Lead Engineer - Cloud Security

synapxe pte. ltd.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Synapxe Pte. Ltd. is seeking an IT security expert to oversee risk management, security operations and the SOC, collaborating with stakeholders to strengthen cyber defenses.

The role covers cyber security assessments, PAM, database, WAF, firewall and EPP/EDR, threat intelligence, incident response and compliance. You will develop detection use cases, reduce false positives and report findings to management.

Qualifications

• Diploma or degree in Computer Science, Digital Forensic or Engineering.
• Minimum 6 years of IT security auditing or security operations experience.
• Strong knowledge of DNS, DHCP, Firewall, WAF, IDS/IPS, VPN, APT and TCP/IP.
• SIEM experience is advantageous.
• Ability to multitask and be detail-oriented during investigations.
• Good communication with stakeholders and management.
• Professional security qualifications (CEH, ECIH/GCIH, ITIL) preferred.

Responsibilities

• Work closely with internal and external stakeholders to manage technical risk, security operation and SOC.
• Act as IT security expert in cyber security assessments, PAM, Database, WAF, Firewall and EPP/EDR.
• Perform risk assessment and identify mitigation controls.
• Enhance cyber threat detection use cases and reduce false positives.
• Identify infection/compromise using threat intel and IOCs.
• Ensure compliance and security control functions are timely.
• Drive continuous improvement of cybersecurity procedures and processes.
• Track and monitor security-related and risk issues with action plans.
• Generate security reports and metrics.
• Provide updates to management on security matters.
• Stay current on latest cyber threats, attacks and vulnerabilities.

Skills

Cyber security fundamentals

Threat intelligence

Malware triage

Communication skills

Team collaboration

Networking & security protocols

SIEM experience

Risk assessment

Multitasking

Education

Diploma or degree in Computer Science / Digital Forensic / Engineering

Tools

SIEM

Job description

• Work closely with internal and external stakeholders to manage the technical risk, security operation and SOC.
• Act as IT security expert for department in the areas of cyber security assessments, PAM, Database, WAF, Firewall and EPP/EDR.
• Perform risk assessment and identify mitigation controls for the risk area identified.
• Enhance and build cyber threat detection user cases and assist in analysing and reducing false positive.
• Identify infection/compromise in the company utilizing threat intelligence and indicators of compromise (IOCs) from different threat Intel sources and regulators
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Track, monitor and valid security-related and risk issues, provide an action plan to rectify the issues and prevent recurrence.
• Generate security reports and metrics as required.
• Provide timely and periodic update to managements on its security matters.
• Stay current on the latest Cyber threats, Attacks and vulnerabilities etc.
• Diploma or degree in Computer Science, Digital Forensic or Engineering preferred.
• Preferred minimum of 6 years of relevant work experience in IT security auditing or security operation role.
• Strong knowledge in internet infrastructure, networking technology and security (i.e. DNS, DHCP, Firewall, WAF, IDS, IPS, VPN, APT and TCP/IP protocols)
• Working experience with major SIEM will be advantage
• Strong practical experience in Cyber security: Cyber kill chain, TTP, threat intelligence, malware triages.
• Demonstrated ability to multitask and is detail-oriented with inquisitive mind during case investigation.
• Good team player with strong communication skills with project teams, stakeholders, senior management, and contractors including both technical and non-technical personnel.
• Professional security related qualification (e.g. CEH, ECIH/GCIH, and ITIL) will be favorable although not mandatory technical skills