Total 4,614 Security Analyst job vacancies in Information Technology category in The United States of America

Job Description

Security Engineer's role is to support the product team in performing product/solution installation, testing, documentation, and support.

Responsibility:

• Provide technical consulting, implementation, support and service delivery to our customers on Identity Access Management (IAM) and Single Sign-On (SSO) solutions.
• Perform system installation, implementation & upgrade services of IAM/SSO solutions.
• Involve in full cycle of project implementation activities - business requirement information gathering, prepare & finalize solution design, solution implementation & development, SIT/UAT, prepare system documentation & production cutover and system go live.
• Involve in post-implementation production support/ad hoc to ensure all the problems/issue solved within the target SLA.
• Monitor and analyze project risk and provide status update report to customer.
• Support pre-sales consulting activities; eg: product presentation, demo and POC.
• Conduct technical training to customers on IAM/SSO solution. 
   

Required Skills

• Candidate must possess at least a Diploma, Advanced/Higher/Graduate Diploma, Bachelor's Degree, Post Graduate Diploma or Professional Degree in Engineering (Electrical/Electronic), Computer Science/Information Technology, Science & Technology or equivalent.
• 1 to 3 years of experience in managing the development, implementation, practice and maintenance of IAM/SSO solutions.
• Hands-on experience with knowledge IAM/SSO solutions tools and platforms.
• Excellent written and communication skills.
• Excellent analytical and problem-solving skills.

Additional Notes

• Understanding of IT infrastructure components, including servers, networks, databases, and other relevant technologies.
• Knowledge of scripting languages (e.g., Bash, PowerShell, Python) and automation tools.

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Central location
• Flexible working hours
• Casual dress code
• Medical insurance
• Personal leave
• Open culture
• Personal development opportunities

Job Description:-

- To conduct vulnerability assessment/penetration testing in its skillset and experience to gain access and exploit vulnerabilities in the company’s infrastructure.
- To maintain the Security Operations Manual up to date for use by all IT security personnel to cover duties.
- To conduct computer forensic analysis and understand the impact on the business.
- To research tools, techniques, countermeasures and trends in network vulnerabilities, data hiding, and network security.
- Continuous development of threat hunting and proactively identifying security incidents before they occur.
- To design and support the overall cybersecurity architecture of the enterprise systems environment.
- Applying social engineering and phishing techniques to manipulate employees into exposing or revealing information to compromise their machines.
- Maintaining standard information security policy, procedure, and documentations.
- Monitor identity and access management, including monitoring for abuse of permissions by authorised system users.
- Involve in IT Security project management and assist in identifying and evaluating vendor IT security solutions.
- To ensure compliance with the provisions of the IT Security Policies and regulatory guidelines.
 

Job Requirements:-

- Professional Certificate/Diploma/Degree in Computer Science/Information Technology or equivalent.
- 8 to 10 years related experience in IT Security and with proven minimum 4 years working experience in managing IT security projects.
- Industry recognized security certifications, such as CISSP, CEH etc. preferred.
- Knowledge in IT Security methodology, Bank Negara Guidelines, PCI DSS, Risk - Management and IT auditing will be an added advantage.
- Technical knowledge of database and operating system security.
- Knowledge of network protocol (WAN,LAN) and security concerns within TCP/IP environment.
- Thorough understanding of the latest security principles, techniques and protocols.
- Familiar with web related technologies.
- Ability to present ideas in business-friendly language.
- Ability to prioritize, track and manage tasks and action items.
- Excellent communication, writing, analytical thinking, strong team player and an individual contributor too.

