Full Time Cyber Security Engineer Jobs, in Ignite Search Partners Kuala Lumpur - Ricebowl

Infrastructure & Cyber Security Engineer

Ignite Search Partners is working with a rapidly scaling global software company specialising in next-gen Warehouse Management and Supply Chain Execution Systems.

They are seeking an Infrastructure & Cyber Security Engineer to join the Cloud Hosting & Operations team, working as a hands-on individual contributor reporting to the Infrastructure Manager. This role carries a dual responsibility — keeping our infrastructure running reliably across cloud and on-premises environments, while actively protecting systems, data, and platforms from security threats.

Key Responsibilities:

• Deploy, operate, and maintain cloud and on-premises infrastructure — ensuring consistent service levels, availability, and security across all platforms (AWS, Huawei Cloud, GCP).
• Manage infrastructure instances including routine patching, capacity monitoring, vulnerability remediation, and hardware lifecycle upkeep.
• Configure and maintain network security components including firewalls (next-gen/WAF), VPNs, IDS/IPS, load balancers, direct connect, and VPC configurations across all cloud platforms.
• Perform regular vulnerability assessments and penetration testing support across infrastructure, cloud environments, and applications; track and remediate findings within agreed SLAs.
• Manage identity and access management (IAM) policies, role-based access controls (RBAC), privileged access, and multi-factor authentication (MFA) across cloud and on-premises systems.
• Provide hands-on infrastructure and security support to delivery teams during customer deployment phases and WMS go-live milestones, ensuring environments are hardened and handover-ready.
• Apply and enforce cloud security controls across all environments in line with ISO 27001, SOC 2, PDPA, and GDPR requirements; manage security group rules, network ACLs, firewall policies, and access controls.
• Support the Infrastructure Manager during compliance reviews, ISO 27001 audits, and SOC 2 assessments by implementing required controls, gathering evidence, and closing remediation items.
• Manage and tune database infrastructure supporting WMS: MySQL DB, MS SQL Server, or PostgreSQL — including HA, backup, and failover. This including middleware service (Redis, MongoDB, Kafka, Zookeeper, Nacos).
• Set up and maintain security and infrastructure monitoring using CloudWatch, Grafana, Prometheus, Huawei Cloud Eye, and SIEM platforms; define alert thresholds and escalation workflows.
• Track and report on infrastructure availability, SLA performance, RTO/RPO metrics, security incident trends, and vulnerability posture to the Infrastructure Manager.
• Automate security and infrastructure tasks including provisioning, backup, patching, and system hardening using Python, Shell, or Bash scripts.
• Maintain accurate, up-to-date documentation for all cloud environments, security configurations, incident runbooks, and architecture diagrams.
• Collaborate with R&D, Product, Delivery, and Customer Success teams across regions on infrastructure requirements, security reviews, and deployment coordination.

Requirements

• Minimum 3 years of hands-on experience in IT infrastructure, cloud operations, or cyber security engineering.
• Practical hands-on experience with AWS, Huawei Cloud, or GCP — experience across two or more platforms is a strong advantage.
• Solid understanding and practical application of cyber security principles: network security, endpoint protection, vulnerability management, incident response, and security hardening.
• Familiarity with compliance frameworks: ISO 27001, SOC 2, PDPA, GDPR — ability to implement controls and support audit activities.
• Experience supporting enterprise software environments (WMS, ERP, or Supply Chain platforms) is a strong advantage.
• Experience in application environments like Nginx, tomcat, DB (MYSQL, MSSQL or PostgreSQL), Middleware (Redis, MongoDB, Kafka, Zookeeper, Nacos).
• Linux administration, VPC networking, routing, VPNs, firewall configuration, and network segmentation.
• Docker and Kubernetes basic operations; CI/CD security integration; HA/DR implementation and cloud security frameworks.
• Infrastructure-as-Code (Terraform, CloudFormation, Ansible) and scripting (Python, Shell, Bash) for automation and security hardening tasks will be an advantage.
• Strong ownership mindset, self-directed work style, attention to detail, and solid analytical problem-solving abilities.
• Excellent written and spoken English; Mandarin proficiency is a strong plus for regional team and client collaboration.