Senior Specialist, Security Operations
- Posted 19 days ago
- Be among the first 10 applicants
Job Description
Job Responsibilities
- Responsible for all cyber security tickets raised and the triage process.
- Plan, deploy and operate the vulnerability management, policy compliance and web application security functions.
- Identify cyber security threats to systems and detect security anomalous activities and perform analysis of security logs from multiple sources.
- Manage Endpoint Detection Response (EDR) technologies and to be part of MDR/XDR platform support.
- Possess working knowledge in handling phishing attacks and containment steps.
- Demonstrate strong IT background with expert level knowledge of multiple security practices (Email security solutions, vulnerability management, network security (firewall, IPS/IDS, SIEM, threat intelligence, etc.) in addition to forensics and incident management.
- Provide advisory and solutions for new security threats and vulnerabilities.
- Possess basic to moderate experience in Threat detection, Penetration testing and red teaming.
- Perform security analysis to Cloud platform such as AWS, Azure as well M365 services.
Requirements
- Degree in Computer Engineering or equivalent.
- Trained in Cybersecurity, Information Security, Forensics or equivalent
- At least 5 years of cybersecurity work
Technical Skills
- CISSP/CISM/CISA/CEH/ CRISC or equivalent certification
- Strong domain knowledge of information security governance and risk management, controls, vulnerability assessment/penetration testing, compliance, business continuity, investigations, system architecture and design, legal, and industry IT/OT and cyber security best-practices.
- Knowledge on ISO27001 and IEC62443, NIST Cybersecurity Framework, CSA Code of Practice (CCoP).
- Experience in Threat detection, Penetration testing and red/purple teaming.
- Knowledge in Network, Web Security and Application Security would be highly valued.
- Experience with information security tools (SIEM, anti-virus tools etc.).
- Experience in forensics and incident management.
Non-Technical Skills/Attributes
- Ability to work under pressure
- Self-motivated, a good team player and strong ability to multi-task
- Excellent verbal, written communication, presentation and analytical skills
More Info
Key Skills
anti-virus tools
CSA Code of Practice
IEC62443
Threat detection
information security tools
NIST Cybersecurity Framework
Iso27001
About Company
Skills:
red teaming , Ceh, Penetration Testing, Network security, Incident Management, Iso27001, Vulnerability Management, Web Application Security, Siem, Cism, Forensics, CSA Code of Practice, Cisa, Cissp, IEC62443, Threat detection, CRISC, NIST Cybersecurity Framework
Skills:
team performance , security consulting , Security Management, Incident Management, Incident Response, Microsoft Office, Operations Security, Physical Security, Security Operations, Security Risk Management, Risk Mitigation, Security Team Management, Security Officer Management, Security Leadership, Access Management, Access Control, alarm management, Life Safety, Risk Assessment, Facility Risk Assessment, Security Patrol, Security Systems, Security Equipment, Security Audits, Internal Audit, Quality Control, Compliance, security training, Security Drills, Performance Management, Security Process Improvement, Security Projects, Security Systems Projects, Regional Security Management, business resilience, Operational Resilience, Crisis Management, Emergency Response, Security Advisory, Analytical Skills, Decision Making, Communication Skills, Negotiation Skills, Claims Management Systems, Stakeholder Management, Confidential Information Management, Global Security, Office Security, Workplace Security, SEA Security Operations, 24/7 Security Operations, Security Governance
Skills:
PowerShell, Bash, Dns, Ips, Incident Response, Linux Security, Vpn, Threat Intelligence, Firewalls, Ids, Python, Active Directory, SIEM logging platforms, IOC analysis, Security Monitoring
Skills:
Vulnerability Management, Incident Management, Penetration Testing, security policies and standards, audit processes, cybersecurity awareness initiatives, ISO 27001 Information Security Management System, vendor management, cybersecurity risk management, security governance, vendor security assessments, Secure-by-Design reviews, audit and regulatory activities, Security Monitoring, security project support, security architecture reviews, security standards, security risk assessments, security requirements for technology projects
Skills:
Vulnerability Management, Dlp, Ips, Ids, Siem, PAM, Waf, ZTNA, XDR, cloud computing controls, SASE, SOAR, NGFW, EDR