Senior Specialist, Security Engineer

Senior Talent Acquisition Specialist @ TNG Digital - We're Hiring! We fuel the ideas and ambitions of our people with an environment built on Our DNA of Love, Entrepreneurship, Agility, and Passion – LEAP. We are a culture that empowers everyone to innovate and create solutions that will leave a positive impact on our communities and our nation. Touch ‘n Go will always be here to inspire our talents to grow as leaders and innovators, giving you the power to make a difference.

What will you do?

Lead and manage the Security Operations function and a team of 2 members, reporting to the Head of IT Security.

Own and oversee endpoint security posture across corporate laptops and BYOD devices, covering antivirus, web proxy, application control, encryption, and EDR / XDR solutions.

Drive the secure provisioning and hardening of endpoints (Windows / macOS), ensuring compliance with organizational baselines.

Manage and optimize the deployment and operation of :

CrowdStrike Falcon for advanced threat protection and response

Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for web proxy and zero trust access

Microsoft Defender for Endpoint and Microsoft Intune for security policies, device compliance, and DLP enforcement

Administer cryptographic key management systems (KMS) for secure key lifecycle control across IT systems.

Lead active threat hunting initiatives across endpoint and network layers, utilizing available telemetry, logs, and threat intelligence sources.

Oversee network detection and response (NDR) controls for on-premise network environments.

Conduct regular risk assessments, vulnerability analysis, and mitigation activities across endpoint devices and network infrastructure.

Fine-tune and continuously improve detection rules, response playbooks, and visibility configurations in security tools.

Develop, document, and enforce endpoint security standards, operational procedures, and device onboarding / offboarding practices.

Support and deliver security awareness and technical knowledge-sharing sessions to uplift team and organization-wide capabilities.

Lead or support security incidents, investigations, and root cause analysis when escalated from SOC or IT teams.

Stay up to date with industry trends, threat landscapes, and modern attack techniques to enhance the organization’s defensive strategy.

Who should join us?

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Specialization in IT Security is preferred.

5–7 years of hands-on experience in cybersecurity operations, with exposure to endpoint security, network security, and threat detection.

Strong technical expertise and operational knowledge in :

Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) – certification preferred

Microsoft Intune – for device configuration, compliance, DLP, and security policy enforcement

Proven experience managing key management systems (KMS) and handling cryptographic key lifecycle for internal systems.

Deep understanding of endpoint protection strategies, including antivirus, web proxy, USB control, application whitelisting, and host firewall configurations.

Solid experience with BYOD risk management, including policy enforcement and limited-access strategies.

Hands-on experience with on-premise NDR, IDS / IPS, and log-based network analysis tools.

Strong grasp of industry-standard frameworks (e.g., MITRE ATT&CK, NIST, ISO 27001) and regulatory compliance requirements.

Proven ability to lead security projects, manage resources, and deliver outcomes independently.

Excellent problem-solving, critical thinking, and troubleshooting skills, especially in incident scenarios.

Strong communication and collaboration skills to work across technical and business teams

Preferred certification :

Microsoft Certified : Security Operations Analyst Associate

CISSP, CCSP, or cloud platform certifications (e.g., AWS Security, Azure Security Engineer, Alibaba Cloud Security) are a plus

Flexi working hours.

Monthly eWallet allowance.

Additional 1% employer EPF contribution from your 1st to 3rd year of service, with further increases based on your continued years of service.

Unlimited office pantry fruits, snacks and drinks.

Mobile and broadband subscription reimbursement.

Flexibility to opt dependants coverage (spouse, child, parents or parents-in-law) for outpatient medical benefits.

Additional leave including family leave and paid care leave to care for family members.

Medical coverage including dental, optometrist, mental care, maternity, registered Traditional Chinese Medicine (TCM) and Chiropractic.

Corporate membership discount and many more to explore.

We believe that you have what it takes to fit into the Touch ‘n Go family and help revolutionize the Fintech industry by paving the way to a cashless society. If you\'re ready to take the next step, apply now!

Touch ‘n Go is an organization that strives to provide Equal Opportunity Employment, based on merit, qualifications, capabilities, and caliber. It is Touch ‘n Go’s policy to not discriminate based on age, race, religion, color or other personal status, identity or characteristics. Fair Opportunity is Our Value and Practice. Please advise us of any accommodations you may need by e-mailing :

Note : Only shortlisted candidates will be contacted.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

#J-18808-Ljbffr