Total 1,119 operations engineer job vacancies in Legal / Public / Security category in The United States of America

Seize the opportunity to enhance cybersecurity, utilizing your skills in threat analysis and incident response to protect vital data and systems.

As a Security Operations Senior Associate in Acquisition Cybersecurity Team, you will play an important role in safeguarding the organization's digital assets and infrastructure by proactively detecting, assessing, and responding to threats, vulnerabilities, and security incidents. Drawing on your knowledge of security principles, practices, and theories, you will collaborate with cross-functional teams to develop a coordinated approach to security and educate employees on best practices, policies, and procedures. Your work will have a direct impact on departmental outcomes, as you plan and ensure progress, identify gaps in information, and conduct analyses to solve complex cybersecurity problems. By utilizing your advanced analytical, technical, and problem-solving skills, you will contribute to the continuous improvement of our cybersecurity posture and help maintain the integrity, confidentiality, and availability of sensitive data and systems.

Job responsibilities

• Monitor and analyze security infrastructure, contributing to detection and response to threats, vulnerabilities, and incidents to ensure the integrity, confidentiality, and availability of sensitive data and systems

• Conduct in-depth security investigations, analyzing logs, network traffic, and other data sources to identify root causes, assess impact, and gather evidence for response and mitigation actions

• Develop and maintain threat detection and response playbooks, incorporating industry best practices, regulatory requirements, and lessons learned from previous incidents

• Collaborate with cross-functional teams to develop and implement coordinated security strategies, policies, and procedures, while educating employees on best practices

• Review intelligence sources and provide actionable information regarding threats and vulnerabilities to JPMC acquisitions

• Identify gaps in security controls and articulate the corresponding risk to senior leaders and other stakeholders

Required qualifications, capabilities, and skills

• Bachelor’s degree or equivalent in computer science or related fields

• 3+ years of experience in cybersecurity operations, including threat detection, incident response, and vulnerability management

• Demonstrated experience in Windows and/or Linux operating systems (OS), network traffic analysis, log analysis, vulnerability analysis, exploitation, and security investigation techniques to identify and respond to security incidents

• Possesses critical thinking skills and able to take a structured, analytical approach to investigating alerts and indicators of compromise (IOCs)

• Understanding how adversaries compromise networks including phishing, port-scanning, web application, distributed denial-of-service (DDoS) attacks, and lateral movement

• Ability to extract IOCs, report findings, and implement mitigatory measures

• Able to adapt to new and unfamiliar environments

• Advanced knowledge of security protocols, cryptography, authentication, authorization, and security architecture design principles

• Proficiency in scripting to automate tasks, implement controls, and manipulate data

• Possesses good communication skills and able to articulate cybersecurity related risks and findings to a wide audience

• Willing to work a scheduled shift pattern that includes one day of the weekend every two weeks or as required. The shift pattern will also require analysts to work up to ten hours a day for four days a week or eight hours a day for five days a week

Preferred qualifications, capabilities, and skills

• Knowledge of a range of cybersecurity tools.

• Experience with Extended Detection & Response (XDR) tools.

• Experience with crafting regular expressions (regex).

• Experience reviewing vulnerabilities and the effectiveness of the mitigatory measures.

• A basic understanding of cloud architecture and an understanding of how attackers leverage these platforms.

• Knowledge of scripting languages like Python, PowerShell, and JavaScript and understanding how scripting languages are used in a cybersecurity context.

• The ability to manage fluctuating workloads and conflicting priorities.

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=36b6d2ef54c6adf3926a98221acbd32f

• Reputable & Stable Firm
• Leadership Role

About Our Client

Our client is an established firm, looking to on-board a Director of Security Operations. This position entails overseeing a team of cybersecurity experts.

