Senior Specialist, Cybersecurity Operations

SBS Transit Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SBS Transit Ltd is seeking a seasoned cybersecurity professional to join its security operations team in Singapore. You will manage tickets, triage, vulnerability management, policy compliance and web app security functions, and analyze logs from multiple sources to detect anomalies.

Responsibilities include EDR/MDR/XDR platform support, phishing containment, and advising on new threats. A strong IT background with governance, risk, and incident response expertise is essential, along with cloud

Qualifications

• Bachelor degree in Computer Engineering or equivalent required.
• Professional cybersecurity training or certifications required.
• Minimum 5 years in cybersecurity field.
• Eric or equivalent certifications: CISSP, CISM, CISA, CEH, CRISC.
• Knowledge of ISO27001, NIST, IEC62443 and CSA CCoP.
• Experience in threat detection, pentesting and red/purple teaming.

Responsibilities

• Responsible for all cyber security tickets raised and the triage process
• Plan, deploy and operate the vulnerability management, policy compliance and web application security functions
• Identify cyber security threats to systems and detect security anomalous activities and perform analysis of security logs from multiple sources
• Manage Endpoint Detection Response (EDR) technologies and to be part of MDR/XDR platform support
• Possess working knowledge in handling phishing attacks and containment steps
• Demonstrate strong IT background with expert level knowledge of multiple security practices (Email security solutions, vulnerability management, network security (firewall, IPS/IDS, SIEM, threat intelligence, etc.) in addition to forensics and incident management
• Provide advisory and solutions for new security threats and vulnerabilities
• Possess basic to moderate experience in Threat detection, Penetration testing and red teaming
• Perform security analysis to Cloud platform such as AWS, Azure as well M365 services

Skills

Governance & Risk

Vulnerability assessment

Penetration testing

Incident management

Threat intelligence

Network security

Web security

Cloud security

Forensics

Phishing containment

SIEM

EDR

Threat detection

Security operations

Education

Degree in Computer Engineering or equivalent

Trained in Cybersecurity, Information Security, Forensics or equivalent

At least 5 years of cybersecurity work experience

CISSP/CISM/CISA/CEH/ CRISC or equivalent certification

Knowledge on ISO27001 and IEC62443

NIST Cybersecurity Framework

CSA Code of Practice (CCoP)

Experience in Threat detection, Penetration testing and red/purple teaming

Knowledge in Network, Web Security and Application Security

Experience with information security tools (SIEM, anti-virus tools etc.)

Experience in forensics and incident management

Tools

SIEM

EDR

Threat intelligence tools

Phishing analysis tools

Cloud security tools

Job description

• Responsible for all cyber security tickets raised and the triage process
• Plan, deploy and operate the vulnerability management, policy compliance and web application security functions
• Identify cyber security threats to systems and detect security anomalous activities and perform analysis of security logs from multiple sources
• Manage Endpoint Detection Response (EDR) technologies and to be part of MDR/XDR platform support
• Possess working knowledge in handling phishing attacks and containment steps
• Demonstrate strong IT background with expert level knowledge of multiple security practices (Email security solutions, vulnerability management, network security (firewall, IPS/IDS, SIEM, threat intelligence, etc.) in addition to forensics and incident management
• Provide advisory and solutions for new security threats and vulnerabilities
• Possess basic to moderate experience in Threat detection, Penetration testing and red teaming
• Perform security analysis to Cloud platform such as AWS, Azure as well M365 services

Requirements:

• Degree in Computer Engineering or equivalent
• Trained in Cybersecurity, Information Security, Forensics or equivalent
• At least 5 years of cybersecurity work experience
• CISSP/CISM/CISA/CEH/ CRISC or equivalent certification
• Strong domain knowledge of information security governance and risk management, controls, vulnerability assessment/penetration testing, compliance, business continuity, investigations, system architecture and design, legal, and industry IT/OT and cyber security bestpractices
• Knowledge on ISO27001 and IEC62443, NIST Cybersecurity Framework, CSA Code of Practice (CCoP)
• Experience in Threat detection, Penetration testing and red/purple teaming
• Knowledge in Network, Web Security and Application Security would be highly valued.
• Experience with information security tools (SIEM, anti-virus tools etc.)
• Experience in forensics and incident management