Senior Security Analyst

Job Overview

Establish vulnerability management process and conduct security incident mitigations; perform regular security assessments; and provide mitigative actions to the respective system owner

Responsibilities

• Work with Security Operation Centre in response to security events detected
• Investigate, analyze, and provide professional advice on information security incident
• Conduct Internal network audits, security reviews, scanning, and penetration test
• Lead and perform system and network configuration hardening reviews to ensure the Cloud, on-prem system and network security
• Participate in cyber threat intelligence analysis when required
• Review and make recommendations on using Public Cloud Platforms (SaaS), Open-Source Software (OSS) and freeware
• Follow up on the identified vulnerabilities until mitigated and provide the status report to all stakeholders
• Assist the external security consultant to conduct ad-hoc or regular security assessments on application development project and infrastructure project
• Assist Manager to establish quality standards, policies and procedures and guidelines on information security services
• Assist Manager to Conduct security awareness training or workshop

Requirements

• Bachelor degree in Information System, information security, computer science, business, accounting, assurance, auditing or closely related field strongly preferred
• Minimum of 2 years' experience in information security, vendor security assessments
• Knowledge of SIEM, EDR and threat intelligence, experience in security incident analysis and handling
• Security industry certification (CISSP, OSWA, OSCP, CEH or equivalent) preferred
• Good analytical, interpersonal and communication skills
• Self-motivated, strong sense of responsibilities, organized and detail-minded