Kerja Sepenuh Masa, Cyber Security Engineer di Pan Asia Software Solutions Federal Territory - Maukerja

Company Description Pan Asia Software Solutions is a technology services company that provides software development, IT consulting, and digital transformation solutions to clients across diverse industries. The organization focuses on delivering reliable, scalable, and secure technology solutions tailored to business needs. Pan Asia Software Solutions emphasizes collaboration, technical excellence, and continuous improvement in its project delivery. Team members work with modern tools and frameworks, gaining exposure to a variety of enterprise environments and industry best practices.

Role Description The Cyber Security Engineer is a contract, on-site role based in Petaling Jaya. This role is responsible for designing, implementing, and maintaining security controls to protect applications, networks, and information assets. Day-to-day tasks include performing security assessments, monitoring security events, analyzing vulnerabilities, and recommending remediation actions. The engineer will collaborate with development, infrastructure, and operations teams to integrate security into system architectures and deployment processes. The role also involves documenting security standards, supporting audits and compliance efforts, and staying current with emerging threats and security technologies.

·      Application security testing. Perform dynamic testing and penetration testing across web, mobile, client/server, API, cloud and AI/LLM applications. Cover daily change requests, planned project assessments and annual end-to-end testing. Perform case-by-case secure source-code reviews.

·      Infrastructure security testing. Assess servers, databases, networks, cloud infrastructure, security appliances and OT/IoT systems. Perform scheduled scans, assess infrastructure changes and retest remediation.

·      Asset discovery and attack simulation. Conduct quarterly internal and external asset and port discovery to identify rogue devices, shadow IT and unauthorised services. Support the annual breach and attack simulation and purple-team exercise.

·      Vulnerability management and reporting. Validate findings and disputed results, rate risk using BNM’s methodology, advise on fixes and verify remediation. Maintain tickets, trackers and dashboards, prepare assessment reports and brief stakeholders. Follow BNM’s security, confidentiality and production-safety procedures.

·      Required for every engineer. Hold at least one recognised cybersecurity certification such as OSCP, OSWE, OSEP, CREST, CISSP, CISM, GIAC, CEH or equivalent.

·      Technical experience. Demonstrate hands-on experience relevant to the assigned work. The nine engineers collectively must cover application security testing, infrastructure security testing, breach and attack simulation, and vulnerability management. Apply relevant frameworks such as OWASP, MITRE ATT&CK, NIST or ISA/IEC 62443.

·      Product competency evidence. The bid must document hands-on experience and product certifications for Qualys VMDR, Qualys ETM, Burp Suite Professional, SAST tools and Tenable OT. Map the evidence to the relevant proposed personnel.

Interested Share updated resume to ************* or Watsapp: +*************