Cyber Security Analyst

Responsibilities:

• Detect, Analyze and classify cyber security incidents & threats via different logs sources across multiple security solutions
• Identify source, target of attack and block access to existing target, applications and infrastructure assets etc
• Provide security hardening advice to different local IT Teams across the globe, for workstation, servers and Network to secure their environment
• Commit oneself to the teams’ target in terms of managing the backlogs/joining the shift rotations as well as conducting internal sharings whenever needed and appropriate
• Ensure a close coordination with various IT Sec internal teams as well as InfoSec teams for projects/initiatives that will improve the security posture for the whole group
• Participate in CyberSecurity Attack Crisis War Room and support our L3 analyst for follow up remediations needed
• Assist with the implementation of security systems including review of logs and reports from various tools such as firewall, IDS/IPS, NGAV, SIEM, EDR and event log monitoring.
• Manage and run cyber security solutions & tools
• Have a permanent cyber security watch, for malware, web-based attacks, injections attacks, phishing...
• Follow what is mentioned in the internal SOPs closely and provide insights to optimize the SOP accordingly whenever possible
• Work in a Global Cyber Security Team

Qualifications:

• With at least 2 years of experience managing Linux system, relevant experience with IT Security incident management will be a plus.
• Strong capabilities to analyze complex security attacks and perform efficient incident triage.
• Solid knowledge on Windows and security hardening
• Solid knowledge on Linux systems including but not limited to system configuration, maintenance, administration; capable of various command lines for trouble shooting when needed
• Solid knowledge on network security.
• IT Security / Cybersecurity certifications a plus.
• Capabilities to run and operate solutions like Palo Alto firewalls, cortex XDR, XSOAR, Splunk, AD audit+, Microsoft Defender, Microsoft 365.
• Knowledge of the MITRE ATT&CK framework and its related tactics, techniques and procedures (TTPs).
• Good knowledge of other major security solutions on the market is also a plus
• Candidate should be willing to work in a shifting schedule

Why Work with Us?

• Benefit from the lesser tax deduction under consultancy setup
• Work conveniently with a hybrid work setup (two days remote setup per week)