Senior Cyber Security Specialist

We are seeking a seasoned Security Engineer to join our team.

• Security Incident Response:
• The successful candidate will be responsible for providing timely and effective security incident response within a 24x7 SOC environment. This includes leading operation teams to effectively maintain the lifecycle of both on-premises and cloud-based security solutions.
• The ideal candidate will manage response to security and operational incidents, and ongoing security requests. They will also coordinate and manage security incidents to ensure swift identification, containment, and remediation.
• They will develop and maintain incident response playbooks and procedures, as well as participate and contribute to industry cyber forums, both formal and informal.
• The role involves supporting all audits and reviews requests, monitoring developments in the information security industry, and communicating on the potential impact or applicability to the organization.

• Vulnerability Management:
• The successful candidate will support global vulnerability management processes, including operating system (OS) and infrastructure patching, hardening, and testing efforts.
• They will conduct regular vulnerability assessments (VAPT) and prioritize remediation activities.
• Collaboration with IT teams is required to implement and validate security patches and updates.

• Security Tools Operation:
• The ideal candidate will manage the Total Cost of Ownership (TCO) for security solutions, which includes new investments and business-as-usual financials.
• They will operate and manage various security tools, including Host Intrusion Detection Systems (HIDS), Network Intrusion Detection Systems (NIDS), Intrusion Prevention Systems (IPS), analysers, scanners, and more.
• Continuous monitoring and analysis of security tools are necessary to identify active threats, attacks, vulnerabilities, and exposures.
• Prioritization of identified threats and vulnerabilities for remediation activities within the team is also required.

• Threat and Vulnerability Identification:
• The successful candidate will assist in the identification and evaluation of security threats and vulnerabilities.
• They will conduct in-depth analysis of security events to determine the root cause and potential impact.
• Recommendations for mitigation and remediation solutions to address identified security issues will be provided.

• A proven track record for managing technical resources to deliver technology lifecycle is essential.
• Relevant information security experience working with or for a global exchange or a global financial firm is required. Other IT operational experience will also be considered.
• Solid knowledge and experience in cloud technologies, and familiarity with cloud security architecture, design, and operations are necessary.
• Relevant experience with SecDevOps principles, Security Automation, and Orchestration is required.
• Must have relevant experience with industry best-practice approaches to the design, implementation, operation, and management of IT systems (e.g., Agile, Waterfall, ITIL, COBIT).
• Must have relevant experience with information security (e.g., CISSP, CCSP).
• Must have strong information security technology knowledge/concept and can effectively communicate with senior management and a broad range of technical/non-technical audiences.
• Must have a relevant University degree in Computer Science, Information Management, or related field, or equivalent experience.

• Essential:
• Bachelor's degree in computer science, information systems, cyber security, or a related field.
• At least 10 years of relevant experience in cyber security.
• Knowledge of information technology operation (e.g., cloud, data, system, application, and infrastructure, etc.).
• Knowledge of cyber security assessment (e.g., security audit, vulnerability assessment, penetration testing, etc.).
• Knowledge of cyber security product (e.g., End-Point Solution (EDR), WAF, DLP, SIEM, SOAR).
• Knowledge of market best practice and framework (e.g., ITIL, ISO, PCI-DSS, NIST, etc.).
• Certification in cyber security is an advantage (e.g., CISSP, CISM, CISA, ISO Lead Auditor, CEH, etc.).
• Desirable:
• Certification in project management and framework is an advantage (e.g., PMP, CPM, CSM, PRINCE2, CompTIA Project+, etc.).