Cyber Security Team is responsible for the information security protection and management of a global infrastructure ensuring the availability, integrity and confidentiality of network infrastructure, application system and data.  Your position will work with business units and IT Management to identify risks, develop security measures to mitigate the risks, manage varies security technologies and raise user awareness on security best practice.

Responsibilities:

• Develop, implement and maintain a Big Data Security Analytics platform using ELK Stack, Kafka, Spark etc..
• Security threat hunting through Big Data Security Analytics in correlation of machine data, security threat intelligence feeds and Indicators of Compromise (IoC) to detect and block both known and unknown security threats
• Develop and implement appropriate security measures to safeguard the delivery of IT services.  Research and evaluate new technologies in adapting security protection to the latest threat landscape
• Lead the security incident response process and work closely with respective IT infrastructure support, application developers and users to respond to, contain and remediate IT security related incident to minimize potential business impact
• Vulnerability management in schedule regular system, network and application code vulnerability scanning, classify and prioritize risks, and guide relevant stakeholders to ensure the IT infrastructure is secured against known attack vectors and prevalent threats
• Security patch assessment and management advisory to respective IT platform owners to ensure security patch deployment is comply to defined Service Level Agreements (SLAs)
• Develop and implement appropriate recovery plans for resilience and to restore IT services that were impaired due to a security incident
• Conduct security awareness and training programs to educate users on the risks and the corresponding security best practices
• Assist IT Management to develop IT security architecture, security policies and guidelines
• Candidate with less experience would be consider as Assistant Information Security Analyst

Requirements:

• University graduate in Computer Science, Information Technology, Networking or Security
• Minimum 5 years’ hands on knowledge and working experience in software development and application security.  Familiar with common Web vulnerability and protection, including but not limited on SQL Injection, XSS, CSRF and so on for OWASP TOP 10 vulnerabilities
• Excellent scripting skills in Python, Perl, shell and/or PowerShell
• Good development skills with sound security knowledge is an advantage
• Good command of spoken and written English, Mandarin is an advantage

Please send your application letter with detailed resume and expected salary by clicking "Apply Now" and quote the reference number on the subject

(Data collected will be used for recruitment purpose only.)