Security Engineer (Cybersecurity)

Location: Kuala Lumpur, Malaysia; hybrid work model with 2 days working from home.

Company

hirify.global is a multi-asset broker providing trading tools, platforms, and services for financial-market participants worldwide.

What you will do

• Monitor, maintain, optimize, and troubleshoot security solutions including EDR, SIEM, DLP, email security, antivirus, and HIPS.
• Investigate security alerts and incidents, perform root cause analysis, coordinate remediation, and improve incident response procedures.
• Monitor emerging threats, vulnerabilities, attack techniques, and security technologies, recommending mitigations.
• Implement security controls across endpoints, servers, networks, and cloud environments.
• Develop security policies, detection rules, prevention mechanisms, and automated responses to improve threat visibility and reduce false positives.
• Support network segmentation, zero-trust architecture, endpoint hardening, vulnerability management, security automation, and compliance with ISO 27001, DORA, GDPR, and CySEC where applicable.

Requirements

• At least 4 years of hands-on experience in a similar role.
• Strong knowledge of cybersecurity principles, security architectures, threat detection, and incident response.
• Hands-on experience implementing, managing, and troubleshooting enterprise security solutions, including EDR, antivirus, HIPS, SIEM, and DLP.
• Experience investigating security incidents, analyzing alerts, identifying threats, and coordinating remediation activities.
• Experience developing security rules, detection policies, and prevention mechanisms, with knowledge of MITRE ATT&CK, LoLBins, ransomware, brute-force attacks, and password spraying.
• Experience in malware investigation, troubleshooting, and security assessments.
• Strong knowledge of Windows, Active Directory, and Linux, with familiarity in Python, Bash, or PowerShell for security automation.
• Applicants must be eligible or have legal authorization to work in Malaysia.
• Resumes must be submitted in English.

Nice to have

• Experience securing cloud environments, particularly AWS, Azure, or Google Cloud.
• Knowledge of cloud security architectures, identity management, network security, and cloud-native security services.
• Experience with SOAR platforms, security automation, and automated incident response playbooks.
• Cybersecurity certifications such as OSCP, OSCP+, SANS GIAC, CEH, or CompTIA Security+.
• Cloud security certifications such as AWS Certified Security – Specialty or CCSP.
• Experience in financial services or other highly regulated, security-sensitive environments.

Culture & Benefits

• Hybrid work model with 2 days working from home.
• Comprehensive health insurance from the first day.
• 21 days of annual leave and birthday leave.
• Referral bonus program.
• Visa sponsorship and relocation assistance if applicable.