Total 851 it analyst job vacancies in Legal / Public / Security category in Malaysia

Job Description:

• Responsible for ensuring IT systems and applications within our organization meet the needs of the business while adhering to security best-practices, compliance and regulatory requirements.
• Responsible and accountable for delivering security solutions and fully operationalizing the key security tools for the bank.
• Experience in leading and implementing multiple security solutions and technologies across one or more IT Security domains (EDR, PAM, SIEM, IPS/IDS)
• Exposed to other domains such as Cloud Security
• Manage security programs and stakeholders to ensure security practices are implemented as per policy, standards, SOPs and processes.

Requirements:

• Bachelor's degree in computer science is a minimum
• Security industry certifications such as CISSP, CISM, SANS, GSEC, etc are preferred.
• Other industry certifications such as PMP, ITIL, Microsoft, CISCO (preferred, but not required)
• Minimum 5-8 years’ experience working in a large-scale IT environment; Including five (5) years of information security and risk experience within the past six (6) years; including risk analysis, endpoint, server, network and web application security.

Job Responsibilities

Insider Threat Analyst is an operational role within bank's IT Security Opeartions department. The incumbent will be responsible for the continuous monitoring, analyzing, and investigating of insider threats and data leakage incidents. He/She must have good analytical and investigative skills to recognize and detect anomalous behavior.

Key Responsibilities

§ To participate in the day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

§ To work with internal teams to validate alerts within stipulated SLA

§ To perform analysis on usage behavior trends to discover potentially fraudulent activities

§ To perform continuous review and improvement on current monitoring operations to enhance effectiveness of monitoring

§ Work with external partners to resolve issues or implement improvement to monitoring

§ To gain good understanding of internal business applications to be able to analyze, recognize and identify potentially anomalous activities

§ Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

§ Carry out DLP System Ruleset change requests in accordance to change management procedures

§ Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

§ Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

§ To work with internal cyber security teams to ensure investigations are comprehensive and to track and follow up on all escalated incidents to closure

Job Requirements

Education

§ Diploma/Degree in Business Information Technology/Business Analytics from recognized academic institutions

Technical Skills and Experience

§ Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

§ Excellent analytical and investigative skills

§ Prior experience with analytical platforms

§ Experienced with working with machine learning enabled platforms would be advantageous

§ Experience with administration and operation of DLP Systems preferred

§ Experience in development and fine tuning of DLP Ruleset preferred

§ Knowledge of Cyber Security would be advantageous

§ Relevant working experience in SOC environment and related processes will be added advantages

Soft Skills

§ Good communication skills

§ Strong analytical and problem-solving skills

§ Ability to adhere to work processes and procedures

Other Requirements

§ Ability to work independently

§ Ability to work well with the rest of the team and department

The security analyst is responsible for analysing cybersecurity events, improving threat detection capabilities and procedures. If an event results in a security incident, the analyst will work with the relevant stakeholders to respond and contain the incident.

Key Responsibilities:

- Improving threat detection capabilities, driving lessons learn from incidents and identifying potential gaps in security controls.

- Responsible for maintaining detection capabilities for the SOC.

- Analyse large dataset and correlate information from various sources to identify the root cause to an incident.

- Enhance and drive improvements for SOC detection and response playbooks.

- Take the lead in incident response to minimize the impact of a security incident to our organization.

- Work cooperatively with various IT infrastructure team, applications and business units for the effective operations of the security.

Qualifications:

- 3 years or more relevant working experience in information security technologies.

- Understanding of the tactics, techniques and procedures of cyber advesaries.

- Insurance / Financial industry experience.

- Industry certifications CISSP, CEH, or GIAC preferred.

- Experience in Splunk preferred.

- Comfortable with analysing and processing large datasets.

- Good interpersonal and communication skills.

- Willing to learn and able to work well in a team.

Job Responsibilities

Insider Threat Analyst is an operational role within the Bank’s Group Security Operations Center. The incumbent will be responsible for the continuous monitoring, analyzing, and investigating of insider threats and data leakage incidents. Must have good analytical and investigative skills to recognize and detect anomalous behavior.

Key Responsibilities

· To participate in the day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

· To work with internal teams to validate alerts within stipulated SLA

· To perform analysis on usage behavior trends to discover potentially fraudulent activities

· To perform continuous review and improvement on current monitoring operations to enhance effectiveness of monitoring

· Work with external partners to resolve issues or implement improvement to monitoring

· To gain good understanding of internal business applications to be able to analyze, recognize and identify potentially anomalous activities

· Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

· Carry out DLP System Ruleset change requests in accordance to change management procedures

· Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

· Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

· To work with internal cyber security teams to ensure investigations are comprehensive and complete to track and follow up on all escalated incidents to closure

Job Requirements

Education

· Diploma/Degree in Business Information Technology/Business Analytics from recognized academic institutions

