{"id":151269,"url":"https://alion.io/job/rhb-cyber-security-engineer","title":"Cyber Security Engineer","company":{"id":5429,"name":"RHB Banking Group","domain":"rhb.com","url":"https://alion.io/company/rhb","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":67,"open_postings":256,"ghost_share":0.543,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13500,"max_usd":32000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cyber Kill Chain","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Hypothesis","optional":false},{"name":"Java","optional":false},{"name":"JavaScript","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Node JS","optional":false},{"name":"Perl","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2025-07-31T00:00:00Z","employer_posted_date":"2025-07-31","last_verified_at":"2026-10-17T21:46:40Z","board_verified":true,"closed_at":null,"days_open":444,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":443},"description":"To be part of Cyber Threat team, tier 3 SME and mentor to the SOC team. This role required continuous detection, analysis, investigation, response, and mitigation of advanced threats before they affected the bank's IT infrastructure via a proven and documented cyberthreat model, e.g., Mitre Attack Framework\nPreferred level of Experience (by years/function/industry):\n4 - 5 years of information security experience\n1 - 2 years supporting incident response and/or investigations\nExperience reviewing and assessing logs for anomalous activity indicating the presence of a threat\nKnowledge and ability to identify threat actor attack methods and track their developments\nExperience using Threat Model e.g. Cyber Kill Chain & Mitre ATT&CK\nExtensive experience conveying complex information in simple, succinct explanations\nExceptional attention to detail\nOther skills required (if applicable):\nStrong technical writing skills\nExtensive experience with analytical tradecraft\nThorough understanding of cybersecurity principles\nAbility to work independently and build relationships\nEfficient research methodologies\nAbility to relate & convert technical threats with business risks\nStrong proficiency with scripting and programming languages (e. g. Python, PowerShell, Java, NodeJS, Perl, etc).\nStrong communication & writing skills for reporting and analysis on cumulative findings\nKEY RESPONSIBLITIES\nSolution\nMaintaining of SIEM solution including Splunk, Imperva and etc. (Task including compliance to patch and obsolescence framework requirement)\nEnsure events / logs from all relevant devices are sending to SIEM solution in a complete and accurate manner\nTo produce monthly SIEM system health report (completeness and accurate)\nHunting\nPerform threat hunting through industry accepted methodologies including Hypothesis Driven investigation, IOC driven Investigation or Machin Leaning Investigation\nAnalyze host, network traffic, IDS/IPS/DLP events, packet capture, firewall logs and other relevant solutions\nProvide forensic analysis of network packet captures, DNS, proxy, Netflow, malware, host-based security and application logs, as well as logs from various types of security sensors\nIdentify gaps in IT infrastructure by mimicking an attacker s behaviors and responses\nPerform offensive validation on identified TTP’s\nDetection & Response\nContinuously develop SIEM use cases based on Mitre Attack framework based on threat landscape\nTo onboard all use cases to Security Operation Center for 24 x 7 monitoring and timely response\nContinuously onboard new IOC to threat prevention solution to ensure known threat are prevented at all time\nContinuously improve processes for use across multiple detection sets for more efficient Security Operations\nDevelop dashboards and reports to identify potential threats, suspicious/anomalous activity, malware, etc.\nAssist in the design, evaluation, and implementation of new security technologies","description_format":"text","description_chars":2941,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Property & Casualty Insurance","Asset Management & Funds","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2025-07-31T00:00:00Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.141,"p_room":0.28,"age_days":443,"expected_fill_days":31,"reasons":["conf:11","stale_co","velocity","ghost","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/rhb-cyber-security-engineer","json_url":"https://alion.io/job/rhb-cyber-security-engineer.json","meta":{"generated_at":"2026-10-18T04:46:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7147,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5429},"rest":"https://alion.io/mcp/rest/get_company?id=5429"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frhb-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frhb-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frhb-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rhb-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frhb-cyber-security-engineer"}]}