About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

Our team is committed to ensuring the secure deployment of LLM/AIGC applications, working closely with the business team to deliver secure large models and applications, and ensuring the security and privacy of user data. We focus on innovating security solutions for the arising LLM/AIGC applications, such as SDLC、data privacy solution、model vulnerability detection and mitigation、and security applications based on large models.

Our team members have extensive security experience and technical expertise, committed to providing users with the most secure LLM/AIGC application experience. If you have a passion for security and are willing to contribute to protecting the security and privacy of users, we welcome you to join our team!

Responsibilities

- Discover AI model vulnerabilities and assess the security of production AI systems by executing Red Team Operations. Support the production of scalable and optimized machine learning models.

- Focus on building algorithms for the extraction, transformation and loading of large volumes of realtime, unstructured data to deploy AI/ML solutions from theoretical data science models.

- Develop offensive emulation and vulnerability discovery techniques and tools specific for AI security

- Run experiments to test the performance of deployed models, and identifies and resolves threats that arise in the process.

- Design techniques and solutions for mitigating AI model vulnerabilities

- Work in a team setting and apply knowledge in statistics, scripting and programming languages required by the firm.

- Work with the relevant software platforms in which the models are deployed.

- Research on AI-sepcific security threats including prompt injection, backdoor, privacy extraction.

Qualifications

- 1 year or above working experience in AI security, master’s degree or above, majoring in computer science, artificial intelligence, and information security, etc.

- Proficient in Python/C/C++, familiar with common AI development frameworks, and having a solid foundation in data structures, algorithm design, and machine learning theory.

- A strong background in mining AI model vulnerability, designing protection schemes for AI systems, interpretability AI, and AI training/reasoning framework design.

- Those who have papers on AI security related top conferences are preferred.

- Strong logical thinking ability, good at discovering and solving problems, self-driven.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Responsibilities

• Maintain security by ensuring a safe and secure environment for guests and team members at Marina Bay Sands.
• Present a professional image and deal with incidents in a discreet and confident manner.
• Ensure optimum guest service through the delivery of excellent customer service.
• Respond to first aid incidents and apply effective first aid skills for customers and team members.
• Perform security functions at assigned posts and areas within the property.
• Observe and monitor persons and property to maintain security and safety.
• Escort or carry valuables as assigned or directed. Valuables may include the transportation of chips and cash as well as documentation.
• Respond to all emergencies and alarms as directed by Security Operations Control Room and Security Management.
• Monitor and manage crowd levels within the work environment.
• Effectively participate in the management of potential safety hazards including fire alarms, emergency situations, bomb threats and building evacuation.
• Maintain and apply skills to deal with the management of intoxicated persons within the work environment.
• Handle lost property in accordance to procedures.
• Participate in training programs.
• Maintain professional skills by staying abreast of current developments and participating in developmental programs available within and outside the company.
• Perform other tasks within the IR, including CAT C Special Employee License tasks, as directed by the Vice President, Security Service Department.

JOB REQUIREMENTS

Education & Certification

• Minimum Secondary Education
• National Skills Recognition Scheme (NSRS) or WSQ Trained.
• Possess initiative and a good team player.
• Good written, verbal and interpersonal skills.
• Able to work overtime and work different shifts on short notice.
• Must have attained PLRD Senior/Security Officer Grade.
• Must possess a valid Special Employee License during his/her employment.

Experience

• Prior experience in the Security industry is an advantage

Competencies

• A team player.
• Able to handle stress and multi-task.
• Good written and communication skills.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

The Internal Security Risk Management & Governance Manager will research industry best practices and technologies, then work with stakeholders from various cross-functional teams to develop strategies to mitigate the potential impact of risk materialisation. Based on formulated strategies, the manager will develop and implement policies, procedures, and controls to prevent, detect, and respond to various risks that could impact the confidentiality, integrity, and availability of the organization's systems, data, and other critical assets.

- Perform risk assessment based on Internal Security risks; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.

- Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.

- Research industry best practices and technologies, perform industry benchmarking and gap analyses.

- Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.

- Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.

- Work with stakeholders from engineering, SecOps, IT, legal, HR, Ethics to ensure that all aspects of internal information security risk are addressed.

- Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

Qualifications

- Bachelor's degree in a relevant field, such as information security, risk management, or business administration.

- At least 5 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is a bonus.

- Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.

- Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.

- Team builder, strong written/verbal communication and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization; strong analytical and problem-solving skills.

- Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsibilities

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible. Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve. Join us.

The Global Security Organization ensures ByteDance's worldwide security and privacy with four guiding principles: trust and transparency, innovation catalyst, informed decision-making, and proactive risk reduction. Reporting to the Network Security Lead, you'll join the Security Operations team responsible for various security functions. Your role as a Network Security Operations specialist involves supporting the deployment and management of technologies to safeguard data, comply with regulations, and enhance security. You'll work with a team to monitor our global infrastructure, improve technology platforms, and design security controls. This contributes to creating a secure environment for TikTok's infrastructure, technologies, and services.

Tasks and Responsibilities:

- Support the formulation and execution of enterprise-wide network security initiatives

- Establish technical and functional prerequisites for configuring and deploying network security tools

- Architect and continually enhance the security technology stack, processes, procedures, support structure, and cross-functional interactions

- Create standard operating procedures and training materials for each technology

- Evaluate and appraise the utilization of network security toolsets, Champion and promote the adoption of network security tools across the entire organization

- Develop and present metrics outlining network security coverage and remediation plans

- Cultivate and maintain robust vendor relationships for ongoing support of network security tools

- Establish protocols to validate the effectiveness of security controls' design, deployment, and management, ensuring the preservation of network and technology platform confidentiality, integrity, and availability

- Implement and oversee global network security infrastructure, encompassing Firewalls, DDoS mitigation, VPN, IPS/IDS Systems, Egress Filtering, Edge Security, Cryptography, and Web Application Security

Qualifications

Knowledge and Skills:

- Thrives under pressure while adhering to time and budget constraints, adept at swiftly adapting to changing priorities and making informed decisions in uncertain situations

- Skilled at navigating risks in complex and ambiguous scenarios and have a proven ability to collaborate effectively within a team

- Highly motivated to make meaningful contributions and advance in a rapidly evolving field of significance

- Capable of conveying technical concepts to both technical and non-technical individuals

- Solid comprehension of:

- Analyzing numeric data and applying statistical principles

- Proficiency in operating and maintaining tools within the Network Security Technology stack Minimum Qualifications:

- A Bachelor's degree or equivalent work experience in cybersecurity, security architecture, or related fields within a converged security program. Possess a minimum of 3 years of relevant work experience.

- Demonstrate the capability to rapidly acquire new knowledge and stay up-to-date with the latest developments in cybersecurity and industry trends.

- Exhibit a high level of integrity and trustworthiness, along with the ability to lead and inspire change.

- Proficiency in utilizing network diagnosis and packet analysis tools and strong knowledge of routing and switching technologies, including TCP/IP, BGP, OSPF, EIGRP, and others.

- A passion for delivering exceptional customer service, coupled with a keen attention to detail and precision.

- In-depth expertise in the following areas:

- Network Detection and Response.

- Microservice architecture.

- Web Application Firewalls.

- Perimeter Security.

- Configuration of network and host-based firewalls.

Preferred Qualifications:

- CISSP, SSCP, CAP, CCSP, CISM, CSX-P or applicable experience in the Information Security field

- CCNA/CCNP, PCNSE, AWS Networking, Security, and related Cloud Networking/Security certifications are a plus.

- Experience using one or more programming/scripting languages (e.g., Python, Go, Java, etc.) - Familiarity with source code management tools (e.g., Github, Bitbucket)

- Familiarity with securing data across SaaS and IaaS cloud platforms (e.g., AWS, Google Cloud Platform)

- Familiarity with securing data across multiple database technologies (e.g., MySQL, Redis, Hive)

- Be able to handle ambiguity and collaborate with a global team

- Be comfortable communicating with business executives and technical teams

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

INFINITY LEGAL LLC is seeking to employ a legal executive/paralegal/ secretary with role as an IP Administrator to assist in the growing Intellectual Property work of the firm. Responsibilities include general administrative support in litigation matters, working with a team of professionals in the management of IP matters, including patents, designs and trade marks. Filing patent, design and trade mark applications, reporting and billing, keeping track of deadlines.

