Total 29,777 Security Analyst job vacancies in The United States of America

Job Highlight :

• Location: Taman Merdeka, Angkasa Nuri
• Working Hours: 8:00 am – 5:00 pm
• Salary Range: RM 1,500 – RM 3,000
• Learn new skills and work on bigger projects
• Earn additional commission income
• More opportunities to communicate with customers

 

Join the 'BGT Technician Team'!

We are a professional company specializing in security systems and electrical engineering. We value attitude more than education level. We welcome hardworking individuals who want to enhance their skills.

 

Requirements:

• 1 year or more Relevant experience in Alarm/CCTV/Door Access/Barrier Gate
• Driving license, GDL license preferred
• We don't focus on your education level, but you must have:
• Teamwork skills
• Responsible and good attitude
• Communication skills, meticulous, and humble

Perks & Benefits

• Basic Salary from RM1,500 - RM3,000
• Commission and bonus
• Allowance (travel stipends, transportation, etc.)

要求：

· 電腦科學或資訊科技學位或相關經驗。

· MS Visual Studio 和.Net 開發的實用知識和經驗。

· 至少2年以上相關工作經驗。

· 較強的溝通及人際溝通能力。

· 創造性和邏輯思維。

職責：

a) 系統開發和支援以下領域：-
- 內部網路
- 公司網站
- 訪客管理系統（VMS）
- 電子訓練系統
- HCL Notes 應用程式和工作流程
b) HCL Domino 伺服器和 MailMarshal 的系統管理員。
c) 設計和開發應用程式。
d) 系統測試並識別和修正程式錯誤。
e) 草稿螢幕和報告版面；準備並執行測試程序。
g) 負責資料的完整性和安全性。
h) 對最終使用者進行應用訓練。

i) 上級不時指示的任何其他職責。

津貼和福利

• 佣金和獎金
• 彈性的工作時間
• 休閒著裝要求
• 定期團隊活動
• 醫療保險
• 事假
• 開放文化
• 個人發展機會

安全營運中心 (SOC) 分析師 - 實習

• 以 24x7 模式對安全性日誌事件進行主動監控。 （Splunk、SIEM、TrendMicro（EDR/IPS/等）及其他第 3 方軟體）
• 將經過驗證和確認的事件回報給指定的事件回應團隊。
• 通知客戶有關事件和所需的緩解工作。
• 微調 SIEM 規則，以減少誤報並消除誤報/對先前未知的硬體和軟體漏洞的分析和回應。
• 收集全球威脅情報和內部威脅，然後根據分析和建議採取行動。
• 根據新趨勢、威脅、新興活動、惡意攻擊、駭客組織提供建議和威脅情報。
• 主動研究和監控安全訊息，以識別可能影響組織的潛在威脅。
• 制定並向組織分發有關所需糾正措施的資訊和警報。
• 協助 1 級或 2 級進行每月和臨時報告 - 負責完成統計和狀態報告，並提供快速、及時的回應。
• 在具有高正常運作時間要求的 24 x 7 環境營運環境中為技術團隊提供支援。

網路營運中心 (NOC) 分析師 - 實習

• 主動監控和排除故障：
  - 系統操作
  - 系統問題
  - 網路中斷
  - 軟體問題
• 響應網路工具的警報和警報
• 透過電話/電子郵件/WhatsApp 回覆客戶和內部員工提交的事件
• 建立並報告活動和事件的票證
• 對所有事件、中斷和性能警報提供及時響應 - ISP
• 通知客戶和第三方服務提供者問題、中斷和補救狀態
• 根據客戶業務要求、組織政策和營運影響來識別、確定事件並確定事件的優先級
• 確定事件的嚴重性並對其進行分類，並根據具體情況立即採取措施恢復服務或酌情升級
• 執行基本系統測試和操作任務 - 1 級和 1.5 級
• 執行特定程序以主動檢查應用程式/網路設備的健康狀況和福利
• 收集事件歷史記錄並保存以供以後使用
• 根據客戶/ISP 請求執行並產生分析報告
• 為與客戶舉行的營運審查會議產生每月報告
• 在具有高正常運作時間要求的 24 x 7 環境營運環境中為技術團隊提供支援。
• 與內部和外部技術和服務團隊合作創建和/或更新知識庫文章

