Talent.com
This job offer is not available in your country.
Senior Security Engineer

Senior Security Engineer

CarsomeSelangorMalaysia, Selangor, Malaysia
12 hours ago
Job description

Overview

The Senior Security Engineer II is a hands-on technical expert responsible for the implementation, automation, and maintenance of CARSOME’s security infrastructure. This role plays a key function in securing CARSOME’s cloud-native environments, with a strong focus on GCP / AWS, CI / CD pipeline hardening, DevSecOps practices, and SOAR playbook integration. Working closely with Engineering, DevOps, and Product teams, this position ensures that security is embedded across cloud workloads, applications, and infrastructure in line with the Cybersecurity Strategy 2025 and ISO 27001 controls.

Your Day-To-Day

  • Cloud Security Implementation :

Lead the implementation of cloud-native security tooling on GCP and AWS.

  • Secure cloud workloads using Google Security Command Center Enterprise (SCCE) and Google Cloud Armor.
  • Define and enforce security governance policies across SaaS, PaaS, and IaaS environments.
  • DevSecOps & Automation :
  • Integrate SAST, DAST, and SCA security testing tools into CI / CD pipelines.

  • Automate vulnerability management and patching via infrastructure-as-code (IaC) tools (e.g., Terraform).
  • Implement IAM role-based security controls and enforce least-privilege principles in DevOps workflows.
  • Provide technical input and security hardening support for the Secure Access Service Edge (SASE) architecture implemented by vendors.
  • Review vendor & cloud configurations to validate security posture and alignment with Carsome standards.
  • Enforce secure configurations across firewalls, access points, and cloud gateways.
  • Security Operations Support :
  • Provide engineering and automation support for threat detection, system hardening, log telemetry, and policy enforcement.

  • Integrate SOAR tools and develop automated playbooks for rapid incident response.
  • Collaborate with MSOC, DFIR vendors to triage alerts and support audit control defense.
  • Support digital forensic investigations and threat-hunting activities.
  • Work with Engineering and DevOps teams to embed security into software development life cycles.
  • Maintain up-to-date documentation for security tools, playbooks, and infrastructure.
  • Participate in security review meetings and provide technical insights into risk mitigations.
  • Qualifications & Experiences :
  • Bachelor’s degree in Computer Science, Cybersecurity, or a related field.

  • Minimum of 5 years of hands-on experience in cybersecurity, preferably in fully cloud-native environments.
  • Proven expertise in GCP / AWS security, DevSecOps, and infrastructure-as-code (e.g., Terraform, GitOps).
  • Experience implementing and managing SOAR platforms and automated playbooks (e.g., Cortex XSOAR, Splunk SOAR, Google SecOps SOAR).
  • In-depth knowledge of cloud security principles, threat detection, and vulnerability management using platforms such as Prisma Cloud, CrowdStrike, or SentinelOne.
  • Strong understanding of integrating security into CI / CD pipelines using tools like GitLab, Jenkins, or GitHub Actions.
  • Familiarity with ISO 27001, SOX, and other regulatory standards relevant to cloud-native security.
  • Must be able to demonstrate practical delivery experience—such as infrastructure hardening, threat mitigation, or audit remediation.
  • This is an implementation-focused role. Candidates who are unable to provide real-world, execution-based examples of their contributions need not apply.
  • Other information

    Unlock job insights

    Salary match

  • Number of applicants
  • Skills match
  • Your application will include the following questions :

  • Which of the following statements best describes your right to work in Malaysia?
  • What's your expected monthly basic salary?
  • Which of the following types of qualifications do you have?
  • How many years' experience do you have as a Security Engineer?
  • Have you worked in a role which requires a sound understanding of the software development lifecycle?
  • CARSOME is Southeast Asia’s largest integrated car e-commerce platform. With operations across Malaysia, Indonesia, Thailand and Singapore, CARSOME aims to digitize the region’s used car industry by reshaping and elevating the car buying and selling experience. The company provides end-to-end solutions to consumers and used car dealers, from car inspection to ownership transfer to financing, promising a service that is trusted, convenient and efficient. CARSOME currently transacts around 100,000 cars annually and has more than 2,000 employees across all its offices. For more information, please visit

    To help fast track investigation, please include here any other relevant details that prompted you to report this job ad as fraudulent / misleading / discriminatory / salary below minimum wage.

    #J-18808-Ljbffr

    Create a job alert for this search

    Security Engineer • SelangorMalaysia, Selangor, Malaysia

    Related jobs
    • Promoted
    Senior Engineer, Product Security Engineering

    Senior Engineer, Product Security Engineering

    Dell TechnologiesCyberjaya, Selangor, Malaysia
    Senior Engineer, Product Security Engineering.Join Dell Technologies as a Senior Engineer, Product Security Engineering.The Dell Security & Resiliency organization manages security risk across all ...Show moreLast updated: 5 days ago
    • Promoted
    • New!
    Security Engineer

    Security Engineer

    OneConnect Financial TechnologyKuala Lumpur, Kuala Lumpur, Malaysia
    Design, implement, and maintain secure AWS network architectures (VPC, subnets, Transit Gateway, routing, NACLs, Security Groups). Define traffic flows for north-south and east-west traffic to enfor...Show moreLast updated: 12 hours ago
    • Promoted
    • New!
    Security Engineer Full Time

    Security Engineer Full Time

    Career HorizonsKuala Lumpur, Kuala Lumpur, Malaysia
    We collaborate with leading financial institutions and industry partners to provide innovative and accessible financial solutions. Grown into a trusted financial services provider, offering a wide r...Show moreLast updated: 12 hours ago
    • Promoted
    • New!
    Security Engineer

