Deskripsi Pekerjaan
Hong Leong Bank is seeking a highly skilled and motivated Security Engineer to join our dynamic Information Security team in Selangor. As a leading financial institution, we prioritize the protection of our customers' data and the integrity of our digital banking systems. In this role, you will play a critical part in designing, implementing, and maintaining robust security solutions across our enterprise infrastructure.
You will collaborate closely with cross-functional teams, including IT operations, software development, and risk management, to identify potential vulnerabilities, mitigate threats, and ensure compliance with regulatory standards. This is an exciting opportunity for an experienced cybersecurity professional looking to make a significant impact in a fast-paced, technology-driven financial environment.
If you have a passion for threat modeling, network security, and proactive defense, we encourage you to apply and help us shape the future of secure banking.
Tanggung Jawab
- Design, implement, and monitor security controls, systems, and processes to protect the bank's digital assets.
- Perform vulnerability assessments, penetration testing, and security code reviews to identify and remediate risks.
- Respond to and investigate security incidents, conducting root-cause analysis and implementing corrective actions.
- Manage and configure security tools such as SIEM, firewalls, IDS/IPS, endpoint protection, and data loss prevention (DLP) systems.
- Collaborate with development teams to integrate secure coding practices and DevSecOps into the software development lifecycle.
- Ensure compliance with local financial regulations (e.g., Bank Negara Malaysia guidelines) and international security standards (e.g., ISO 27001, PCI-DSS).
- Conduct security awareness training and promote a culture of cybersecurity vigilance across the organization.
Kualifikasi
- Bachelor’s degree in Computer Science, Information Security, Cyber Security, or a related field.
- Minimum of 3-5 years of hands-on experience in security engineering, incident response, or infrastructure security.
- Strong knowledge of network security protocols, cryptography, and cloud security (AWS, Azure, or GCP).
- Experience with security tools such as Splunk, Nessus, Wireshark, Metasploit, or similar platforms.
- Familiarity with regulatory frameworks governing financial institutions in Malaysia (e.g., BNM RMiT).
- Professional certifications such as CISSP, CEH, CISM, CompTIA Security+, or GIAC are highly preferred.
- Excellent analytical, problem-solving, and communication skills to convey complex security concepts to technical and non-technical stakeholders.