Senior Information Security Consultant

ROCKWOOL Group; Subang Jaya; On-site; MYR 180,000 - 240,000; Full time

Job summary

ROCKWOOL Group Malaysia is seeking a seasoned IT security professional to provide 2nd/3rd line support and consultancy in specialised security areas across the full lifecycle of solutions. You will own the Defender platform configuration, investigate incidents, perform forensics, and collaborate with Digital, OT and Development teams to raise the security bar.

A relevant engineering or CS degree with security certifications is preferred; fluent English is required and travel of about 10–15 days

Qualifications

• 7+ years in IT security, with hands-on Defender experience.
• Experience with ISO 27xxx/NIST/CIS frameworks.
• Ability to investigate security incidents and perform forensics.
• Fluent in written and spoken English at professional level.
• Willingness to travel 10–15 days per year.

Responsibilities

• Provide 2nd/3rd line IT security support for incidents and threats.
• Configure and operate the Microsoft Defender platform.
• Investigate alerts from EDR and SIEM; perform forensics as needed.
• Collaborate with Digital, OT, and Development teams to improve security.

Skills

IT security

Microsoft Defender Platform

Python/PowerShell

ISO 27xxx/NIST/CIS

Elastic Security

Penetration testing/forensics

OT/ICS knowledge

Security certifications (CISSP/CISM/CR

English proficiency

Travel willingness

Education

Engineering/CS degree

Security certifications (CISSP/CISM/CRISC)

Tools

Trend Micro Vision One

Elastic SIEM

Job description

Purpose of position

2nd/3rd level support and functional/technical consultancy in specialised technical areas with ownership and direction of technical solution(s) in full lifecycle.

General responsibility

Acting as 2nd/3rd level support for IT security incidents reported in our security tools.

Area of responsibility

Together with the Chief Information Security Officer, making sure that ROCKWOOL is cybersafe by:

• Monitor and solve IT security incidents and followed up that root causes are identified.
• Continuously making sure we have the best available and configured Microsoft Defender platform to operate from.
• Participating in IT security area projects

IT security area projects

• Support IT security design of solutions
• Optimize solution based on IT security requirements

Providing stable IT security day to day operations

Providing, together with the team, stable IT security day to day operations.

Tasks

• Develop, configure and do support on the Microsoft Defender platform.
• Follow up on alerts from our EDR system.
• Follow up on alerts from our SIEM system.
• Do forensics on IT security incidents

Interface to the rest of the organisation

Facilitate the dialog and collaboration with other Digital departments especially Platforms in order to mature and increase the efficiency of security.

Facilitate the dialogue with Group Operational Technology and Group Development outside of Digital.

Qualifications & competences

• At least 7 years of experience within IT security.
• At least 5 years of experience with Microsoft Defender Platform.
• Experience with ISO 27xxx, NIST Cybersecurity framework, CIS 18 or similar.
• Know how to investigate IT security incidents
• Experience with Elastic Security (SIEM), Trend Micro Vision One, is an advantage.
• Experience with Python programming and/or PowerShell is an advantage
• Know how to perform vulnerability tests and penetration tests as well as perform digital forensics investigations is an advantage.
• Technical insight into OT or Industrial Control Systems (ICS) is an advantage.
• Have a relevant degree e.g. in engineering, computer engineering or computer science and/or have obtained certificates such as CISSP, CISM, CRISC, ESL or similar.
• The desire and ability to work with a lot of different cultures is a pre-requisite as well as the skills to interact with whole organisation.
• Ability to conduct security assessments to identify vulnerabilities and recommend corrective actions.
• Ability to ask hard questions and pursue topics until an adequate answer is reached
• Analytical and problem-solving skills
• Goal oriented and the ability to deliver on time is essential.
• A natural curiosity for acquiring new knowledge
• Fluent in written and spoken English at a professional level.
• Travel activities are a natural part of the job. Expected travel days is around 10-15 days per calendar year.

Location

You will located and work out of our offices in Subang Jaya, Malaysia