(Logistics MNC) Security Engineer

Responsibilities Scope of Role Infrastructure & Network Security

• Assess the security of information systems and networks, consistently identifying potential risks, vulnerabilities, and zero-day threats.

• Design and implement advanced security controls, including Firewalls, DLP, XDR, WAF and SOC operations etc.

• Monitor network traffic and activity for suspicious behavior and coordinate threat hunting operations.

Cloud & Microsoft Security

• Plan, manage, and optimize O365 enterprise security services, including Conditional Access, Intune, and Entra ID Protection.

• Implement data protection strategies using Microsoft Purview (e.g., managing sensitivity labels.

• Understand multi-cloud environments (Azure, AWS, GCP) and provide strategic planning and recommendations for cloud security.

Security Solutions Evaluation & Implementation

• Assist in the evaluation, planning, and implementation of new security solutions, ensuring secure adoption, seamless integration, and strict alignment with enterprise security architecture (Secure by Design).

• Lead Proof of Concept (PoC) phases for emerging cybersecurity technologies to address evolving business needs and threat landscapes.

Incident Response & SecOps Automation

• Investigate and respond to security incidents, determine the root cause, assess the impact, and execute swift corrective actions.

• Develop and integrate automated SecOps workflows using customized scripts (Python, PowerShell).

Security Culture

• Raise employee security awareness and conduct targeted security education and training.

Job Challenges

• The ever-evolving nature of security threats requires continuous learning and updating of knowledge.

• High-pressure work environment when dealing with incidents.

• Need to collaborate with people from different departments.

Requirements • Bachelor’s degree in information security or a related field

• At least 3 years of relevant work experience.

• Hands-on experience with application, system, and network security

• Familiarity with cloud computing, Linux administration, and TCP/IP protocols

• Strong knowledge of security fundamentals and best practices

• Familiarity with network security, system security, application security, etc.

• Experienced in any of Microsoft Security solutions, EDR, SIEM, DLP, Firewall, SOC, Email Security, Vulnerability Assessment, WAF will be a plus.

• Strong analytical and problem-solving skills

• Excellent communication skills in English (TOEIC 700+ preferred) and teamwork skills

• Certificates: Candidates with Security or M365 related certifications (e.g. CISSP, CISM, CISA, ISO27001, MS-102, SC-100, MD-102) will be a plus.