Total 27 technical analyst job vacancies in Legal / Public / Security category

●As a Level 2 Cyber Defense Operations Center (CDOC) Senior Analyst, you will work in advanced security operations with a focus on SIEM and SOAR technologies, driving detection and response. You’ll be responsible for helping L3 in optimizing detection rules and managing high-severity incidents from triage to resolution.

● Your primary responsibility will be helping Level 1 analyst in analysis of incidents and assisting Level 3 on day-to-day operation.

● This role requires medium level technical expertise, team player quality, and a proactive approach to evolving threats.

Qualifications & Experience

●Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field. A Master's degree or relevant certifications (e.g., SANS/GIAC, ECIH, GCIH, CEH, DFIR) may be preferred.

●4-7 years of total experience in SOC in a large multi-national organization or in a known MSSP. In addition, candidate should possess at least 2 years of working experience on SOAR solutions.

Responsibilities

●Run daily SOC operations including SIEM/SOAR tuning, alert triage, and coordinated incident response to ensure effective real-time threat monitoring.

●Handlle end-to-end security incident analysis, containment, mitigation, and reporting, leveraging SIEM/SOAR insights and cross-team coordination for swift resolution.

●Work on high priority incidents or escalated incidents from L1

●Assist L3 in any adhoc investigation, fine-tuning security solution.

●Continuously enhance SIEM/SOAR/XDR alert use cases and threat detection capabilities.

●Research emerging threats, vulnerabilities, and attack techniques to improve defenses.

●Document incident response activities and produce detailed reports for stakeholders.

●Conduct post-incident reviews to drive improvements in tools, processes, and readiness.

●Maintain detailed incident records, contribute to reporting, and support audit readiness.

●Guide and train junior analysts, promoting best practices and continuous improvement within the SOC.

●Stay up to date on emerging threats and technologies to continuously evolve SOC capabilities.

●Support comprehensive asset inventory and ownership mapping to ensure full monitoring coverage.

Technical & Soft Skills:

●Deep hands-on experience with technologies like SIEM, SOAR, XDR such as Google Chronicle, Crowdstrike Logscale, Splunk.

●Strong working knowledge of endpoint security tools and concepts, including EDR (CrowdStrike, Defender, Cortex), DLP, and MDM.

●Strong knowledge of MITRE ATT&CK, NIST CSF frameworks, and cyber kill chain concepts.

●Good understanding of network security, operating systems, and hybrid cloud environments (Cloud, On-Prem, VDI).

●In-depth knowledge of threat landscapes and technical security concepts.

●Strong grasp of network protocols, OS internals, and security technologies.

●Familiar with compliance standards such as NIST CSF and ISO 27001.

●Ability to work under pressure, especially during critical security incidents.

●Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.

●Skilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures

●Very high attention to detail, with strong skills in managing/presenting data and information.

●Demonstrable conceptual, analytical and innovative problem-solving and evaluative skills.

●Good communication and interpersonal skills to effectively collaborate with stakeholders, and internal teams.

Summary:
The successful candidate will support tasks within the data Protection Portfolio, such as provision of computing resources, installing and configuring security software, managing network/firewall requests, account provisioning, backend integrations (SSO, SIEM, SOAR, MyAccess, DataDog), and creation of support documentation for operationalization.

• Possess a degree in Computer Science/Information Technology or related fields.
• Possess a strong combination of technical and analytical skills incybersecurity, including expertise in data loss prevention, data securityposture management, enterprise digital rights management, and general datasecurity technologies.
• Hands-on experience in implementing and operationalizing data securitysolutions and data protection, for both structured and unstructured data,specifically:
• Data discovery, classification, and labelling
• Data encryption, masking, tokenization
• Data Loss Prevention (DLP)
• Enterprise Digital Rights Management / Information Rights Management
• Privacy Enhancing Technologies and Confidential Computing
• Key and certificate management
• Hardware Security Modules (HSM)

Skillset(Must have)

• Secure file transfer and data store (including SaaS solutions)
• Familiarity with Cloud security and data security and protection in Cloud environments (e.g., AWS, Azure, Google Cloud).
• Possess scripting and coding skills, with proficiency in Java, Python, C#, orsimilar programming languages, and good understanding of REST API’s and JSON.
• Ability to create and maintain automation scripts.
• Familiarity with Cloud security and data security and protection in cloudenvironments (e.g., AWS, Azure, Google Cloud).
• Strong written and verbal communication skills, with the ability to conveytechnical information to non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams and build strongworking relationships.
• Apply critical thinking skills to analyze complex security issues, evaluate potential solutions, and make well-informed decisions.

