Total 2 Junior Executive Material Analyst job vacancies in Petaling Jaya

JOB RESPONSIBILITIES:

• Perform proactive monitoring for security log events for customers in 24x7 mode. (Splunk, SIEM, TrendMicro (EDR/IPS/etc) and others 3rd Party software).
• Escalate validated and confirmed incidents to designated incident response team.
• Notify Client of incident and required mitigation works.
• Fine-tune SIEM rules to reduce false positive and remove false negatives / analysis and response to previously unknown hardware and software vulnerabilities.
• Collect global threat intelligence and internal threats then inject actions based on analysis and recommendation.
• Provide advisories and threat intelligence based on new trends, threats, emerging campaigns, malicious attacks, hacker group.
• Proactively research and monitor security information to identify potential threats that may impact the organisation.
• Develop and distribute information and alerts on required corrective actions to the organisation.
• Learn new attack patterns, actively participate in security forums.
• Understand the structure and the meaning of logs from different log sources such as FW, IDS, Windows DC, Cisco appliances, AV and antimalware software, email security etc.
• Perform threat intel research.
• Ability to run and understand Sandbox Static Analysis.
• Track and update incidents and requests based on client’s updates and analysis results.
• Investigating, documenting, and reporting on any information security (InfoSec) issues as well as emerging trends.
• Assist the Level 2 with monthly and ad-hoc reporting - responsible for completing statistical and status reports, as well as providing fast and timely responses.
• Perform as an escalation point for all incidents relating to potential security.
• This position required to work on shift by rotation.

Perks & Benefits

• Regular team activities
• Company trips
• Medical insurance
• Free snacks / Happy hours
• Nearby public transport
• Personal leave
• Open culture
• Personal development opportunities
• Misc allowances

工作職責：

• 以 24x7 模式對客戶的安全性日誌事件進行主動監控。 （Splunk、SIEM、TrendMicro（EDR/IPS/等）及其他第 3 方軟體）。
• 將經過驗證和確認的事件回報給指定的事件回應團隊。
• 通知客戶有關事件和所需的緩解工作。
• 微調 SIEM 規則，以減少誤報並消除誤報/對先前未知的硬體和軟體漏洞的分析和回應。
• 收集全球威脅情報和內部威脅，然後根據分析和建議採取行動。
• 根據新趨勢、威脅、新興活動、惡意攻擊、駭客組織提供建議和威脅情報。
• 主動研究和監控安全訊息，以識別可能影響組織的潛在威脅。
• 制定並向組織分發有關所需糾正措施的資訊和警報。
• 學習新的攻擊模式，積極參與安全論壇。
• 了解來自不同日誌來源（例如 FW、IDS、Windows DC、思科裝置、AV 和反惡意軟體、電子郵件安全性等）的日誌的結構和意義。
• 進行威脅情報研究。
• 能夠運作和理解沙箱靜態分析。
• 根據客戶的更新和分析結果追蹤和更新事件和請求。
• 調查、記錄和報告任何資訊安全 (InfoSec) 問題以及新興趨勢。
• 協助 2 級進行每月和臨時報告 - 負責完成統計和狀態報告，並提供快速、及時的回應。
• 作為與潛在安全相關的所有事件的升級點。
• 該職位要求實施輪班制。

津貼和福利

• 定期團隊活動
• 公司旅行
• 醫療保險
• 免費小吃/歡樂時光
• 附近的公共交通
• 事假
• 開放文化
• 個人發展機會
• 雜項津貼