Specialist, Security Engineering

We are Passionate, Innovative, Trustworthy, Team-Oriented & Fun-Loving.

At U Mobile, we are always on the lookout for great talents and passionate individuals to join our growing team.

Let’s start your journey with an award-winning organization!

#UnbeatableCareerAwaits

Top Reasons To Join Us!

• Awarded For
• Most Preferred Employers in Telecommunication Industry (2022, 2023 & 2024)
• Bronze Winner in Cross-Generational Workforce Engagement (2024)
• Gold Winner for Excellence in Workplace Culture (2021)
• Comprehensive medical, dental, optical and insurance benefits
• Flexi working hours arrangements
• Staff Line & Device Subsidy
• Smart Casual Attire
• Child Parental Care Leave
• Convenient location with access to public transport (Imbi Monorail/Bukit Bintang MRT)
• Special employee discounts for selected F&B Brands

Responsible for supporting the design, deployment, and operational management of enterprise security technologies across infrastructure, cloud, and application environments. Assists in implementing secure-by-design principles, maintaining security tool effectiveness, and ensuring compliance with regulatory and audit requirements. Works closely with cross-functional teams and vendors to support security operations, engineering initiatives, and continuous improvement of the organization’s cybersecurity posture.

The Day-To-Day Activities

Security Engineering

• Assist with the deployment, configuration, tuning, and maintenance of security technologies including SIEM, EDR/XDR, IAM/PAM, WAF, CSPM, DLP, and vulnerability management platforms.
• Support security architecture reviews and help ensure projects adopt secure-by-design principles.
• Work closely with infrastructure, cloud, network, DevOps, and application teams to implement secure configurations and remediation plans.
• Maintain baseline configurations, hardening guides, and technical standards for security tools and platforms.

• Monitor health, performance, and coverage of security tools; escalate issues and drive corrective actions.
• Support integration of security tools into enterprise systems, including automation and workflow enhancements.
• Assist with building and maintaining engineering documentation, runbooks, deployment procedures, and knowledge bases.
• Provide Tier 2/3 technical support during security incidents and collaborate with SOC teams for investigation and remediation.

• Participate in evaluating new security technologies and coordinate proof-of-concepts (POCs).
• Contribute to solution comparisons, vendor assessments, and technical scoring.
• Assist in project planning, tracking deliverables, and reporting status updates to management.

• Provide technical input for compliance initiatives (ISO 27001, NIST, CIS Controls, local regulations).
• Ensure security tools and configurations meet regulatory and audit requirements.
• Assist with evidence collection and technical responses during internal/external audits.

• Support the manager in preparing budget inputs, cost breakdowns, license tracking, and vendor quotations.
• Assist in drafting proposals, business cases, and financial justification documents.
• Prepare slides, summaries, and dashboards for management reporting and steering committee updates.
• Track contract renewals, subscription usage, and cost optimization opportunities.

• Collaborate with cross-functional teams to provide technical security guidance.
• Coordinate with vendors, managed service partners, and solution providers for support or implementation needs.
• Communicate technical issues, risks, and recommendations in clear, actionable terms.

• Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field.
• Minimum 3–6 years of experience in security engineering, IT security operations, infrastructure security, or systems engineering.
• Hands-on experience with enterprise security tools such as SIEM, EDR/XDR, PAM, IAM, WAF, DLP, CSPM, or vulnerability management platforms.
• Strong understanding of operating system security (Windows/Linux), network security, cloud security, and identity security concepts.
• Familiarity with security frameworks such as ISO 27001, CIS Controls, NIST CSF, and MITRE ATT&CK.
• Relevant certifications such as Security+, CySA+, Microsoft Security, AWS/Azure Security Specialty, GIAC, or ITIL are an added advantage.
• Strong analytical, troubleshooting, and problem-solving skills with a security-first mindset.
• Good communication, documentation, reporting, and stakeholder management skills.
• Able to explain technical issues clearly to both technical and non-technical audiences.
• Self-motivated, proactive, and able to work independently as well as in a team environment.

Written Language: Malay, English

What’s Next ?Once you have applied online, our team will review your application and due to a high volume of applications, only shortlisted candidates will be notified.