津貼和福利

• 附近的公共交通
• 中心位置
• 免費小吃/歡樂時光
• 定期團隊活動
• 開放文化
• 個人發展機會

角色和職責：

• 與技術專案團隊合作，實施符合客戶要求、專案範圍和時間表的技術解決方案。
• 提供專案範圍的資訊安全解決方案、實務和策略的部署、文件和支援。
• 作為安全解決方案技術支援的第一個聯絡人。
• 充當技術主題來執行技術問題故障排除、根本原因分析、問題解決或升級。
• 有助於建構組織安全解決方案技術知識和網路安全知識。
• 需要時前往客戶現場實施解決方案或排除系統問題。

資格：

• 擁有IT、資訊安全或相關領域的學位或更高學位
• 熟悉網路安全框架或監管要求，例如 NIST CSF、ISO27001、Mitre ATT&CK 框架等。
• 具有良好的英語和馬來語口頭和書面溝通能力。
• 持續學習的態度，培養網路安全技能和學習新技術/安全解決方案的興趣。
• 組織能力強，自我激勵，有良好的時間管理能力，能夠在最少的監督下工作。

津貼和福利

• 津貼（旅費、交通費等）
• 附近的公共交通
• 中心位置
• 彈性的工作時間
• 開放文化
• 個人發展機會

角色和職責：

• 為客戶實施資訊/IT 安全承諾
• 提供資訊安全專案的交付專業知識。這可能涉及技術或流程方面（例如資訊安全管理系統 (ISMS) 或 ISO 27001、業務連續性管理/IT 災難復原管理或 ISO 22301/ISO 27301、資料遺失防護 (DLP)、身分和存取管理 (IAM) ）、雲端安全、網路安全設計、工具和解決方案、安全策略和安全專案管理）。
• 在識別、評估、緩解和管理整個資訊安全領域的資訊安全風險和問題方面擁有豐富的經驗。
• 將資訊安全的最佳實踐確定為技術上可行且用戶友好的可交付成果，並與客戶及其資訊安全人員進行溝通。
• 了解關鍵客戶問題並協助根據需求制定提案。
• 建立自己的網路安全知識和能力，並獲得對至少一個行業的協調和理解。

資格：

• 任何學科的學位和/或來自認可機構的 MBA 學位； IT學位優先。
• 相關認證優先，例如 CISSP、CCSP、SSCP、GSLC、GISP、CISM、CRISC、CGEIT、CISA、CCSK、CEH、CCNA、ISO 27001 首席審核員等。
• 對 IT 有良好的整體了解。
• 對資訊安全和監管標準/框架有深入的了解；例如 ISO/IEC 27001、COBIT、ITIL、PCI-DSS、NIST 網路安全框架、GPIS1 等。
• 至少在以下領域之一具有良好的技術知識：

- 資料安全、隱私、分類和資料遺失保護。

- IT 災難復原規劃和業務連續性管理。

- 網路安全架構、管理和控制，包括防火牆、路由器、IPS等。

- 威脅情報和進階持續性威脅 (APT)。

- 安全戰略和路線圖。

- 安全政策、標準和框架。

- 資訊安全管理系統。

- 日誌管理和 SIEM。

- 身分和存取管理解決方案和實施。

- 雲端安全。

• 熟悉安全標準和監管框架並擁有相關經驗（例如 ISO/IEC 27001、ITIL、GPIS1、PCI-DSS 等）

津貼和福利

• 津貼（旅費、交通費等）
• 附近的公共交通
• 中心位置
• 彈性的工作時間
• 事假
• 開放文化
• 個人發展機會

我們目前正在尋找一位經驗豐富的系統分析師加入我們的香港專案團隊，負責新加坡和馬來西亞的銀行客戶專案。

在此職位上，您將被期望：

• 與銀行客戶聯絡並收集用戶需求
• 將使用者需求轉化為技術規格文件並確定操作可行性。
• 將開發工作分配給深圳的開發商
• 執行程式碼審查
• 制定軟體驗證計劃和品質保證程序。
• 交付前執行端到端測試。

