Senior Cybersecurity Professional

We are seeking a Lead Security Engineer to fulfill a key role within our organization. The ideal candidate will possess a proven track record of managing technical resources to deliver technology lifecycle and relevant information security experience working with or for a global exchange or a global financial firm.

The successful Lead Security Engineer will be responsible for providing timely and effective security incident response within a 24x7 SOC environment, leading operation teams to effectively maintain the lifecycle of both on-premises and cloud-based security solutions, managing response to security and operational incidents, and on-going security requests.

• Develop and maintain incident response playbooks and procedures.
• Participate and contribute to industry cyber forums, both formal and informal.
• Support all audits and reviews requests.
• Monitor developments in the information security industry and communicate on the potential impact or applicability to the organization.

The following responsibilities are crucial to the success of this position:

• Provide timely and effective security incident response within a 24x7 SOC environment.
• Lead operation teams to effectively maintain the lifecycle of both on-premises and cloud-based security solutions.
• Manage response to security and operational incidents, and on-going security requests.

Some of the key responsibilities include:

• Develop and maintain incident response playbooks and procedures.
• Participate and contribute to industry cyber forums, both formal and informal.
• Support all audits and reviews requests.

This role offers numerous benefits including:

• A competitive salary package.
• Ongoing training and development opportunities.
• A dynamic and supportive work environment.

Qualification and Experience:

• Proven track record for managing technical resources to deliver technology lifecycle.
• Relevant information security experience working with or for a global exchange or a global financial firm.
• Solid knowledge and experience in cloud technologies, and familiar with cloud security architecture, design and operations.
• Relevant experience with SecDevOps principles, Security Automation and Orchestration.
• Must have relevant experience with industry best-practice approaches to the design, implementation, operation and management of IT systems (e.g. Agile, Waterfall, ITIL, COBIT)
• Must have relevant experience with information security (e.g. CISSP, CCSP).
• Must have strong information security technology knowledge/concept and can effectively communicate with senior management and a broad range of technical/non-technical audiences. Strong written communication skills, experienced with writing board-level papers and verbal presentations to senior management.
• Must have a relevant University degree in Computer Science, Information Management, or related field, or equivalent experience.

Competency and Behavioural Skills:

• Essential - Bachelor's degree in computer science, information systems, cyber security or a related field.
• Essential - At least 10 years of relevant experience in cyber security
• Essential - Knowledge of information technology operation (e.g. cloud, data, system, application and infrastructure, etc.)
• Essential - Knowledge of cyber security assessment (e.g. security audit, vulnerability assessment, penetration testing, etc.)
• Essential - Knowledge of cyber security product (e.g. End-Point Solution (EDR), WAF, DLP, SIEM, SOAR)
• Essential - Knowledge of market best practice and framework (e.g. ITIL, ISO, PCI-DSS, NIST, etc.)
• Desirable - Certification in cyber security is an advantage (e.g. CISSP, CISM, CISA, ISO Lead Auditor, CEH, etc.)
• Desirable - Certification in project management and framework is an advantage (e.g. PMP, CPM, CSM, PRINCE2, CompTIA Project+, etc.)