About this role
Scope of Role
Infrastructure & Network Security
- Assess the security of information systems and networks, consistently identifying potential risks, vulnerabilities, and zero-day threats.
- Design and implement advanced security controls, including Firewalls, DLP, XDR, WAF and SOC operations etc.
- Monitor network traffic and activity for suspicious behavior and coordinate threat hunting operations.
Cloud & Microsoft Security
- Plan, manage, and optimize O365 enterprise security services, including Conditional Access, Intune, and Entra ID Protection.
- Implement data protection strategies using Microsoft Purview (e.g., managing sensitivity labels.
- Understand multi-cloud environments (Azure, AWS, GCP) and provide strategic planning and recommendations for cloud security.
Security Solutions Evaluation & Implementation
- Assist in the evaluation, planning, and implementation of new security solutions, ensuring secure adoption, seamless integration, and strict alignment with enterprise security architecture (Secure by Design).
- Lead Proof of Concept (PoC) phases for emerging cybersecurity technologies to address evolving business needs and threat landscapes.
Incident Response & SecOps Automation
- Investigate and respond to security incidents, determine the root cause, assess the impact, and execute swift corrective actions.
- Develop and integrate automated SecOps workflows using customized scripts (Python, PowerShell).
Security Culture
- Raise employee security awareness and conduct targeted security education and training.
Job Challenges
- The ever-evolving nature of security threats requires continuous learning and updating of knowledge.
- High-pressure work environment when dealing with incidents.
- Need to collaborate with people from different departments.
- Bachelor’s degree in information security or a related field
- At least 3 years of relevant work experience.
- Hands-on experience with application, system, and network security
- Familiarity with cloud computing, Linux administration, and TCP/IP protocols
- Strong knowledge of security fundamentals and best practices
- Familiarity with network security, system security, application security, etc.
- Experienced in any of Microsoft Security solutions, EDR, SIEM, DLP, Firewall, SOC, Email Security, Vulnerability Assessment, WAF will be a plus.
- Strong analytical and problem-solving skills
- Excellent communication skills in English (TOEIC 700+ preferred) and teamwork skills
- Certificates: Candidates with Security or M365 related certifications (e.g. CISSP, CISM, CISA, ISO27001, MS-102, SC-100, MD-102) will be a plus.
Tech stack
AzureAWSGCPPython