Genting Malaysia Berhad

Genting Malaysia is a leading multinational conglomerate that is principally involved in the leisure and hospitality business, covering theme parks, casinos, hotels, seaside resorts and entertainment venues in Malaysia, the UK, and the US. It is one of the largest listed companies in Malaysia.
 
With decades of experience and milestones, Genting Malaysia celebrates its 60 Years Diamond Jubilee in 2025, stamping its mark as a leading tourism and entertainment hub with award-winning properties and world-class attractions such as Genting SkyWorlds Theme Park, Skytropolis Indoor Theme Park, Crockfords, and more. Even with all these accolades, Genting Malaysia is constantly expanding and making big waves in the hospitality industry.
 
If you are searching for a dynamic career full of exciting growth opportunities; look no further and join us today!

Position Summary

The IT Executive – Security Operations is responsible for supporting the day-to-day operation, administration, and monitoring of security solutions that protect the organization’s endpoints and perimeter infrastructure. The role works closely with IT Engineers, senior security personnel, and the Security Operations Center (SOC) to maintain security controls, respond to security alerts, and support enterprise-wide cybersecurity initiatives.

This position is suitable for an individual who has a foundational understanding of cybersecurity technologies and is seeking to develop practical experience in endpoint and perimeter security.

Key Responsibilities

Endpoint Security Support

• Assist in the deployment, configuration, administration, and monitoring of Endpoint Detection and Response (EDR), antivirus, and endpoint protection solutions.

• Monitor endpoint security alerts and escalate suspicious activities or incidents to IT Engineers, senior security personnel, or the SOC.

• Support the enforcement of endpoint security requirements, including patching, vulnerability remediation, encryption, and secure configuration standards.

• Perform routine endpoint security health checks and follow up on devices that are non-compliant or not reporting correctly.

• Assist in implementing endpoint-related Zero Trust security controls and initiatives.

• Maintain endpoint security inventories, reports, and operational records.

Perimeter Security Support

• Assist in the administration and monitoring of firewalls, Intrusion Detection and Prevention Systems (IDS/IPS), Virtual Private Networks (VPNs), Web Application Firewalls (WAFs), and other perimeter security solutions.

• Perform routine reviews of firewall rules, security alerts, system health, and connectivity under the guidance of IT Engineers or senior team members.

• Support remote-access security, network segmentation, and perimeter security improvement initiatives.

• Assist in coordinating vulnerability assessments and penetration-testing activities.

• Track identified security findings and follow up with the relevant technical teams on remediation activities.

• Escalate security issues, system failures, or unusual network activities to the appropriate support teams.

Incident Response and Threat Mitigation

• Support the SOC and Enterprise Defence team in investigating endpoint and perimeter security alerts.

• Collect relevant logs, system information, and technical evidence required for security investigations.

• Assist in implementing approved containment and remediation measures, such as isolating endpoints, blocking malicious indicators, or disabling compromised access.

• Document incident details, actions taken, and investigation findings.

• Participate in post-incident reviews and assist in tracking follow-up actions.

• Escalate complex or high-severity incidents to IT Engineers and senior security personnel.

Security Compliance and Documentation

• Support the implementation of endpoint and perimeter security controls in accordance with organizational policies, ISO 27001, and applicable regulatory requirements.

• Maintain accurate documentation of security configurations, procedures, inventories, and operational activities.

• Assist in gathering evidence for internal audits, external audits, risk assessments, and compliance reviews.

• Prepare routine operational reports relating to security alerts, vulnerabilities, patching, system health, and remediation status.

• Support security awareness activities by preparing materials, coordinating sessions, or assisting with user communications.

Collaboration and Continuous Improvement

• Work with infrastructure, network, application, service desk, and business teams to support the implementation of security controls.

• Assist in testing and evaluating new security technologies, tools, and system updates.

• Participate in security drills, tabletop exercises, system testing, and operational readiness activities.

• Identify recurring operational issues and recommend improvements to procedures or workflows.

• Develop technical knowledge through training, certifications, mentoring, and hands-on experience.

• Perform other cybersecurity-related duties assigned by the IT Engineer, Section Head, or Head of Enterprise Defence.

Required Qualifications

Education and Certifications

• Diploma or bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related field.

• Entry-level or associate-level certifications such as CompTIA Security+, Network+, Microsoft Security certifications, CCNA, or equivalent are preferred.

• Candidates who are actively pursuing relevant cybersecurity certifications may also be considered.

Experience

• One to three years of experience in IT support, network administration, system administration, cybersecurity operations, endpoint security, or a related field.

• Basic hands-on experience with endpoint protection, antivirus, firewalls, VPNs, vulnerability-management tools, or security-monitoring solutions is preferred.

• Fresh graduates with relevant internships, academic projects, certifications, or practical cybersecurity experience may be considered.

• Basic familiarity with information-security frameworks, policies, and risk-management principles is advantageous.

Skills

• Foundational understanding of endpoint security, network security, vulnerabilities, malware, and common cyber threats.

• Basic knowledge of Windows operating systems, networking concepts, firewalls, VPNs, and security-monitoring tools.

• Basic scripting or automation knowledge using PowerShell, Python, or similar technologies is an advantage.

• Ability to review alerts, follow documented procedures, perform basic troubleshooting, and escalate issues appropriately.

• Good analytical, problem-solving, documentation, and communication skills.

• Willingness to learn new security technologies and develop technical capabilities.

• Ability to work effectively as part of a team and manage multiple assigned tasks.

• Ability to work in a fast-paced environment with changing operational priorities.

• Willingness to provide support outside normal working hours when required for security incidents or planned activities.

Be part of an exciting history-in-the-making, help shape the future with us. This is a golden opportunity for you to establish a strong foundation for a great career within the company. Apply now!