Requirements: A Level and above, with experience in general litigation and IP work. Candidates without required educational qualification but who has relevant experience will also be considered. Good interpersonal skills and able to communicate well with all levels. Proficient with MS Office. Careful and meticulous with initiative and good working attitude. Interested applicants please apply with resume and expected salary.

Please email your detailed CV to [email protected]

LEGAL ASSOCIATE

INFINITY LEGAL LLC is a boutique law firm specialising in litigation and PDPA.

We would like to invite newly qualified lawyers or 1-3 years PQE to apply for the position of an associate.

Candidate must be passionate and highly motivate, and able to work independently or as part of a team.

The position offers the successful candidate the opportunity to be exposed to areas include include litigation, commercial and corporate matters, PDPA practice, family law and counsel work.

Please email your detailed CV to [email protected]

LEGAL INTERN

Requirements:

• Currently pursuing or about to enrol for a Law degree
• Organised and meticulous
• Able to work independently

You will be required to provide the following support lawyers:

• Legal research
• Drafting
• Electronic filing of court documents
• Administrative support
• Working hours: Monday- Friday, 9am- 6pm
• Honorarium will be paid

Please email your detailed CV to [email protected]

This position is open for recent law graduates looking to get called to the Singapore Bar. All applicants must be a qualified person under the Legal Profession Act (Chapter 161). Information about the law practice please see: www.infinitylegal.com.sg.

Please email your detailed CV to [email protected]

Job Role

Advisor

Job Title

Security Advisory Lead & User Security

Skill

Cyber Security

Skill Type

Marketable

Experience

10 - 15 Years

Qualification

Others

Location

Singapore

JOB DESCRIPTION:

Role: Security Advisory Lead & User Security

Experience: 10+ Years 

Location: Singapore

Relevant Work Experience: Minimum 5+ years of experience as a Enterprise Cloud Security Architect

Primary Skills

• Experience designing and leading insider threat or internal user security monitoring/UEBA.
• Microsoft suite for security, compliance and insider threat (Entra, Defender, Purview) – Must have some experience using Microsoft, so the person could have good exp on defender and none on other likewise. 
• Limited experience with Microsoft should be fine where the individual has extensive insider threat and internal security monitoring skills with other tools.
• Knowledge of Zero-Trust principles, application virtualization (Various VDI such as AppStream), attacks that could come through CI/CD, Penetration testing etc. 
• M365 Cloud Suite - Understanding of these technologies and how they assist in preventing/mitigating insider threats.
• Regulatory frameworks, high level understanding
• Well versed with Threat modelling framework like STRIDE/PASTA/DREAD.
• Basic user level knowledge of JIRA operations.

• Private Health Insurance
• Pension Plan
• Paid Time Off
• Training & Development
• Performance Bonus
• Work From Home

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Morgan McKinley is hiring an IT Security Architect to join the team for a 12 months contract with possibility to extend or to go permanent!

Job Description:

• Effectively manage and engage with management-level stakeholders, providing clear and concise communication.
• Foster collaboration within the team, ensuring seamless communication and cooperation.
• Work closely with client stakeholders, adhering to established work plans and exceeding client expectations.
• Thrive in a self-directed role, acting as a subject matter expert and providing guidance under minimal supervision.
• Innovatively identify utilities, tools, and processes to enhance project outcomes.
• Demonstrate meticulous organization by structuring and delivering work results against defined client standards, maintaining accurate and up-to-date records.

Job Qualifications

• At Least 8 years relevant experience.
• Hands-on proficiency in Microsoft Defender for Cloud Apps (MDCA), including designing, building, and testing MDCA Docker infrastructure in a production setup.
• Expertise in developing and documenting use cases and operationalizing MDCA processes for business-as-usual operations.
• Proficient in creating and implementing MDCA policies, including Shadow-IT, Threat, DLP, and Cloud protection policies.
• Experience in developing advanced use cases for deep visibility into SaaS apps and tuning alerts with well-documented response actions.
• Strong familiarity with Microsoft integrations, including Azure Active Directory and various Microsoft Defender components (for Office365, for Endpoint, For Identity, MDCA).
• In-depth understanding of Microsoft Information Protection, data loss prevention infrastructures, and techniques.

