1.        Scope of Services

a)      Assist the handling of security incidents in compliance with the Information Security Policy and Standards and Security Incident Management Framework

b)      Analyze potential security incident escalated from SOCC to determine if an incident qualifies as a legitimate security breach and in relation to business impact;

c)       Interface with other teams in the ITD, participate in risk assessment and knowledge sharing with other analysts, develop mitigations and remediation promptly and efficiently;

d)      Provide support to the communication and reporting related to the escalation of incidents to internal and external stakeholders including business units in the SOCC, information security software vendors and consultants, if appropriate;

e)      Perform ongoing analysis and continuous improvement of security incident process, workflow and reporting;

f)       Support the subscription to managed security services, confirm security requirements; workflow study, development, testing, quality management and evaluation; and

g)      Assist the development of security incident management and related technology/solution implementation, if appropriate.

2.        Qualifications and Skills

The candidates proposed by the Contractor shall possess the following qualifications, experience and skills:

a)      Bachelor Degree in IT or relevant discipline.

b)      Certification in incident response such as ITIL incident management, GIAC GCIH, GIAC GCIA, SEI Certificates for computer security incident response team CSIRT, CERT-certified professionals etc. Security products such as Splunk Certified Admin, Check Point, Palo Alto, Imperva certificate etc.

c)       At least 5 years experience in information security management in which at least 3 years hands-on experience in information security incident handling or in the capacity of security analyst.

d)      Experience in Computer Forensics, Malware Analysis and Reverse Engineering is preferred.

e)      Support experience in Security Operation Center is preferred.

f)       Project experience in Managed Security Service is preferred.

g)      Experience in Aviation industry or Critical Infrastructure organization an advantage.The Contractor’s  proposed candidates shall possess at least 4 of the following skills of security products and technologies:

                                 i.            Hands on experiences in log review and analysis;

                               ii.            Solid experience in formation of Security Incident Response Team (SIRT);

                              iii.            Strong technical background in vulnerability and penetrating testing;

                             iv.            Administration experience on Splunk Enterprise and Enterprise Security application;

                               v.            System security, virtualization security and encryption technologies;

                             vi.            Network security products such as Check Point, Palo Alto Next Generation Firewall, secure web gateway, web application firewall, intrusion detection/prevention system;

                            vii.            Endpoint security software such as advanced malware protection;

                          viii.            Cloud-based security solution such as DDoS protection, DNS protection, authentication, identity management.

h)      Good analytical and problem solving skills

i)        Ability to work independently with minimal supervision

j)        Service oriented and positive attitude

k)      Good inter-personal skill to interact with non-technical users and IT technical staff

l)        Fluent Chinese and English communication skills; verbal and written

About Us

您值得信賴的大中華及亞太區社交網絡招聘伙伴 !

Your trusted social media recruitment partner in the Greater China and Asia Pacific regions!

We are a team of vertical human resources veterans offering professional and high quality social media recruitment, staffing services to both our clients and candidates covering the Greater China and Asia Pacific region. We dedicated to establishing a mutual long-term relationship with our clients and the candidates.

We are offering professional and full spectrum human resources (HR) recruitment and staffing services for permanent, contracted and secondment placements.

We are proudly announcing we have solid business partners in Beijing, Shanghai, Taiwan, Singapore, Kuala Lumpur, Mumbai, India, Dubai, UAE, South Korea and we are opening our mainland, P.R.C. office soon!

We are certified Global Professional Human Resources (GPHR) by HR Certification Institute (HRCI).

In order to fulfill our corporate social responsibility (CSR), we are providing additional FREE job postings for the NGOs to get the right people serving our society better. We are the active member of the VMPO (義工運動), the Family-Friendly Employer 2011-2015 (家庭友善僱主) and the Caring Company 2012-2015 (「商界展關懷」).

For the expansion of the recruitment market here in the Greater China and Asia Pacific region, we are actively looking for business partners and recruitment consultants for our clients and candidates. Interested parties please email us at cv@CandidatesDB.com. Come and join us!