Job Description

As the Director of Cybersecurity Operations, your responsibilities include:

• Leading daily operations of the Security Operations Center (SOC), ensuring prompt detection and response to security events and incidents
• Leading a security team and providing mentorship
• Building good relationships with external vendors, service providers, and collaborators to guarantee prompt provision of security services
• Budgeting and resource management

The Successful Applicant

As a Successful Candidate, you will have the following:

• Bachelor's Degree in Computer Science or a relevant field
• Minimum of 10 years of experience in cybersecurity positions, with a focus on managing SOC or security operations
• Previous experience in team leadership
• Proficiency in working with enterprise-level solutions and projects
• Certification in CISSP/CISM or an equivalent qualification

What's on Offer

• Impactful Projects: Involvement in large-scale initiatives
• Professional Development: Training programs for skill enhancement

Contact

Isha Hussain (Lic No: R2197976/ EA no:18S9099)

Quote job ref

JN-042024-6402616

Phone number

+65 6416 9850

Michael Page International Pte Ltd | Registration No. 199804751N

A relevant degree within IT/IM or a related field
Professional certifications in Information security from industry standard frameworks (e.g. ISACA, BCS, CIPP, ITIL, Crest, ISC2, COPTIA)
Advanced knowledge of OT systems (ICS, SCADA), network architecture, network protocols, security best practices and response processes.
Familiarity with the ISA95/98 and Purdue models for industrial IT and the typical operating practices in that engineering environment
Understanding of operational risk posed by cyber physical environments
Working knowledge of ISA95, IEC 62443 and NIST SP 800-82r3.
Familiarity with firewalls, intrusion detection/prevention systems (IDS/IPS), and network monitoring tools
Working knowledge of automated malware analysis programs
Proficiency in securing various operating systems, including Windows, Linux, and macOS
Working knowledge of SIEM and other volumetric data systems
Knowledge of industry standard security products, including end point agents, remote capturing tools and other security related products
Ability to obtain and act on vulnerability information and conduct security risk assessments,
... Click here to view more detail / apply for OT Security Operations Analyst

Join our cybersecurity team, implementing innovative strategies and tools to protect sensitive data and maintain a secure digital environment.

As a Security Operations Associate in Cybersecurity & Tech Controls. Cybersecurity Operations, you will contribute to safeguarding the organization's digital assets and infrastructure by proactively detecting, assessing, and responding to threats, vulnerabilities, and security incidents. Leveraging your in-depth understanding of security principles and practices, you will exercise initiative and judgment to resolve cybersecurity-related problems and contribute to the improvement of current working methods. Collaborating with cross-functional teams, you will develop a coordinated approach to cybersecurity and educate employees on best practices, policies, and procedures. Your work will have a direct impact on the integrity, confidentiality, and availability of sensitive data and systems within the department, ensuring a secure digital environment for JPMorgan Chase.

Job responsibilities

• Conduct security investigations, log analysis, threat hunting, and vulnerability impact assessment to proactively identify and mitigate potential risks, vulnerabilities, and security breaches

• Utilize security tools and technologies, such as Security Information and Event Management (SIEM), intrusion detection systems, endpoint detection, and malware analysis, to enhance threat detection and response capabilities

• Collaborate with cross-functional teams to implement coordinated security strategies, policies, and procedures

• Contribute to continuous improvement of security operations processes and methodologies, proposing enhancements to threat detection and response playbooks and contributing to the overall security posture of the organization

• Able to work a shift pattern that includes weekend work

Required qualifications, capabilities, and skills

• Bachelor's Degree in Computer Science, Cybersecurity or related field

• 2+ years of experience in cybersecurity operations, network security, or a related field

• Demonstrated proficiency in scripting languages for automating security tasks and processes

• Strong understanding of security protocols, cryptography, authentication, authorization, and network security concepts

• Experience with security tools and technologies, including SIEM, intrusion detection systems, log analysis, and malware analysis

• Demonstrate a structured, analytical approach to investigating alerts and/or indicators and documenting findings in a manner that both peer and executive level colleagues can understand

Preferred qualifications, capabilities, and skills

• Basic understanding of Cloud architectures, how to secure these environments and how an adversary might attack these environments

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=6cddeaccb0753a20b4645515452a9c6e