Technical Skills and Experience

· Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

· Excellent analytical and investigative skills

· Prior experience with analytical platforms

· Experienced with working with machine learning enabled platforms would be advantageous

· Experience with administration and operation of DLP Systems preferred

· Experience in development and fine tuning of DLP Ruleset preferred

· Knowledge of Cyber Security would be advantageous

· Relevant working experience in SOC environment and related processes will be added advantages

Soft Skills

· Good communication skills

· Strong analytical and problem-solving skills

· Ability to adhere to work processes and procedures

Other Requirements

· Ability to work independently

· Ability to work well with the rest of the team and department

Responsibilities

• Monitor and analyze security events and alerts from various sources (e.g., EDR, network security tools, SIEM) to identify potential security incidents.

• Investigate and respond to security incidents according to established SOC procedures, including escalation to senior analysts when needed.

• Leverage EDR tools (e.g., Crowdstrike Falcon, Palo Alto Cortex XDR) to investigate suspicious activity on endpoints.

• Configure and maintain NXLog for efficient log collection and analysis within the SOC workflow.

• Participate in security architecture reviews and provide recommendations for improvement based on SOC findings.

• Stay up-to-date on the latest cybersecurity threats and vulnerabilities.

• Document security incidents, findings, and remediation steps.

• Collaborate with the security team and other IT teams to ensure effective security practices.

Requirements

• Security+ or equivalent certification.

• CISSP or SANS certifications related to EDR and security architecture (preferred).

• Scripting skills (Python, PowerShell).

• Minimum of 2-3 years of experience as a Cybersecurity Analyst, preferably within a SOC environment.

• Strong understanding of cybersecurity concepts, principles, and SOC operations.

• Experience working with EDR tools (e.g., Crowdstrike Falcon, Palo Alto Cortex XDR).

• Proficient in log management tools (e.g., NXLog, Splunk, ELK Stack).

• Experience in security architecture design and review is a strong plus.

• Excellent analytical and problem-solving skills.

• Strong communication and collaboration skills.

• Ability to work independently and as part of a team in a fast-paced environment.

Licence No: 12C6060

Key Responsibilities:

1. Monitor and analyze security events and alerts from various sources, including security information and event management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), and endpoint protection platforms (EPP).
2. Investigate and respond to security incidents, including conducting root cause analysis, containment, and remediation efforts.
3. Conduct vulnerability assessments and penetration tests to identify and mitigate security risks.
4. Develop and maintain security policies, standards, and procedures in accordance with industry best practices and regulatory requirements.
5. Collaborate with cross-functional teams to implement security controls and solutions.
6. Stay updated on emerging threats, vulnerabilities, and security technologies through continuous learning and professional development.
7. Provide security awareness training and guidance to employees on security best practices.
8. Participate in security audits and compliance assessments.
9. Serve as a subject matter expert on security-related matters, providing guidance and recommendations to management and stakeholders.
10. Assist in the development and maintenance of incident response plans and playbooks.

Qualifications:

1. Bachelor's degree in Computer Science, Information Security, or a related field. Advanced degree or relevant certifications (e.g., CISSP, CISM, CEH) is a plus.
2. Proven experience in cybersecurity roles, with at least 3 years of experience as a Security Analyst or similar position.
3. In-depth knowledge of cybersecurity principles, technologies, and best practices.
4. Hands-on experience with security tools such as SIEM, IDS/IPS, EPP, firewalls, and vulnerability scanning tools.
5. Strong analytical and problem-solving skills, with the ability to analyze complex security incidents and propose effective solutions.
6. Excellent communication skills, with the ability to communicate technical information to non-technical stakeholders effectively.
7. Ability to work independently and collaboratively in a fast-paced environment.
8. Experience with cloud security principles and technologies (e.g., AWS, Azure) is desirable.
9. Knowledge of regulatory requirements such as GDPR, HIPAA, PCI DSS, etc.

As an Information Security Manager, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the above position, please send in your resume to priyanka_tewari@persolkelly.com

We regret to inform that only shortlisted candidates will be contacted.

Job Code: PRIT

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.**********************************

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

Position Type :

Full time

Type Of Hire :

Experienced (relevant combo of work and education)

Education Desired :

Bachelor of Computer Science

Travel Percentage :

15 - 25%

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions.

What you will be doing:

In this role you will be performing all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.

• Hands-on experience in Information Security Management System implementation and audit inline to ISO 27001 standard.
• Provide oversight on Information Security Management System (ISMS) implementation and audit management including collection, evaluation and retention of evidence; monitoring results of vulnerability scans and remediation; and ensure compliance with FIS policy.
• Knowledge/ Experience in SSAE18 assessments.

