Senior Cyber Security Analyst

Full Time Phnom Penh Posted 2 days ago

Technology

JOB RESPONSIBILITIES

  • Conduct thorough assessments of security threat and vulnerabilities, analyzing potential risks to the organization's information system & network.
  • Lead incident response efforts (incident respond team), including monitoring, identifying, analyzing, containing, and mitigating security breaches (24x7). Develop and implement cyber incident response plans/cyber incident playbook for responding to cyber incident, for ensuring an effective and timely response.
  • Lead SOC teams and other stakeholders to conduct threat hunting, threat intelligence, analysis and investigate cyber incident.
  • Oversee security monitoring tools and system (SOC 24x7) to detect and respond to security incidents in real-time.
  • Monitoring information systems accesses and stay informed and escalates all activities such as suspicious activity, alerts taking place within the networks.
  • Lead SOC teams and other stakeholders to implement, manage and enhance SOC tools working properly and effectively.
  • Design use case, log parsing, turning rules, reports, and dashboard.
  • Assist in the improvement, development and enforcement of SOC plan, process/procedure, and cyber incident playbooks to ensure compliance with internal policy and industry regulations.
  • Work closely with IT security team, IT team and other departments to ensure security measures are integrated into all aspects of the organization's operations.
  • Research new trends, analyze threats to information technology to stay update on software, potential threats, best practice for security and prevention.
  • Conduct training sessions and workshops to raise awareness about security best practices, procedures, cyber incident playbooks among employees.
  • Prepare detailed reports on security incidents, vulnerabilities, and compliance status for management and stakeholders (daily, weekly, and monthly).

JOB REQUIREMENTS

  • Graduated bachelor’s degree of Information Technology, preferably in the field of Computer Science.
  • Must be certified or hold a valid certification in any security course like SOC 100, SOC 200 OSDA, CSA, CND, CEH, ECIH, and other security related courses are advantaged.
  • Additional knowledge/experience of cyber threat intelligence frameworks like STIX/TAXII, MITRE ATT&CK is preferable.
  • At least 3 years of directly related practical experience and demonstrated ability to carry out SOC, security operations.
  • Experiences implementing and maintaining the cyber security controls, incident response.
  • Experiences implementation of security tools.
  • Experience and extensive knowledge of Security Information Event Management (SIEM), EDR, XDR
  • Knowledge and experience in leading cyber security analyst team.
  • An exceptional understanding of threats and attack vectors and their mitigation.
  • Solid understanding and experience working with and analyzing malware.
  • Working knowledge and administration of Linux, Windows, and Mac environments.
  • Experience or familiarity with SIEM solutions, intelligence and analysis tools, Threat Intelligence Platforms and OSINT aggregators.
  • Basic knowledge of programming languages or scripting.
  • Experience in vulnerability scanning, assessment,
  • Experience in creating security incident report, manage and maintain threat, vulnerability report.
Apply