We are seeking a highly motivated security analyst to join our Global Security Operations Centre (GSOC). You will be responsible for performing security monitoring and investigation, incident response, threat research and hunting for our global infrastructure, encompassing both cloud-based and enterprise environments.
The ideal candidate will be well-versed in security methodologies and technologies, with a passion for protecting systems and data from cyber threats.
Responsibilities:
- Perform security monitoring on global infrastructures, leveraging variety of analytic tools and techniques to detect incidents from security-relevant datasets.
- Detect incidents through daily monitoring and hunting efforts, work with cross-functional teams for remediation.
- Thoroughly document cybersecurity activities, thinking of ways to improving detection capabilities.
- Help maintain security appaliance rulesets, generate false/true positive statistics on exsiting rules, engage respective engineers to tune false rules.
- Assist the development of incident response plans, playbooks, and SOPs to improve the incident handling processes.
Requirements:
- Minimum 3 years of work experience in cybersecurity operations or engineering field; the candidate should possess a strong background in addressing security threats within both enterprise network settings and cloud-based environments.
- Able to perform deep dive analysis in endpoints incidents, so you need have strong knowledge in Windows, Mac OS and Linux operating systems.
- Deep understanding of network/endpoints defense principles, common attack vectors; have a good understanding in MITRE ATT&CK’s tactics and techniques.
- Well versed in data analysis and be able to locate anomaly through large datasets.
- Good understanding of principles in common security vulnerabilities. Those who submit vulnerabilities with good grades on major security platforms are preferred.
- Have a certain level of programming knowledge, such as: Python, Java, R, Go etc.
- Experience with the following technologies or concepts:
- SIEM or other security/log management platforms
- EDR/XDR/CNAPP/CSPM
- Basic host-based forensics analysis
- NTA, SOAR, WAF, Cloud