Job Overview

We are seeking a cybersecurity professional to support technology risk management, security operations, and incident response within a regulated enterprise environment. This role combines governance and compliance responsibilities with hands-on blue team security operations, ensuring systems and data remain secure, resilient, and compliant with regulatory expectations.

The ideal candidate is comfortable operating in fast-paced environments, balancing risk assessment, operational monitoring, and incident handling.

Key Responsibilities

Technology Risk and Regulatory Compliance

• Perform technology risk assessments aligned with business objectives and regional regulatory requirements
• Maintain and update security policies, SOPs, risk registers, and governance documentation
• Conduct third-party and regulatory compliance assessments
• Support certification, audit, and compliance activities, including remediation of findings

Security Operations and Monitoring

• Monitor network traffic, systems, and applications for suspicious behavior and potential security incidents
• Identify vulnerabilities and weaknesses across infrastructure, systems, and applications
• Perform security control reviews covering areas such as email security, endpoint protection, applications, and data security
• Deploy, configure, and manage security technologies including endpoint protection, IAM, PAM, XDR, and SIEM platforms
• Execute threat detection, vulnerability management, security policy enforcement, and continuous control monitoring
• Develop and implement response actions to contain and mitigate security incidents
• Collaborate with technical teams and stakeholders to coordinate remediation activities

Incident Response and Forensics

• Lead and support the full incident response lifecycle including detection, triage, containment, eradication, and recovery
• Handle escalated security incidents and prepare incident reports detailing root cause, forensic findings, and mitigation recommendations
• Conduct forensic analysis of endpoints, logs, and network traffic to determine impact and scope
• Coordinate response efforts with internal stakeholders and external partners during major incidents
• Develop, maintain, and enhance incident response playbooks and reporting templates

Requirements

Experience and Qualifications

• 3 to 5 years of experience in technology risk, security operations, or blue team roles
• Diploma or Degree in Information Technology, Cybersecurity, or a related discipline
• Proficiency in both English and Mandarin to support collaboration with Mandarin-speaking stakeholders

Technical and Domain Expertise

• Strong knowledge of technology risk management and defensive security strategies
• Hands-on experience with endpoint security, IAM, PAM, and access control solutions
• Solid understanding of security frameworks, layered defense concepts, and monitoring tools such as SIEM
• Familiarity with endpoint, VPN, and data protection technologies
• Experience with vulnerability management, security configuration, and automation
• Digital Forensics and Incident Response (DFIR) experience is a strong advantage
• Ability to analyze security issues and recommend practical, effective remediation measures

Certifications (Nice to Have)

• CompTIA Security+
• CISSP Relevant vendor or industry security certifications

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

Senior Technical Officer

• Location: Office at Outram Road | Site will be Islandwide

• Working Hours: Mon to Fri [830am – 6pm] Willing to commit to rotational standby duties for activations outside working hours

• Salary: Basic up to $3500 + Transport $750 (car) or $400 (motorbike) or by reimbursement basis + HP by reimbursement basis

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.

• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.

Interested applicants can also send your resume to (Liwenpoh741#gmail.com) and allow our consultant to match you with our clients. No Charges will be incurred by Candidates for any service rendered.

WA ME 9735 4019 for more Senior Technical Officer role

Responsibilities:

• Execution of service and maintenance workflow.

• Liaise closely with client representatives on all service/maintenance related issues.

• Mentor a team of service team members.

• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.

• Manage day-to-day client interactions and expectations for optimal results.

• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.

• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.

• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.

• Perform any other technical tasks as and when required.

POH LI WEN REG NO: R25136683

THE SUPREMEHR ADVISORY PTE LTD EA NO: 14C7279

Job description

The main function of the Legal Operations Analyst/ Law Enforcement Associate is to perform a variety of legal and operational duties in support of the Law Enforcement Outreach team.