Perks & Benefits

• Annual leave
• Medical
• Nearby public transport

職位描述

安全工程師的職責是支援產品團隊執行產品/解決方案安裝、測試、文件記錄和支援。

責任：

• 為我們的客戶提供身分存取管理 (IAM) 和單一登入 (SSO) 解決方案的技術諮詢、實施、支援和服務交付。
• 執行IAM/SSO解決方案的系統安裝、實施和升級服務。
• 參與專案實施活動的整個週期 - 業務需求資訊收集、準備和最終確定解決方案設計、解決方案實施和開發、SIT/UAT、準備系統文件和生產切換以及系統上線。
• 參與實施後生產支援/臨時支持，以確保所有問題/問題在目標 SLA 內得到解決。
• 監控和分析專案風險並向客戶提供狀態更新報告。
• 支持售前諮詢活動；例如：產品演示、演示和 POC。
• 為客戶提供有關 IAM/SSO 解決方案的技術培訓。
  

所需技能

• 候選人必須至少擁有工程（電氣/電子）、電腦科學/資訊技術、科學與技術或同等學歷的文憑、高級/高級/研究生文憑、學士學位、研究生文憑或專業學位。
• 擁有 1 至 3 年管理 IAM/SSO 解決方案的開發、實施、實踐和維護的經驗。
• 擁有 IAM/SSO 解決方案工具和平台知識的實務經驗。
• 優秀的書面和溝通能力。
• 出色的分析和解決問題的能力。

補充筆記

• 了解 IT 基礎架構元件，包括伺服器、網路、資料庫和其他相關技術。
• 了解腳本語言（例如 Bash、PowerShell、Python）和自動化工具。

津貼和福利

• 津貼（旅費、交通費等）
• 中心位置
• 彈性的工作時間
• 休閒著裝要求
• 醫療保險
• 事假
• 開放文化
• 個人發展機會

JOB RESPONSIBILITIES:

• Perform proactive monitoring for security log events for customers in 24x7 mode. (Splunk, SIEM, TrendMicro (EDR/IPS/etc) and others 3rd Party software).
• Escalate validated and confirmed incidents to designated incident response team.
• Notify Client of incident and required mitigation works.
• Fine-tune SIEM rules to reduce false positive and remove false negatives / analysis and response to previously unknown hardware and software vulnerabilities.
• Collect global threat intelligence and internal threats then inject actions based on analysis and recommendation.
• Provide advisories and threat intelligence based on new trends, threats, emerging campaigns, malicious attacks, hacker group.
• Proactively research and monitor security information to identify potential threats that may impact the organisation.
• Develop and distribute information and alerts on required corrective actions to the organisation.
• Learn new attack patterns, actively participate in security forums.
• Understand the structure and the meaning of logs from different log sources such as FW, IDS, Windows DC, Cisco appliances, AV and antimalware software, email security etc.
• Perform threat intel research.
• Ability to run and understand Sandbox Static Analysis.
• Track and update incidents and requests based on client’s updates and analysis results.
• Investigating, documenting, and reporting on any information security (InfoSec) issues as well as emerging trends.
• Assist the Level 2 with monthly and ad-hoc reporting - responsible for completing statistical and status reports, as well as providing fast and timely responses.
• Perform as an escalation point for all incidents relating to potential security.
• This position required to work on shift by rotation.

Perks & Benefits

• Regular team activities
• Company trips
• Medical insurance
• Free snacks / Happy hours
• Nearby public transport
• Personal leave
• Open culture
• Personal development opportunities
• Misc allowances

職位描述：-

- 根據其技能和經驗進行漏洞評估/滲透測試，以存取和利用公司基礎設施中的漏洞。
- 保持安全操作手冊處於最新狀態，以供所有 IT 安全人員履行職責時使用。
- 進行電腦取證分析並了解對業務的影響。
- 研究網路漏洞、資料隱藏和網路安全的工具、技術、對策和趨勢。
- 持續發展威脅追蹤並在安全事件發生前主動辨識。
- 設計和支援企業系統環境的整體網路安全架構。
- 應用社會工程和網路釣魚技術來操縱員工暴露或洩漏資訊以危害他們的機器。
- 維護標準資訊安全政策、程序和文件。
- 監控身分和存取管理，包括監控授權系統使用者濫用權限的情況。
- 參與 IT 安全專案管理並協助識別和評估供應商 IT 安全解決方案。
- 確保遵守 IT 安全政策和監管指南的規定。