    Security Engineer

    Acceron Digital Services Sdn BhdSelangorMalaysia, Selangor, Malaysia
    Administer and maintain system security stack (firewalls, IDS / IPS, SIEM / SOAR) while also performing continuous monitoring and log analysis. Administer and manage firewalls, IDS / IPS, endpoint protect...Show moreLast updated: 12 hours ago
    • Promoted
    • New!
    Security Engineer

    Security Engineer

    Doherty IT SolutionsKuala Lumpur, Kuala Lumpur, Malaysia
    We are actively seeking a Security Engineer to become an essential member of our security operations team, based in Kuala Lumpur, Malaysia. This role is crucial in managing security escalations and ...Show moreLast updated: 12 hours ago
    • Promoted
    Technology Consulting - Cyber Security, Manager / Senior Manager

    Technology Consulting - Cyber Security, Manager / Senior Manager

    EYKuala Lumpur, Kuala Lumpur, Malaysia
    At EY, we’re all in to shape your future with confidence.We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.Join EY and help ...Show moreLast updated: 30+ days ago
    • Promoted
    Web3 Senior Security Engineer

    Web3 Senior Security Engineer

    Hyphen ConnectSepang, Selangor, Malaysia
    We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading.They differentiate...Show moreLast updated: 4 days ago
    • Promoted
    IOT & CYBERSECURITY SENIOR ENGINEER

    IOT & CYBERSECURITY SENIOR ENGINEER

    Panasonic Appliances Air Conditioning Malaysia Sdn BhdShah Alam, Selangor, Malaysia
    Support IoT development team for new product evaluation.Support Regulation team for Cybersecurity Compliance evaluation.Help to process new development related documentation.Provides technical supp...Show moreLast updated: 4 days ago
    • Promoted
    • New!
    Cloud Security Engineer

    Cloud Security Engineer

    BTI Executive SearchKuala Lumpur, Kuala Lumpur, Malaysia
    Security Architecture & Implementation : .Design and implement secure, scalable, and resilient cloud infrastructure architectures across AWS / GCP / Azure. Identity & Access Management (IAM) : .Enforce the ...Show moreLast updated: 12 hours ago
    • Promoted
    • New!
    Network Security Engineer

    Network Security Engineer

    SwisslogPetaling Jaya, Selangor, Malaysia
    Swisslog is shaping the future of intralogistics.As part of the KUKA Group, we are at the forefront of technology that is changing the world. Serving some of the biggest and most exciting brands acr...Show moreLast updated: 12 hours ago
    • Promoted
    Senior Information Security Engineer

    Senior Information Security Engineer

    FINEXUS GroupKuala Lumpur, Kuala Lumpur, Malaysia
    FINEXUS Group, Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia.Senior Information Security Engineer.Location : Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia.Overseeing overall ...Show moreLast updated: 13 days ago
    • Promoted
    • New!
    Cyber Security Engineer

    Cyber Security Engineer

    RHB BankKuala Lumpur, Kuala Lumpur, Malaysia
    To be part of Cyber Threat team, tier 3 SME and mentor to the SOC team.This role requires continuous detection, analysis, investigation, response, and mitigation of advanced threats before they aff...Show moreLast updated: 12 hours ago
    • Promoted
    Cyber Security Engineer

    Cyber Security Engineer

    IRIS Corporation BerhadKuala Lumpur, Kuala Lumpur, Malaysia
    This Cyber Security Engineer role involves protecting computer systems and networks, developing and maintaining Information Security Plans and Policies, and planning and carrying out an organizatio...Show moreLast updated: 5 days ago
    • Promoted
    Delivery Cyber Security Engineer

    Delivery Cyber Security Engineer

    Noventiq MalaysiaKuala Lumpur, Kuala Lumpur, Malaysia
    Delivery Cyber Security Engineer.We are seeking a Cloud Security Engineer to join the Delivery team in Kuala Lumpur, Malaysia. Noventiq Holdings PLC) is a premier global provider of digital transfor...Show moreLast updated: 30+ days ago
    • Promoted
    • New!
    IOT & CYBERSECURITY SENIOR ENGINEER

    IOT & CYBERSECURITY SENIOR ENGINEER

    PanasonicSelangorMalaysia, Selangor, Malaysia
    Support IoT development team for new product evaluation.Support Regulation team for Cybersecurity Compliance evaluation.Help to process new development related documentation.Provide technical suppo...Show moreLast updated: 12 hours ago
    • Promoted
    Cyber Security Engineer

    Cyber Security Engineer

    RHB Banking GroupSelangorMalaysia, Selangor, Malaysia
    To be part of Cyber Threat team, tier 3 SME and mentor to the SOC team.This role requires continuous detection, analysis, investigation, response, and mitigation of advanced threats before they aff...Show moreLast updated: 30+ days ago
    • Promoted
    Cloud Security Engineer

    Cloud Security Engineer

    Accenture Southeast AsiaKuala Lumpur, Kuala Lumpur, Malaysia
    Design, implement, and manage security solutions for cloud environments (e.Develop and enforce cloud security policies, standards, and best practices. Monitor and respond to security incidents and v...Show moreLast updated: 30+ days ago
    • Promoted
    • New!
    Cyber Security Engineer

    Cyber Security Engineer

    IRIS CorporationKuala Lumpur, Kuala Lumpur, Malaysia
    Protecting computer systems and networks.Develop & maintain Information Security Plans and Policies with yearly review or as need arise. Develop & maintain hardening checklist by adopting industrial...Show moreLast updated: 12 hours ago