Security Engineer, Infrastructure Service (1-year Agency Contract)

The Security Engineer assists in monitoring, maintaining, and improving the security posture of the company’s on‑premise datacenters, DR site, office network, and cloud environments. This role works closely with the SOC and Infrastructure teams to support day‑to‑day security operations, incident response, and compliance activities.

Core Responsibilities

Monitor security alerts and events

• Review and triage alerts from SOC platforms, firewalls, IDS/IPS, and Cloud etc.
• Escalate potential incidents to manager according to defined procedure.

Support incident response

• Assist in initial investigation of security events (log review, correlation, basic forensics on endpoints or servers).
• Document incidents, maintain accurate records, and support post‑incident reviews and reporting.

Maintain security systems and configurations

• Support routine checks and basic administration for firewalls, bastion host, and VPN controls.
• Assist with account reviews, access control checks, and change requests.

Vulnerability management

• Run scheduled vulnerability scans on datacenter, DR, office network, and applications release.
• Track remediation status and follow up on overdue items based on risk priority.

Compliance and best practices support

• Assist in compliance and security audits (e.g. access reviews, hardening checks, patch compliance).
• Help promote security awareness by supporting training sessions and preparing communication materials.

Qualifications/Experience

Education & Experience:

o    Diploma or Bachelor’s degree in Information Security, Computer Science, Information Technology, or related discipline.

o    Relevant security certifications are a plus (e.g. CCNA Security, CISSP/CCSK/Cloud security foundation level).

Technical Skills

o    Understanding of network fundamentals (TCP/IP, routing, switching, VLANs, VPNs) and common security concepts (firewalls, IDS/IPS, WAF, SIEM).

o    Familiarity with Windows and Linux server environments and office network infrastructure.

o    Exposure to security tools such as endpoint protection/EDR, vulnerability scanners, log management/SIEM, or traffic analysis tools.

o    Knowledge of public cloud platforms (Alibaba Cloud preferred; AWS/Azure/GCP experience also acceptable).

o    Ability to read and interpret security logs, with basic scripting or automation skills (e.g. PowerShell, shell scripts, Python) considered an advantage.

Experience

o    3–5 years of experience in IT infrastructure, network operations, or information security.

o    Experience in a SOC, NOC, or IT operations environment is preferred but not mandatory.

Competencies and soft skills

o    Strong attention to detail and a methodical approach to troubleshooting.

o    Good documentation skills and the ability to follow standard operating procedures.

o    Effective communication and teamwork skills, able to work with Infrastructure, Network, Application, and SOC teams.

o    High level of integrity, responsibility, and willingness to learn and grow within the security domain.