Is this your next challenge in IT Infrastructure
In this role, you and the team will be responsible of managing Security tools platform, cyber security investigations incident handling. Your background should include develop and maintain the SIEM and SOAR, hands-on security incident response and exposure to security technologies including firewalls, IPS/IDS, logging, monitoring, Vulnerability Assessment. You should understand network security and system administration. To execute your expertise with excellent stakeholder management while problem solving will be a top priority for you.
Core Responsibilities:
- Perform accurate and precise real-time analysis and correlation of logs/alerts from a multitude of client devices with a focus on the determination of whether said events constitute security incidents.
- Hands-on experience in the setup and writing of SIEM & SOAR correlation rules and provide analysis of incidents
- Enhance and fine-tune threat detection scenarios and strategies.
- Research and analyse the latest attacker tactics and implement proactive security measures.
- Establish new and maintain existing security operation guidelines, procedures, and playbooks.
- Support to internal SOC L1/L2 such as interpreting, conducting analysis and making recommendations for resolution from security logs sources and alerts from the (SIEM, IAM, CASB, EDR, SEG & other security tools) and other threat detection systems for threats/Security incident activity.
- Responsible to enhance the security posture and as the owner of the security product such as (SIEM, IAM, CASB, EDR, SEG & other security tools)
- Ability to explain the risks of security threats and devise mitigations.
- Familiarity with various SIEM platforms such as Splunk, Elastic, Microsoft Sentinel, etc.
- Representing Group-level IT Security COE across IT teams at key cross-team projects/Initiatives and managing the deployment of Security project plan, schedule, issue/dependency tracking and security check on Pre and Go-Live.
- Maintain Security Hardening Standard: creating secured configuration standards for new platform/technology, and enhancements of overall existing standards.
- Provide technical advice on cybersecurity threats and recommend technological solutions.
- Lead the implementation of information security projects, such as security project and performance tuning of security tools.
- Facilitate security request on firewall, email, etc whitelisting review & approval, and perform periodic firewall annual review.
- Prepare regular cyber security status reports for submission to Leadership team.
- Provide advice to IT/End users and managing the cyber security policies, procedures and best practices.
Do you have experience as Cyber Security Analyst
Education/Skill:
- Degree holder in Information Security, IT, Computer Science or other related disciplines
- Overall IT relevant experience of minimum 7 years, in a combination of multi-disciplinary IT/Security Operations with minimum 5 years in cyber security
- Experience in working for a demanding security operations Centre with multiple tracks.
- Proficient in cyber security and technology risk management
- Strong technical knowledge in Network Security Infrastructure, Linux/UNIX System Administration, DNS server and Windows System Administration
- Knowledge in OWASP and common attack vectors in different platforms (Windows, Linux, Network, etc)
- Experience in working with Cloud and vendors risk assessment.
- Experience and understanding of IT operations and processes.
- Knowledge of Security Standards and Frameworks including MITRE & ATT&CK, ISO 27001:2013, NIST, PCI-DSS, Data Protection etc., cyber security threats, tools and best practices
- Experience and knowledge of Microsoft Sentinel Kusto Query Language (KQL)
- Experience and knowledge of cloud & network security is preferred
- Experience in supporting or managing Security projects
- Experience in working with product vendor directly to supporting SOC.
If you have the right skills and experience, this is an opportunity to build your career with Pan Asia's leading retailer.
DFI Retail Group is an equal opportunity employer and responsible for ensuring that all personal information collected from each Candidate presented to DFI Retail Group is used for recruitment purposes only and the personal data will be kept and handled confidentially. We will retain the applications of candidates not selected for a period of no more than 24 months. The data collection process is in accordance with all applicable laws and compliant with the Code of Practice on Human Resource Management.
To find out more about Our Businesses and Our People, please visit our website: https://www.DFIretailgroup.com Issued by The Dairy Farm Company, Limited