要求：

• 至少擁有電腦科學/軟體工程專業證書/高級文憑/學士學位或同等資格。
• 至少 5 年軟體工程經驗。銀行 IT 解決方案領域的工作經驗或外匯知識將是一個額外的優勢。
• 對軟體架構和微服務有基本的了解。
• 程式語言： Java，具有基於J2EE 的分散式應用程式的經驗（包括多執行緒、JDBC/JPA、JMS、JAX-WS、REST 服務、SOAP Web 服務、Java 訊息服務、Spring、JVM 和垃圾收集器調優等）。
• 資料庫： DB2、Oracle、MySQL
• 語言要求：必須精通普通話，因為該職位需要每天與深圳同事溝通。

津貼和福利

• 附近的公共交通
• 中心位置
• 彈性的工作時間
• 休閒著裝要求
• 定期團隊活動
• 開放文化

工作職責

• 調查分析詐欺、釣魚、帳戶被竊等各類風險行為，並做出正確處理，減少用戶損失，提高用戶滿意度。
• 持續監控使用者行為，對發現的風控案例撰寫調查報告並分析風險資料。
• 透過風險管理和即時監控，持續識別風險案例，維護案例資料庫並總結行為特徵。
• 及時發現數據異常並同步相關部門，避免損失。
• 有反詐欺/反洗錢相關職位經驗者優先，有數據分析經驗者優先。
  
  工作要求
• 本科及以上學歷。
• 1年以上風險調查分析經驗。
• 中文國語口語和書寫流利
• 有支付機構、交易所、銀行及相關產業反詐欺、反洗錢、交易監控、案件處理職能經驗者優先。
• 較強的語言溝通能力及良好的書面表達能力
• 善於團隊合作與跨部門協作
• 具備較強的邏輯思考能力和資料分析能力，對資料進行拆解分析。
• 需要夜班。

津貼和福利

• 員工股權
• 佣金和獎金
• 津貼（旅費、交通費等）
• 附近的公共交通
• 中心位置
• 休閒著裝要求
• 免費小吃/歡樂時光
• 定期團隊活動
• 醫療保險
• 事假
• 個人發展機會

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

23rd April, 2024
CyberCX is Australias leading independent cyber security consultancy organisation. To support our rapid growth, we are looking motivated and passionate Security Analysts to work in our Brisbane office. In this role, youll work with your team to deliver great client outcomes and grow your career rapidly as a cyber security professional.  Were looking for candidates that have a sound and relevant technical background. You dont need extensive experience in security, but a passion to learn, a great attitude, and a keen interest in security is essential. You will receive formal and on the job training that will help you grow your career in the cyber security field.   Key responsibilities:    

Technical analysis of alerts and data from security products including (but not limited to) SIEMs, Intrusion detection and prevention systems, end point security solutions, web proxies and network security devices, and vulnerability scanning and management systems 


... Click here to view more detail / apply for Security Analyst

NCS is the leading technology services firm that operates across the Asia Pacific region in over 20 countries, providing consulting, digital services, technology solutions, and more.

We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 12,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

We’re searching for a Security Analyst (Threat Hunter) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, embodying excellence, and bringing people and technology together like never before, we would love to have a conversation with you!

What we seek to accomplish together!

