Total 4 Junior Executive IT Security Analyst job vacancies in Petaling Jaya

Job Scope/Responsibilities: 

•  Do the overall support related to IT on day-to-day business operation.
•  Educating end users in applications functionality, preparing, and providing training sessions on need basis
•  Hardware/Software troubleshooting and resolve basic network problems.
• Replacement of hardware parts if required.
• Perform OS installations and basic computer configuration.
• Monitoring and supporting network infrastructure such internet, wifi, LAN, WAN, routers, and switches/hub in the organization.
• Reviewing program specifications and requirements to determine implementation steps and sequencing.
• Identifying technical design for assigned areas of projects
• Modifying and writing program code as needed
• Suggesting technical design for new or revised applications or modules
• Modifying or writing program code as needed, testing applications
• Conducting user acceptance tests and providing respective documentation
• Making recommendations on programming standards and procedures
• Managing websites includes planning, implementing, managing, monitoring, and upgrading the organization's website.

Job Requirements:

• Candidate must possess at least a Bachelor’s Degree, Post Graduate Diploma, Professional Degree, Computer Science/Information Technology or equivalent.
• Strong understanding in principles of OOP
• Knowledge in Front-end programming software such as HTML, CSS, Bootstrap, JavaScript (vanilla JS, jQuery, ES6), Angular, and React
• Knowledge in Back-end software such as PHP, Java, Python, Node.js, Ruby, Sass

• Understanding in WordPress Framework and architecture

• Ability to troubleshoot website issues in a fast-paced environment.
• Practical knowledge of RDBMS and SQL
• Must possess skills in one of Adobe's ranges of creative suites. 
• Advantages for knowledge on Oracle Database. 
• Knowledge in installation and troubleshooting of hardware/software, network configuration and smartphone.
• Good knowledge of LAN/WAN networks, TCP/IP protocols and network technologies
• Practical knowledge of SDLC

• Understanding principles of OOD

• Knowledge in Microsoft Office Products (Word,Excel,PowerPoint)
• Experience in the Banking System is encouraged.

Perks & Benefits

• Employee equity
• Central location
• Personal leave
• Personal development opportunities

JOB RESPONSIBILITIES:

• Perform proactive monitoring for security log events for customers in 24x7 mode. (Splunk, SIEM, TrendMicro (EDR/IPS/etc) and others 3rd Party software).
• Escalate validated and confirmed incidents to designated incident response team.
• Notify Client of incident and required mitigation works.
• Fine-tune SIEM rules to reduce false positive and remove false negatives / analysis and response to previously unknown hardware and software vulnerabilities.
• Collect global threat intelligence and internal threats then inject actions based on analysis and recommendation.
• Provide advisories and threat intelligence based on new trends, threats, emerging campaigns, malicious attacks, hacker group.
• Proactively research and monitor security information to identify potential threats that may impact the organisation.
• Develop and distribute information and alerts on required corrective actions to the organisation.
• Learn new attack patterns, actively participate in security forums.
• Understand the structure and the meaning of logs from different log sources such as FW, IDS, Windows DC, Cisco appliances, AV and antimalware software, email security etc.
• Perform threat intel research.
• Ability to run and understand Sandbox Static Analysis.
• Track and update incidents and requests based on client’s updates and analysis results.
• Investigating, documenting, and reporting on any information security (InfoSec) issues as well as emerging trends.
• Assist the Level 2 with monthly and ad-hoc reporting - responsible for completing statistical and status reports, as well as providing fast and timely responses.
• Perform as an escalation point for all incidents relating to potential security.
• This position required to work on shift by rotation.

Perks & Benefits

• Regular team activities
• Company trips
• Medical insurance
• Free snacks / Happy hours
• Nearby public transport
• Personal leave
• Open culture
• Personal development opportunities
• Misc allowances

工作職責：

• 以 24x7 模式對客戶的安全性日誌事件進行主動監控。 （Splunk、SIEM、TrendMicro（EDR/IPS/等）及其他第 3 方軟體）。
• 將經過驗證和確認的事件回報給指定的事件回應團隊。
• 通知客戶有關事件和所需的緩解工作。
• 微調 SIEM 規則，以減少誤報並消除誤報/對先前未知的硬體和軟體漏洞的分析和回應。
• 收集全球威脅情報和內部威脅，然後根據分析和建議採取行動。
• 根據新趨勢、威脅、新興活動、惡意攻擊、駭客組織提供建議和威脅情報。
• 主動研究和監控安全訊息，以識別可能影響組織的潛在威脅。
• 制定並向組織分發有關所需糾正措施的資訊和警報。
• 學習新的攻擊模式，積極參與安全論壇。
• 了解來自不同日誌來源（例如 FW、IDS、Windows DC、思科裝置、AV 和反惡意軟體、電子郵件安全性等）的日誌的結構和意義。
• 進行威脅情報研究。
• 能夠運作和理解沙箱靜態分析。
• 根據客戶的更新和分析結果追蹤和更新事件和請求。
• 調查、記錄和報告任何資訊安全 (InfoSec) 問題以及新興趨勢。
• 協助 2 級進行每月和臨時報告 - 負責完成統計和狀態報告，並提供快速、及時的回應。
• 作為與潛在安全相關的所有事件的升級點。
• 該職位要求實施輪班制。

津貼和福利

• 定期團隊活動
• 公司旅行
• 醫療保險
• 免費小吃/歡樂時光
• 附近的公共交通
• 事假
• 開放文化
• 個人發展機會
• 雜項津貼

工作範圍/職責：

• 做好日常業務運作中與IT相關的整體支援。
• 對最終用戶進行應用程式功能方面的教育，根據需要準備和提供培訓課程
• 硬體/軟體故障排除並解決基本網路問題。
• 如有需要，更換硬體零件。
• 執行作業系統安裝和基本電腦配置。
• 監控和支援組織中的網路基礎設施，例如網際網路、wifi、LAN、WAN、路由器和交換器/集線器。
• 審查計劃規範和要求以確定實施步驟和順序。
• 確定專案指定領域的技術設計
• 根據需要修改和編寫程式碼
• 為新的或修訂的應用程式或模組提供技術設計建議
• 根據需要修改或編寫程式碼，測試應用程式
• 進行使用者驗收測試並提供相應的文檔
• 就編程標準和程序提出建議
• 管理網站包括規劃、實施、管理、監控和升級組織的網站。

工作要求：

• 候選人必須至少擁有學士學位、研究生文憑、專業學位、電腦科學/資訊科技或同等學歷。
• 對 OOP 原理有深刻的理解
• 了解前端程式設計軟體，例如 HTML、CSS、Bootstrap、JavaScript（vanilla JS、jQuery、ES6）、Angular 和 React
• 了解 PHP、Java、Python、Node.js、Ruby、Sass 等後端軟體

• 了解 WordPress 框架和架構

• 能夠在快節奏的環境中解決網站問題。
• RDBMS 和 SQL 的實用知識
• 必須具備 Adobe 創意套件系列之一的技能。
• 了解 Oracle 資料庫的優勢。
• 了解硬體/軟體、網路配置和智慧型手機的安裝和故障排除。
• 熟悉 LAN/WAN 網路、TCP/IP 協定和網路技術
• SDLC的實用知識

• 理解 OOD 的原理

• Microsoft Office 產品知識（Word、Excel、PowerPoint）
• 鼓勵具有銀行系統經驗。

津貼和福利

• 員工股權
• 中心位置
• 事假
• 個人發展機會