Title:  Advanced Security Infrastructure Engineer (KPR3E)

Why You’ll Love Being Part of Our Team:

Join KBTG – where innovation drives impact! With a purposeful mission, collaborative spirit, and a positive attitude, we create fintech solutions that empower. Be part of the future!

How You’ll Make an Impact:

• Design and architect Security Infrastructure for both On-Premise and Cloud environments. 
• Lead the deployment of Firewall, IDS/IPS, DDoS Protection, WAF, VPN, Endpoint Security, CNAPP, and Container Security solutions. 
• Install and configure both physical and virtual Firewall and Security appliances. 
• Drive Security Infrastructure modernization projects to reduce technical debt and enhance efficiency. 
• Manage the full lifecycle of Security Infrastructure, including updates, patch management, and maintenance. 
• Monitor and manage Firewall, WAF, IPS/IDS, VPN, Secure Web Gateway, and related security solutions. 
• Analyze logs and real-time alerts to detect and respond to potential security threats. 
• Develop and maintain Security Policies, Access Control Lists (ACL), and Rule Base Management. 
• Provide Tier 3 technical support and lead complex incident response activities. 
• Provide technical guidance and mentorship to Security Engineers and Network Engineers. 
• Assign tasks and monitor team performance to align with security objectives. 
• Collaborate with IT Infrastructure, DevOps, Cloud, and executive teams to enhance and develop systems. 
• Support solution design and provide security expertise to other departments. 
• Ensure Security Infrastructure complies with standards such as PCI-DSS, ISO27001, NIST. 
• Conduct Risk Assessments and manage Vulnerability Management processes. 
• Lead Security Audits, Configuration Reviews, and support Penetration Testing. 

What Will Set You Up for Success:

• Bachelor's degree or higher in Computer Engineering, Computer Science, Cybersecurity, or related fields. 
• Minimum of 5 years of experience in Security Infrastructure Engineering or Network Security Engineering. 
• Solid understanding of Security Frameworks such as NIST, CIS Controls, and MITRE ATT&CK. 
• Proven experience in Design, Deployment, Operation, and Troubleshooting of security systems. 
• Relevant certifications such as CISSP, CISM, PCNSE, NSE4-7, CCNP Security, GIAC (preferred). 
• Firewall & VPN: Palo Alto, Fortinet, Check Point, Juniper, F5 
• IPS/IDS: Cisco Secure IPS, Snort, Suricata 
• DDoS Protection: Arbor, Radware, AWS Shield 
• WAF: Akamai, Imperva, F5, Cloudflare WAF 
• Endpoint Security: EDR/XDR such as CrowdStrike, SentinelOne 
• CNAPP & Container Security: Prisma Cloud, Wiz, Orca, Aqua Security, Sysdig 
• Cloud Security: AWS, Azure, GCP Security Tools 
• Automation: Python, Ansible, Terraform (preferred) 

Embracing IDEA (Inclusion, Diversity, Equity, and Accessibility):

At KBTG, diversity fuels innovation. We embrace different perspectives, foster an inclusive culture, and create opportunities for growth. Be yourself, make an impact, and grow with us. Join us.

Rewards That Go Beyond the Paycheck:

• Hybrid Working – Balance office collaboration and remote flexibility.
• Competitive Provident Fund – Secure your future with high contributions.
• Financial Wellness – Expert support and tools for managing finances, including home loans.
• Comprehensive Health Coverage – Enjoy peace of mind with top-tier health insurance and annual health check-ups for you, your spouse, and your children.
• Flexible Benefits – Customize your perks with generous policies, including support for work-from-home equipment, wellness, and more.
• Wellness & Comfort – Recharge in our Nap Room, enjoy occasional massages, and access mental wellness support via Occa.
• Business Travel & Commuting Support – Enjoy Grab for Business rides and other travel perks for professional journey with ease and convenience.
• Continuous Learning – Access Udemy, Coursera, and top training programs.
• K Point Reward – Earn points and enjoy exciting rewards as you grow with us.