Total 2 security job vacancies in Legal / Public / Security category in Singapore

Job Responsibilities

Insider Threat Analyst is an operational role within the Bank’s Group Security Operations Center. The incumbent will be responsible for the continuous monitoring, analyzing, and investigating of insider threats and data leakage incidents. Must have good analytical and investigative skills to recognize and detect anomalous behavior.

Key Responsibilities

· To participate in the day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

· To work with internal teams to validate alerts within stipulated SLA

· To perform analysis on usage behavior trends to discover potentially fraudulent activities

· To perform continuous review and improvement on current monitoring operations to enhance effectiveness of monitoring

· Work with external partners to resolve issues or implement improvement to monitoring

· To gain good understanding of internal business applications to be able to analyze, recognize and identify potentially anomalous activities

· Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

· Carry out DLP System Ruleset change requests in accordance to change management procedures

· Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

· Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

· To work with internal cyber security teams to ensure investigations are comprehensive and complete to track and follow up on all escalated incidents to closure

Job Requirements

Education

· Diploma/Degree in Business Information Technology/Business Analytics from recognized academic institutions

Technical Skills and Experience

· Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

· Excellent analytical and investigative skills

· Prior experience with analytical platforms

· Experienced with working with machine learning enabled platforms would be advantageous

· Experience with administration and operation of DLP Systems preferred

· Experience in development and fine tuning of DLP Ruleset preferred

· Knowledge of Cyber Security would be advantageous

· Relevant working experience in SOC environment and related processes will be added advantages

Soft Skills

· Good communication skills

· Strong analytical and problem-solving skills

· Ability to adhere to work processes and procedures

Other Requirements

· Ability to work independently

· Ability to work well with the rest of the team and department

Job Objectives

This Security Engineer role will support the day-to-day operations and the maintenance of the organization’s security suite of products with key objectives in maintenance, development, and enhancement of the detection, prevention, response, and monitoring capabilities of GSOC.

Key Responsibilities

Key Responsibilities:

· Manage and support the organization’s Cyber security deployments and infrastructure.

· Support a wide array of security solutions and infrastructure deployed within the organization.

· Propose, develop, test, and manage application, system and infrastructure changes, upgrades, troubleshooting, patch, and improvements.

· Drive upgrades and migration to ensure solutions and or related platform are maintained in operational conditions with proper documentation and RCA.

· Suggest new process improvements to optimize the current workflow.

· Manage and coordinate change process engagement with regards to current security solutions.

· Support for all audit requests and provide timely resolution for the findings

Others:

· Work within established practices and handling guidelines to triage and support the maintenance of the organization’s security solutions.

· Work with internal and external engineers in technical discussions, troubleshooting sessions and forums.

· Able to respond to any requests, provide clear advice and recommendations.

· Able to work independently with minimal guidance.

· Able to establish effective communication across different stakeholders.

· Able to prioritize and manage tasks based on a given set of deliverables and timeline.

Key Requirements

Education

· ITC/Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution

· Professional or vendor-specific security solutions related qualification (e.g., Microsoft, AWS, GCP, Palo Alto Networks, McAfee, Splunk, Cisco, etc…) will be favorable although not mandatory

Technical Skills

· Overall 5+ years of working experience

· 3+ years of relevant security experience in similar capacity or candidates without relevant experience are welcome to apply. Training will be provided for selected candidates without relevant experience.

· Good knowledge in network and endpoint security (i.e. Firewalls, WAF, IDS, IPS, VPN, HIPS, ADS and TCP/IP protocols)

· Hands-on experience in Unix/Linux and Windows system administration

· Hands-on experience in EDR, SIEM and Anti-virus security solutions

· Good understanding of network protocols and troubleshooting

· Minimal 2 – 3 years of relevant working experience in a SOC environment and understands related processes will be an added advantage

Soft Skills

· Good written and verbal communication skills

· Process and procedure adherence

· Strong analytical and problem solving skill

· Effective time management and organizational skills.

Other Requirements

· Willingness to perform on-call duties.