IT Security Engineer

1. Security Operations & Incident Response

• Monitor and investigate security alerts (directly or via SOC)
• Lead or support incident response for:

➢ Malware / ransomware ➢ Phishing and account compromise ➢ Insider threats ➢ Data leakage incidents

• Coordinate containment, eradication, and recovery activities
• Conduct post-incident root cause analysis and improvement actions

1. Vulnerability & Patch Management

• Perform vulnerability scanning and risk assessment
• Analyse scan results and prioritize remediation based on business risk
• Coordinate patching with IT and application teams
• Track remediation progress and report risk exposure

1. Security Tool Ownership

• Own day-to-day operation of security platforms such as:

➢ SIEM / SOAR ➢ EDR / XDR ➢ Email and web security ➢ DLP, CASB

• Tune detections, improve signal quality, and reduce false positives
• Integrate security tools with enterprise systems
• Advantage if verse in tools like Sentinel / Securonix

1. Threat Management & Intelligence

• Track emerging threats, vulnerabilities, and attack trends
• Assess relevance and impact to the organization
• Translate threat intelligence into actionable controls and detections

Requirement: Degree in Computer Science/Information Technology or equivalent At least 3 years’ experience in IT Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and above) Experience in using security tools (E.g. Security Endpoint solutions, CyberArk, Tenable Nessus, Securonix, Sentinel)) Certified with one or more of the following: QISP, CISSP, Cybersecurity Nexus, CompTIA Security+