Cyber Security Engineer

Company Description

• Auto
• Count is a leading Malaysian software development brand with over 28 years of experience, headquartered at Oasis Corporate Park, Ara Damansara, Selangor.
• Specializing in accounting software and business applications, Auto
• Count provides innovative solutions tailored to small and medium-sized enterprises (SMEs). Its flagship products, including Auto
• Count Accounting, Auto
• Count Point of Sale, and Auto
• Count HRMS, are trusted by more than 210,000 companies and 600,000 users across Malaysia and neighboring regions.
• The company collaborates with a network of 280 authorized dealers, ensuring exceptional support and service for its clients.

Role Description

We are looking for a highly skilled and independent Cybersecurity Engineer to serve as the lead security authority for our organization. Because we are a growing team of ~50 developers, we need a "hands-on" expert who can bridge the gap between infrastructure security and modern web application security.

This is a standalone role. You will not be managing a team yet; instead, you will be the primary person responsible for identifying our blind spots, conducting internal penetration tests, and ensuring our SaaS platforms and internal networks are hardened against modern threats.

Mandatory

Requirements

• Certification: Active OSCP certification is mandatory.
• Candidates without a valid OSCP or an equivalent hands-on certification (e.g., OSEP, CPTS) will not be considered.
• Experience: 5+ years in offensive security, penetration testing, or vulnerability management.
• Autonomy: Proven track record of building security processes from scratch in environments where they were the sole security expert.

Core Responsibilities

• Internal Penetration Testing: Perform regular, deep-dive manual penetration tests on our web applications.
• You must be able to go beyond automated scans to find complex logic flaws, session management issues, and bypasses.
• Infrastructure Hardening: Conduct recurring vulnerability assessments of our servers (Windows/Linux) and networking devices.
• Remediation & Collaboration: Work directly with our development team to provide technical "how-to" guidance on fixing vulnerabilities, such as implementing mTLS, securing API endpoints, and hardening database configurations (SQL Server/PostgreSQL).
• Security Tooling: Select, deploy, and manage the security stack (e.g., Burp Suite Enterprise, Nessus, or Open
• VAS) to automate continuous monitoring.
• Policy & Compliance: Develop internal security standards for code reviews and server provisioning to ensure security is baked in, not bolted on.
• Technical Skills & Expertise
• Expertise in the OWASP Top 10 and the ability to demonstrate manual exploitation techniques.
• Strong understanding of network security (firewalls, VLANs, VPNs) and cloud security.
• Ability to read and audit code; familiarity with .NET environments is a significant advantage.
• Experience with self-hosted security tools and automation.

Benefits

5 Working days.

Parking SubsidyFull-stocked fridge and pantry: coffee, tea, biscuits and etc.

Medical, Dental and Optical benefits, Hospitalization & Surgical Insurance and Group Personal Scheme.

Training and guidance provided.

Smart casual working attireFestive seasons and birthday celebrationsSports Activities (Badminton & Pckleball)

Why Join Us

AutoCount is a vibrant and youthful company - Join a fun and fast growing team.

We aspire to be the most preferred brand in the Asia and you can be part of the success story of AutoCount.

Provide our employees a stable work environment with equal opportunity for learning and personal growth.

Provide a competitive salary & benefits package.

We encourage creativity and innovation for improving the effectiveness of the company.

Maintain open two-way communication between employees, management and customers.

We encourage work life balance practice in the company.

Friendly working environment.

Locations:

Offices: Jalan Bayu Laut 1/KS09, 41200 Klang, Selangor.