Epicareer Might not Working Properly
Learn More

Engineer (Security Operation)

Salary undisclosed

Apply on


Original
Simplified
What The Role Is

You review and advise on the designs of the Security Operation Centre (SOC)'s infrastructure, determining the placement and coverage of intrusion detections, endpoint hardening agents within the host and network environment.

What You Will Be Working On

On this, you create customised security event detection rules and configure rulesets to implement and manage within the SOC to enhance operational effectiveness. You hold a concurrent appointment as a Deputy Head within the SOC, providing oversight of daily operations involving threat detection and incident management. As a Deputy Head SOC, you supervise the SOC's training and development activities, establishing and maintaining operational procedures, guidelines and knowledge management. You interact with various vendors and system managers within the SAF for discussion and coordination of SOC's system integration, project trials and system enhancement.

What We Are Looking For

Your challenge lies in striking the right balance between leadership and technical skills while also possessing the technical acumen to guide SOC operations. You also have to manage resources which encompasses staffing needs and the integration of complex SOC tools and systems. In addition, you have to rapidly respond to cyber incidents while maintaining composure and leading the team effectively during crisis situations. You are also required to rotate with Hd SOC for 24/7 monitoring duties.

You must have a tertiary qualification in Cybersecurity, Computer Engineering, Information Systems or equivalent discipline, with at least 5 to 8 years' working experience in cybersecurity roles, including at least 2 years in a senior or supervisory role within a SOC or Cyber Emergency Response Team. You should have the necessary technological knowledge and experience in threat detection, incident response and security tool management. Certification in GIAC Security Operations Certified (GSOC), GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP) and/or Certified Information System Manager (CISM) is preferred. You must also be proficient in security operations centre tools such as Security Information and Event Management, Intrusion Detection System, Intrusion Prevention System, and Endpoint Detection and Response. You mush be familiar in evaluating cybersecurity tools as well as vendor collaboration and management.

Only shortlisted candidates will be notified.