Mindvalley
Cybersecurity Engineer
On-site
Full Time
#Technology
#Education
#Cybersecurity
#Google Cloud Platform
#DevSecOps
#Security Operations
#Incident Response
#Penetration Testing
#OWASP
#Secure Coding
#Security
Mindvalley is looking for a Cybersecurity Engineer
Full TimeMid-LevelOn-siteMalaysiaTechnologyEducationCybersecurityGoogle Cloud PlatformDevSecOpsSecurity OperationsIncident ResponsePenetration TestingOWASPSecure CodingSecurityEnglish
We are Mindvalley, a global leader in the ed-tech space dedicated to transforming personal growth education. Our mission is to build the most advanced learning platform in existence, reaching 100 countries and major corporations to help humanity reach its full potential. We are looking for a skilled Cybersecurity Engineer to join our team in Malaysia on a full-time, on-site basis to help us secure the future of education.
Responsibilities
- Oversee and refine security services within our SaaS environment, with a primary focus on the Google Cloud Platform.
- Maintain the operational health of our security tools and conduct regular code audits to ensure we follow secure coding standards.
- Build and optimize systems for monitoring and alerting to ensure we catch and address security threats quickly.
- Manage incident response workflows, including documenting findings and performing proactive threat analysis.
- Perform vulnerability assessments and penetration testing to identify and fix potential weaknesses in our cloud architecture.
- Work closely with our cybersecurity manager to translate technical findings into actionable reports and recommendations.
Must-haves
- Three to five years of professional experience in cybersecurity, specifically managing security for SaaS cloud solutions.
- Deep technical knowledge of the Google Cloud Platform and experience with broader cloud service environments.
- Proven ability to integrate security practices into DevOps workflows to foster a DevSecOps culture.
- Solid understanding of application security, including the OWASP Top 10, secure coding principles, and the software development lifecycle.
- Experience utilizing automated security testing tools.
- Strong communication skills and the ability to thrive in a fast-paced, geographically dispersed team.
- Fluency in English.
Nice-to-haves
- Professional certifications such as the GCP Professional Security Engineer or OSCP.
Copy Permalink
