Security Operations Specialist

Our client is one of the global leading hi-tech manufacturing companies that creating impact in the semiconductor world. They are seeking an experienced Information Security Engineer to join the dynamic team. In this role, you will monitor, maintain, and fine-tune our existing network and security infrastructure. You will be instrumental in responding to information security incidents, collaborating across teams, and ensuring that security practices are integrated into all systems and applications.

Key Responsibilities:

• Monitor, maintain, and fine-tune existing network & security infrastructure, including Endpoint Security, Next Generation Firewall (NGFW), Encryption, email and network proxy gateways, Microsoft 365, Data Loss Prevention (DLP), etc.
• Analyze and respond to Information Security Incidents by collaborating with infrastructure, application, and other departmental teams.
• Prepare and document security hardening standards, security incident response plans, and playbooks.
• Collaborate with IT, engineering, production, and QA teams to ensure security practices are embedded within all systems and applications.
• Develop and maintain documentation, including procedures and guidelines for security practices within the internal IT team, engineering, and Operational Technology (OT) environments.
• Implement and conduct internal and external vulnerability scans, network penetration tests, and application security tests as required.
• Generate reports from security tools, write incident reports, and provide assessment-based findings and recommendations for system security enhancements with minimal supervision.
• Support relevant projects, initiatives, or security activities, including security awareness programs and security software deployments.
• Report on Security KPIs, vulnerabilities, non-compliance issues, and other security exposures, including misuse of information assets.
• Conduct research and perform Proof of Concept (PoC) evaluations of emerging technologies, maintaining an up-to-date understanding of the latest threats and vulnerabilities.
• Participate in IT systems projects, providing sound technical advice to ensure adherence to security principles and offering support as needed.
• Perform other duties as assigned.

Job Requirements:

• More than 3 years of experience in a Security Operations Center (SOC) and Cyber Security Incident Response Team (CIRT).
• Proven track record as an Information Security Engineer, collaborating with international teams.
• Hands-on experience with security technologies such as NGFW, Endpoint Security, DLP, Proxy, Secure Email Gateway, Active Directory, and Identity and Access Management (IAM).
• Proficient in implementing, configuring, fine-tuning, operations, and maintaining security tools.
• General knowledge of industry best practices on security hardening, OWASP, network security, security risk management frameworks, and national cybersecurity standards (ISO 27001).
• Strong team player and able to collaborate across diverse stakeholders to achieve security objectives.
• Excellent communication, interpersonal, and consultative skills.
• Strong problem-solving and analytical skills, including workshop facilitation.
• Experience working with high-performance teams and understanding the dynamics of international teamwork.
• Quick learner with the ability to grasp new concepts and emerging technologies.
• Prior experience with organizations constantly undergoing extensive change or transformation programs is advantageous.
• Data-driven with a continuous improvement mindset.
• Tertiary education in Computer Science or related fields.
• Experience in architecting, and implementing security solutions.
• Relevant certifications such as CISSP, GIAC, CEH, or others are a plus.
• Prior work experience with daily Microsoft 365 Security and Compliance Center operations is desirable.