Talent.com
Tawaran kerja ini tidak tersedia di negara anda.
Senior Security Engineer

Senior Security Engineer

CarsomeSelangorMalaysia, Selangor, Malaysia
20 jam yang lalu
Penerangan pekerjaan

Overview

The Senior Security Engineer II is a hands-on technical expert responsible for the implementation, automation, and maintenance of CARSOME’s security infrastructure. This role plays a key function in securing CARSOME’s cloud-native environments, with a strong focus on GCP / AWS, CI / CD pipeline hardening, DevSecOps practices, and SOAR playbook integration. Working closely with Engineering, DevOps, and Product teams, this position ensures that security is embedded across cloud workloads, applications, and infrastructure in line with the Cybersecurity Strategy 2025 and ISO 27001 controls.

Your Day-To-Day

  • Cloud Security Implementation :

Lead the implementation of cloud-native security tooling on GCP and AWS.

  • Secure cloud workloads using Google Security Command Center Enterprise (SCCE) and Google Cloud Armor.
  • Define and enforce security governance policies across SaaS, PaaS, and IaaS environments.
  • DevSecOps & Automation :
  • Integrate SAST, DAST, and SCA security testing tools into CI / CD pipelines.

  • Automate vulnerability management and patching via infrastructure-as-code (IaC) tools (e.g., Terraform).
  • Implement IAM role-based security controls and enforce least-privilege principles in DevOps workflows.
  • Provide technical input and security hardening support for the Secure Access Service Edge (SASE) architecture implemented by vendors.
  • Review vendor & cloud configurations to validate security posture and alignment with Carsome standards.
  • Enforce secure configurations across firewalls, access points, and cloud gateways.
  • Security Operations Support :
  • Provide engineering and automation support for threat detection, system hardening, log telemetry, and policy enforcement.

  • Integrate SOAR tools and develop automated playbooks for rapid incident response.
  • Collaborate with MSOC, DFIR vendors to triage alerts and support audit control defense.
  • Support digital forensic investigations and threat-hunting activities.
  • Work with Engineering and DevOps teams to embed security into software development life cycles.
  • Maintain up-to-date documentation for security tools, playbooks, and infrastructure.
  • Participate in security review meetings and provide technical insights into risk mitigations.
  • Qualifications & Experiences :
  • Bachelor’s degree in Computer Science, Cybersecurity, or a related field.

  • Minimum of 5 years of hands-on experience in cybersecurity, preferably in fully cloud-native environments.
  • Proven expertise in GCP / AWS security, DevSecOps, and infrastructure-as-code (e.g., Terraform, GitOps).
  • Experience implementing and managing SOAR platforms and automated playbooks (e.g., Cortex XSOAR, Splunk SOAR, Google SecOps SOAR).
  • In-depth knowledge of cloud security principles, threat detection, and vulnerability management using platforms such as Prisma Cloud, CrowdStrike, or SentinelOne.
  • Strong understanding of integrating security into CI / CD pipelines using tools like GitLab, Jenkins, or GitHub Actions.
  • Familiarity with ISO 27001, SOX, and other regulatory standards relevant to cloud-native security.
  • Must be able to demonstrate practical delivery experience—such as infrastructure hardening, threat mitigation, or audit remediation.
  • This is an implementation-focused role. Candidates who are unable to provide real-world, execution-based examples of their contributions need not apply.
  • Other information

    Unlock job insights

    Salary match

  • Number of applicants
  • Skills match
  • Your application will include the following questions :

  • Which of the following statements best describes your right to work in Malaysia?
  • What's your expected monthly basic salary?
  • Which of the following types of qualifications do you have?
  • How many years' experience do you have as a Security Engineer?
  • Have you worked in a role which requires a sound understanding of the software development lifecycle?
  • CARSOME is Southeast Asia’s largest integrated car e-commerce platform. With operations across Malaysia, Indonesia, Thailand and Singapore, CARSOME aims to digitize the region’s used car industry by reshaping and elevating the car buying and selling experience. The company provides end-to-end solutions to consumers and used car dealers, from car inspection to ownership transfer to financing, promising a service that is trusted, convenient and efficient. CARSOME currently transacts around 100,000 cars annually and has more than 2,000 employees across all its offices. For more information, please visit

    To help fast track investigation, please include here any other relevant details that prompted you to report this job ad as fraudulent / misleading / discriminatory / salary below minimum wage.

    #J-18808-Ljbffr

    Buat amaran kerja untuk carian ini

    Security Engineer • SelangorMalaysia, Selangor, Malaysia

    Pekerjaan yang berkaitan
    • Dinaikkan pangkat
    Senior Engineer, Product Security Engineering

    Senior Engineer, Product Security Engineering

    Dell TechnologiesCyberjaya, Selangor, Malaysia
    Senior Engineer, Product Security Engineering.Join Dell Technologies as a Senior Engineer, Product Security Engineering.The Dell Security & Resiliency organization manages security risk across all ...Tunjukkan lagiKemas kini terakhir: 6 hari yang lalu
    • Dinaikkan pangkat
    • Baharu!
    Security Engineer

    Security Engineer

    OneConnect Financial TechnologyKuala Lumpur, Kuala Lumpur, Malaysia
    Design, implement, and maintain secure AWS network architectures (VPC, subnets, Transit Gateway, routing, NACLs, Security Groups). Define traffic flows for north-south and east-west traffic to enfor...Tunjukkan lagiKemas kini terakhir: 20 jam yang lalu
    • Dinaikkan pangkat
    Linux Cryptography and Security Engineer

    Linux Cryptography and Security Engineer

    CanonicalSelayang Municipal Council, Selayang Municipal Council, Malaysia
    Linux Cryptography and Security Engineer.Canonical Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia.This is a unique opportunity to use your software engineering and cryptography skills to...Tunjukkan lagiKemas kini terakhir: 6 hari yang lalu
    • Dinaikkan pangkat
    • Baharu!
    Security Engineer

    Security Engineer

    Acceron Digital Services Sdn BhdSelangorMalaysia, Selangor, Malaysia
    Administer and maintain system security stack (firewalls, IDS / IPS, SIEM / SOAR) while also performing continuous monitoring and log analysis. Administer and manage firewalls, IDS / IPS, endpoint protect...Tunjukkan lagiKemas kini terakhir: 20 jam yang lalu
    • Dinaikkan pangkat
    Technology Consulting - Cyber Security, Manager / Senior Manager

    Technology Consulting - Cyber Security, Manager / Senior Manager

    EYKuala Lumpur, Kuala Lumpur, Malaysia
    At EY, we’re all in to shape your future with confidence.We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.Join EY and help ...Tunjukkan lagiKemas kini terakhir: 30+ hari yang lalu
    • Dinaikkan pangkat
    Web3 Senior Security Engineer

    Web3 Senior Security Engineer

    Hyphen ConnectSepang, Selangor, Malaysia
    We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading.They differentiate...Tunjukkan lagiKemas kini terakhir: 4 hari yang lalu
    • Dinaikkan pangkat
    IOT & CYBERSECURITY SENIOR ENGINEER

    IOT & CYBERSECURITY SENIOR ENGINEER

    Panasonic Appliances Air Conditioning Malaysia Sdn BhdShah Alam, Selangor, Malaysia
    Support IoT development team for new product evaluation.Support Regulation team for Cybersecurity Compliance evaluation.Help to process new development related documentation.Provides technical supp...Tunjukkan lagiKemas kini terakhir: 4 hari yang lalu
    • Dinaikkan pangkat
    • Baharu!
    Cloud Security Engineer

    Cloud Security Engineer

    BTI Executive SearchKuala Lumpur, Kuala Lumpur, Malaysia
    Security Architecture & Implementation : .Design and implement secure, scalable, and resilient cloud infrastructure architectures across AWS / GCP / Azure. Identity & Access Management (IAM) : .Enforce the ...Tunjukkan lagiKemas kini terakhir: 20 jam yang lalu
    • Dinaikkan pangkat
    • Baharu!
    Network Security Engineer

