IT Security Analyst

About Cathect Sdn Bhd
Cathect Sdn Bhd is an enterprise technology solutions provider specializing in cross-border software deployments, distributed cloud infrastructure, and enterprise data security. We are currently expanding our core defensive infrastructure and are seeking a specialized IT Security Analyst to safeguard our regional and cross-border digital platforms.

Position Overview
The IT Security Analyst will govern the technical architecture, continuous threat modeling, and defensive compliance protocols across our multi-tenant Linux systems and international application endpoints. This role demands deep, specialized technical execution at the intersection of modern Zero-Trust cloud environments and international data privacy regulations.

Core Responsibilities
- Architect, implement, and monitor Zero-Trust Network Access (ZTNA) frameworks across multi-tenant, hybrid Linux VPS environments and international cloud platforms.
- Conduct continuous Vulnerability Assessment and Penetration Testing (VAPT) across proprietary APIs, web application endpoints, and containerized microservice clusters.
- Engineer automated threat-hunting detection logic and rules within enterprise SIEM/EDR systems to secure cross-border data transfer pipelines.
- Perform deep Linux kernel-level system audits, Docker and Kubernetes runtime container hardening, and cryptographic key/token lifecycle management.
- Audit and enforce technical adherence to international cyber standards, including NIST SP 800-207, ISO 27001, and cross-border data privacy frameworks (GDPR / international data residency).

Mandatory Qualifications & Criteria
- Education: Bachelor of Science in Cyber Security, Information Security, or Computer Systems Engineering from a recognized institution.
- Experience: Minimum of 2 years direct technical experience in enterprise defensive security, cloud infrastructure hardening, or hands-on VAPT.
- Specialized Technical Competence:
* Verifiable experience configuring zero-trust network boundaries and containerized workload isolation (Docker/Kubernetes).
* In-depth understanding of cross-border data governance, international encryption standards, and enterprise API security protocols (OAuth 2.0, mTLS).
* Hands-on proficiency in automated defensive scripting (Python, Bash, or PowerShell).
- Note: General IT support, helpdesk, office administration, or non-security computing backgrounds do not satisfy the baseline technical criteria for this role.