Overview
· Perform Security monitoring to detect, identify and respond to security events timely. Perform event correlation and log reviews to distinguish malicious activities from benign events
· Assist with Cybersecurity incident investigation, triage, containment and follow-ups with various IT teams and service providers
· Coordinate security patch management to ensure timely completion of patches
· Compile security statistics reports for analysis and reporting
· Maintain and fine-tune cybersecurity systems to meet operations requirements and governance.
· Assist in cybersecurity projects and conduct cybersecurity compliance activities
Key Skills
· Good knowledge of IT security controls and involved in operations of complex Enterprise ICT infrastructure and Networks.
· Good knowledge of WAF (Web App Firewall), IDS/IPS, SIEM (Sec Info & Event Mgt) and understanding of Networking and Architecture fundamentals e.g. IP addressing, network segmenting, DNS and AD.
· Knowledge in usage of network/security tools to perform analysis of cybersecurity events (e.g. Qualys, Wireshark, Splunk).
Experience in the following areas will be an added advantage:
· At least 4 years of working experience in a SOC as a security analyst
· At least 4 years of hands-on practical experience in configuring, cybersecurity detection/prevention systems.
· Any Cybersecurity related certifications