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Koh Boon Sien
EA Licence No: 11C5502
EA Registration No. R1110345

Morgan McKinley is hiring an IT Security Engineer to join the team for a 12 months contract with possibility to extend or to go permanent!

We are actively seeking a skilled professional specializing in automation script development, Infrastructure as Code (IAC), and Terraform implementation. The ideal candidate should possess advanced knowledge and practical experience in managing Cloud infrastructures, specifically across Amazon Web Services, Azure, and Google Cloud Platform.

Job Qualifications:

• Diploma/Bachelor's degree holder.
• At Least 2-5 years relevant experience in IT Security.
• Proven track record in implementing robust security monitoring using CloudWatch, hands-on expertise in cloud data security solutions like Thales, AWS KMS, and IBM Guardium, and the ability to seamlessly integrate and configure Cloud and Container Security tools (e.g., Aqua Sec, TwistLock, IstioServiceMesh) within large enterprise Cloud and Container environments.
• Candidates must demonstrate hands-on experience with various Cloud and Container technologies such as AWS, Azure, EKS, OpenShift, Kubernetes, Notary, and admission controllers. Proficiency in Cloud and Container Security concepts, including DevSecOps pipeline, Helmchart, etc., is essential.

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Koh Boon Sien
EA Licence No: 11C5502
EA Registration No. R1110345

WongPartnership is a top-tier law firm headquartered in Singapore. We have a proven track record and reputation for providing exceptional client service and achieving results for our domestic and international clients.

The firm’s continued success in Singapore and across the region is underscored by support from its legal and professional support staff. We provide our people with an enriching work environment to include training and career development opportunities.

We are looking for a highly motivated individual to join a high-performing team with the ability to thrive in a fast paced and challenging professional services environment.

We have the following new role opening:

Senior Legal Innovation Technologist (LIT)

Key Role:

The primary responsibilities will be to manage the firm’s legal technology initiatives and its overarching knowledge and innovation strategies. This includes the following:

• Lead and manage strategic projects or initiatives as they arise, from conception to implementation, ensuring they align with strategic goals.
• Cultivate strong relationships with external and internal stakeholders to drive innovation initiatives and ensure seamless project execution.
• Oversee creation and maintenance of project-related documentation and training materials to support the roll out of projects or initiatives.
• Oversee organisation of workshops, trainings, demos, and other technology-related events for the firm.
• Oversee the review of legal technology contracts (including monitoring legal issues and risks, contractual obligations and deadlines, and reporting on costs and fees) and maintenance of records and legal documentation.
• Systematically drive digital and process innovation within the firm, oversee the adoption and usage of legal technology post-deployment, and facilitate change management across all levels within the firm.
• Lead discussions on key areas where the firm can leverage on emerging technologies to improve its service delivery and business processes, presenting innovative ideas, project updates, and performance metrics.
• Function as the bridge between internal stakeholders, the firm, its technology partners and technical experts from within and beyond, and navigate the nuances of adopting and implementing legal technology solutions.

Skills Required:

• LLB is ideal or undergraduate degree with 3-5years of work experience in related sector, ideally in a law firm or technology services company
• Excellent presentation and communication skills, both written and oral
• Strong project and stakeholder management
• Sound commercial acumen
• Ability to work independently with strong sense of initiative
• Excellent people skills to cultivate networks and build alliances with strategic partners
• Resourceful and has the ability to translate business needs into technology needs

Experience Desired:

• Experience in managing legal contracts is highly advantageous
• Prior experience in using legal technology
• Event organisation and training within a professional services environment
• Knowledge of key steps in an IT project process is highly advantageous

We look forward to receiving your applications. Please note that only shortlisted applicants will be notified.

In submitting your application to our firm, you agree and consent to the collection, usage and disclosure of your personal data in accordance with our Personal Data Policy, which is available at www.wongpartnership.com. In addition, you consent to be considered for all suitable positions, including the position you're applying for, within WongPartnership LLP.