• Executes security controls to prevent hackers from infiltrating company information or jeopardizing programs.
• Researches attempted efforts to compromise security protocol and recommends solutions.
• Maintains security systems and administers security policies to control access to systems.
• Creates information security documentation related to work area and completes requests in accordance with company requirements.
• Responds to information security-related questions and inquiries using established information security tools and procedures.
• Resolves and/or performs follow through to resolve all information security issues and questions.
• Implements and administers information security controls using software and vendor security systems.
• Identifies opportunities and executes plans to improve workflow and understands and quantifies business impacts of those improvements for communication to management.
• Interfaces with user community to understand security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• Provides status reports on security matters to develop security risk analysis scenarios and response procedures.
• Other related duties assigned as needed.

Education Requirements
Bachelor’s/Master’s degree in computer science or the equivalent combination of education, training, or work experience.

What you bring
• One or more relevant professional certifications preferred (CISA, CISSP, ISO 27001:2022 Lead Auditor).

4-5 Years of Work experience in Information Security/Risk Management

• Knowledge of ITGC, Cloud Security, Network Security will be an added advantage.

• Knowledge of networks technologies (protocols, design concepts, access control)
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Basic to intermediate decision-making and problem-solving skills
• Basic to intermediate verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients

What we offer you:

• A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities
• The chance to work on some of the most challenging, relevant issues in financial services & technology
• A work environment built on collaboration, flexibility, and respect
• A modern, international work environment and a dedicated and motivated team
• A variety of career development tools, resources, and opportunities

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Position Type :

Full time

Type Of Hire :

Experienced (relevant combo of work and education)

Education Desired :

Bachelor of Computer Science

Travel Percentage :

15 - 25%

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions.

What you will be doing:

In this role you will be performing all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
 

• Hands-on experience in Information Security Management System implementation and audit inline to ISO 27001 standard.
• Provide oversight on Information Security Management System (ISMS) implementation and audit management including collection, evaluation and retention of evidence; monitoring results of vulnerability scans and remediation; and ensure compliance with FIS policy.
• Knowledge/ Experience in SSAE18 assessments.

• Executes security controls to prevent hackers from infiltrating company information or jeopardizing programs.
• Researches attempted efforts to compromise security protocol and recommends solutions.
• Maintains security systems and administers security policies to control access to systems.
• Creates information security documentation related to work area and completes requests in accordance with company requirements.
• Responds to information security-related questions and inquiries using established information security tools and procedures.
• Resolves and/or performs follow through to resolve all information security issues and questions.
• Implements and administers information security controls using software and vendor security systems.
• Identifies opportunities and executes plans to improve workflow and understands and quantifies business impacts of those improvements for communication to management.
• Interfaces with user community to understand security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• Provides status reports on security matters to develop security risk analysis scenarios and response procedures.
• Other related duties assigned as needed.

Education Requirements
Bachelor’s/Master’s degree in computer science or the equivalent combination of education, training, or work experience.

What you bring

• One or more relevant professional certifications preferred (CISA, CISSP, ISO 27001 Lead Auditor).
• 4-5 year of work experience in Information Security/Cybersecurity/Risk Management
• Knowledge of ITGC, Cloud Security, Network Security will be an added advantage.
• Knowledge of networks technologies (protocols, design concepts, access control)
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Basic to intermediate decision-making and problem solving skills
• Basic to intermediate verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients

What we offer you:

• A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities
• The chance to work on some of the most challenging, relevant issues in financial services & technology
• A work environment built on collaboration, flexibility, and respect
• A modern, international work environment and a dedicated and motivated team
• A variety of career development tools, resources, and opportunities

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Position Type :

Full time

Type Of Hire :

Experienced (relevant combo of work and education)

Education Desired :

Bachelor of Computer Science

Travel Percentage :

15 - 25%

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions.

What you will be doing:

In this role you will be performing all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.

• Hands-on experience in Information Security Management System implementation and audit inline to ISO 27001 standard.
• Provide oversight on Information Security Management System (ISMS) implementation and audit management including collection, evaluation and retention of evidence; monitoring results of vulnerability scans and remediation; and ensure compliance with FIS policy.
• Knowledge/ Experience in SSAE18 assessments.

• Executes security controls to prevent hackers from infiltrating company information or jeopardizing programs.
• Researches attempted efforts to compromise security protocol and recommends solutions.
• Maintains security systems and administers security policies to control access to systems.
• Creates information security documentation related to work area and completes requests in accordance with company requirements.
• Responds to information security-related questions and inquiries using established information security tools and procedures.
• Resolves and/or performs follow through to resolve all information security issues and questions.
• Implements and administers information security controls using software and vendor security systems.
• Identifies opportunities and executes plans to improve workflow and understands and quantifies business impacts of those improvements for communication to management.
• Interfaces with user community to understand security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.
• Provides status reports on security matters to develop security risk analysis scenarios and response procedures.
• Other related duties assigned as needed.