• Proactively 'hunt' for potential malicious activity and incidents across the environment using advanced threat network and host-based tools adopting Mitre Attack Framework.
• Perform hunting for malicious activity across the network, endpoint, and Critical Assets.
• Create hunting hypothesis and perform IOCs & TTPs based threat hunting and share reports with the management weekly on the findings, misconfiguration, use case development and provide suggestions for counter measurement.
• Expertise in hunting, managing, and writing detections using logs from Endpoint Detect and Response solutions like Carbon Black EDR, CrowdStrike EDR & Cortex XDR etc.
• Research on different TTP's for ATP Threat groups which are used by attackers during the sophisticated Cyber-attacks.
• Collaborates with technical and threat intelligence team to provide indications and warnings and contributes to predictive analysis of malicious activity.
• Perform cyber security threat hunting & detection activities with specific focus on countermeasure Tactics, Techniques and Procedures (TTPs)
• Contribute to the tuning and development of security information and event monitoring systems (SIEM) use cases and other security control configurations to enhance threat detection capabilities.
• Familiarity with threat modelling, development of attack plans, performing manual & automated Ethical Hacking, & develop proof of concept exploits.
• Evaluates new security technologies and products and performs engineer-level work and analysis to determine if solutions should be pursued.

The Ideal Candidate should ...

• Contribute to securing the organization by enhancing technologies and processes.
• Evaluate security controls against standards, policies, and best practices.
• Improve technology management and perform regular security assessments.
• Build relationships with project and operational teams as needed.
• Exhibit strong technical skills and the capacity to learn new technologies.
• Understand security principles and key technologies, with a focus on sustainable solutions and risk mitigation.
• Analyze sophisticated threats, leveraging knowledge of the threat landscape and cybersecurity fundamentals.
• Utilize forensic analysis and incident response tools to identify and assess threats.
• Have experience in threat hunting, incident response, and familiarity with programming languages like Python and SQL, as well as reverse engineering skills.
• Communicate effectively with diverse groups, reporting key metrics and statuses promptly.
• Possess 2 years and more of highly relevant threat hunting experience.
• Have professional certifications such as GIAC Certified Incident Handler Certification (GCIH) or equivalent

About NCS Group

We aspire to create the extraordinary and impact millions of people every day.

We believe in building a talent-led delivery model to enable our best people to lead, and to support them with the right structure, processes, and tools to ensure that our clients are delivered top quality services.

We want to invest in you!

Great work is never done alone, which is why we believe in fostering a collaborative work environment where people with different expertise and talent can come together.

We provide opportunities for our people to grow within our organization with clearly defined career tracks and specializations, ensuring that our talent and people can continuously deliver new value for our clients.

We’re here to make the extraordinary happen.

Find out more at ncs.co and our LinkedIn career site.

We handle all profiles with the highest level of confidentiality

A relevant degree within IT/IM or a related field
Professional certifications in Information security from industry standard frameworks (e.g. ISACA, BCS, CIPP, ITIL, Crest, ISC2, COPTIA)
Advanced knowledge of OT systems (ICS, SCADA), network architecture, network protocols, security best practices and response processes.
Familiarity with the ISA95/98 and Purdue models for industrial IT and the typical operating practices in that engineering environment
Understanding of operational risk posed by cyber physical environments
Working knowledge of ISA95, IEC 62443 and NIST SP 800-82r3.
Familiarity with firewalls, intrusion detection/prevention systems (IDS/IPS), and network monitoring tools
Working knowledge of automated malware analysis programs
Proficiency in securing various operating systems, including Windows, Linux, and macOS
Working knowledge of SIEM and other volumetric data systems
Knowledge of industry standard security products, including end point agents, remote capturing tools and other security related products
Ability to obtain and act on vulnerability information and conduct security risk assessments,
... Click here to view more detail / apply for OT Security Operations Analyst

Job Description:

•Support and maintain security tools including Endpoint Security, SIEM, IPS/IDS, Email Security, NGFW, DLP, Security Assessment.

•Administration of information security systems and devices, review audit logs and security alerts.

• Perform activities related to IT security, including installation, configuration changes, and updates/patches.

• To investigate, resolve or mitigate security incidents in a timely manner.

• To conduct internal vulnerability assessments and remediate identified vulnerabilities.

• To work with external vendor for penetration testing and remediate findings.

• To work with external MDR/SOC providers to detect and follow up on cyber security incidents.

• To work closely with DevOps and Developers to assess, identify and mitigate security vulnerabilities, and integrate security best practices into the software development lifecycle.

