Role: Threat Detection and Response Expert
Location: Singapore
Required Experience
- Good understanding of enterprise technologies especially focusing on security devices, network engineering, operating systems, databases and security configurations on application level
- Experience with analyzing system logs including network traffic logs, payload, event logs, application logs, firewall logs, Active Directory etc.
- Experience with Security Incident and Event Management (SIEM) systems, ideally with Splunk Enterprise Security and Chronicle SecOps
- Good knowledge of current threat landscape and attack scenarios/tactics, as well as containment and protection measures
- Independent way of working with strong problem-solving ability
- Experienced in communicating with higher management levels
Education/Experience
Cyber Security expertise, proven by industry-standard certifications, such as CISSP, CISM, GCIH or similar
Ideally experience with cloud monitoring (Azure, Google)
Knowledge of risk assessment tools, technologies, and methods.
Experience with monitoring and logging tools (e.g., Splunk)
Experience with cloud native SIEM or SOAR tools (e.g. Google Chronicle)