Full Time Cyber Threat Security Engineer Jobs, in Commerz Global Service Solutions Selangor - Maukerja

Who We Are

Commerz Global Service Solutions (CGSS), founded in 2012 as Commerz Trade Services Sdn. Bhd., is a wholly‑owned subsidiary of Commerzbank AG and a leading global provider of shared services for the banking and financial industry. With branches across Asia, Europe and America, we act as a central hub for cost‑efficient, high‑quality service delivery, enhancing profitability and standardizing processes for Commerzbank AG. Our strong risk culture and governance ensure resilient, compliant and transparent operations, with strict adherence to regulatory requirements and global corporate policies, enabling us to deliver bespoke, reliable solutions to our internal clients worldwide.

About the role

We are looking for a Senior Cyber Threat Security Engineer to join our team in an agile environment. You will act as a subject-matter expert for ServiceNow Security Operations, VectraAI Network Detection and Response (NDR), and Threat Intelligence platforms.

In this role, you will drive the implementation, configuration, integration and continuous improvement of critical security platforms. You will help ensure stable operations, effective incident resolution and controlled delivery of changes, while working closely with security, technology and business stakeholders.

Your key responsibilities

• Implement, administer and optimise ServiceNow SecOps modules, including Security Incident Response, Vulnerability Response, Compliance and Data Loss Prevention.
• Perform daily ServiceNow administration, including user and role management, configuration, health checks, troubleshooting, upgrades and controlled change execution.
• Deploy, configure and continuously tune VectraAI detections and policies to improve detection quality and reduce noise, missed detections and coverage gaps.
• Operate and maintain VectraAI, including monitoring, configuration baselines, upgrades and patching.
• Engineer and administer Threat Intelligence platforms, including Recorded Future, OpenCTI, VirusTotal and Flashpoint.
• Manage threat-intelligence feeds, watchlists, APIs and enrichment processes, and develop use cases for IOC enrichment and risk-based prioritisation.
• Design, operate and monitor integrations between ServiceNow, VectraAI, Threat Intelligence platforms, SIEM, EDR and vulnerability scanners using connectors, IntegrationHub and REST/SOAP APIs.
• Leverage ServiceNow CMDB data to improve asset context, correlation, impact assessment and prioritisation across security workflows.
• Develop and maintain JavaScript, Python, PowerShell and Bash scripts for automation, enrichment, data transformation and API-based integrations.
• Create dashboards and reports using VectraAI and Threat Intelligence data, support proof-of-concepts for new capabilities, and mentor colleagues on relevant platforms and secure scripting practices.

What you bring

• At least 7 years of senior Cyber Security Engineering experience, with a strong focus on security operations, threat detection, threat intelligence and security analytics.
• Hands-on experience implementing, configuring, tuning and administering ServiceNow SecOps, including SIR, VR, CC and DLP.
• Strong practical experience with VectraAI NDR and Threat Intelligence platforms such as Recorded Future, OpenCTI, VirusTotal and Flashpoint.
• Proven experience integrating security tools and data sources, including ServiceNow, NDR, SIEM, EDR, Threat Intelligence platforms and vulnerability scanners.
• Good knowledge of ServiceNow platform and CMDB capabilities, including tables, ACLs, business rules, Script Includes, flows and notifications.
• Strong scripting and programming skills in Python, PowerShell and Bash/Shell, as well as JavaScript for ServiceNow development.
• Experience with REST-based integrations, APIs, webhooks, OAuth, API key management and data formats such as JSON, YAML, XML and CSV.
• Familiarity with secure coding practices, including input validation, secret management, error handling and logging.
• Strong analytical and problem-solving skills, with experience delivering improvements and proof-of-concepts into production environments.
• A degree in Computer Science, Cybersecurity, Information Technology or a related discipline, or equivalent professional experience.
• Excellent English communication skills and the ability to explain complex technical topics clearly to peers and stakeholders.

*We appreciate all applications; however, only shortlisted candidates will be contacted.