DFIR Consultancy, Incident respond and Investigation (Cyber Security).

ITSEC SERVICES ASIA PTE. LTD.; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

ITSEC Asia, an international information security firm, seeks a Senior DFIR consultant in Singapore to lead a team of cyber security consultants. You will coach and guide on investigations, reviews, and assessments of client infrastructure, respond to retainer or ad hoc incidents, and contribute to playbooks and awareness training.

The role requires minimum 3 years in related consulting/delivery/management, excellent communication, and ability to work in a multi-cultural environment.

Qualifications

• Degree or Diploma in IT or Computer Science.
• Minimum 3 years of relevant Consulting, Delivery, Operation or/and Management experience.
• Excellent communication skills, both oral and written, with the ability to pitch ideas and manage stakeholders.
• Good analytical, organization and planning skills.
• A team player who can work independently.
• Ability with work in multi-cultural environment.

Responsibilities

• In Singapore, we need a Senior DFIR consultant to lead a team of fellow cyber security consultants by being a Role Model, Coaching and Guiding them in providing various cyber security investigation, review and assessment on our customer's Cii and Non Cii infrastructure.
• Respond to retainer service or ad hoc incident response needs from customer.
• Consult, review, refine or/and develop SIRP (security incident response plan), Cyber Security Incident Playbooks for customer.
• Conduct cyber security awareness and Table Top Exercise for Operation Team, Senior Management and Board Members.
• To react to alerts and work with ITSEC regional MSS/Customer Custodian by providing Lvl 2 or Lvl 3 'in country' support.
• To provide proactive purposeful Threat Hunting, or Compromise Assessment activities.
• To Provide Digital Forensic for root cause analysis, for containment and continous improvement.
• To provide investigation on the root cause and the robustness of the customer's data governance under PDPA guidlines.
• To provide eDiscovery, imaging is a typical task during investigation activities.

Skills

Excellent communication skills

Analytical skills

Organizational skills

Team player

Independent work capability

Multi-cultural environment experience

Education

Degree or Diploma in IT/CS

Tools

MS Defender

Sophos

Nextron

EclecticIQ

QRadar

Dell Securework

Elastic

MS Sentinel

Sentinel1

Celebrite

Magnet

Bulk Extractor

GREP

Sumuri Paladin

Job description

Company Introduction:

ITSEC Asia is an international information security firm offering a wide range of high-quality cyber security services and solutions.

We have four pillars in supporting our customer with their security needs, Red Team exercise, GRC, MSS, DFIR Services. Other departments include Finance, Sales and Project management team. https://itsec.group/

Responsibilities:

• In Singapore, we need a Senior DFIR consultant to lead a team of fellow cyber security consultants by being a Role Model, Coaching and Guiding them in providing various cyber security investigation, review and assessment on our customer's Cii and Non Cii infrastructure.
• In respond to retainer service or ad hoc incident response needs from customer.
• Tools used can be MS Defender, Sophos, Nextron, EclecticIQ, QRadar, Dell Securework, Elastic, MS Sentinel, Sentinel1, Celebrite, Magnet, Bulk Extractor, GREP, Sumuri Paladin.
• Consult, review, refine or/and develop SIRP (security incident response plan), Cyber Security Incident Playbooks for customer.
• Conduct cyber security awareness and Table Top Exercise for Operation Team, Senior Management and Board Members.
• To react to alerts and work with ITSEC regional MSS/Customer Custodian by providing Lvl 2 or Lvl 3 "in country" support.
• To provide proactive purposeful Threat Hunting, or Compromise Assessment activities.
• To Provide Digital Forensic for root cause analysis, for containment and continous improvement.
• To provide investigation on the root cause and the robustness of the customer's data governance under PDPA guidlines.
• To provide eDiscovery, imaging is a typical task during investigation activities.

General

• Stay abreast of current and emerging security technologies for cloud and on-premises, as well as the associated security threats and risks. Design security architecture and control measures to mitigate the relevant threats and risks.
• Align and provide input to sales/business development team to develop creative solution, formulate business strategies to ensure success of ITSEC business goals.
• Ensure quality of work and Reviewing consultant output is a constant task.
• Align with business goals to ensure the consultants are up to their task thru' a yearly training program is part of the role.
• Evaluating tools and findings ways to have win/win outcome with supplier/customer is vital to our business.
• Working with Project Managers Ensuring cyber security projects comply to information control, Quality Management System (QMS) and contractual requirements while taking care of the welfare of the consultants.
• Add value by Communicating with key stakeholders in a project debrief and working as a consulting head to help customer improve their holistic security posture.
• Work together with Country Head and Business Owners to ensure effectiveness, productivity and profitability is achieved.

The Successful Candidate:

• Degree or Diploma in any of the following fields: IT or Computer Science (a plus) or Others.
• Minimum 3 years of relevant Consulting, Delivery, Operation or/and Management experience.
• Excellent communication skills, both oral and written, with the ability to pitch ideas and manage stakeholders.
• Good analytical, organization and planning skills.
• A team player who can work independently.
• Ability with work in multi-cultural environment

Advantageous to have:

• Experience in ICT Industry, Enterprise, Telco and/or Government.
• Experience in leading DR or IR events.
• Knowledge in standard IT/Cyber Security, PDPA, Pii policies, guidelines.
• Knowledge in Information systems, infrastructure topology, virtual machine technology, cloud, networking and IT security, Windows, MAC OS, Andriod, IOS with professional certifications are preferred.
• A plus with related security, audit, risk certification such as CHFI GCIH, GNFA, OSIR, OSTH