Responsibilities

Support the APAC Law Enforcement Outreach Team with:

• Managing escalations from law enforcement in relation to content reports
• Managing escalations from law enforcement in relation to issues with data disclosures
• Managing escalations from law enforcement in relation to hacked accounts
• Managing escalations from law enforcement in relation to verification of police accounts
• Manage inquiries from law enforcement about law enforcement issues
• Program manage internal follow-up actions with cross-functional stakeholders arising from Enhanced Engagements with law enforcement partners
• Managing and implementing internet safety and security programs with law enforcement partners
• Engage with internal cross-functional teams on resolving issues of concern flagged by law enforcement partners
• Engage with internal cross-functional team on improving operational workflow processes

Skills and experience

Essential:

• Prior background working with law enforcement
• Superior data analytical skills and distilling recommendations
• Experience with metric driven processes and technology improvements
• Excellent verbal and written communication skills, problem solving skills, attention to detail and interpersonal skills.
• Strong ability to work independently, be organized, and manage one's time.
• Strong ability to create relationships with cross-functional teams
• Work to improve cross-functional relationships with internal teams
• Ability to multi-task and change direction quickly
• Ensure and maintain confidentiality of all appropriate communications and documentation
• Communicate daily with internal partners and externally with law enforcement contacts, while exhibiting the highest degree of professionalism, courtesy and diplomacy
• Track, prioritize, and assign all incoming written and oral communications, as necessary, to appropriate team member for response

Preferred:

• Prior experience at a tech company
• Experience managing operations

*This role may involve exposure to potentially graphic and/or objectionable content including but not limited to graphic images, videos and writings, offensive or derogatory language, and other potential objectionable material. I.e. child exploitation, graphic violence, animal abuse, self-injury and other content which may be considered offensive or disturbing.

We regret to inform that only shortlisted candidates will be approved.

EA Reference: R22104900 Zheng Qimei

Allegis Group Singapore Pte Ltd, Company Reg No. 200909448N, EA License No. 10C4544

AVN Digital is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success, we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire a Security Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

JOB TYPE:

Long Term Contract

Job Description Overview

Responsibilities:

1. Security Policy Development and Enforcement

- Develop, implement, and maintain IT security policies, procedures, and protocols.

- Ensure that security measures align with business needs, regulatory requirements, and industry standards.

- Review and update policies regularly to address emerging threats.

2. Risk Management

- Assess potential security risks and vulnerabilities within the IT infrastructure.

- Perform risk analysis and recommend appropriate security controls.

- Implement security measures to mitigate identified risks.

3. Incident Response and Management

- Lead efforts in detecting, investigating, and responding to security breaches and incidents.

- Establish incident response plans and procedures for handling security threats.

- Work with other teams (e.g., legal, communications) to manage incident communications and post-incident analysis.

4. Security Monitoring and Auditing

- Continuously monitor IT systems, networks, and applications for signs of security incidents or breaches.

- Implement and maintain security tools, such as firewalls, antivirus software, and intrusion detection systems.

- Regularly audit systems to ensure compliance with security standards and best practices.

5. Compliance and Regulatory Requirements

- Ensure the organization complies with relevant security standards, such as GDPR, HIPAA, PCI-DSS, or other industry regulations.

- Conduct regular compliance assessments and audits.

- Collaborate with legal and regulatory bodies to ensure that security measures are in place.

- Generate reports for accounts review, logs reviews, patch status review, hardening compliance, etc

- Worked with systems owners to ensure vulnerabilities or non-compliances are fixed.

6. Training and Awareness

- Provide cybersecurity training and awareness programs to employees to promote safe practices.

- Conduct simulations and drills (e.g., phishing exercises) to test employee preparedness.

- Keep staff informed about current cybersecurity threats and best practices.

7. Network and System Security

- Oversee the design and implementation of secure network architectures.

- Ensure the proper configuration of firewalls, encryption protocols, VPNs, and other security mechanisms.

- Conduct regular security assessments and penetration tests to identify weaknesses in systems.

8. Collaboration and Communication

- Collaborate with other departments, such as IT operations, legal, and compliance teams, to ensure comprehensive security measures.

- Act as a liaison between management and technical teams for cybersecurity matters.

- Communicate security risks and threats to executive leadership in a clear and actionable manner.

9. Security Tool Selection and Implementation

- Evaluate, select, and deploy security tools, software, and solutions to enhance system protection.

- Stay up-to-date with emerging security technologies and trends.