工作要求：-

- 電腦科學/資訊科技專業證書/文憑/學位或同等學歷。
- 擁有 8 至 10 年 IT 安全相關經驗，並擁有至少 4 年管理 IT 安全專案的工作經驗。
- 有業界認可的安全認證，如CISSP、CEH等優先。
- 了解 IT 安全方法、國家銀行指南、PCI DSS、風險管理和 IT 審計將是一個額外優勢。
- 資料庫和作業系統安全的技術知識。
- 了解 TCP/IP 環境中的網路協定（WAN、LAN）和安全性問題。
- 透徹理解最新的安全原理、技術和協議。
- 熟悉Web相關技術。
- 能夠用商業友善的語言表達想法。
- 能夠確定優先順序、追蹤和管理任務和行動項目。
- 優秀的溝通、寫作、分析思維、強大的團隊合作精神和個人貢獻者。

津貼和福利

• 年假
• 醫療的
• 附近的公共交通

Key Accountabilities

• Create designs for technical solutions to resolve business problems and try out components of new systems for efficiency
• Reach out to clients and project leaders in the course of work in order to identify and evaluate user and business requirements
• Ensure clean and accurate documentation that may include aspects such as business requirements, client requirements, and technical specifications, and write findings in form of reports
• Ensure that all documents are safely kept and accessible for future reference
• Assist with new releases, and approve all User Acceptance Testing
• Oversee implementation of a new system including data migration
• Facilitate professional and constant communication with overall users on the status of production problems that might arise and inform them about ways of resolving issues
• Carry out research on how IT systems are used and suggest ways for systems improvement and efficiency
• Collaborate with the development team to build the design and specification of the permanent fix
• Communicate the cost (if any) and timeline with the customer and follow through to ensure timely delivery
• Test the product to ensure that it meets user requirements, technically well built, and does not impact existing modules before roll-out,
• Upsell and build value for customers by proposing new features or services.

Requirements

• Bachelor's Degree, Post Graduate Diploma, Professional Degree
• Strong skills in working with relational databases
• Strong skills and ability to troubleshoot issues quickly, and find solutions to solving them independently in a timely manner
• Great knowledge of IT processes and willingness to constantly update knowledge
• Ability to multi task, working on more than one issue simultaneously
• Able to carry out tasks with little or no supervision

Perks & Benefits

• Nearby public transport
• Casual dress code
• Free snacks / Happy hours
• Regular team activities
• Medical insurance

工作職責：

• 以 24x7 模式對客戶的安全性日誌事件進行主動監控。 （Splunk、SIEM、TrendMicro（EDR/IPS/等）及其他第 3 方軟體）。
• 將經過驗證和確認的事件回報給指定的事件回應團隊。
• 通知客戶有關事件和所需的緩解工作。
• 微調 SIEM 規則，以減少誤報並消除誤報/對先前未知的硬體和軟體漏洞的分析和回應。
• 收集全球威脅情報和內部威脅，然後根據分析和建議採取行動。
• 根據新趨勢、威脅、新興活動、惡意攻擊、駭客組織提供建議和威脅情報。
• 主動研究和監控安全訊息，以識別可能影響組織的潛在威脅。
• 制定並向組織分發有關所需糾正措施的資訊和警報。
• 學習新的攻擊模式，積極參與安全論壇。
• 了解來自不同日誌來源（例如 FW、IDS、Windows DC、思科裝置、AV 和反惡意軟體、電子郵件安全性等）的日誌的結構和意義。
• 進行威脅情報研究。
• 能夠運作和理解沙箱靜態分析。
• 根據客戶的更新和分析結果追蹤和更新事件和請求。
• 調查、記錄和報告任何資訊安全 (InfoSec) 問題以及新興趨勢。
• 協助 2 級進行每月和臨時報告 - 負責完成統計和狀態報告，並提供快速、及時的回應。
• 作為與潛在安全相關的所有事件的升級點。
• 該職位要求實施輪班制。

津貼和福利

• 定期團隊活動
• 公司旅行
• 醫療保險
• 免費小吃/歡樂時光
• 附近的公共交通
• 事假
• 開放文化
• 個人發展機會
• 雜項津貼

Office Location: KPMG Tower, Petaling Jaya

Targeted Project Location: Putrajaya

We are seeking a skilled and experienced Business Analyst for IT application implementation project and application maintenance.

