Security Consultant

Job Overview: We are looking for a highly skilled Application and Network Security Consultant to join our team. In this role, you will collaborate directly with clients to assess, design, implement, and manage security solutions that safeguard their applications and network infrastructures. As a trusted security expert, you will help clients identify and address vulnerabilities, implement industry best practices, and ensure compliance with security frameworks.

Key Responsibilities:

Client Engagement:

• Engage closely with clients to understand their unique security requirements and objectives.
• Conduct thorough security assessments for applications and network infrastructures, delivering detailed reports with actionable insights.
• Present findings and provide clear, practical recommendations to clients, helping them mitigate risks and improve their security posture.
• Serve as the primary security advisor, offering expert guidance on the secure design, deployment, and management of their systems.

Application Security:

• Perform comprehensive security assessments of client applications, identifying vulnerabilities and providing effective mitigation strategies.
• Review client codebases to ensure adherence to secure coding standards and best practices.
• Implement and configure security tools for application testing, including static and dynamic analysis.
• Advise clients on secure development lifecycle (SDLC) practices and assist in integrating security into their development processes.

Network Security:

• Design and implement customized network security solutions, including firewalls, VPNs, IDS/IPS, and other protective technologies.
• Conduct network vulnerability assessments and penetration tests to identify potential threats in client environments.
• Monitor client networks for security incidents and provide timely incident response and mitigation support.
• Collaborate with IT teams to design secure, scalable network architectures that protect sensitive data and maintain compliance.

Documentation and Training:

• Create and deliver customized security documentation for clients, including assessment reports, security policies, and procedures.
• Lead security training sessions and workshops to enhance client teams’ understanding of security threats and best practices.
• Stay current with the latest developments in security tools, technologies, and trends, ensuring clients receive innovative, cutting-edge solutions.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience).
• Minimum of 3 years of hands-on experience in application security and/or network security, particularly in client-facing roles.
• Strong knowledge of security frameworks and standards (e.g., OWASP, NIST, ISO 27001) and their practical application.
• Experience with security tools and technologies across both application and network security domains.
• Proficiency in programming and scripting languages for security automation, vulnerability testing, and code review.
• Familiarity with cloud security (AWS, Azure, Google Cloud).
• Security certifications (CISSP, CEH, OSCP, etc.) are highly desirable.

Job Types: Full-time, Permanent, Contract
Contract length: 12 months

Pay: RM5,000.00 - RM7,000.00 per month

Benefits:

• Dental insurance
• Health insurance
• Opportunities for promotion
• Professional development

Supplemental Pay:

• Performance bonus

Experience:

• Network security: 3 years (Required)
• ISO 27001: 3 years (Required)