Security Analyst

Job Descriptiom:

• Maintain and administer security toolsets (such as IAM, DAM, Key Management) ensuring the tools are functioning according to the security management plan.
• Respond and perform triaging of security alerts generated from the security toolsets in a timely manner according to SLA.
• Perform security scanning and testing by using the Vulnerability Assessment tools.
• Reporting and tracking on vulnerabilities and risks and ensure timely patching are completed to comply with stipulated resolution time.
• Assess the applicability of newly published security vulnerabilities to components used within the environment, track and report the status until closure.
• Co-develop process documents and participate in initiatives to finetune and streamline security operations.

Requirements:

• 1-3 years hands-on experience of using common security tools like IAM (eg.IBM ISAM), DAM (eg. IBM Guardium) and Vulnerability Assessment tool (eg. Tenable Nessus)
• Security certifications and AWS Cloud certified is preferable but not a must.
• Proficient in security control principles including SOD.
• Good attitude and passionate with discovery of security gaps and actively participate in problem-solving process.
• 3 primary skill sets - conducting Vulnerability Assessments (including doing scanning and reporting), managing security toolsets (eg. DAM, Key Management and Nessus), supporting security operations.
• Vulnerability scanning is required to be performed outside of normal office hours, the analyst is expected to comply and support.