Responsibilities:

• Perform the requirements gathering and produce the Business Requirement Specification (BRS).
• Provide consultancy on the business processes.
• Perform analysis on customer requirements and produce functional design.
• Document the function design in Functional Design Specification (FDS).
• Perform the BRS and FDS walkthrough with customers.
• Perform walkthrough session on business requirement and functional design outcome with customer.
• Perform the functional design discussion with technical team members.
• Perform and document impact analysis on business functions in the system, based change request from customer.
• Develop the test scenarios and test scripts. Perform configuration of the system based on input of functional details and business requirements.
• Carry out the testing including the mobile application, web application and administration portal systems.
• Supporting the customer during the customer testing.
• Conduct the training to the customer.
• Perform the application maintenance support.

Requirements:-

• Working experience as a Business Analyst or equivalent position
• Experiences Mobile Application/Internet Application would be an added advantage. Experiences banking industry system would be an added advantage.
• Willing to travel and be based in customer site at oversea country.
• Good command of Bahasa Malaysia and English Good interpersonal skills, a team player and able to work independently.
• Must be analytical and a problem-solver.

If you meet the above requirements and are excited about working with a dynamic team on cutting-edge technology, please apply with your resume and a cover letter. We look forward to hearing from you! 

Perks & Benefits

• Nearby public transport
• Central location
• Medical insurance
• Open culture
• Personal development opportunities
• There is an in-lieu replacement leave PH fall on Saturday
• Recognize all Public Holidays in Selangor state
• Parking Allowance, Medical, Optical, Dental Benefits

主要責任

• 創建技術解決方案的設計以解決業務問題並嘗試新系統的組件以提高效率
• 在工作過程中與客戶和專案負責人聯繫，以確定和評估使用者和業務需求
• 確保文件清晰、準確，其中可能包括業務要求、客戶要求和技術規格等方面，並以報告的形式編寫調查結果
• 確保所有文件均安全保存並可供將來參考
• 協助新版本的發布，並批准所有使用者驗收測試
• 監督新系統的實施，包括資料遷移
• 促進與整體用戶就可能出現的生產問題的狀態進行專業和持續的溝通，並告知他們解決問題的方法
• 研究 IT 系統的使用方式，並提出系統改進和效率的建議
• 與開發團隊合作建構永久修復的設計和規範
• 與客戶溝通成本（如果有）和時間表並跟進以確保及時交付
• 在推出之前測試產品以確保其滿足用戶要求、技術良好且不會影響現有模組，
• 透過提出新功能或服務來追加銷售並為客戶創造價值。

要求

• 學士學位、研究生文憑、專業學位
• 具有使用關聯式資料庫的強大技能
• 較強的技能和快速排除問題的能力，並能及時獨立找到解決方案
• 對 IT 流程有豐富的了解並願意不斷更新知識
• 能夠同時處理多個任務，同時處理多個問題
• 能夠在很少或沒有監督的情況下執行任務

津貼和福利

• 附近的公共交通
• 彈性的工作時間
• 休閒著裝要求
• 免費小吃/歡樂時光
• 定期團隊活動
• 醫療保險

• Responsible for the Technology Risk Management function for ACSM in managing technology risk and enhancing technology resilience.
• To oversight the current and emerging technology risk, cyber risk and security which could potentially impact the ACSM’s risk profile.
• To ensure information assets and technologies are adequately protected.
• Identify and report on technology risk including security breaches, to initiates correction action and regulatory requirements.
• Facilitate independent technology risk assessment which has been assigned by CISO.
• Act as coordinator and point-of-contact in cyber risk management activities (i.e. cyber risk identification, prevention, detection and recovery)
• Responsible for staying abreast of the latest cyber security practices, technologies, incidents and emerging threat.
• Oversee incident response planning, as well as the investigation of cyber security breaches, and assists with disciplinary and legal matters associated with the breaches as necessary.
• Participate in development and implementation of the appropriate and effective controls to mitigate identified threats and risks.
• Create and maintain and IT risk register to ensure that all identified Technology risk factors are accounted for.
• Participate in IT project and initiatives to bring pro-active risk management focus into solutions.
• Assists in the research, development, communication, maintaining and working with the operational unit on the enforcement of IT security architecture, policies, procedures, solution and standards with the IT division.
• Conduct the ACSM awareness initiatives in relation to cyber risk and technology risk.

