Responsibilities
1) Manage, administer and support endpoint security software:
- Manage and support the endpoint security software deployed
- Troubleshoot and rectify issues and problems related to endpoint security software
- Liaise and coordinate with product vendors/Helpdesk team on issue resolution, upgrades and patching related to endpoint security software
2) Perform regular reviews and checks on endpoints to ensure the appropriate security controls are applied and effective.
3) Develop and maintain documentation related to endpoint security, including product configurations and settings, reports, asset list, procedures, checklist, etc.
4) Develop and maintain endpoint security standard (OS hardening standard, browser setting standard, security config standard, logging standard, etc.)
5) Provide support for the monthly reports presented to the management on the security software.
6) Act as the subject matter expert, providing advice, guidance and consultation on end point security.
7) Initiate and drive projects related to endpoint security.
8) Collaborate with appointed vendor to plan, manage and ensure the agreed deliverables of the project are fulfilled by the vendor.
9) Collaborate with appointed vendor to plan, monitor and track service improvement programs for the contracted in-scope services.
10) Carry out regular reviews with the appointed vendor to ensure services are delivered according to SLA.
11) As part of the team, assist and support the management of security threats and vulnerabilities.
12) As part of the team, assist and support security incident response.
13) Investigate security alerts escalated by the MSSP and perform end-toend incident response, including triage, containment, eradication, recovery, and RCA.
Key Requirements
1) Atleast 8 years' of experience in Cybersecurity within the Financial Services domain
2) Strong understand of core Cybersecurity principles
3) Strong scripting and automation skills, Python preferred.
4) Experience with SIEM (e.g., SLS, MaxCompute, Function Compute, API Gateway, CloudMonitor, etc.).
5) Experience working with logs from WAF, applications, cloud, endpoints, or network devices.
6) Understanding of fraud patterns in digital payment / wallet / app environments.
7) Experience supporting incident investigation and root-cause analysis.
8) Familiarity with APIs and system integrations.
9) Knowledge of DLP, endpoint security, and monitoring concepts.