Security Operations Analyst SALARY: $2,074.14 - 2,376.22 pw Super  Work Type: Temporary Full Time for up to 2 years Location: Oran Park Administration Building - 70 Central Avenue, Oran Park 2570 Come join an organisation with endless opportunities, where people choose to work because they are inspired by the chance to shape, influence and grow a community.  Exciting new opportunity has arisen for a Security Operations Analyst to join Council’s IT Operations Team, working in conjunction with Council’s Cyber Security Team.  You will provide a high level of information security operational support to the Council. This is a great opportunity for a Security Operations professional to work across Council’s ICT ecosystem. Don’t miss out on being part of something great by joining an evolving, rapidly growing, adaptive and innovative organisation.  What We Offer We are committed to offering and supporting development and employment opportunities to help people excel and build a lasting career. We offer generous learning…

Click here to view more detail / apply for Security Operations Analyst

The Company

Our real estate client is hiring for a Senior Manager, Global Security Operations role to join their expanding business. You will handle Identity and Access Management (IAM) and Security Tools Operations, including the management of endpoint protection, data protection, and web application protection tools. You will manage efforts to enhance information security operations and ensure the comprehensive coverage and protection of global users and services through effective management of security tools.

The Role

You will manage the Global Security Operations Center (SOC), which involves handling daily operations, refining operational processes, ensuring operational quality, and allocating team resources effectively. You will manage the operations of detection and response tools, implementing changes and enhancements to boost effectiveness. You will handle Identity & Access Management (IAM) operations, encompassing activities such as Conditional Access, multi-factor authentication, Single Sign-On integration with Third Party Applications, and Privilege Access Management. You will act as the Security Administrator for various security tools, regulating user access and privileges accordingly. You will engage in negotiations with vendors while reviewing Statements of Work (SOW). You will facilitate coordination and communication with international IT teams and be accountable for incident investigation and forensic analysis, as well as coordinating with other information security and business functions on cross-functional tasks. Additionally, you will attend to any other information security operations duties delegated by the Chief Information Security Officer (CISO) or business stakeholders.

Your Profile

You should possess at least a Degree in Information Security, IT, Computer Science or other related degree with at least 8 years of relevant experience in global security operations, SOC management, and managing various tools related to Threat Intelligence, Threat Hunting, detection, response, IAM, firewall, and vulnerability, encompassing WAF, IPS, EDR, UEBA, SIEM, and SOAR. You must possess knowledge and experience in incident investigation and forensic analysis, along with familiarity with the NIST Cybersecurity Framework (CSF), MITRE ATT&CK, and Cyber Kill Chain. You must be well-versed in common cyber-attacks and corresponding countermeasures, proficiency in scripting and/or programming is advantageous and capable of working autonomously, adept at prioritizing and multitasking within intricate environments. Additionally, you must possess the technical capability for hands-on work as required and be effective in influencing technical and non-technical stakeholders all levels in the business.

Apply Today

Please send your resume, in WORD format only and quote reference number SN12958158, by clicking the apply button. Please note that only short-listed candidates will be contacted.

Robert Half International Pte Ltd Co. Registration: 200612189E | EA Licence No: 07C5595 | Nursuriani Norahim EA Registration No: R1109288

Reporting to the Director of Security Architecture & Programs, the Security Engineer is responsible for ensuring that all security infrastructure is online, available, and functioning properly. This may require working extra hours on an as needed basis and participate in an on-call rotation.

The engineer will be responsible for coordinating with the existing team to not only continue to use these services but expand the existing capabilities of these tools. The engineer will need to be able to review policies from various security tools and be able to recommend changes as needed.

The engineer will also be responsible for consulting with other internal teams on projects, coordinate security requirements, and provide recommendations.