Please do not send us your personal information if you do not wish your personal information to be used in this way.

• Responsible for growing and maintaining sales revenue for assigned portfolio
• Learn products at a professional and technical level
• Create strategic relationship with partners and vendors

Requirements:

• Diploma in Information Security or equivalent
• At least 3 years of experience in managing Network Security / Electronic / IT products

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Reg No. R21100996

We are seeking a Business Information Security Manager who will be tasked with facilitating and maintaining comprehensive security measures, risk assessments, and incident response protocols to safeguard AA’s assets and data within the APAC region.

This position will see you become part of a highly specialised cyber security team, who consistently push the boundaries of digital, technology, and automation innovation to drive a smarter, safer, and more sustainable enterprise.

Core Responsibilities (amongst others): 

• Manage and monitor cybersecurity initiatives and controls in the APAC region.
• Collaborate with regional IT and security teams to implement security measures and protocols.
• Conduct security assessments and risk analyses for regional assets and systems
• Facilitate security awareness training for regional employees.
• Respond to and investigate security incidents in the region.
• Stay updated with regional cybersecurity regulations and compliance requirements.

Join the Pioneer Crypto Brand in the Philippines!

Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.

Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

We are seeking an experienced and skilled Senior Security Operations Center (SOC) Analyst to join our dynamic cybersecurity team. The Senior SOC Analyst will play a lead role in monitoring, analyzing, and responding to security incidents, ensuring the integrity and confidentiality of our organization's information assets. The ideal candidate will have a strong background in cybersecurity, incident response and threat intelligence.

Responsibilities:

• Security Monitoring and Incident Response:
• Implement and lead continuous monitoring of security events and alerts using SIEM technologies.
• Conduct in-depth analysis of security incidents, utilizing forensics and log analysis, to determine the root cause and extent of the compromise.
• Lead the development and enhancement of incident response processes, ensuring a swift and effective response to security incidents.
• Conduct tabletop exercises to simulate and evaluate the organization's incident response capabilities.
• Provide guidance and mentorship to the SOC team during incident investigations, fostering a collaborative and knowledge-sharing environment.
• Collaborate with external incident responders and law enforcement agencies when necessary.
• Contribute to security awareness initiatives by providing insights and recommendations based on incident analysis.
• Prepare and deliver comprehensive reports on security incidents to both stakeholders and technical audiences.

Threat Intelligence:

• Lead the collection, analysis, and dissemination of threat intelligence to stay ahead of emerging cybersecurity threats.
• Evaluate the relevance and impact of threat intelligence on current security controls and recommend adjustments as needed.
• Implement and lead the integration of threat intelligence feeds into security monitoring tools to enhance detection capabilities.
• Collaborate with industry peers and organizations to share threat intelligence and best practices.
• Lead the development of threat hunting strategies to proactively identify and mitigate potential threats.

Security Tools Management:

• Lead the management and optimization of security tools, including but not limited to SIEM, IDS/IPS, and endpoint detection and response (EDR) solutions.
• Collaborate with the IT and infrastructure teams to lead the deployment and configuration of security technologies.
• Ensure the tools are aligned with industry best practices and are effectively addressing the organization's security requirements.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field.
• Minimum of 5 years of experience in a Security Operations Center role.
• Relevant certifications such as CISSP, CEH, or GIAC are highly desirable.
• Proficient in using SIEM tools and other security technologies.
• Strong knowledge of networking protocols, operating systems, and security architectures.
• Extensive experience in incident response methodologies, including thorough forensic analysis.
• In-depth understanding of macOS and Linux operating systems and their security controls.
• Demonstrated ability to analyze and respond to security incidents on macOS/Linux/ Cloud Services platforms.
• Familiarity with scripting languages for automating security tasks (e.g., Python, Bash).
• Familiarity with cloud services (E.g AWS/GCP) and security best practices is a must.
• Excellent communication and interpersonal skills.

Additional requirements:

This role may require participation in an on-call rotation and occasional off-hours work to address security incidents or support critical changes.