Assistant Manager, IT Security

Open 54d

IT Security

Develop and implement application security processes, including identifying application security weaknesses, risk analyses, developing security strategies, and performing penetration tests/security assessments.
Align organizational security strategy with overall business and technology strategy.
Review and approve installation of firewall, VPN, routers, IDS scanning technologies and servers.
Respond immediately to security-related incidents and provide thorough remedial solutions and analysis.
Identify security threats and risks in the operating environment, and in cooperation with the other teams, analyses the network environment and its current state of security readiness.
Review risk assessment undertaken by the first line of defense to adhere to the company’s risk control over IT vendor/ partner.
Implemented education program for user security awareness and security compliance.

SecOps

Responsible for security information and event management (SIEM), incident tracking, and threat intelligent.
Responsible for security operation automation using SOAR (Security Orchestration, Automation, and Response) for detecting vulnerability, threats and response automatically.
Constantly monitoring for attacks and intrusions.
Analysis our current security measures to detect potential threats, recommending enhancements, identifying areas of weakness, and responding promptly to possible security breaches.
Write/configure necessary scripts/ rules for vulnerability/ threats analysis and detection.
Support to prepare management updates on security risks, compliance to relevant local and group stakeholders.
Looking for vulnerabilities and risks in hardware and software. Work closely with stakeholders to mitigate and fix within SLA.

Respond to and investigate cybersecurity incidents

Investigate security breaches and other cyber security incidents. Document security breaches and assess the damage they cause.
Analyze system logs, define attacking methods, collect attacker’s traces and start searching for suspect.
Other tasks assigned by line manager.

Knowledge Skills and Experience:

Bachelor’s degree in computer science, Network Engineer, Cyber Security or a related technical field.
At least 3 years of working experience in information security or application security engineering.
Experience with incident management and response, web application penetration testing, vulnerability assessments and source code analysis.
Knowledge of web application development best practices and secure coding guidelines.
Familiar with Security solutions such as SIEM and SOAR.
Knowledge of IT Security controls, TRM guidelines, standards ISO, CIS, NIST, OWASP is a plus.
We encourage candidates from all backgrounds to apply.

See also