Key Responsibilities
Security Automation & Development
- Design, develop, and maintain automation tools and services using Node.js to
streamline security operations, detection workflows, and incident response activities.
- Build custom integrations between security tools, cloud platforms, and internal
systems for enhanced visibility and operational efficiency.
- Develop APIs, microservices, and CLI tools that support security automation
initiatives.DevSecOps Engineering
- Embed security controls within CI/CD pipelines to enable secure software delivery at
scale.
- Implement automated security testing (SAST, SCA, DAST, IaC scans) and integrate
results into developer workflows
.• Collaborate with DevOps and platform teams to ensure secure configurations
acrossbuild, deployment, and cloud infrastructure environments.Cybersecurity
Enablement
- Support vulnerability management processes by automating scanning, triaging, and
reporting workflows.
- Work with security analysts to translate manual processes into automated,
repeatablesolutions.Collaboration & Technical Leadership
- Work cross-functionally with cybersecurity, DevOps, and product engineering teams to
align automation efforts with organizational goals.
- Participate in architecture discussions and contribute to best-practice guidelines for
secure coding and automation.Required Qualifications
- 4–8 years of professional experience in software engineering, DevSecOps, or security
automation roles.
- Strong proficiency in Node.js (as a primary development language)
.• Hands-on experience with CI/CD tools (e.g., GitHub Actions, GitLab CI, Jenkins,
AzureDevOps).
- Good understanding of cybersecurity fundamentals including
authentication/authorization, encryption, secure coding, and network security.
- Experience integrating or automating security tools (e.g., SAST/SCA scanners,
SIEM,SOAR, vulnerability scanners).
- Proficient with scripting and automation in Linux-based environments.
Preferred Qualifications
- Experience with cloud platforms (AWS, Azure, GCP) including IaC (Terraform,
ARM,CloudFormation).
- Familiarity with containers and orchestration (Docker, Kubernetes).• Exposure to
logging and monitoring stacks (ELK, Splunk).
- Knowledge of threat detection or incident response workflows.
Pay: RM6,000.00 - RM8,000.00 per year
Work Location: In person