Kerja Sepenuh Masa, Cyber Threat Security Engineer di Commerz Global Service Solutions Selangor - Maukerja

Who We Are

Commerz Global Service Solutions (CGSS), founded in 2012 as Commerz Trade Services Sdn. Bhd., is a wholly‑owned subsidiary of Commerzbank AG and a leading global provider of shared services for the banking and financial industry. With branches across Asia, Europe and America, we act as a central hub for cost‑efficient, high‑quality service delivery, enhancing profitability and standardizing processes for Commerzbank AG. Our strong risk culture and governance ensure resilient, compliant and transparent operations, with strict adherence to regulatory requirements and global corporate policies, enabling us to deliver bespoke, reliable solutions to our internal clients worldwide.

About the role

We are looking for a Senior Cyber Threat Security Engineer to join our team. You will serve as a subject-matter expert for ServiceNow Security Operations, SIEM engineering and Threat Intelligence platforms. In this role, you will drive the implementation, configuration, integration and ongoing administration of security technologies, helping to ensure effective threat detection, incident response, vulnerability management and secure operational processes.

Your key responsibilities

• Implement, administer and optimize ServiceNow SecOps modules, including Security Incident Response (SIR), Vulnerability Response (VR), Configuration Compliance (CC) and Data Loss Prevention (DLP).
• Perform daily ServiceNow administration, including user and role management, configuration, health checks, issue resolution, upgrades and controlled change implementation.
• Deploy, configure and continuously tune SIEM detections and policies using Microsoft Defender and Google SecOps.
• Integrate alerts, incidents and security context across ServiceNow, SIEM, SOAR, EDR, vulnerability-scanning and other security platforms.
• Engineer and administer Threat Intelligence platforms, including Recorded Future, OpenCTI, VirusTotal and Flashpoint.
• Develop and maintain Threat Intelligence use cases, such as IOC enrichment and risk-based prioritization of incidents and vulnerabilities.
• Use the ServiceNow CMDB to improve asset and service context, correlation, impact assessment and prioritization within security workflows.
• Design, operate and monitor integrations using out-of-the-box connectors, IntegrationHub, APIs, webhooks and custom REST/SOAP integrations.
• Develop and maintain JavaScript, Python, PowerShell and Bash scripts for automation, enrichment, data transformation and API-based integrations.
• Create dashboards and reports, support proof-of-concepts for new security capabilities, and mentor colleagues on SecOps, threat intelligence, integrations and secure scripting.

What you bring

• A degree in Computer Science, Cybersecurity, Information Technology or a related discipline, or equivalent professional experience.
• At least 7 years of senior Cyber Security Engineering experience, with a strong focus on ServiceNow SecOps, threat detection, threat intelligence and security analytics.
• Hands-on experience implementing, configuring, tuning and administering ServiceNow SecOps modules, including SIR, VR, CC and DLP.
• Experience working with Microsoft Defender and/or Google SecOps in SIEM engineering and detection use cases.
• Practical experience with Threat Intelligence platforms such as Recorded Future, OpenCTI, VirusTotal and Flashpoint.
• Proven experience integrating security tools and data sources through APIs, webhooks and other data-exchange methods.
• Solid knowledge of the ServiceNow platform and CMDB, including tables, ACLs, business rules, Script Includes, flows and notifications.
• Strong scripting and development skills in Python, PowerShell and Bash/Shell, as well as JavaScript for ServiceNow.
• Experience handling common data formats, including JSON, CSV, YAML and XML, and familiarity with basic SQL.
• Sound understanding of secure coding practices, including input validation, secret management, error handling and logging.
• Strong analytical, problem-solving and communication skills, with the ability to explain complex technical matters clearly and mentor peers.
• Relevant certifications such as CISSP, CISM, GIAC certifications or ServiceNow CSA/CIS-SecOps are an advantage.

We appreciate all applications; however, only successful candidates will be notified.