DFIR Consultancy, Incident respond and Investigation (Cyber Security).

Company Introduction:

ITSEC Asia is an international information security firm offering a wide range of high-quality cyber security services and solutions.

We have four pillars in supporting our customer with their security needs, Red Team exercise, GRC, MSS, DFIR Services.

Other departments include Finance, Sales and Project management team.

https://itsec.group/

Responsibilities:

In Singapore, we need a Senior DFIR consultant to lead a team of fellow cyber security consultants by being a Role Model, Coaching and Guiding them in providing various cyber security investigation, review and assessment on our customer’s Cii and Non Cii infrastructure.

The Digital Forensic and Incident Response team operating environment are as follows:

· In respond to retainer service or ad hoc incident response needs from customer.

· Tools used can be MS Defender, Sophos, Nextron, EclecticIQ, QRadar, Dell Securework, Elastic, MS Sentinel, Sentinel1, Celebrite, Magnet, Bulk Extractor, GREP, Sumuri Paladin.

· Consult, review, refine or/and develop SIRP (security incident response plan), Cyber Security Incident Playbooks for customer.

· Conduct cyber security awareness and Table Top Exercise for Operation Team, Senior Management and Board Members.

· To react to alerts and work with ITSEC regional MSS/Customer Custodian by providing Lvl 2 or Lvl 3 “in country” support.

· To provide proactive purposeful Threat Hunting, or Compromise Assessment activities.

· To Provide Digital Forensic for root cause analysis, for containment and continous improvement.

· To provide investigation on the root cause and the robustness of the customer's data governance under PDPA guidlines.

· To provide eDiscovery, imaging is a typical task during investigation activities.

General

· Stay abreast of current and emerging security technologies for cloud and on-premises, as well as the associated security threats and risks. Design security architecture and control measures to mitigate the relevant threats and risks.

· Align and provide input to sales/business development team to develop creative solution, formulate business strategies to ensure success of ITSEC business goals.

· Ensure quality of work and Reviewing consultant output is a constant task.

· Align with business goals to ensure the consultants are up to their task thru’ a yearly training program is part of the role.

· Evaluating tools and findings ways to have win/win outcome with supplier/customer is vital to our business.

· Working with Project Managers Ensuring cyber security projects comply to information control, Quality Management System (QMS) and contractual requirements while taking care of the welfare of the consultants.

· Add value by Communicating with key stakeholders in a project debrief and working as a consulting head to help customer improve their holistic security posture.

· Work together with Country Head and Business Owners to ensure effectiveness, productivity and profitability is achieved.

The Successful Candidate:

Degree or Diploma in any of the following fields: IT or Computer Science (a plus) or Others.

Minimum 3 years of relevant Consulting, Delivery, Operation or/and Management experience.

Excellent communication skills, both oral and written, with the ability to pitch ideas and manage stakeholders.

Good analytical, organization and planning skills.

A team player who can work independently.

Ability with work in multi-cultural environment

Advantageous to have:

Experience in ICT Industry, Enterprise, Telco and/or Government.

Experience in leading DR or IR events.

Knowledge in standard IT/Cyber Security, PDPA, Pii policies, guidelines.

Knowledge in Information systems, infrastructure topology, virtual machine technology, cloud, networking and IT security, Windows, MAC OS, Andriod, IOS with professional certifications are preferred.

A plus with related security, audit, risk certification such as CHFI GCIH, GNFA, OSIR, OSTH