Education Requirements
Bachelor’s/Master’s degree in computer science or the equivalent combination of education, training, or work experience.

What you bring
• One or more relevant professional certifications preferred (CISA, CISSP, ISO 27001:2022 Lead Auditor).

4-5 Years of Work experience in Information Security/Risk Management

• Knowledge of ITGC, Cloud Security, Network Security will be an added advantage.

• Knowledge of networks technologies (protocols, design concepts, access control)
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Basic to intermediate decision-making and problem-solving skills
• Basic to intermediate verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients

What we offer you:

• A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities
• The chance to work on some of the most challenging, relevant issues in financial services & technology
• A work environment built on collaboration, flexibility, and respect
• A modern, international work environment and a dedicated and motivated team
• A variety of career development tools, resources, and opportunities

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Aussie Broadband?s (ABB) purpose is to the change the game. As our Security Governance, Risk & Compliance (GRC) Analyst, you'll play a pivotal role in supporting the manager of this function. Your primary responsibility will be to assist in the management of our ISO27001 program, where you will be part of a team that function as the central point of contact for all ISO27001 matters. Additionally, you'll have a strong focus on uplifting security awareness and culture at Aussie.

At Aussie Broadband we believe difference is something to celebrate. Being advocates for Inclusion and Diversity means our team can bring their whole selves to work and allows us to better represent our customers and the communities that we serve. As a proud Equal Opportunity Employer , supporting and celebrating difference is just one way that we demonstrate our value of ?Be good to people? everyday. 

Join us as we continue ... Click here to view more detail / apply for Security Risk & Compliance Analyst

Highlights:

• Homeland Security IT Solution, CAT 1 clearance
• Permanent job opportunity
• Great remuneration and benefits
• Great career progression
• Location: Central

Responsibilities:

• Monitor, Triage and Analyse potential threats.
• Identify potential impact of threats.
• Document and maintain knowledge base.
• Provide recommendations to improve monitoring and defence.

Requirements:

• Minimally possess a Polytechnic Diploma
• Minimally 2 years of relevant working experience in SOC as a security analyst with hands-on experience in monitoring, triage, analysis and incident management of real time security event.
• Hands-on experience in Unix/Linux and Windows administration
• Possess foundation in Internet protocols (TCP/IP) and security concepts
• Hands-on experience in Security Information Event Management System (SIEMS), Breach Detection System, Network Forensic System
• Ability to understand and analyse log and network packet data (incl. SNARE, CEF, PCAP and Netflow)
• Possess foundation in security threat and attack countermeasure
• Analytical problem solving and troubleshooting skill
• Familiar with SOC Process SOP and Technical SOP
• Preferably with SANS GSEC or SANS 400 certified

HOW TO APPLY:

Interested applicants please click on “Apply Now” or email to dicksern@trustrecruit.com.sg and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Lim Dick Sern (Dick Sern)

EA Personnel Reg No: R22106832

Job Description:

•Support and maintain security tools including Endpoint Security, SIEM, IPS/IDS, Email Security, NGFW, DLP, Security Assessment.

•Administration of information security systems and devices, review audit logs and security alerts.

• Perform activities related to IT security, including installation, configuration changes, and updates/patches.

• To investigate, resolve or mitigate security incidents in a timely manner.

• To conduct internal vulnerability assessments and remediate identified vulnerabilities.

• To work with external vendor for penetration testing and remediate findings.

• To work with external MDR/SOC providers to detect and follow up on cyber security incidents.

• To work closely with DevOps and Developers to assess, identify and mitigate security vulnerabilities, and integrate security best practices into the software development lifecycle.

• Generation of metrics, reports, relevant information to support compliance status.

• Point of contact for ISO27001, liaise with auditors, perform self-assessment to ensure compliance with company policy and regulatory requirements.

• Develop and maintain information security awareness program.

• Maintain documentation of security system configurations, procedures, and troubleshooting steps.

Job Specifications :

• Diploma or Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field (or equivalent work experience).

• Relevant experience with security related solutions (Endpoint Security, VPN, Firewall, etc.) and handling of cyber security incidents and associated incident response tools.

• Strong knowledge of operating systems (e.g., Windows, Linux), network protocols, and server hardware.

• Understanding of security principles and best practices, including patch management and vulnerability assessment.

• Strong knowledge of malware families and network attack vectors.

• Good understanding of TCP/IP and internetworking technology including packet analysis, routing, and network security defenses.

• Minimum 2 years of related experience in cyber security or computer network defense role

• Strong understanding of MITRE ATT&CK Framework, NIST Cybersecurity Framework (CSF) and Kill Chain Methodology

• Relevant security-related certifications like CISSP, GCIH, GCIA, GCED, GCFA, CySA+ is a plus

• Good communication skills, with the ability to collaborate effectively with technical stakeholders.

• Strong attention to detail.