    Network Security Engineer

    SwisslogPetaling Jaya, Selangor, Malaysia
    Swisslog is shaping the future of intralogistics.As part of the KUKA Group, we are at the forefront of technology that is changing the world. Serving some of the biggest and most exciting brands acr...Tunjukkan lagiKemas kini terakhir: 20 jam yang lalu
    • Dinaikkan pangkat
    • Baharu!
    Network Security Engineer

    Network Security Engineer

    DellSepang, Selangor, Malaysia
    The Dell Security & Resiliency organization manages the security risk across all aspects of Dell’s business.You will have an excellent opportunity to influence the security culture at Dell and furt...Tunjukkan lagiKemas kini terakhir: 20 jam yang lalu
    • Dinaikkan pangkat
    • Baharu!
    Information Security Engineer

    Information Security Engineer

    FINEXUS GroupKuala Lumpur, Kuala Lumpur, Malaysia
    FINEXUS Group Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia.Job Brief : We provide SaaS (Software as a Service) services which include infrastructure, platform, business processing outso...Tunjukkan lagiKemas kini terakhir: 20 jam yang lalu
    • Dinaikkan pangkat
    Security Engineer

    Security Engineer

    Refine GroupKuala Lumpur, Kuala Lumpur, Malaysia
    Doherty Associates (DA) has delivered IT solutions for over 30 years to some of the world’s most prestigious and demanding clients. We focus on the professional and financial services sectors, inclu...Tunjukkan lagiKemas kini terakhir: 3 hari yang lalu
    • Dinaikkan pangkat
    Data Security Engineer

    Data Security Engineer

    UOBKuala Lumpur, Kuala Lumpur, Malaysia
    Data Security Engineer — Kuala Lumpur, Malaysia.UOB Federal Territory of Kuala Lumpur, Malaysia.Be among the first 25 applicants. United Overseas Bank Limited (UOB) is a leading bank with a global n...Tunjukkan lagiKemas kini terakhir: 3 hari yang lalu
    • Dinaikkan pangkat
    • Baharu!
    Senior Penetration Tester

    Senior Penetration Tester

    Commerz Global Service SolutionsPutrajaya, Putrajaya, Malaysia
    As part of the Kuala Lumpur based Offensive Security team, you will be responsible for planning, conducting penetrations tests across Commerzbank Group, documenting the results and providing adviso...Tunjukkan lagiKemas kini terakhir: 20 jam yang lalu
    • Dinaikkan pangkat
    Ubuntu Security Engineer

    Ubuntu Security Engineer

    CanonicalSepang, Selangor, Malaysia
    Canonical Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia.Join or sign in to find your next job.Canonical Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia.Be among the first 25 a...Tunjukkan lagiKemas kini terakhir: 6 hari yang lalu
    • Dinaikkan pangkat
    • Baharu!
    IOT & CYBERSECURITY SENIOR ENGINEER

    IOT & CYBERSECURITY SENIOR ENGINEER

    PanasonicSelangorMalaysia, Selangor, Malaysia
    Support IoT development team for new product evaluation.Support Regulation team for Cybersecurity Compliance evaluation.Help to process new development related documentation.Provide technical suppo...Tunjukkan lagiKemas kini terakhir: 20 jam yang lalu
    • Dinaikkan pangkat
    Cloud Security Engineer

    Cloud Security Engineer

    Accenture Southeast AsiaKuala Lumpur, Kuala Lumpur, Malaysia
    Design, implement, and manage security solutions for cloud environments (e.Develop and enforce cloud security policies, standards, and best practices. Monitor and respond to security incidents and v...Tunjukkan lagiKemas kini terakhir: 30+ hari yang lalu
    • Dinaikkan pangkat
    • Baharu!
    Cyber Security Engineer

    Cyber Security Engineer

    IRIS CorporationKuala Lumpur, Kuala Lumpur, Malaysia
    Protecting computer systems and networks.Develop & maintain Information Security Plans and Policies with yearly review or as need arise. Develop & maintain hardening checklist by adopting industrial...Tunjukkan lagiKemas kini terakhir: 20 jam yang lalu