Role Overview: This is a hands-on operational role focused on ensuring the daily effectiveness and health of key enterprise security controls across endpoint, identity, data, network, and email environments.
Work Location: Onsite position based in either Simpang Ampat, Penang or Pasir Gudang, Johor.
Core Function: This position moves beyond policy or architecture-only responsibilities to place you directly in security tools—responding to live security alerts, driving investigations end-to-end, tuning detection's to reduce alert fatigue, and conducting root cause analysis.
...
Conduct proactive offensive security testing and attack validation across public-facing Web, API, mobile, cloud and infrastructure environments. Identify realistic and exploitable attack paths and drive remediation to closure.
Perform penetration testing, vulnerability validation and red/blue security exercises, going beyond automated vulnerability scanning to understand how weaknesses can be exploited in real-world scenarios.
Run security monitoring, alert triage, investigation and severity classification (P0–P3) using our SIEM environment (Alibaba Cloud Threat Analysis / Agentic SOC + SLS).
...