- Ensure that the tools are properly configured and maintained.

10. Disaster Recovery and Business Continuity Planning

- Develop and implement disaster recovery and business continuity plans to ensure that the organization can continue to operate after a security incident or disaster.

- Ensure backups are conducted regularly and can be restored in the event of a system failure or cyberattack.

11. Vendor and Third-Party Security

- Assess the security practices of third-party vendors and partners to ensure they meet security requirements.

- Develop and enforce security standards for external service providers and contractors.

12. Reporting and Documentation

- Generate regular reports on the state of the organization's IT security.

- Document security incidents, actions taken, and lessons learned.

- Maintain records of security assessments, audits, and compliance activities.

Qualifications

Requirements

- Typically, 5+ years of experience in IT security or a related role (such as network security or cybersecurity analyst) is required.

- Proven experience in handling and resolving security incidents, breaches, and vulnerabilities

- Experience with security audits and ensuring compliance with standards like IM8, AGO etc

- Deep understanding of cybersecurity principles: Knowledge of encryption, access control, firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and other security technologies.

- Risk Management: Proficiency in identifying, assessing, and mitigating cybersecurity risks.

- Networking knowledge: Understanding of network protocols (TCP/IP, DNS, HTTP/S, etc.), network security practices, and technologies (e.g., firewalls, routers, VPNs).

- Operating Systems: Strong familiarity with various operating systems (Linux, Windows, Unix, etc.) and their security configurations.

- Incident Response: Expertise in managing and responding to security incidents, including identifying, mitigating, and reporting breaches or attacks.

- Vulnerability Assessment & Penetration Testing: Ability to assess vulnerabilities and conduct penetration tests to identify weaknesses in systems.

- Security Tools: Proficiency in security software and tools such as SIEM (Security Information and Event Management), antivirus programs, firewalls, encryption tools, and network monitoring solutions.

- Handle security incidents and alerts from GCSOC, GICS and security devices

- Leadership and Management Skills: Ability to lead teams and manage cross-functional collaboration, especially during incidents or implementation of security measures.

- Strong Analytical Skills: Ability to analyze security incidents, logs, and vulnerabilities and make informed decisions to mitigate risks.

- Problem-Solving: Strong problem-solving ability, especially in high-pressure situations, such as security incidents or breaches.

- Communication Skills: Ability to clearly communicate complex technical issues to non-technical stakeholders, including senior leadership, staff, and external partners.

- Familiar with AWS or Azure Security requirements is added advantage

- Having experience in WOG environment is a plus

- Having experience in GCC Cloudscape and Glasspanel is a plus

- Preferably with CISA for Governance, Comptia Security +, CEH and ITIL certification.

CONSULTANT DETAILS

Consultant Name: Khalid Farooq

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and AVN Digital's personal information and privacy policy

Scope of Work

Vulnerabilities Management

1. Arrange Bi-weekly vulnerability review meeting with application team.
2. Consolidate the results from the various vulnerabilities platform (i.e. AppScan, SonarQube and Nexus Scanning)
3. Perform quarterly result consolidating and seek risk acceptance for extension of vulnerability remediation timeline.
4. Perform result consolidating and tracking of risks and timeline from other sources.

Security Testing

1. Prepare all the pre-requisite (e.g. software installation, firewall request, laptop request) to ensure security testing can be started timely.
2. Perform technical resolution for AppScan, SonarQube, Nexus and SHIP-HATS or any other security tools when required.
3. Conduct network vulnerability scan (Nmap scanning).

Security Training

1.    Administer the Secure Code Warrior training

Other Security Related Task

1. Track and coordinate the regular review activities of all IT systems
2. Track and coordinate the regular review activities for all SaaS

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success, we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire a Security Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

JOB TYPE:

Long Term Contract

Job Description Overview

Responsibilities:

1. Security Policy Development and Enforcement

- Develop, implement, and maintain IT security policies, procedures, and protocols.

- Ensure that security measures align with business needs, regulatory requirements, and industry standards.

- Review and update policies regularly to address emerging threats.

2. Risk Management

- Assess potential security risks and vulnerabilities within the IT infrastructure.

- Perform risk analysis and recommend appropriate security controls.

- Implement security measures to mitigate identified risks.

3. Incident Response and Management

- Lead efforts in detecting, investigating, and responding to security breaches and incidents.

