Senior Network Security Engineer

Responsibilities Security testing & VAPT - Lead internal and external network VAPT engagements, covering discovery, exploitation where safe, and clear vulnerability classification. - Validate remediation by re-testing findings and produce concise technical evidence to confirm risk reduction. - Turn test results into client-ready technical reports with prioritized remediation steps and measurable risk ratings. - Maintain and refine testing playbooks and toolchains to keep assessments current with emerging threats. Network design, deployment & hardening - Design and implement secure VPNs and enterprise network architectures, including IPsec VPN, IKEv2, and site-to-site configurations. - Configure and manage routers, switches, firewalls, VLANs, NAT, and related components to meet performance and security requirements. - Conduct configuration reviews and infrastructure hardening to reduce attack surface and improve resilience. - Support Proof of Concept builds, system integration, commissioning, and operational handover activities. Customer delivery & technical support - Prepare professional network diagrams, project deliverables, and VAPT reports tailored for technical and non-technical audiences. - Provide on-site and remote technical support, troubleshoot complex network security incidents, and coordinate with technology partners. - Act as the technical point of contact for enterprise and government customers during projects and post-implementation reviews. - Manage stakeholder expectations through clear status updates, timelines, and documentation. Requirements Qualifications & Experience - Minimum 5 years of hands-on experience in network engineering and network security roles. - Minimum Bachelor s Degree in Computer Science, Information Technology, Network Engineering, Cybersecurity, or a related discipline. - Proven practical Network VAPT experience is mandatory, including planning, execution, and remediation verification. - Experience supporting government, financial services, or critical infrastructure projects, and exposure to Malaysian government tender processes is an advantage. Hard Skills & Knowledge - Strong knowledge of TCP/IP, routing, switching, firewalls, VLANs, NAT, and IPsec VPN/IKEv2 implementations. - Practical experience with Cisco, Fortinet, Palo Alto Networks, Juniper, or equivalent network security technologies. - Proficiency with VAPT and network troubleshooting tools such as Nmap, Nessus, Wireshark, Metasploit, and Kali Linux. - Proven ability to produce professional VAPT reports, risk assessments, and clear remediation recommendations; knowledge of PKI, HSM, or post-quantum cryptography is a plus. Soft Skills & Qualities - Strong analytical mindset with methodical problem-solving and independent troubleshooting capabilities. - Fluent in Bahasa Malaysia and English with confident client engagement, technical presentations, and written reporting skills. - Willingness to travel to customer sites within Malaysia when required and to represent our team professionally on-site. - Professional certifications preferred: CCNA, CEH, eJPT, or PNPT, with added advantage for CCNP, OSCP, CREST CRT, or Fortinet NSE credentials.