Total 28 quality control engineer job vacancies in Legal / Public / Security category in D12 Balestier, Serangoon, Toa Payoh

• Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields.

• At least 3 years of experience working with PAM, IAM/IGA and MFA products.

• Possesses certifications on the following products: Ansible, BeyondTrust, CyberArk, Cisco Duo, RSA SecurID and SailPoint. • Possess working experience in the following areas. Certifications are advantageous.

• - Active Directory, LDAP, Red Hat IdM

• - Solaris OS, RHEL OS, MS Windows Server

• - Oracle Database, MS SQL, MySQL

• Coding experience with Ansible, Python and PowerShell.

• Able to communicate effectively with all levels including non-technical colleagues.

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Key Responsibilities

• Perform implementation, maintenance, support and operation of the project's security monitoring use cases
• Maintain understanding of the architecture and work with security team to understand the use cases to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Adhere to established change management process and other service management process in day-to-day tasks
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Review, propose and generate dashboards and reports to automate monitoring of systems and log and threat intelligence feed ingestion, and reduce low value event escalations
• Build rules and intelligence to detect threats in all monitored assets
• Implement and devise detection method of such threats in our security operations through SIEM use cases etc
• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Review and update data enrichment, including use of threat intelligence to enhance fidelity of detection
• Review and maintain UEBA data sources and use cases

Requirements

• 1- 2 years of experience in security operations in a SOC environment
• 1- 2 years of experience in creating, finetuning and maintaining correlation rules and SIEM dashboards
• Working experience in Regex and/or scripting
• Strong critical thinking / contextual analysis abilities
• Strong investigative and analytical problem solving skills
• Stakeholder management
• Meticulous with an eye for details
• Product certification such as Splunk Enterprise Certified Administrator or equivalent
• Professional certification such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage
• Good understanding of whole of government environment would be an advantage

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

A spin-out of telecom operator MyRepublic, MyRepublic Digital is an end-to-end digital enabler and accelerator that provides companies around the world the technology, skills and expertise needed to create frictionless customer experiences and thriving businesses.

Using a product-led approach, MyRepublic Digital aims to enable, simplify and accelerate digital transformation for aspiring digital brands. Its flagship offering is Encore: a cloud-native, all-digitalplatform-as-a-service that is ready to deploy pre-built with industry best practices and BSS/OSS features.

Role and Responsibilities

The incumbent will be responsible for the systems engineering to maintain the reliability and security of systems supporting a Cloud SAAS platform and some service provider Network Functions.

● Evaluate, integrate, and deploy security tools including Zero-Trust Security, Identity and Access Management, Endpoint Detection and Response, Security Information and Event Management

● Evaluate, integrate, and deploy monitoring tools for Cloud and IT services

● Review system and security logs, create rules and automations to correlate events and incidents, build analysis reports for critical events

● Ensure internal and external compliance audits are completed and due diligence and remediation actions are carried out according to schedule Work with SRE’s and IT Support to test and deploy patches for security vulnerabilities

● Work with CREST-certified VA/PT provider to ensure all assets are scanned and vulnerabilities tracked and remediated

● Maintain Telephony, RADIUS and DNS service uptime of 99.9%

● Design and deploy engineering solutions to provide capabilities including:
○ Monitoring and Alerting
○ Security Lifecycle Management
○ Patching and Integration Testing
○ Infrastructure Orchestration
○ Systems Automation

● Incident Management

● Improve the security, design and reliability of the infrastructure

● Maintain systems documentation

● Accept and meet challenging deadlines

Qualifications

● Degree or Diploma in Computer Science or related field of study

● Experience with the following is preferred:
○ Cloud service providers: AWS /GCP
○ Compliance Standards: ISO27001 / CIS20 / SRII
○ Automation Frameworks: Ansible / Salt
○ Vulnerability Scanners: Accunetix, Tenable
○ WAF/IDS/IPS: Palo Alto / Fortinet / Wazuh
○ IAM: Okta / CyberArk / BeyondTrust
○ Collaboration tools: Slack / Jira / Confluence
○ Source Code Repositories: Gitlab / BitBucket
○ Hypervisors: ESXi / Proxmox
○ Monitoring Tools: Grafana / InfluxDB / Prometheus / Datadog / New Relic
○ Reverse Proxy: NGINX / Traefik

● Strong background in Linux is a must

● Good understanding of Networking

● Ability to write scripts in various languages such as Bash, Python, PHP

● Ability to self-learn

● Well organized, attention to details and able to multitask

● Desire to explore and learn new technologies

What we offer in return:

● Exciting opportunities to create and grow in a rapidly growing organisation that is a disruptor in the telco space.

