IT Security Engineer

1. Security Operations & Incident Response

• Monitor and investigate security alerts (directly or via SOC)

• Lead or support incident response for:

➢ Malware / ransomware

➢ Phishing and account compromise

➢ Insider threats

➢ Data leakage incidents

• Coordinate containment, eradication, and recovery activities

• Conduct post-incident root cause analysis and improvement actions

2. Vulnerability & Patch Management

• Perform vulnerability scanning and risk assessment

• Analyse scan results and prioritize remediation based on business risk

• Coordinate patching with IT and application teams

• Track remediation progress and report risk exposure

3. Security Tool Ownership

• Own day-to-day operation of security platforms such as:

➢ SIEM / SOAR

➢ EDR / XDR

➢ Email and web security

➢ DLP, CASB

• Tune detections, improve signal quality, and reduce false positives

• Integrate security tools with enterprise systems

• Advantage if verse in tools like Sentinel / Securonix

4. Threat Management & Intelligence

• Track emerging threats, vulnerabilities, and attack trends

• Assess relevance and impact to the organization

• Translate threat intelligence into actionable controls and detections

Requirement:

• Degree in Computer Science/Information Technology or equivalent
• At least 3 years’ experience in IT
• Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and above)
• Experience in using security tools (E.g. Security Endpoint solutions, CyberArk, Tenable Nessus, Securonix, Sentinel))
• Certified with one or more of the following: QISP, CISSP, Cybersecurity Nexus, CompTIA Security+