About the role
The position is part of our Cyber Fusion Center’s managed support and operations team and is responsible for day-to-day support and operations of assigned cybersecurity solutions and platforms.
Responsibilities:
• Provide support for assigned security platforms, including onsite troubleshooting, root cause analysis, prepare and present incident reports.
• Provide security knowledge in security architecture recommendation and perform the necessary best configuration.
• Provide collaboration efforts in assisting the SOC teams in incident investigation.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.
• Ensure that daily operations and tasks are properly completed and followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Support after-office hours activities and standby requirements as necessary.
• Support shift rotation as necessary.
• Prepare activities report and work documentation.
Candidate requirements:
• Educational background in Information Systems, Cybersecurity or related disciplines.
• 2-5 years of hands-on engineering, support or operations experience in Infrastructure, Network or Security Tools
• Broad understanding of systems, network infrastructure; working experience with databases, LDAP and directory services, application servers, operating systems, and network infrastructure.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Shell, PowerShell, Windows Scripting, Windows console programs, .Net, Yara, Regular expression) will be a plus.
• Certificates such as ITIL Foundations, Microsoft MCSA, CISA, CISSP will be a plus.
• Ability to work independently, under the general guidance.
• Support after office hour and during weekend/public holiday