● Amazing colleagues and culture that encourages you to do your best work while staying authentic and true to yourself.

● A work culture that puts your individual needs at the core: Remote, Hybrid or In-Office – choose a work rhythm that suits you and your team. We focus on outcomes and believe that you can deliver your best work, working anywhere, anytime.

● Wellness first. We believe that wellness goes beyond team celebrations and birthday parties. Our holistic approach to wellness gives you opportunities to recharge, connect and explore, at and outside work. In addition to the standard leave entitlements, we offer:

● 1 day of wellness leave every quarter for you to take or your health and wellbeing, and explore your personal passions.

● 20 days to work from anywhere each year, allowing you more flexibility to explore and connect with your interests while delivering work you will be proud about.

MyRepublic values and behaviour that we look for:

From being the first to launch 1Gbps broadband plans and the first network optimised broadband service for gaming in Singapore, to crafting workplace practices that put wellbeing at its core, our values guide us in everything we do at MyRepublic Digital. It’s the secret sauce that makes us tick. If you espouse the following, we know you would fit in great with us:

● Never Settle: We dream big. We are constantly curious and embrace bold ideas.

● Stronger Together: We create together. We win together, we fail together. We grow together, we celebrate together. We are at our strongest together.

● Empowered to Deliver: We deliver on our commitments. We are empowered to move fast and with confidence to get the right things done.

● We Care: We care for ourselves, one another and our customers. We value authenticity and embrace differences. We create the space to recharge, connect and explore to bring our best selves to work.

We believe that skills, knowledge, and experience can come from a diverse range of life experiences. You may not have ALL the listed requirements for this role but this should not hold back! If you believe that you have what it takes for this position, are willing to learn, and you identify with the values and mission of MyRepublic Digital, we would love to hear from you. We celebrate diversity and look forward to hearing from a diverse group of applicants. We do not discriminate on any factor in our hiring process.

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.

· Perform analysis, prioritization and classification of risk.

· Handle day-to-day security vulnerability assessments and operational request.

· Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.

· Proactive monitoring of remediation plans and progress.

· Schedule security checks in accordance with reporting schedules.

· Continuous enhancement of existing security vulnerability assessment process.

· Verifies security controls are implemented accordingly.

· Review security incident reports

· Evaluate the type and severity of security events

· Assist with establishing procedures for handling detected security events

· Create final incident report detailing the events of the incident

· Prepare periodic status reports for presentation to management

· At least 5 year working experience in vulnerability management and incident response.

· Familiar with at least one vulnerability scanner.

· Strong analytical skills and ability to work independently.

· Good team player as well as strong communications skills with stakeholders at all levels

· Possess QISP, CEH, CISSP and/or related security certification.

· Experience in healthcare industry is an added advantage.

· Degree in Computer Science, Engineering or equivalent.

Job Responsibilities：

• Provide health & Wellness checks to the Infosec hardware and software platforms
• Troubleshoot outages and open support tickets with respective vendors to resolve issues
• Perform maintenance and upgrade tasks including patching of systems
• Assist with hardware installations and upgrades
• Perform capacity management tasks to ensure systems are able to handle the traffic load
• and provide growth forcasts
• Assist with user management across all platforms
• Work with internal infrastructure teams to coordinate installations and cabling of new
• machines
• Perform basic policy work on different platforms to meet detection needs
• Assist with proof of concept projects
• Schedule and perform changes and downtime as needed to ensure continued operations
• Assist with global product rollout and deployment

Requirement：

• 5-6 years of It experience with a min of 3 managing Linux/Unix systems
• Strong understanding of Linux OS administration and operating system fundamentals for
• but not limited to RedHat, Fedora, Ubuntu & CentOS
• Prior experience in Global Financial Institution
• Must be familiar is managing and updating system OS & security patches and firmware
• for systems running Unix operating systems
• Strong understanding and hands knowledge on Shell/Bash scripting to automate and
• simplify repetitive tasks
• Must be familiar with networking fundamentals and operating system level networking
• configurations on a Unix/Linux
• Prior experience in managing devices supporting InfoSec & running embedded Linux will
• be a plus
• Must be able to communicate effectively with global stakeholders in an enterprise
• environment
• Must have strong English skills

It would be appreciated if you can share with me your interest on the same.

