A Senior Cyber Specialist role provides ound the clock cyber security operations support as a key resolver between SOC 24x7 and local technology teams, using cutting edge security technologies and processes.
As a key team liaison member from Cyber team you will provide expertise and support by bridging the gap between our analyst teams and technical engineers to resolve complex issues and drive false positive reduction.
Working alongside the Security Operations Centre (SOC) and local IT in support of the wider cyber team to enable and improve effective detection, analysis, response, and recovery to cyber security incidents.
Responsibilities will include but not be limited to:
Experienced Cyber Security Analyst/Engineer with extensive experience working with Alerts, Tuning, Windows and Linux infrastructure, Cloud technologies including AWS and AliCloud
Working 9 to 5 in the APAC region with rotational 24x7 on-call
Must be fluent in both spoken and written Mandarin and English
Technical understanding and first-hand approach with a wide range of Cyber Security related toolsets
Ability to work closely with technical teams as well as able to communicate with non-technical individuals
Acts as resolver group for security incidents raised by the Security Operations Centre (SOC), working side by side with Cyber Security Operations, including other engineers.
Working with Cyber Security Officers responsible for maintaining relationships with the business in-region.
Assist in the development of security use cases including new playbooks for the SOAR tool that improve our cyber security posture
Acting as a Subject Matter Expert to recommend improvements to security
configuration across multiple toolsets and platforms
Generating requirements for the fine tuning of SIEM rules.
In coordination with the Cyber Security team and other structures, be able to
respond to the CSIRT and associated emergency preparedness procedures.
Develop, conduct, and participate in Cyber Incident Response exercises.
Creating and maintaining a good working relationship with key vendor partners.
Assist SOC Managers and Leaders with ad-hoc requirements such as reports and Route Cause Analysis
Deliver exceptional quality of Incident Response and Tickets
Required experience & skills Non-technical skills:
Ability to manage conflicting priorities and multiple tasks in a high-pressure
environment
Must be fluent in both spoken and written Mandarin and English
Excellent written and verbal communication skills and able to be understood by both technical and non-technical personnel
Stakeholder management and people skills (at both a technical and non-technical level)
Able to work in a collaborative environment
Outstanding critical reasoning and critical thinking skills – sticks to the problem until it is resolved
Ability to provide rapid and concise summaries of complex situations
Technical skills:
Experience with AWS/AliCloud security domains
Excellent Windows (workstation and server) and Linux skills
Scripting skills desirable but not essential
Some cloud architecture experience would be preferred but no essential
Excellent Cyber Security problem and troubleshooting ability
Broad understanding of Threat Intelligence, Vulnerability Management, Data
Privacy, Cloud, Identity, Compliance, Risk, Process, Technologies.
Qualifications within IT Security (e.g., SANS Blue Team, CISSP, GCIH, GCIA,
GMON) are desirable but not required
In-depth knowledge and understanding of how to handle and respond to security incidents as part of a specialized incident response team
Strong working knowledge and thorough understanding of Protective
Monitoring, Vulnerability Monitoring, and Threat Intelligence
Knowledge and understanding of a wide variety of security technologies and
processes
Up-to-date knowledge of current exploit techniques, vulnerability disclosures,
data breach incidents, and security analysis techniques, combined with the
understanding of the potential impact on the security posture
Experience:
At least 5+ years of relevant experience in Cyber Security Operations
Experience of Incident Response
Experience operating within a large-scale enterprise network
Has thrived in fast-paced, high-pressure environments