{"id":3315178,"url":"https://alion.io/job/ensign-infosecurity-cybersecurity-engineer","title":"Cybersecurity Engineer","company":{"id":50230,"name":"Ensign InfoSecurity","domain":"ensigninfosecurity.com","url":"https://alion.io/company/ensign-infosecurity","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":66,"open_postings":49,"ghost_share":0.653,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Petaling Jaya, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17000,"max_usd":39000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"Configuration Management","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-27T04:58:00Z","employer_posted_date":null,"last_verified_at":"2026-10-27T04:58:00Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"About the Role\n\nThe Cybersecurity Engineer will be responsible for the day-to-day operation, administration, maintenance, deployment, and technical support of the organisation's cybersecurity platforms and infrastructure. The role focuses on ensuring the availability, stability, performance, and security of cybersecurity technologies supporting security monitoring and detection capabilities. The engineer will work closely with Cybersecurity Operations, DevOps, infrastructure teams, vendors, and other stakeholders to resolve technical issues, implement changes, maintain platform health, and support continuous improvement of the cybersecurity environment. The role also involves providing technical guidance to junior engineers and participating in after-hours standby and maintenance activities where required.\n\nKey Responsibilities\n\nProvide day-to-day operational support and administration of cybersecurity platforms, including SIEM, SOAR, Threat Intelligence Platform (TIP), security analytics, and related security technologies.\nMonitor the health, availability, performance, and capacity of cybersecurity platforms and proactively identify and resolve operational issues.\nPerform routine system health checks, housekeeping, maintenance, and administrative activities to ensure platform reliability and operational readiness.\nPerform the deployment, configuration, and implementation of cybersecurity platforms, components, integrations, and approved changes across the production environment in accordance with established procedures.\nTroubleshoot and resolve technical issues relating to cybersecurity platforms, including performing initial diagnostics, root-cause analysis, and corrective actions.\nManage and maintain the lifecycle of security log sources, including onboarding, configuration, modification, monitoring, troubleshooting, and decommissioning.\nPerform operational data engineering activities, including log/data extraction, transformation, parsing, enrichment, and loading, to support security monitoring and analytics.\nMonitor the health and status of log ingestion and data pipelines and troubleshoot issues such as missing, delayed, malformed, or incomplete security data.\nPlan, test, coordinate, and implement system, application, and security patches, version upgrades, and configuration changes in accordance with established change management procedures.\nSupport the implementation and maintenance of new security platform features, integrations, rules, configurations, and enhancements.\nWork closely with Cybersecurity Operations, DevOps, infrastructure teams, vendors, and technology partners to resolve operational issues and implement approved changes.\nFulfil and manage Service Requests, Incident Requests, and Change Requests relating to cybersecurity platforms.\nMonitor service levels and ensure operational issues are tracked, progressed, and resolved within the required timelines.\nEscalate complex or unresolved technical issues to relevant Subject Matter Experts (SMEs), vendors, or support teams, and coordinate with them through to resolution.\nReview and maintain operational and technical documentation, including standard operating procedures, configuration records, technical runbooks, troubleshooting guides, and knowledge articles.\nProvide technical guidance, task assignment, and support to junior engineers where required.\nReview technical work and operational requests submitted by junior engineers to ensure compliance with established procedures and technical standards.\nPrepare and submit operational reports and provide updates on platform health, incidents, service requests, and outstanding issues.\nParticipate in scheduled maintenance activities, disaster recovery/business continuity exercises, and after-hours standby support where required.\nIdentify opportunities to improve operational processes, platform stability, monitoring coverage, and engineering efficiency.\n\nRequirements\nDiploma or Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Computer Engineering, or a related discipline.\nMinimum 5 years of relevant experience in cybersecurity operations, cybersecurity engineering, security infrastructure, or enterprise security platform support.\nHands-on experience in the operation, administration, maintenance, deployment, and troubleshooting of cybersecurity technologies in an enterprise environment.\nStrong working experience with SIEM platforms such as Splunk, IBM QRadar, Microsoft Sentinel, or equivalent.\nExperience supporting one or more of the following technologies would be advantageous: Security Orchestration, Automation and Response (SOAR), Threat Intelligence Platforms (TIP), Security analytics platform, Log management and data ingestion platforms, Endpoint or network security technologies\nGood understanding of security log collection, ingestion, parsing, normalization, and data pipelines.\nGood working knowledge of Linux operating systems and networking fundamentals.\nProficiency in Regular Expressions (Regex) for log parsing, filtering, and data transformation.\nWorking knowledge of scripting and automation using Python, PowerShell, Bash, or similar languages would be advantageous.\nExperience with system patching, version upgrades, configuration management, incident troubleshooting, deployment, and change management.\nExperience working with enterprise IT service management processes, including Incident, Problem, Change, and Service Request Management.\nStrong analytical and troubleshooting skills, with the ability to systematically diagnose and resolve technical issues.\nGood communication and documentation skills, with the ability to work effectively with internal teams, clients, vendors, and technical stakeholders.\nAbility to work independently, take ownership of operational issues, and manage multiple priorities in a production environment.\nStrong interest in cybersecurity and willingness to continuously develop technical knowledge.\nWillingness to participate in after-hours standby, maintenance, and support activities when required.","description_format":"text","description_chars":6076,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Threat Intelligence","Managed Security"],"lifecycle":[{"event":"open","at":"2026-10-27T04:58:00Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.629,"p_room":1,"age_days":4,"expected_fill_days":12,"reasons":["seen:4","stale_co","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/ensign-infosecurity-cybersecurity-engineer","json_url":"https://alion.io/job/ensign-infosecurity-cybersecurity-engineer.json","meta":{"generated_at":"2026-10-31T08:47:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13178,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50230},"rest":"https://alion.io/mcp/rest/get_company?id=50230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fensign-infosecurity-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fensign-infosecurity-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fensign-infosecurity-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ensign-infosecurity-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fensign-infosecurity-cybersecurity-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3315178}},{"tool":"search_jobs","arguments":{"company":"ensigninfosecurity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3315178},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}