Principal Network Engineer

We are seeking a highly skilled Senior Network Security Engineer to join us at Brooks Automation Malaysia where you will design, implement, and manage secure network infrastructures while proactively identifying and mitigating security threats. This role requires deep expertise in network security technologies, incident response, and compliance frameworks. 

Reporting to the Director of Infrastructure Architecture and Engineering (based in the US), the ideal candidate will be a proactive problem solver with strong technical and analytical skills, capable of securing complex enterprise environments. 

Work Location: Onsite - Johor Bahru.  

Key Responsibilities:  

• Design, implement, and maintain firewalls, VPNs, IDS/IPS, WAFs, and NAC solutions to protect network infrastructure. 

• Configure and manage next-generation firewalls (NGFW) (i.e. Palo Alto experience is a must). 

• Ensure zero-trust architecture (ZTA) principles are applied across network security frameworks. 

• Optimize network segmentation and micro-segmentation strategies for enhanced security. 

• Implement and maintain DDoS mitigation, DNS security, and web filtering solutions. 

• Experience with AWS transport and security services, including securing VPCs, Direct Connect, Transit Gateway, and associated security controls. 

• Monitor and analyze network traffic for anomalies, threats, and intrusions using SIEM, SOAR, and threat intelligence platforms. 

• Lead incident response efforts related to network security, including forensic analysis and root cause determination. 

• Collaborate with SOC teams to enhance network visibility and proactive threat hunting. 

• Perform regular penetration testing, vulnerability scans, and firewall rule reviews. 

• Ensure compliance with NIST, ISO 27001, PCI DSS or other regulatory frameworks. 

• Implement security controls and policies aligned with industry best practices. 

• Assist in audit readiness and remediation efforts for network security controls. 

• Work closely with risk management teams to assess vendor and third-party security risks. 

• Develop and implement network security automation using Python, Ansible, or scripting tools. 

• Streamline firewall rule management and change control processes for efficiency. 

• Utilize AI/ML-based security tools to enhance threat detection and mitigation. 

• Other duties as assigned. 

Required Qualifications & Competencies:  

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).

• Minimum 5+ years of experience in Network Security Engineering, Security Analysis, or a related role. 

• Strong expertise in firewall management, intrusion detection/prevention, and secure network design. 

• Hands-on experience with Cisco or Palo Alto security solutions. 

• Proficiency with SIEM platforms and network traffic analysis tools. 

• Experience with AWS transport and security services, including VPC security, Direct Connect, and Transit Gateway. 

• Knowledge of encryption protocols, PKI, and secure remote access technologies. 

• Experience with incident response frameworks (MITRE ATT&CK, NIST CSF, or SANS IR). 

• Strong analytical, troubleshooting, and problem-solving skills. 

• Strong communication and interpersonal skills, with the ability to work effectively in a team-oriented environment.  

Nice to Have: 

• Aruba ClearPass NAC configuration and management. 

• Preferred Certifications (one or more strongly preferred): 

-- CISSP (Certified Information Systems Security Professional) 

-- CCNP Security (Cisco Certified Network Professional - Security) 

-- GSEC, GCIA, or GCIH (GIAC Certifications) 

-- PCNSE (Palo Alto Networks Certified Security Engineer) 

#LI-MV1

#LI-Onsite