Randstad Malaysia Hiring! Full Time Information Security Operations Lead (Penang - Johor) in Federal Territory - Ricebowl

About the company
The organization is a leading global technology provider of automation solutions with over 40 years of expertise in the semiconductor and laboratory automation industries. The company offers precision robotics, integrated automation systems, and contamination control solutions that empower high-tech manufacturers worldwide. Known for a customer-focused and innovative culture, the company prioritizes leveraging cutting-edge cloud technologies and dynamic solutions to drive continuous transformation and tech advancement

About the job

• Role Overview: This is a hands-on operational role focused on ensuring the daily effectiveness and health of key enterprise security controls across endpoint, identity, data, network, and email environments.

• Work Location: Onsite position based in either Simpang Ampat, Penang or Pasir Gudang, Johor.

• Core Function: This position moves beyond policy or architecture-only responsibilities to place you directly in security tools-responding to live security alerts, driving investigations end-to-end, tuning detection's to reduce alert fatigue, and conducting root cause analysis.

Key Responsibilities:

• Manage and validate security controls continuously, overseeing systems such as CrowdStrike Falcon, Microsoft Intune/Entra ID/Conditional Access, Sumo Logic, Palo Alto firewalls, Cisco Email Security (DMARC/DKIM/SPF), Cisco Umbrella, and HP Aruba Clearpass.

• Design, implement, and maintain network security policies, email posture, and DNS-layer visibility.

• Develop, maintain, and standardize incident response runbooks, playbooks, and escalation paths.

• Partner across identity and infrastructure teams to integrate security into architectural designs, while mentoring junior engineers
  

• Experience: Minimum of 7 to 10+ years of hands-on experience in security engineering, network engineering, or SecOps, with a proven track record of operating and troubleshooting security platforms.

• Core Competencies:

  • Strong technical understanding of endpoint, identity, network, email, DNS, and cloud security controls.

  • Expertise in logging, detection tuning, and end-to-end incident investigation workflows.

  • Excellent communication skills to articulate technical risks clearly without escalation drama.

• Preferred Qualifications:

  • Experience with cloud platforms (Azure, AWS, OCI).

  • Scripting and automation capabilities using PowerShell or Python.

  • Professional certifications such as CISSP, Palo Alto, Cisco, or Microsoft credentials.