• Generation of metrics, reports, relevant information to support compliance status.

• Point of contact for ISO27001, liaise with auditors, perform self-assessment to ensure compliance with company policy and regulatory requirements.

• Develop and maintain information security awareness program.

• Maintain documentation of security system configurations, procedures, and troubleshooting steps.

Job Specifications :

• Diploma or Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field (or equivalent work experience).

• Relevant experience with security related solutions (Endpoint Security, VPN, Firewall, etc.) and handling of cyber security incidents and associated incident response tools.

• Strong knowledge of operating systems (e.g., Windows, Linux), network protocols, and server hardware.

• Understanding of security principles and best practices, including patch management and vulnerability assessment.

• Strong knowledge of malware families and network attack vectors.

• Good understanding of TCP/IP and internetworking technology including packet analysis, routing, and network security defenses.

• Minimum 2 years of related experience in cyber security or computer network defense role

• Strong understanding of MITRE ATT&CK Framework, NIST Cybersecurity Framework (CSF) and Kill Chain Methodology

• Relevant security-related certifications like CISSP, GCIH, GCIA, GCED, GCFA, CySA+ is a plus

• Good communication skills, with the ability to collaborate effectively with technical stakeholders.

• Strong attention to detail.

ABOUT US
Change your lifestyle and live and work in a vibrant community and great coastal environment.
Ballina Shire Council is situated on the Far North Coast of New South Wales, 20 minutes from Byron Bay and one hour from the Gold Coast. The shire is a popular tourism destination with pristine beaches, rainforest retreats and hinterland hideaways.
ABOUT THE ROLE
Position
We are seeking an appropriately experienced and passionate cyber security professional to join Council's dedicated Information Services team. Reporting to Council?s Coordinator Information Technology, this position will support the team in ongoing system evaluation, selection, development, implementation and maintenance to protect Council?s information assets.
Key focus areas of the position will be to maintain staff alertness around cyber risks and mitigation strategies, and to monitor processes and systems to ensure adherence and implement improvements to information security policies, standards


... Click here to view more detail / apply for Cyber Security Analyst

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

Responsibilities:

• Handling security incidents as reported by individuals and automated systems on laptops and mobile devices.

• Handling support of PC and Mac based users with security related problems.

• Monitoring compliance with IT Security policy and applicable law.

• Coordinating investigations and reporting of security incidents related to Network, Systems and applications.

• Coordinate and execute IT security projects for Arista at multiple locations.

• Engage in security research in keeping abreast of the latest security issues for Cloud enabled enterprises (including SAAS and IAAS).

• Monitoring system compliance with the IT framework for controls and levels of access; recommending improvements.

• Maintains access for business by providing information, resources, and technical support.

• Collaborate with other groups inside Arista to manage security vulnerabilities and help manage risks.

• Conduct and collaborate on laptop and server forensics as well as Cloud / Service Provider forensics with the global security team.

• Administer security-dedicated systems (Software, Firewall management, EDR, NDR, log collection, reporting , analytics, Cloud Security consoles) as appropriate.

• Perform other related duties as assigned. 

Qualifications: 

• BA or BSc. in Computer Science, Management Information Systems, Information Assurance or related field.

• Advanced degree desirable.

• Must have five+ years of progressive experience in computing and information security.

• Must have experience with networking technology, protocols.

• Expert knowledge is desired of laptop operating systems (MacOS, Windows and Linux).

• Previous experience working in a multinational corporate working environment is desirable.

• Proven experience in Cloud computing and SAAS platform security, including email security.

• Proven experience with DLP solutions is a plus.

• CISSP, GIAC or other security certifications desired. 

• Knowledge of information security standards (e.g., ISO 17799/27002, etc.), rules and regulations related to information security and data confidentiality (e.g., FERPA, HIPAA, etc.) and desktop, server, application, database, network security principles for risk identification and analysis. 

• This position requires some weekend and evening assignments as well as availability during off-hours for participation in scheduled and unscheduled activities.