Responsibilities:

• Ability to plan, implement, manage, administer, monitor, and recommend changes for security protections and security infrastructure, SaaS platforms, and Cloud services (Firewalls, IPS/IDS, WAF, Proxies, AWS, Splunk, Endpoint Detection & Monitoring, etc.)
• Candidates will need to coordinate and work closely with other parts of IT and the business to implement recommendations as needed.
• Administer, monitor, and maintain security infrastructure (Patch, Upgrade, and Monitor for issues).
• Significant understanding and ability to work with Windows, Linux, and Mac operating systems.
• Experience in scripting and software development, Python, Bash, PowerShell or other relevant languages.
• Automate tasks leveraging automation platforms or scripting.
• Occasionally work with databases to extract data or implement processes leveraging MySQL, SQL Server, or PostgreSQL.
• Daily administrative tasks such as, report on tasks, coordinate with individuals as needed, and escalate issues where required.
• Troubleshoot and problem-solve network and security issues.
• Consult with other internal teams regarding security requirements, concerns, and issues for other projects.
• Be a security advocate for other teams and help individuals and projects as needed.
• Manage and administer several different types of Firewalls.
• And other responsibilities as assigned.

Qualifying Experience and Attributes:

• Must have relevant experience in Security or security related fields.
• Strong hands on experience and knowledge with firewalls and other various network, endpoint, or cloud security tools.
• Thorough understanding of TCP/IP
• Strong attention to detail with analytical and problem-solving skills.
• Awareness of cybersecurity trends, issues, and hacking techniques.
• Ability to work after hours if needed.

Preferred Experience and Attributes:

• Bachelor’s degree in Cybersecurity, Computer Engineering, Information Technology or related field.
• Self-motivation to get tasks completed.
• Ability to work within a team environment and coordinate as needed inside and outside of the security team.
• Excellent written and verbal communication skills.
• Excellent ability to document networks and applications.

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Multi-Skilled Security Installation Engineer - Immediate Start
Salary: £32-38k basic

• 9 Day working fortnight
• Door to door Pay
• Overtime
• Paid Callout (Currently 1 in 7)
• Flexible & Remote Working Where Possible
• Company Culture That Promotes Work Life Balance
• Access To Mental Health Care Support
• Salary Sacrifice Pension Scheme
• Childcare Voucher Scheme
• Max 3 Year Old Company Vehicle
• Death in service cover

About Us: Sisko Group, a Workforce Solutions provider, is recruiting exclusively on behalf of a leading name in Fire and Security. Be part of our growth plan and embark on a rewarding journey as a Multi-Skilled Security Installation Engineer.

Important Requirements:
Stable/consistent work history
Location is key - Only CVs within Home Counties or within London. (Nothing south of the river)
Minimum of 4 years’ experience
Good Installation and technical Knowledge – within Intruder, CCTV & Access Control

Benefits Include but not Exclusive to:
Paid door to door travel for Engineers.
25 Day Holiday Plus Bank Holidays (Increasing to 35 Days)
Wellness & Employee Assistance Programme (EAP)
Perkbox access to a huge range of free perks and discounts
Regular One 2 One Check-Ins with Line Manager
Continued Professional Development & Ongoing Training
Flexible & Remote Working Where Possible
Company Culture That Promotes Work Life Balance
Access To Mental Health Care Support
Salary Sacrifice Pension Scheme
Childcare Voucher Scheme
Max 3 Year Old Company Vehicle

Position Overview:
As part of their ambitious growth plan, we're expanding our clients installation team. Joining our dedicated operations team, this role offers immense job satisfaction.

The ideal candidate should be self-motivated, organized, and a valuable contributor to the operational team. Delivering top-tier customer service is non-negotiable. This role involves the installation of fire and/or security systems.

Duties & Responsibilities:
Conduct installation and commissioning of electronic fire and/or security systems.
Perform maintenance and repairs as required.
Provide reliable, quality support to customers consistently.
Maintain a professional demeanor in telephone and face-to-face interactions.
Assist customers and the regional team with technical issues.
Demonstrate flexibility in working hours when necessary.
Offer assistance and training to fellow team members.
Operate in alignment with our clients vision, mission, and values.

Skills & Experience:
High-level industry experience is a must.
Excellent technical knowledge of security systems.
Systematic and logical approach to tasks and problem-solving.
Ensure efficient completion of all tasks.
Presentable in person and with tools and vehicle.
Strong communication and organizational skills.
Awareness and responsibility for necessary equipment and emergency van stock.
Understanding the importance of precise paperwork records and full utilization of PDA devices.
Polite but assertive telephone manner.
Good knowledge of London and home counties postcodes.
Strong customer service skills, ability to motivate colleagues, and lead by example.
Ability to think laterally and \"out of the box.\"
Prompt and consistent timekeeping.

