Overview

• Salary

  5,000 MYR ~ 7,500 MYR

• Industry

  IT/Telecommunications

• Job Description

  ・Monitor and analyze security events, incidents, and alerts from various sources.
  ・Investigate and respond to security incidents in a timely manner.
  ・Conduct real-time threat monitoring and proactive threat hunting.
  ・Manage security information and event management (SIEM) systems.
  ・Coordinate with internal teams and external vendors during incident response efforts.
  ・Follow security incident response plans and playbooks.
  ・Manage security tools, such as intrusion detection/prevention systems (IDS/IPS), firewalls, and SIEM.
  ・Monitor system logs, network traffic, and security devices for potential security breaches.
  ・Assist in the analysis of security incidents and provide recommendations for mitigation.
  ・Stay up to date with the latest security threats, vulnerabilities, and industry trends.
  ・Collaborate with other teams to ensure timely resolution of security incidents.
  ・Participate in the development and implementation of security awareness programs.
  ・Manager below products:
  1. TippingPoint IPS
  2. Bomgar (Monitor the access log & alert)
  3. PAM Beyondtrust
  4. Cisco Ironport (able to read the log for email status, message tracking)
  5. FireEye NX, EX (manual update the signature, hash after received IOC from. E.g BNM Fintip,SOC)
  6. Akamai (Monitor the traffic and alert)
  7. S1 (create a grouping for UAT, DR server based on IP segment)
  8. DLP (manage and tune policy, 1st layer of troubleshoot)
  9. Forward proxy (manage the policy, add remove, edit)
  10. SIEM (onboard process, internal change meeting involvement) on the onboarding process & work and sit in together with Nasir for the internal change request meeting
  11. VPN (manage policy and tune policy)
  12. Basic troubleshoot (ID lockout, VPN cannot access, cannot access website, email not received, traceroute, DNS, Log analysis (e.g, EP auto reboot))
  13. Public domain (A record, CNAME, txt record, SSL cert)
  14. Pentest/VA involvement (PCI DSS, verify the finding from pentester)