- Establish incident response plans and procedures for handling security threats.

- Work with other teams (e.g., legal, communications) to manage incident communications and post-incident analysis.

4. Security Monitoring and Auditing

- Continuously monitor IT systems, networks, and applications for signs of security incidents or breaches.

- Implement and maintain security tools, such as firewalls, antivirus software, and intrusion detection systems.

- Regularly audit systems to ensure compliance with security standards and best practices.

5. Compliance and Regulatory Requirements

- Ensure the organization complies with relevant security standards, such as GDPR, HIPAA, PCI-DSS, or other industry regulations.

- Conduct regular compliance assessments and audits.

- Collaborate with legal and regulatory bodies to ensure that security measures are in place.

- Generate reports for accounts review, logs reviews, patch status review, hardening compliance, etc

- Worked with systems owners to ensure vulnerabilities or non-compliances are fixed.

6. Training and Awareness

- Provide cybersecurity training and awareness programs to employees to promote safe practices.

- Conduct simulations and drills (e.g. phishing exercises) to test employee preparedness.

- Keep staff informed about current cybersecurity threats and best practices.

7. Network and System Security

- Oversee the design and implementation of secure network architectures.

- Ensure the proper configuration of firewalls, encryption protocols, VPNs, and other security mechanisms.

- Conduct regular security assessments and penetration tests to identify weaknesses in systems.

8. Collaboration and Communication

- Collaborate with other departments, such as IT operations, legal, and compliance teams, to ensure comprehensive security measures.

- Act as a liaison between management and technical teams for cybersecurity matters.

- Communicate security risks and threats to executive leadership in a clear and actionable manner.

9. Security Tool Selection and Implementation

- Evaluate, select, and deploy security tools, software, and solutions to enhance system protection.

- Stay up-to-date with emerging security technologies and trends.

- Ensure that the tools are properly configured and maintained.

10. Disaster Recovery and Business Continuity Planning

- Develop and implement disaster recovery and business continuity plans to ensure that the organization can continue to operate after a security incident or disaster.

- Ensure backups are conducted regularly and can be restored in the event of a system failure or cyberattack.

11. Vendor and Third-Party Security

- Assess the security practices of third-party vendors and partners to ensure they meet security requirements.

- Develop and enforce security standards for external service providers and contractors.

12. Reporting and Documentation

- Generate regular reports on the state of the organization's IT security.

- Document security incidents, actions taken, and lessons learned.

- Maintain records of security assessments, audits, and compliance activities.

Qualifications

Requirements

- Typically, 5+ years of experience in IT security or a related role (such as network security  or cybersecurity analyst) is required.

- Proven experience in handling and resolving security incidents, breaches, and vulnerabilities

- Experience with security audits and ensuring compliance with standards like IM8, AGO etc

- Deep understanding of cybersecurity principles: Knowledge of encryption, access control, firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and other security technologies.

- Risk Management: Proficiency in identifying, assessing, and mitigating cybersecurity risks.

- Networking knowledge: Understanding ofnetwork protocols (TCP/IP, DNS, HTTP/S, etc.), network security practices, and technologies (e.g., firewalls, routers, VPNs).

- Operating Systems: Strong familiarity with various operating systems (Linux, Windows, Unix, etc.) and their security configurations.

- Incident Response: Expertise in managing and responding to security incidents, including identifying, mitigating, and reporting breaches or attacks.

- Vulnerability Assessment & Penetration Testing: Ability to assess vulnerabilities and conduct penetration tests to identify weaknesses in systems.

- Security Tools: Proficiency in security software and tools such as SIEM (Security Information and Event Management), antivirus programs, firewalls, encryption tools, and network monitoring solutions.

- Handle security incidents and alerts from GCSOC, GICS and security devices

- Leadership and Management Skills: Ability to lead teams and manage cross-functional collaboration, especially during incidents or implementation of security measures.

- Strong Analytical Skills: Ability to analyze security incidents, logs, and vulnerabilities and make informed decisions to mitigate risks.

- Problem-Solving: Strong problem-solving ability, especially in high-pressure situations, such as security incidents or breaches.

- Communication Skills: Ability to clearly communicate complex technical issues to non-technical stakeholders, including senior leadership, staff, and external partners.

