Engineer (SecOps, Advisory, and Engineering)

SUMMARY OF RESPONSIBILITIES

• Part of Security Engineering team, responsible for co-developing solutions and automation workflows, improving overall security posture of PayNet
• Be part of change agent in automation initiatives and build pipelines to improve operational efficiency
• Ensure sound security controls are in place, commensurate with business operations and risks posed.

KEY AREAS OF RESPONSIBILITIES

Serves as a member of the technical committee and point of reference for the team in the following areas:

• Development and Operations specializing in the areas of:
• Automated solutioning to support both strategic and tactical plans, which includes operations and engineering (be comfortable with Python, Ansible, Terraform and/or Robot framework, Selenium WebDriver)
• Responsibility of project assigned/ tasked which includes engineering, testing (including code analysis/SAST for vulnerabilities, code smell etc.) and release by building custom integrations and tooling with existing CI/CD pipeline, practices GitOps (GitLab, Docker, Kubernetes, Helm, ArgoCD)
• Deploy, integrate and manage monitoring / observability metrics, leveraging open source solutions (Telegraf, InfluxDB, Prometheus, Grafana) for application performance, utilization and health.
• Developing and improving existing processes, automation, best practices, documentation

• Perform operational and strategic management of hardware and software assets, solutioning and dimensioning the inventory solution for the future, improving overall security posture of PayNet
• Ensure effectiveness of integrated asset inventory and data is accurate and updated in a timely fashion.
• Be well verse with API Gateway development and RESTful APIs to integrate with other systems, if necessary – API first strategy
• Responsible for managing communication and collaborative efforts cross departments / divisions with the lifecycle of hardware and software models.
• Supporting member of the Cyber Resilience initiative driven by and large by BNM’s RMiT & organizational/ business needs
• To keep abreast with industry security practices for technology adopted by PayNet
• May be part of special projects team (based on your core capability) related to information security which may be needed to appropriately respond to ad-hoc (or as dictated by current business and technological developments) or unexpected information security events.
• Perform source review using code scan tools, review and validate scan results. Create report from scan results to recommend remediation and area of improvement.

QUALIFICATIONS

• Bachelor’s Degree in Computer Science, Information Systems Technology, or Software Engineering
• Experience across Development and Operations, including tooling and platforms such as Kubernetes, Terraform, Ansible, Prometheus, Telegraf, InfluxDB, Grafana, GitLab, Jenkins, and/or Robot framework, Selenium WebDriver
• 1-3 years of relevant experience in Information Technology with proven technical capabilities in either Software Development, IT Operations, Service Management, and/or Data Centre Management
• Relevant work experience in the Financial Services and/or Technology sectors would be an added advantage
• Excellent in both English and Bahasa Malaysia

Additional requirements

• Supreme attention to detail, analytical, critical thinking and problem-solving skills, self-driven and quality results oriented.
• Strategic in planning and organizing, effective interpersonal and project management skills.
• Added advantage if in possession of either a relevant industry recognized certification in Python, Linux or Kubernetes Certification, information security (CISSP, CEH).

FUNCTIONAL COMPETENCIES

Development and Operations capabilities across multiple IT domains

• Development experience in Python and corresponding frameworks, such as Flask or Django
• Administrative experience with Open Source Databases such as MySQL, PostgreSQL,InfluxDB
• Experience with containers and microservices (Dockers, Kubernetes, Helm Charts)
• Strong UNIX fundamentals and has some experience in administering and deploying UNIX variants (RHEL)
• Experience with CI/CD and GitOps (GitLab, Kubernetes, Helm, ArgoCD, Jenkins)
• IaC (Infrastructure as a Code) tool experience such as Ansible, Terraform
• Test Automation and RPA frameworks, such as Robot Framework, Selenium WebDriver
• Overall awareness of DevOps processes and best practices.

Securing Application and Operating system:

• Windows Server, Active Directory, RHEL, HTTP, HTML & JavaScript for Web, including one core language i.e Python, Go, PHP, Ruby or Java
• Comfortable working on Cloud platform such as AWS and its corresponding tech stack (e.g. Fargate/ECS, ECR, EC2, RDS, DynamoDB, SQS, S3)
• Comfortable deploying Applications as Pods onto Kubernetes cluster
• Cryptographic key management including PKI and digital certificates
• Understanding of ISMS, PCI DSS and Bank Negara Malaysia RMIT
• Fast and keen learner, problem solver
• Possesses strong analytical mindset and good troubleshooting skills
• Practices good Security hygiene