Health & Safety Responsibilities:
The successful candidate must demonstrate a personal commitment to health, safety, and the environment by adhering to:
Our clients health and safety policies and procedures.
The Health and Safety at Work Act, along with all site-specific and statutory health, safety, and environmental regulations and policies.
Method statements and risk assessments.
Participation and understanding of toolbox talks.

This is an exciting opportunity to be part of a team that plays a critical role in maintaining the security and functionality of Fire and Security systems across the UK. If you possess the required skills and experience, we encourage you to apply and discuss your qualifications during the interview.

If you have the skill set and are interested in being put forward for this new and exciting position, then please forward your CV immediately.

Please note, Sisko Group are acting as an employment business in relation to this vacancy.

To apply for this role and find out more details, please forward your CV to James Feeley at Sisko Group or call (phone number removed) in strict confidence.

Sisko Group is acting as an Employment Business in relation to this vacancy. If your experience matches, please forward your CV immediately.

We thank all applicants who respond, but only those shortlisted will be contacted.

Key Responsibilities

• Perform implementation, maintenance, support and operation of the project's security monitoring use cases
• Maintain understanding of the architecture and work with security team to understand the use cases to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Adhere to established change management process and other service management process in day-to-day tasks
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Review, propose and generate dashboards and reports to automate monitoring of systems and log and threat intelligence feed ingestion, and reduce low value event escalations
• Build rules and intelligence to detect threats in all monitored assets
• Implement and devise detection method of such threats in our security operations through SIEM use cases etc
• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Review and update data enrichment, including use of threat intelligence to enhance fidelity of detection
• Review and maintain UEBA data sources and use cases

Requirements

• 1- 2 years of experience in security operations in a SOC environment
• 1- 2 years of experience in creating, finetuning and maintaining correlation rules and SIEM dashboards
• Working experience in Regex and/or scripting
• Strong critical thinking / contextual analysis abilities
• Strong investigative and analytical problem solving skills
• Stakeholder management
• Meticulous with an eye for details
• Product certification such as Splunk Enterprise Certified Administrator or equivalent
• Professional certification such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage
• Good understanding of whole of government environment would be an advantage

Job Responsibilities: Cyber Security Division ( CySD)
Sitting within Data & Technology Architecture Dept, the Cloud Security Engineer is responsible:

• Design, implement, and manage security measures for cloud environments.
• Conduct regular security assessments and audits of cloud infrastructure.
• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• Monitor and respond to security incidents, ensuring timely resolution.
• Implement and maintain access controls, encryption, and other security features.
• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• Bachelor's degree in Computer Science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Key Responsibilities:

Vulnerability Scanning:

• Conduct regular vulnerability scans of designated network segments and systems using industry-standard tools (e.g., Tenable, Nessus).
• Configure scans according to established schedules and scope.
• Document and maintain scan configurations, historical results, and schedules.

Analysis and Reporting:

• Perform basic analysis of scan results, identifying critical vulnerabilities and potential risks.
• Perform basic assessment of vulnerabilities, to input CVE advisories to vulnerability reports.
• Prepare clear and concise reports with vulnerability summaries, risk levels, and suggested remediation actions.
• Distribute scan reports to relevant stakeholders in a timely manner.

Stakeholder Communication and Follow-up:

• Collaborate with system owners and IT teams to provide context for findings and facilitate remediation efforts;
• Conduct weekly follow-ups with stakeholders to track remediation progress and identify any obstacles;
• Track and manage remediation follow-ups according to protocol and established processes;
• Escalate unresolved vulnerabilities or remediation delays to management, as needed.

Status Reporting:

• Create regular status reports on remediation progress for management review.