Have a friend or family member who may be interested in taking the next step in their career? Help them out by referring them to Ennovatez.

You can email your resume to us at yenpeng@ennovatez.com

We are looking for a dedicated Senior Security Engineer to enhance our cybersecurity posture and ensure compliance across our operations at the client site. The successful candidate will be adept at triaging, understanding, and responding to threats identified by common Security Orchestration, Automation, and Response (SOAR) tools and Security Information and Event Management (SIEM) systems. Experience with TrendMicro, Fortinet, and an understanding of Network Detection and Response (NDR) and Managed Detection and Response (MDR) are critical.

Responsibilities:

• Monitor and analyze data from SIEMs and SOARs to identify and understand potential threats.
• Manage and configure cybersecurity tools such as TrendMicro and Fortinet to protect against threats.
• Provide feedback on compliance and work with teams to enhance cybersecurity measures.
• Develop and maintain an organization-wide cybersecurity framework that aligns with industry best practices and regulatory requirements to decrease threats and vulnerabilities.
• Lead incident response activities, including investigation, documentation, and coordination with relevant stakeholders to mitigate impacts.
• Conduct regular security assessments and penetration testing to identify vulnerabilities and implement corrective measures.
• Develop security awareness training programs to educate employees about cyber threats and safe computing practices.
• Manage security projects to enhance the organization's defense capabilities, including the selection and implementation of new security tools and technologies.
• Provide expert advice on data protection strategies, encryption technologies, and access control mechanisms to protect sensitive information.
• Liaise with external security organizations, industry groups, and regulatory bodies to stay updated on emerging threats and compliance requirements.
• Manage the security ticket lifecycle, from initial report to resolution and closure, prioritizing based on risk and impact to the business to ensure compliance with SLAs.
• Conduct regular reviews of security incident and request handling processes to identify opportunities for improvement, driving initiatives to enhance response times, effectiveness, and client communication.
• Provide detailed reports and analysis on security incidents and resolution performance, contributing to continuous improvement in security services and SLA adherence.

Requirements:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• Minimum of 5 years of experience in cybersecurity, with a strong background in threat analysis and protection.
• Proficient in using TrendMicro, Fortinet, and other cybersecurity tools.
• Extensive experience in conducting security assessments, technology consultations, and leading the deployment of cybersecurity measures within complex environments.
• Recognized as a Subject Matter Expert in cybersecurity, with deep knowledge of SIEMs, SOARs, TrendMicro, Fortinet, and an understanding of XDR, NDR and MDR technologies.
• Proven ability in developing and implementing comprehensive security frameworks and policies that meet industry standards and regulatory requirements.
• Certifications in cybersecurity (e.g., CISSP, CISM, CEH) and experience with ITIL service management practices related to security management.
• Strong problem-solving skills, with the ability to quickly understand and mitigate threats, ensuring business continuity and compliance with SLAs.
• Ability to effectively communicate security risks and strategies to non-technical stakeholders, facilitating informed decision-making and fostering a culture of security awareness.

What we offer in return:

● Amazing colleagues and culture that encourages you to do your best work while staying authentic and work rhythm that suits you and your team. We focus on outcomes and believe that you can deliver your best work, working anywhere, anytime.

● Amazing colleagues and culture that encourages you to do your best work while staying authentic and work rhythm that suits you and your team. We focus on outcomes and believe that you can deliver your best work, working anywhere, anytime.

● Wellness first. We believe that wellness goes beyond team celebrations and birthday parties.

Our holistic approach to wellness gives you opportunities to recharge, connect and explore, at and outside work. In addition to the standard leave entitlements, we offer:

o 1 day of wellness leave every quarter for you to take for your health and wellbeing, and explore your personal passions.

o 20 days to work from anywhere each year, allowing you more flexibility to explore and connect with your interests while delivering work you will be proud about.

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications