information security operations lead (penang / johor).

• Role Overview: This is a hands-on operational role focused on ensuring the daily effectiveness and health of key enterprise security controls across endpoint, identity, data, network, and email environments.
• Work Location: Onsite position based in either Simpang Ampat, Penang or Pasir Gudang, Johor.
• Core Function: This position moves beyond policy or architecture-only responsibilities to place you directly in security tools—responding to live security alerts, driving investigations end-to-end, tuning detection's to reduce alert fatigue, and conducting root cause analysis.

Key Responsibilities:

• Manage and validate security controls continuously, overseeing systems such as CrowdStrike Falcon, Microsoft Intune/Entra ID/Conditional Access, Sumo Logic, Palo Alto firewalls, Cisco Email Security (DMARC/DKIM/SPF), Cisco Umbrella, and HP Aruba Clearpass.
• Design, implement, and maintain network security policies, email posture, and DNS-layer visibility.
• Develop, maintain, and standardize incident response runbooks, playbooks, and escalation paths.
• Partner across identity and infrastructure teams to integrate security into architectural designs, while mentoring junior engineers

• Experience: Minimum of 7 to 10+ years of hands-on experience in security engineering, network engineering, or SecOps, with a proven track record of operating and troubleshooting security platforms.
• Core Competencies:
  • Strong technical understanding of endpoint, identity, network, email, DNS, and cloud security controls.
  • Expertise in logging, detection tuning, and end-to-end incident investigation workflows.
  • Excellent communication skills to articulate technical risks clearly without escalation drama.
• Preferred Qualifications:
  • Experience with cloud platforms (Azure, AWS, OCI).
  • Scripting and automation capabilities using PowerShell or Python.
  • Professional certifications such as CISSP, Palo Alto, Cisco, or Microsoft credentials.