Job Requirement :

• Minimum degree in computer science or equivalent technical academic.
• Be appropriate certified in security domain.
• Have a minimum of three years of experience in IT Risk management and information Technology.

Perks & Benefits

• Nearby public transport
• Medical insurance
• Personal leave

責任

✍ 負責與網路安全要求和新興相關ICT技術相關的端到端整體解決方案和服務活動，以實現最佳水準的網路安全機密性、完整性和可用性標準。
✍ 負責網路安全指南、基準、標準和流程的持續維護、監控和更新。這包括預測成長以確保可擴展性，評估基準、觀察或其他行業最佳實踐帶來的增強價值，並在需要時納入變更。
✍ 負責建立和維護業務工作流程和技術的現況和未來安全流程和工作指導。
✍ 開發並推薦知識開發以及文件化實務和工程知識抵押品的創建。
✍ 技術專家提供全面的解決方案和工程，以建構技術解決方案的技術要求。
✍ 提供IT 解決方案工程和設計建議的IT 安全諮詢和審查服務，以確保解決方案符合IT 安全要求，從而保護客戶的IT 基礎設施和系統。
✍ 提供適用於各種開發技術的技術專業知識和諮詢。
✍ 負責為客戶的整個網路和系統基礎設施分析、評估和推薦最佳的資訊安全技術和解決方案。
✍ 負責從安全角度和角度進行符合客戶安全控制和基線的解決方案評估、POC、UAT。
✍ 就資訊安全問題提供建議和諮詢，並為各個內部團隊和部門提供建議。
✍ 對新出現的內部和外部威脅、技術趨勢和減輕 IT 安全風險的方向進行研究和環境掃描，並透過跨 IT 部門和職能部門的協作進行評估，以改善 IT 安全基礎設施和服務。
✍ 規劃、研究、分析、評估和推薦資訊安全技術解決方案、方向和採用。
✍ 研究和開發新的資訊安全技術以改善和創造商業機會。
✍ 與外部 IT 安全專家和其他 IT 組織建立和維護策略關係/網路和協作，以衡量和改善客戶向利害關係人提供的網路安全基礎設施服務。

要求

✍ 電腦科學、資訊系統、工程學、軟體工程或任何相關學科的學士學位。
✍ 在技術相關領域擁有約 8-10 年的經驗，並具有相關 IT 安全領域和工程的具體專業知識。
✍ 具有撰寫和支援策略性商業策略的經驗，並具有以業務為中心的心態。
✍ 清楚地了解如何根據特定的架構原則將安全架構和設計轉化為詳細的技術組件。
✍ 此角色需要掌握安全工程生命週期並了解企業安全架構環境。
✍ 網路安全治理、指南和風險以及網路安全解決方案領域的基礎知識。
✍ IT 網路的基礎知識以及對 OT 和物聯網架構和工程的更好理解。
✍ 具有強化練習和技術合規性保證練習的經驗。

工作亮點

✅ 僅限馬來西亞本地人。
✅ 每週工作 5 天，採用混合工作安排。
✅ 極佳的成長和職涯發展機會。
✅ 有競爭力的薪資待遇。
✅ 偉大的跨國公司（能源部門）工作文化。

• 對產業/業務領域、相關IT功能產品及應用等的概念認知
• 能夠透過多個場景識別和定義需求，以評估真正的業務問題，並隨後與業務和最終用戶驗證任何更新
• 能夠理解、解釋並向業務、最終用戶和技術團隊有效傳達需求和業務場景
• 需要人壽保險經驗
• 需要 Integral Life(Life/Asia) 或其他基於 CSC SMART/400 的申請經驗
• 良好的英語口語和書面能力
• 擁有Integral Life（人壽/亞洲）保險產品表設定經驗為優勢。
• 至少 1 至 4 年相關經驗。

