全职 IT Security Officer (ITSO) 工作, 薪水, Tap Growth Ai 公司招聘中 - Ricebowl

We're Hiring: IT Security Officer (ITSO)!

We are looking for an experienced IT Security Officer (ITSO) to support cybersecurity operations, security monitoring, privileged access management, incident management and infrastructure security. The successful candidate will be responsible for maintaining security systems, monitoring threats, handling security incidents and ensuring the effective operation of enterprise security platforms.

• Administer and provide operational support for Privileged Access Management (PAM) solutions, including CyberArk.

• Manage and support security monitoring platforms, including SIEM, Database Activity Monitoring (DAM), network device log monitoring and insider threat monitoring.

• Administer Data Loss Prevention (DLP) solutions, including Forcepoint, covering policy management, alert handling and reporting.

• Support web application and infrastructure security technologies, including Imperva Web Application Firewall (WAF).

• Monitor and manage security-related communications, including vulnerability advisories, threat intelligence notifications, phishing reports and security alerts.

• Maintain and support security infrastructure, including Syslog-NG, log management services, Windows and Linux servers, virtual machines and cloud environments.

• Support cybersecurity awareness programmes, phishing simulation exercises and employee security awareness activities.

• Maintain asset inventories and coordinate onboarding of servers, network devices, databases, cloud assets and internet-facing services into central security monitoring platforms.

• Develop, maintain and review IT security procedures, operational runbooks, action plans and technical documentation.

• Perform daily, weekly and monthly security system health checks, preventive maintenance, monitoring and operational support.

• Provide Level 1 and Level 2 technical support, including initial investigation, alert triage, troubleshooting and incident escalation.

• Monitor security alerts, emerging threats, vulnerabilities and advisories, and recommend appropriate remediation actions.

• Support security incident management activities, including evidence collection, investigation, containment, recovery and post-incident reporting.

• Conduct user onboarding and offboarding, access reviews, privileged account administration and access entitlement validation.

• Coordinate with internal IT teams, government technology teams, managed service providers, vendors and external security partners.

• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk reports and vulnerability reports.

• Track software licences, subscriptions, certificate expirations, maintenance schedules and contract renewals.

• Plan and conduct phishing simulations and cybersecurity awareness exercises, including reporting and follow-up actions.

• Participate in security assessments, audits, vulnerability remediation activities, security exercises and tabletop exercises.

• Assist with authorised forensic acquisition and analysis activities while maintaining proper chain of custody and secure evidence handling.
  
  

• Privileged Access Management (PAM) – CyberArk

• Security Information and Event Management (SIEM)

• Database Activity Monitoring (DAM)

• Data Loss Prevention (DLP) – Forcepoint

• Web Application Firewall (WAF) – Imperva

• Security Monitoring and Log Management

• Syslog-NG

• Windows and Linux Server Administration

• Vulnerability Management and Security Incident Response

• Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP)

• Identity and Access Management (IAM)

• Cybersecurity Operations and Threat Monitoring
  
  

• Hands-on experience in IT security operations and administration of enterprise security platforms.

• Experience in privileged access management, security monitoring, DLP and vulnerability management.

• Knowledge of security incident handling, investigation, escalation and reporting.

• Experience supporting Windows/Linux infrastructure and cloud environments.

• Strong documentation, communication, coordination and troubleshooting skills.