Description review
Architect - Cyber Security
Axonect · Malaysia · back to the listing
HR standards
45/100
poor
Title ↔ description
67/100
needs work
Reads as
Security Engineer
100% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- 20 bullet points. Long requirement lists deter qualified candidates, who read them as hard gates. Scope clarity
- No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency
- No location or timezone policy stated, so a candidate cannot tell where they may work from. Scope clarity
The listing, marked up
Key Responsibilities
• Lead and oversee the Cyber Threat and Vulnerability Management (CTVM) program across infrastructure, applications, cloud services, and digital assets
• Coordinate vulnerability assessments, penetration testing, security reviews, remediation tracking, and risk reporting
• Maintain visibility of IT assets and ensure accurate hardware and software inventories
• Coordinate security assessments, including cloud, application, AI, and configuration security reviews
• Oversee security testing activities within DevSecOps pipelines, including SAST, DAST, secret scanning, and software composition analysis
• Monitor SOC, EDR, and MDR services to ensure timely detection, escalation, investigation, and resolution of security events
• Lead cybersecurity incident response, root cause analysis, remediation, and lessons-learned activities
• Maintain cybersecurity policies, procedures, operating models, and incident response readiness
• Establish and monitor cybersecurity KPIs, KRIs, dashboards, and management reports
• Identify security improvement opportunities and provide risk-based recommendations to management
• Collaborate with technical teams and stakeholders to strengthen cybersecurity controls, compliance, and enterprise-wide resilience
Person Specifications
• Bachelor's degree in Information Security, Computer Science, IT, or a related discipline
• 7– 10 years1 of experience in cybersecurity, particularly vulnerability management, security assessments, security monitoring, and incident response
• Strong understanding of the end-to-end vulnerability management lifecycle, including risk prioritisation, patching, and remediation
• Hands-on experience with security tools such as Nessus, Burp Suite, CrowdStrike, EDR, MDR, and attack surface management solutions
• Knowledge of application security, cloud security, threat intelligence, and adversary tactics, techniques, and procedures (TTPs)
• Familiarity with security frameworks and regulatory requirements, including CIS Controls, ISO 27001, BNM RMiT, and CSA Cloud Controls Matrix
• Strong incident coordination, risk assessment, stakeholder management, and reporting capabilities
• Excellent communication and analytical skills, with the ability to engage technical and non-technical stakeholders
• CISM, CRISC, CEH, OSCP, or equivalent cybersecurity certifications are advantageous
Vendor submissions - 12 months
Originally posted on Himalayas
• Lead and oversee the Cyber Threat and Vulnerability Management (CTVM) program across infrastructure, applications, cloud services, and digital assets
• Coordinate vulnerability assessments, penetration testing, security reviews, remediation tracking, and risk reporting
• Maintain visibility of IT assets and ensure accurate hardware and software inventories
• Coordinate security assessments, including cloud, application, AI, and configuration security reviews
• Oversee security testing activities within DevSecOps pipelines, including SAST, DAST, secret scanning, and software composition analysis
• Monitor SOC, EDR, and MDR services to ensure timely detection, escalation, investigation, and resolution of security events
• Lead cybersecurity incident response, root cause analysis, remediation, and lessons-learned activities
• Maintain cybersecurity policies, procedures, operating models, and incident response readiness
• Establish and monitor cybersecurity KPIs, KRIs, dashboards, and management reports
• Identify security improvement opportunities and provide risk-based recommendations to management
• Collaborate with technical teams and stakeholders to strengthen cybersecurity controls, compliance, and enterprise-wide resilience
Person Specifications
• Bachelor's degree in Information Security, Computer Science, IT, or a related discipline
• 7– 10 years1 of experience in cybersecurity, particularly vulnerability management, security assessments, security monitoring, and incident response
• Strong understanding of the end-to-end vulnerability management lifecycle, including risk prioritisation, patching, and remediation
• Hands-on experience with security tools such as Nessus, Burp Suite, CrowdStrike, EDR, MDR, and attack surface management solutions
• Knowledge of application security, cloud security, threat intelligence, and adversary tactics, techniques, and procedures (TTPs)
• Familiarity with security frameworks and regulatory requirements, including CIS Controls, ISO 27001, BNM RMiT, and CSA Cloud Controls Matrix
• Strong incident coordination, risk assessment, stakeholder management, and reporting capabilities
• Excellent communication and analytical skills, with the ability to engage technical and non-technical stakeholders
• CISM, CRISC, CEH, OSCP, or equivalent cybersecurity certifications are advantageous
Vendor submissions - 12 months
Originally posted on Himalayas