The Company:

Our client is a multi-national information technology company with its headquarters in Singapore. It is also the largest Systems Integrator domestically.

The Project:

This project consists of multiple teams deployed within Cybersecurity Operations Command Centre delivering mission critical 24x7 threat monitoring, prevention, analysis, intelligence to high-valued clients.

The Role:

Provide 24x7 Level 1 network monitoring support based on the standard operating procedure (SOP) as well as training by the IT Service Operations / IT Service Manager.
Conduct daily, weekly, scheduled checks using automated tools/solutions to initiate vulnerability scans of servers and determine the status of network routers / switches with reference to the SOP.
Upon failure, troubleshoot, re-activate and re-schedule scanning.
Escalate issues beyond level , to the Security Engineer for follow-ups, upon detection of security vulnerabilities.
Track patch management activities on a daily basis.
Initial reporting of vulnerabilities / availabilities of patches to successful remediation for servers and network routers / switches.
Leverage on provided tools and solutions to monitor, track and escalate to the relevant stakeholders for all outstanding vulnerabilities detected in the scans as well to the internal security team for remediation.
Ensure ongoing maintenance of asset inventory for onboarding of new systems and offboarding of existing systems to be scanned by the relevant tools.
Conduct monthly / ad-hoc compliance audit scan for servers and routers / switches.
Escalate identified issues to the Security Engineer that are follow-ups and security compliance related.
Conduct ad-hoc scan of servers upon detection and identification of emerging threats.

Requirements

Minimum Diploma grad with module in IT or Cyber Security;
Advantage for those in possession of Security Analyst Certification e.g. Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA) or Computer Hacking Forensic Investigator (CHFI) will be advantageous but not mandatory;
Preferably with experience in one or more of the following areas:
- Management of IDS/IPS, firewall systems.
- Vulnerability Assessment, penetrating testing & risk assessment using various scanning and penetration testing tools.
- Unix, WIN2K, NT and web server security such as OS tightening, SSO and virus scanning.
General Working knowledge of Information Security concepts;
Possess adequate understanding of Layer 1-7 Networking concepts;
Ability to follow predefined procedures, policies & processes, work under pressure;
Good communication skills (verbally, reading & in writing);
Able to work rotational shifts: 1st Shift (08:00 - 20:00 hrs) & 2nd Shift (20:00 - 08:00 hrs).

Benefits

End of contract bonus

Security Analyst - (WL-FRW230710 010/01)