Job description
- Implements IT risk management and security controls.
- Fulfill and implements the requirements of IT security standards,
policies and procedures.
- Conducts internal security audits, prepares for and facilitates external
ones.
- Conducts IT security operations in threat prevention, detection and
remediation.
- Assesses security gaps of technology landscape and processes to shape
security solutions roadmap.
- Perform related
duties as assigned by the Direct Manager
RequirementsEducation/ Qualification
- Bachelor Degree or Advanced Diploma in Computer Science /Computer Engineering/IT or relevant field.
- Certification in one or more of the following CompTIA CySA/Security+, SSCP, CISSP, CISA, CISM, OSCP, CEH and related.
- Other certification in Microsoft Azure cloud security such as Security, Compliance, and Identity Fundamentals (SC-900), Cloud and AI Security Engineer Associate (SC-500), Identity and Access Administrator Associate (SC-300), vendor security solutions, ITIL and cybersecurity standards are advantageous.
Work Experience Over 3 years in cybersecurity with hands-on experience implementing and operating as many areas as possible in the following order of preference:
- Information classification and Data Loss Prevention (DLP)
- Identity and Privileged Access Management (IAM/PAM)
- Advanced hands-on experience with FortiGate and Palo Alto firewalls
- WAF, network segmentation, VPN, PKI, and NAC
- SIEM, SOAR, UEBA, and SOC operations
- Cloud and email security
- Vulnerability management
- Ethical hacking
- Security standards and compliance
Knowledge - LAN/WLAN/WAN/SDWAN
- Microsoft Active Directory and group policy
- Cloud technology
- Windows server, endpoint OS, Android, iOS and MacOS
- OWASP Security Knowledge Framework, Mitre Att&Ck® Matrix, CIS Benchmarks
- ISO27001, NIST, NESA
Skills - Risk management
- Threat hunting
- Project management
- Virtualization
- Office365