Requirements :

• Diploma with at at least 2 years' relevant experience in an IT or information security role;
• Demonstrated experience managing vulnerability scanning tools (Tenable, Nessus, Qualys, etc.);
• A good understanding of common network vulnerabilities and remediation techniques;
• Basic knowledge of security standards and best practices (e.g., OWASP, NIST);
• Capability to understand and interpret CVE technical documentation;
• Ability to analyse scan results, interpret technical data, and identify risks;
• Detail-oriented and organised with the ability to track progress across multiple stakeholders.

Additional Notes

• Contract Duration : 12 months.
• Work Arrangement : On site

Be a part of something BIG!

The Endpoint Security Engineer is responsible for the implementation and maintain enterprise level Endpoint security solutions. The key focus is to develop security related workflows, process and automation procedures. Proactively identify gaps, risks and issues and escalate to management accordingly. Remains current with new security technologies and recommends changes or actions to management as appropriate. Provide end-user support in the area relating to security as directed by management and work on multiple functions of high complexity.

Applying Service Delivery approach to ensure consistent and continuous Endpoint solutions and technologies are successfully deployed to meet the Technology Infrastructure (TI) strategic objectives. Possess strong leadership and communication abilities and is able to set realistic goals and implement appropriate plans to guide the team towards achieving those goals. You should be able to address multi-faceted issues effectively and in a collaborative manner.

Make an Impact by:

• Provide escalated troubleshooting and support assistance for endpoint security technologies as well as for native and 3rd party security and endpoint management tools
• Provide capacity planning and performance monitoring to sustain and improve mobility service availability
• Ensure thorough testing of solutions for functionality and compatibility
• Coordinate service/support needs with vendors, application support teams, and internal teams through effective partnership, collaboration and communication
• Provide change request leadership for the deployment of application or infrastructure related changes
• Participate in application troubleshooting and security incident problem resolution with other infrastructure teams, including application, storage, messaging, and server teams.
• Represent the team in change, incident and problem management calls and manage request queues
• Maintain and define hardware, software, and configuration standards (Operational Runbooks and Playbooks)
• Partner with other Product Infrastructure teams to apply standards and policies relevant to operational excellence
• Participate in on call rotation where necessary.
• Respond rapidly to unplanned events, including after-hours for critically urgent issues.
• Support Incident Response Team to help in analyzing, forensics, containing, and coordinating technical elements of response
• Prepare monthly or quarterly reports which summarize all of the vulnerability statistics for the entire enterprise level endpoints.
• Manage the procedures, the tools, and serve as a subject matter expert for antivirus, anti-malware, and intrusion prevention processes and technologies deployed on endpoint devices
• Manage the process and serve as a subject matter expert for hardening the configuration of various endpoint devices including utilizing appropriate group policy settings, file permissions and access controls to increase endpoint security.
• Maintains expertise to function as subject matter expert in multiple technical and business disciplines
• Provide leadership towards accomplishing major upgrades and new product onboarding deployments in the area of Endpoint Security.
• Coordinate and expedite support cases with endpoint security technology vendor and product management teams.
• Familiarity with best practices for policy and mobility standards
• Device Policy configuration (iOS and Android)
• Workplace Persona policy configuration and troubleshooting.
• Compliance policy configuration and troubleshooting
• Patch management advocacy and compliance
• Support and mentor team members
• Evaluate existing security tools and document security enhancements or procedures to mitigate risks
• Serves as an advocate for secure computing practices and procedures.

Skills for Success:

• 5 – 8 years working experience
• 5 years EUT related in a large enterprise (>2000 staff) with multi-location.
• Microsoft Windows Servers.
• In depth knowledge of Proxy
• Microsoft Technologies include Active Directory, Exchange, O365, SCCM, File and Print services
• Management of Microsoft Windows, MacOS, iOS and Android clients
• Working experience of using ServiceNow

Rewards that Go Beyond:

• Full suite of health and wellness benefits
• Ongoing training and development programs
• Internal mobility opportunities

Your Career Growth Starts Here. Apply Now!

We are committed to a safe and healthy environment for our employees & customers and will require all prospective employees to be fully vaccinated.

The Security Engineer plans and oversees monitoring and maintenance of security operations, and provides direction and leadership to internal resources. He/She provides expertise on security technologies and innovative security concepts, and works toward enhancing the resilience of security operations. He/She coordinates ongoing reviews of existing security programs, protocols, and planned upgrades. They establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures. He/She focuses on policy implementation and control.
He/she is diligent and watchful in monitoring security operations, systems, and activities. He/She is also a confident leader who develops plans and solutions to address security incidents and one who has a passion for engaging and developing others in their team.

1. Implement security operations strategy

• Contribute to the definition of the overall security strategy
• Align security operations functions with the organisation’s overall business objectives
• Advise senior leaders on critical issues that may affect corporate security objectives
• Advise the design and implementation of security policy and controls
• Provide expertise on security technologies and innovative security concepts
• Provide technical and operational oversight for security tool deployment and implementation

2. Monitor security systems

• Develop plans for monitoring security systems and responding to cyber security incidents
• Guide the identification and measurement of critical security operations metrics
• Develop detection and alerting rules
• Monitor levels of service of the security operations
• Present periodic status reports to management

3. Maintain security operations

• Oversee planning and coordination of 24 x 7 security operations coverage
• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades
• Monitor compliance to security policies, regulations, rules and norms
• Drive continuous improvement of security operations
• Perform Firewall rule reviews/clean-ups as part of housekeeping initiatives

4. Respond to security incidents

• Set internal guidelines for effective processing and escalation of incidents
• Review reports on incidents and breaches
• Develop contingency and disaster recovery plans for specific security incidents
• Coordinate prioritisation of alarms and resources for incident responses
• Oversee the development of emergency protocols
• Recommend systems and procedures for the prevention, detection, containment and correction of security breaches

Requirements:

• 5 years of relevant experience
• Risk assessment experience - able to articulate security policies of the organization.
• Experience in AV/ATP Solutions, firewalls, Policies/Compliance.
• Experience in AD/ID administration as per best security practices.
• Having cloud security experience is an advantage
• Exposure in IM8 or equivalent
• Experience in any of these technologies is good to have.
  Eg: Symantec Endpoint, FireEye ETP, ManageEngine Password Manager Pro, Sophos Endpoint, Graylog, Office 365 Security, Trellix ePolicyOrchestrator, Trellix Network Security Platform, Fortinet, Tenable Nessus, FireEye HTC, Mandiant Advantage

Job Description:

• Responsible for IT governance on network security and infrastructure health, to monitor and control tasks and support IT daily operation for reliability and efficiency
• Design, validate, implement and document end-to-end process for office network topology, sort out cabling connection, configure firewall policies, handling physical and virtual security, provision server, backup and manage IT assets, etc.
• Proactively monitor and report IT operation, deliverables, risks and issues, incident reports, maintenance, etc. ensure IT service is within good standard and meets SLA
• Communicate with Corp IT and external vendors over technical support and solutions for infra, network, security appliances, servers, mail, system and various hardware appliances whereby system software and end user devices are running
• Continuous improvement and implementations of hot fixes, patches, firmware upgrades, OS hardening security and remediation solutions to address vulnerabilities within required window, for both Windows and Linux OS and major firewall brands
• Hands-on operate for AD, DNS, File server, printer, conference, email, Antivirus, Veeam backup, SFTP, etc based on security implementation.
• Provide L2 IT supports to end user onsite or remotely, standby for outrage support
• Handle and escalate on system, applications and attend to faults, troubleshoot, and resolve hardware and software technical problems
• Perform regular internal auditing and review IT compliances and policies
• Follow guideline and SOP for backup IT administration work, such account creation, termination, changes, with proper documentation, etc.

Job Requirement:

• Bachelor’s degree holder in IT domain; Diploma holders will be considered if candidate has good working experience
• Experienced in cyber security area, OS hardening, security log review, risk mitigation, etc.
• Experienced in IT network administration, system administration on top of office administration
• Minimum working experience of 3 years and above
• Possess strong analytic and problem solving skill is the essential