microsoft 365 Security & Compliance   1.  Encryption & Information Protection...
local_fire_departmentUrgent

IT Security Expert

apartmentArvato Systems MalaysiaplaceKuala Lumpur
Are you a security expert with a passion for IT Security and a commitment to protecting our digital assets? Do you thrive in a fast-paced environment where innovation and collaboration are key? We are seeking a skilled IT Security Expert to join our...