- Familiar with AWS or Azure Security requirements is added advantage

- Having experience in WOG environment is a plus

- Having experience in GCC Cloudscape and Glasspanel is  a plus

- Preferably with CISA for Governance, Comptia Security +, CEH and ITIL certification.

CONSULTANT DETAILS

Consultant Name: Khalid Farooq

Avensys Consulting Pte Ltd

EA Licence 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys'personal information and privacy policy

As our Security Engineer you’ll be responsible for monitoring, analysing, and responding to Cyber Security threats while proactively addressing vulnerabilities through detailed assessments and strategic mitigation plans. You will design robust security measures across applications, data, and identity management to ensure a robust security posture for NEXTDC, as well as conduct threat detection activities, tuning of security tools, and assessments of the efficacy of existing security measures and potential improvements. 

Within this position, your scope will cover:

• Conducting continuous monitoring to detect, analyse, and respond to Cyber Security incidents in real-time
• Analysing security data and trends to predict potential threats and proactively address vulnerabilities
• Participating in Cyber Security incident response activities, documenting incidents and crafting mitigation strategies
• Conducting detailed security assessments to evaluate the effectiveness of existing security measures
• Managing the deployment and operation of Cyber Security tools
• Implementing new security technologies and processes as part of an ongoing commitment to Cyber Security excellence
• Developing and implementing strategies for threat detection and vulnerability management
• Designing and executing security measures across applications, data, and identity and access management, to ensure a robust security posture across all NEXTDC infrastructure

Your technical skillset will include:

• Cyber Security technologies such as Zscaler for secure web gateways and Defender for endpoint security
• Strong analytical skills with experience in security data analysis, threat intelligence, and proactive threat hunting
• Ability to configure and manage security solutions like ClamAV and Junos for optimal performance and threat response

ROLE OVERVIEW
The IT Security Executive / Analyst is responsible for managing vulnerability assessments, supporting security testing activities, administering security training programmes, and coordinating regular security review activities across IT systems and SaaS platforms. This role works closely with System Administrator (SA) OICs and User OICs to ensure timely remediation and compliance with security policies.

KEY RESPONSIBILITIES

Vulnerabilities Management

• Arrange and facilitate bi-weekly vulnerability review meetings with application SA OICs.

• Consolidate results from vulnerability platforms including AppScan, SonarQube, and Nexus Scanning.

• Perform quarterly result consolidation and seek risk acceptance for extensions to vulnerability remediation timelines.

• Track and consolidate risks and timelines from other vulnerability sources.

• Perform waiver of Nexus policy violations in SHIP-HATS when instructed.

Security Testing

• Prepare all pre-requisites (e.g. software installation, firewall requests, laptop requests) to ensure security testing commences in a timely manner.

• Provide technical resolution support for AppScan, SonarQube, Nexus, SHIP-HATS, and other security tools as required.

• Conduct network vulnerability scans using Nmap scanning tools.

Security Training

• Administer the Secure Code Warrior training platform, including enrolment of new members and consolidation of training results.

Other Security-Related Tasks

• Track and coordinate regular review activities for all IT systems with SA OICs.

• Track and coordinate regular review activities for all SaaS platforms with User OICs.

Facilitate the onboarding of non-staff in ISGGs and ensure they receive appropriate security training.

REQUIREMENTS

Education & Experience

• Degree in Information Technology, Cybersecurity, Computer Science, or a related field.

• Minimum 1–3 years of experience in an IT security or related role.

Technical Skills

• Hands-on experience with vulnerability management tools such as AppScan, SonarQube, or Nexus.

• Familiarity with SHIP-HATS and CI/CD security pipelines.

• Experience conducting network vulnerability scans using Nmap or equivalent tools.

• Basic understanding of secure coding practices and OWASP principles.

Soft Skills

• Strong coordination and stakeholder management skills.

• Meticulous attention to detail with the ability to track and report on multiple concurrent issues.

• Good written and verbal communication skills.

• Ability to work independently and manage priorities in a fast-paced environment.