津貼和福利

• 中心位置
• 開放文化

Network Operation Center (NOC) Analyst - Internship

• Proactively monitor and troubleshoot :
  - systems operations
  - systems problems
  - network outages
  - software issues
• Respond to alarms and alerts from network tools
• Responds to incidents submitted by customers and internal staff via phone call / email / WhatsApp
• Creates and reports tickets for events and incidents
• Provide timely response to all incidents, outages and performance alerts - ISP
• Notify customer and third-party service providers of issues, outages and remediation status
• Recognize, identify and prioritize incidents in accordance with customer business requirements, organizational policies and operational impact
• Determines and categorize the severity of an incident and depending on the circumstances take immediate action to restore service or escalate as appropriate
• Perform basic systems testing and operational tasks - 1st & 1.5 level
• Conducts specific procedures to proactively check the health and welfare of the applications / network equipment
• Gathers the incident history and preserve it for later use
• Perform and generate analysis report based on customer / ISP requests
• Generate monthly report for Operational Review Meeting with customers
• Support technical teams in 24 x 7 environment operational environments with high uptime requirements.
• Work with internal and external technical and service teams to create and/or update knowledge base articles

Security Operation Center (SOC) Analyst - Internship

• Perform proactive monitoring for security log events in 24x7 mode. (Splunk, SIEM, TrendMicro (EDR/IPS/etc) and others 3rd Party software)
• Escalate validated and confirmed incidents to designated incident response team.
• Notify Client of incident and required mitigation works.
• Fine-tune SIEM rules to reduce false positive and remove false negatives / analysis and response to previously unknown hardware and software vulnerabilities.
• Collect global threat intelligence and internal threats then inject actions based on analysis and recommendation.
• Provide advisories and threat intelligence based on new trends, threats, emerging campaigns, malicious attacks, hacker group.
• Proactively research and monitor security information to identify potential threats that may impact the organisation.
• Develop and distribute information and alerts on required corrective actions to the organisation.
• Assist the Level 1 or Level 2 with monthly and ad-hoc reporting - responsible for completing statistical and status reports, as well as providing fast and timely responses.
• Support technical teams in 24 x 7 environment operational environments with high uptime requirements.

Perks & Benefits

• Nearby public transport
• Central location
• Free snacks / Happy hours
• Regular team activities
• Open culture
• Personal development opportunities

Job responsibilities

• Responsible for business system analysis, data analysis, user acceptance testing, and implementation.
• Understand business and user requests. Translate those needs into functional and technical solutions, supported by thorough and well-documented proposals.
• Support project manager during system implementation.
• Working closely with Technical System Team to resolve application issues and involved in bug fix and enhancement development according to business needs.
• To be able to advise customers as well as to provide functional consulting (i.e. functional processes, workarounds) to customers.
• Work within a team-based environment.

Requirements

• Qualifications: Degree Holder in Computer Science/IT/Mathematics/ Accounting / Engineering / Economics / Actuarial Science or any related fields.
• Desired experience(s): Experience is added Advantage. Fresh Graduates are encouraged to apply.
• Key quality(s): Good Communication and Interpersonal Skills, Time management skills, Learning & Facilitation skills, Strong analytical and system thinking skills, able to work in a team environment, result-oriented and work independently.

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Nearby public transport
• Casual dress code
• Medical insurance
• Personal leave
• Personal development opportunities

Requirement:

·     Degree in Computer Science or Information Technology or related experience.

·     Practical knowledge and experience in MS Visual Studio and .Net development.

·     Minimum 2+ years related working experience. 

·     Strong communication and interpersonal skills.

·     Creative and logical thinking.

Responsibilities: 

      a) System development and support for the following areas :-
        - Intranet
        - company website
        - Visitor Management System (VMS)
        - e-Training System
        - HCL Notes applications and workflows
b)System Administrator for HCL Domino Server and MailMarshal.
c) Design and develop application programs.
d) Systems testing and identify and rectify programming faults.
e) Draft screen and report layouts; prepare and execute testing procedures.
g) Responsible for data integrity and security.
h) Conduct application training to end-users.

 i) Any other duties as instructed by superior from time to time.

Perks & Benefits

• Commission and bonus
• Flexible working hours
• Casual dress code
• Regular team activities
• Medical insurance
• Personal leave
• Open culture
• Personal development opportunities