Job Description
- Involve in daily security operations, continuously monitor various security systems, including SOC, AV, EDR, ITD, Endpoint security, IDS/IPS, WAF, SIEM and other security technologies, analyse security events and incidents to identify potential threats and vulnerabilities.
- Responsible for responding promptly and effectively on the security events and incidents, this includes investigating security breaches, coordinating with relevant teams to contain the incident, and implementing remediation measures to prevent future occurrences.
- In the event of security incident, involves in conducting investigation to determine the root cause, scope and impact of the incident, incl. analysing log, involve in communication to the team on actions, in prepare in war room for recovery, documenting findings for stakeholders and management updates, legal or regulatory purposes.
- Oversee vulnerability notice, assessments and penetration testing whenever is needed, to identify weakness in the organization's systems and networks. Works with system and application teams and security teams including the vendor to prioritize and address these vulnerabilities.
- Managing and maintaining security tools and technologies, recommends of security practices to the system, network and application teams to ensure that the tools, the system, network and the applications are properly setup and configured and updated to mitigate potential risks.
- Enforces security policies and procedures across the organization, to ensure that employees follow security best practices, conduct security awareness training programs, and ensure compliance with relevant security requirements and standards.
- Stay updated on the latest cybersecurity with external security organizations to proactively defend against emerging threats.
- Maintain detailed documentation or security process and procedure, incident records, investigation reports, and remediation efforts. Prepare regular reports for management and stakeholders to communicate the organization's security posture and any ongoing security issues or concerns.
- Participate in security meeting, requests and security architecture reviews and provide input on the recommendation to ensure that the security requirements are meet up to the standards and best practices.
Job Requirements
- Bachelor's degree in computer science, Information Technology, or a related field preferred.
- 3-5 years experience in security roles
- Experience within security workforce, security operations, or any IT security exposures.
- Familiar with SIEM tools, such as LogRhythm, Cycognito, SolarWinds
- Familiar with security tools such as VA, AV, EDR, Endpoint Security Management, CyberArk, SSO, DLP, CASB, IAM, PAM, SolarWinds, Azure Sentinel, etc.
- Strong understanding of common cyber-attack techniques.
- Good exposure to Governance, security management, business management and able in engaging with all levels of stakeholders.
- Excellent communication skills, able to communicate technical information effectively to both technical and non-technical audiences.
- Able to work collaboratively in a team environment, and independently when necessary.
- Relevant certification, e.g., Azure Security, CEH, Cisco, CISM
We regret that only shortlisted candidates will be shortlisted.
