Analyst, Cyber Security Engineer, Information Security Services, Group Technolog

DBS Bank Limited; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

DBS Bank Limited is seeking a Security Operations Specialist to enhance their cybersecurity measures. This role involves monitoring security events, assessing risks, and managing security tools to protect the bank's operations. Candidates should hold a degree in computer science and have at least 3 years of experience in security operations, preferably in the banking sector. DBS offers a competitive salary and benefits within a dynamic working environment.

Qualifications

• 3+ years working in security operations.
• Experience in banking is a plus.
• Certifications (CISSP, CEH) preferred.

Responsibilities

• Monitor cybersecurity events globally and escalate as needed.
• Conduct assessments on security tools.
• Prepare operational reports for performance metrics.

Skills

Monitoring

Risk Assessment

Cybersecurity

Incident Management

Network Security

Education

Degree in computer science or related field

Tools

UNIX

AIX

Linux

Windows

Network Security Products

Job description

DBS is a leading financial services group in Asia, with over 280 branches across 18 markets. Headquartered and listed in Singapore, DBS has a growing presence in the three key Asian axes of growth: Greater China, Southeast Asia and South Asia. The bank's capital position, as well as "AA-" and "Aa1" credit ratings, is among the highest in Asia-Pacific. DBS has been recognised for its leadership in the region, having been named “Asia’s Best Bank” by The Banker, a member of the Financial Times group, and “Best Bank in Asia-Pacific” by Global Finance. The bank has also been named “Safest Bank in Asia” by Global Finance for seven consecutive years from 2009 to 2015.

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Tech, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Monitor developing cybersecurity events around the world, and escalate to L2 team if relevant events are observed
• Performs monitoring, risk assessment and analysis on security tools such as Anomaly Detection systems, Firewalls, Antivirus systems, Proxy devices
• Follow pre-defined actions to handle security alerts including escalating to L2 team and other support groups
• Execute daily ad-hoc tasks or lead small projects as needed
• Participate in daily and ad-hoc documentation related tasks
• Create and maintain operational reports for Key Performance Indicators and weekly and Monthly Metrics
• Perform assessment phase of Vulnerability & Threat Management process
• Receive threat intelligence from feeds the Group subscribed to and update to Threat Intel knowledge base
• Be ready to support any security incident response investigation in the Group regardless of location and environment
• Work closely with Team Lead to review, provide feedback and take actions to improve the methodology use in the Security Operations
• Responsible to ensure all tickets logged are closed correctly and timely
• Ensure timely submission of routine reports on threats, vulnerabilities and incidents handled by the Security Operations Center
• Keep the Security Operations Center runbooks and procedures updated

Requirements

• Degree in computer science, engineering, or other computer-related field of study.
• 3+ years working in security operations, preferably with incident management experience
• Experience in the Banking industry will be an advantage
• Familiar with security products and network devices
• Extensive technical experience with network security practices including Intranet, Extranet and Internet access
• Technical experience with UNIX, AIX, Linux, Windows
• Knowledge of TCP/IP, DNS, web, wireless security architectures and enterprise-grade security solutions
• Knowledge of encryption and authentication methods such as 2FA, DES/AES/RSA, Digital Certificates, SSL/TLS, IPSec and development of DMZ’s
• Knowledge of intrusion detection (deep TCP/IP knowledge, and cybersecurity), various operating systems (Windows/UNIX), and web technologies (especially internet security)
• Able to read and understand packet level data, handle Network/Host Security products (NIDS/NIPS, firewalls, HIPS, AV, scanners, etc.) and understand security events from these tools
• Able to perform vulnerability assessment and manage such tools/processes, as well as application penetration testing or forensic analysis fields
• Certifications from EC-Council, GIAC, (ISC)² are preferred [CISSP, CEH, GCIA, CCNA].

Apply now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports.