Security Analyst - (WL-FRW230525 039/05)

The Company

Our client is a multi-national information technology company with its headquarters in Singapore.

It is also the largest Systems Integrator domestically.

The Project:

This project consists of multiple teams deployed within Cybersecurity Operations Command Centre delivering mission critical 24x7 threat monitoring, prevention, analysis, intelligence to high-valued clients.

The Role:

• Provide 24x7 Level 1 network monitoring support based on the standard operating procedure (SOP) as well as training by the IT Service Operations /IT Service Manager.
• 12hr-shift rotational basis. 8am to 8pm, 8pm to 8am (including public holidays where necessary)
• Conduct daily, weekly, scheduled checks using automated tools/solutions to initiate vulnerability scans of servers and determine the status of network routers/switches with reference to the SOP.
• Upon failure, troubleshoot, re-activate and re-schedule scanning.
• Escalate issues beyond level 1, to the Security Engineer for follow-ups, upon detection of security vulnerabilities.
• Track patch management activities on a daily basis
• Initial reporting of vulnerabilities / availabilities of patches to successful remediation for servers and network routers / switches.
• Leverage on provided tools and solutions to monitor, track and escalate to the relevant stakeholders for all outstanding vulnerabilities detected in the scans as well to the internal security team for remediation.
• Ensure ongoing maintenance of asset inventory for onboarding of new systems and offboarding of existing systems to be scanned by the relevant tools.
• Conduct monthly / ad-hoc compliance audit scan for servers and routers / switches.
• Escalate identified issues to the Security Engineer that are follow-ups and security compliance related.
• Conduct ad-hoc scan of servers upon detection and identification of emerging threats.
• Rotational shifts: 1st Shift (08:00 - 20:00 Hrs) & 2nd Shift (20:00 - 08:00 hrs)

Requirements

• Minimum Diploma grad with module in IT or Cyber Security
• Preferably with experience in one or more of the following areas:
• Management of IDS/IPS, firewall systems.
• Vulnerability Assessment, penetrating testing & risk assessment using various scanning and penetration testing tools
• Unix, WIN2K, NT and web server security such as OS tightening, SSO and virus scanning
• General Working knowledge of Information Security concepts
• Possess adequate understanding of Layer 1-7 Networking Concepts • Good communication skills (verbally, reading & in writing)
• Ability to follow predefined procedures, policies & processes, work under pressure;
• Willingness to work in shifts
• Advantages for those in Possession of security Analyst certification eg Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA) or Computer Hacking Forensic Investigator (CHFI) will be advantageous but not mandatory.

Benefits

• End of contract bonus