HFM - Mid Security Engineer in Kuala Lumpur

Job Description

 About Us HFM is an internationally acclaimed multi-asset broker, delivering cutting-edge trading tools, platforms, and conditions to traders worldwide. We are committed to innovation, transparency, and excellence in the financial markets.  As we continue to expand, we are seeking a driven and strategic Mid  Security Engineer  to join our team.  Responsibilities :

• Monitor, maintain, and optimize security solutions to detect, investigate, and prevent unauthorized activities and emerging threats.
• Evaluate, deploy, configure, and manage security technologies, including EDR, SIEM, DLP, email security, and threat prevention solutions.
• Investigate security alerts and incidents, perform root cause analysis, and improve incident response procedures.
• Monitor emerging threats, vulnerabilities, attack techniques, and security technologies, identifying weaknesses and recommending mitigations.
• Implement security controls across endpoints, servers, networks, and cloud environments, following security standards and best practices.
• Develop and optimize security policies, detection rules, and automated responses to enhance threat visibility and reduce false positives.
• Support network segmentation, zero-trust architecture, endpoint hardening, vulnerability management, security automation, and information security strategy development.
• Resolve security-related technical issues by collaborating with Infrastructure, Network, DevOps, Cloud, and IT teams, and support compliance with ISO 27001, DORA, GDPR, and CySEC, where applicable.

Requirements

Required Skills & Experience :

• Minimum of 4 years of hands-on experience in similar role.
• Strong knowledge of cybersecurity principles, security architectures, threat detection, and incident response.
• Hands-on experience implementing, managing, and troubleshooting enterprise security solutions.
• Experience with Endpoint Detection and Response (EDR), Antivirus, HIPS, SIEM, and Data Loss Prevention (DLP).

Must Have:

• Hands-on experience investigating security incidents, analyzing alerts, identifying threats, and coordinating remediation activities.
• Experience developing security rules, detection policies, and prevention mechanisms, with knowledge of MITRE ATT&CK, LoLBins, ransomware, brute-force attacks, and password spraying.
• Experience in malware investigation, troubleshooting, and security assessments.
• Strong knowledge of Windows, Active Directory, and Linux, with familiarity in Python, Bash, or PowerShell for security automation.

Nice to Have:

• Hands-on experience securing cloud environments, particularly AWS, Azure, or Google Cloud.
• Knowledge of cloud security architectures, identity management, network security, and cloud-native security services.
• Experience with SOAR platforms, security automation, and automated incident response playbooks.
• Relevant cybersecurity certifications, including OSCP, OSCP+, SANS GIAC (GCIH, GCIA, GCFA), CEH, or CompTIA Security+.
• Cloud security certifications such as AWS Certified Security – Specialty or CCSP.
• Experience in financial services or other highly regulated, security-sensitive environments.

Resumes must be submitted in English. Applicants must be eligible or have legal authorization to work in the country where the position is based.

Benefits

• Hybrid Work Model (2 days working from home)
  
• Comprehensive Health Insurance (from day one!)
  
• 21 days of Annual Leave
  
• Birthday Leave
  
• Referral Bonus Program
  

Additional Support

• Visa Sponsorship and Relocation Assistance  (If applicable)

Sounds like you? Let’s write the next chapter together! All Applications will be handled with the strictest confidentiality.