Job Description

Responsibilities:

• EDR Solution Management: Develop, configure, and maintain EDR solutions, tailoring them to specific Business needs and security requirements.
• Coverage: Develop baseline asset inventories and maintain owners for systems in the inventory. Always ensure to achieve 100% coverage in EDR deployment.
• Daily Operations: Perform routine tasks like tool administration, tuning, malware quarantining, and ensuring EDR tools effectively support security monitoring and incident response.
• Threat Detection and Response: Analyze EDR tool output to optimize security monitoring, support incident detection, and identify potential threats.
• Policy and Procedure Development: Develop, implement, and update EDR policies, rules, and configurations to align with security standards and threat intelligence.
• Collaboration: Work closely with SOC, threat intelligence, and other security teams to improve overall security posture.
• Security Assessment and Improvement: Offer expert advice and recommendations for improving security posture, mitigating vulnerabilities, and adhering to security standards.
• Incident Response: Participate in incident response efforts, utilizing EDR tools to investigate, contain, and remediate security incidents.
• Documentation and Reporting: Document findings, actions taken, and lessons learned for each incident. Prepare periodic security reports and contribute to compliance audits.
• Knowledge Sharing and Training: Guide and mentor Team, provide training sessions, and share knowledge on endpoint security best practices.
• Vendor Coordination: Coordinate with EDR vendors for troubleshooting, enhancement, and maintenance of endpoint security solutions.
• Compliance: Contribute to compliance audits and ensure adherence to security standards.
• Staying Up-to-Date: Remain current on the latest security threats and trends.

Technical & Soft Skills:

• Experience in scaling an enterprise EDR program across multiple environments seamlessly with proper strategy and prioritization.
• Strong knowledge of endpoint security technologies and concepts (EDR, DLP, MDM). Hands-on experience and deep knowledge of EDR technologies like CrowdStrike, Defender, Cortex.
• Experience with automated response via SOAR platforms and security orchestration.
• Understanding of network security, operating systems, and cloud environments.
• Experience managing endpoints in hybrid environments (Cloud, On-Prem, VDI).
• Advanced understanding of technical information security concepts related to threat landscapes.
• Strong understanding of network protocols, operating systems, and security technologies.
• Familiarity with compliance frameworks like ISO 27001, NIST, etc.
• Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.
• Skilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures
• Very high attention to detail, with strong skills in managing/presenting data and information.
• Demonstrable conceptual, analytical and innovative problem-solving and evaluative skills.
• Excellent communication, collaboration, and interpersonal skills.

●As a Level 1 Cyber Defense Operations Center (CDOC) Analyst, you will monitor different security solutions with focus on SIEM and SOAR technologies. You’ll be responsible for triaging security incidents, involving L2/L3 incase of high and critical incident. This role requires medium level of technical knowledge about network, email and Operating systems etc , team player quality, and a proactive approach to evolving threats.

Role and Responsibilities 

●Run daily Security monitoring, alert triage, and coordinated incident response to ensure effective real-time threat monitoring.

●Continuously enhance SIEM/SOAR/XDR alert use cases and threat detection capabilities.

●Research emerging threats, vulnerabilities, and attack techniques to improve defenses.

●Collaborate across teams to improve the organization’s threat detection and response maturity.

●Maintain detailed incident records, contribute to reporting, and support audit readiness.

●Share knowledge with about new findings, update SOP, promoting best practices and continuous improvement within the SOC.

●Ensure detection and response processes align with regulatory and organizational standards.

●Stay up to date on emerging threats and technologies to continuously evolve SOC capabilities.

●Support comprehensive asset inventory and ownership mapping to ensure full monitoring coverage.

Technical & Soft Skills:

●Good hands-on experience with technologies like SIEM, SOAR, XDR such as Google Chronicle, CrowdStrike, Logscale, Splunk.

●Good working knowledge of endpoint security tools and concepts, including EDR (CrowdStrike, Defender, Cortex), DLP, and MDM.

●Strong knowledge of MITRE ATT&CK, NIST CSF frameworks, and cyber kill chain concepts.

●Good understanding of network security, operating systems, and hybrid cloud environments (Cloud, On-Prem, VDI).

●In-depth knowledge of threat landscapes and technical security concepts.

●Strong grasp of network protocols, OS internals, and security technologies.

●Familiar with compliance standards such as NIST CSF and ISO 27001.

●Strong organizational and time management skills with the ability to coordinate and prioritize multiple tasks simultaneously.

●Ability to work under pressure, especially during critical security incidents.

●Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.

●Skilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures

Good communication and interpersonal skills to effectively collaborate with stakeholders, and internal teams