Cybersecurity Program & Posture Management Specialist

สมัครโปรดคลิกที่ปุ่ม "Apply"

If you are an active SCB employee, please apply through Workday by searching "Find Jobs".

If this is your first time applying you will need to create a candidate account when you click on apply.

Job Description

Job Summary:

We're looking for a Cybersecurity Posture and Threat Intelligence Analyst. In this role, you'll mainly execute the operation of Threat Intelligence Management; from identifying threats, monitoring alerts, detecting, analyzing, to counteracting against them. Having research-minded with experience of analyzing and tracking threat campaigns, adversary tooling and infrastructure, you stay ahead of the latest threat landscapes and trends. This role will be also responsible for supporting managers and team on implementing cybersecurity strategy, cybersecurity transformation and other security uplift activities; to ensure that Cybersecurity Posture is always effectively maintained to acceptable level.

Job Descriptions:

• Collect and analyze threat intelligence reports covering new threats, vulnerabilities, products.
• Conduct technical and operational threat intelligence research, both independently and as part of a wider team.
• Identify emerging threats, techniques and trends, the means of protecting or defending against them, and articulate these in a range of report formats to relevant stakeholders.
• Conduct deep-level analysis of malware, including how it is developed, functions, and employed.
• Support the Consulting and Managed CTI teams, Vulnerability Management, Incident Response and CSOC team with up-to-date technical intelligence, detection logic and situational awareness on current and emerging threats.
• Support Cybersecurity Posture Management to guarantee that a good cybersecurity posture is consistently maintained at an acceptable level. Liaison with external audit, internal audit, financial crime and associated consultants, and the group firm.
• Assist technology security team leaders/others in responding to cybersecurity incidents that have an impact on cybersecurity posture, in order to guarantee quick reaction, tracking, and proper maintenance.
• Assist in R&D and innovation on cybersecurity technology and approaches for continuous cybersecurity uplift.

Qualifications:                                                                        

• Bachelor’s or Master degree in computer science, Computer Engineering, Information Technology, or related field
• At least 5 years of experience in Information Security or a related field

• Knowledge of security technology e.g. WAF, SIEM, EDR, IAM, CSOC and Vulnerability Management
• Experience in cloud cybersecurity technologies and services
• Exposure to malware reverse engineering, network intrusion analysis, host intrusion analysis, log analysis, vulnerability research or digital forensics is preferred.
• Strong understanding of industry best practices and standards, including ISO 27001, NIST, and CIS is preferred.
• Relevant certifications such as CISSP, CISM, or CISA are a plus.
• Excellent communication and problem-analytical skills, with the ability to communicate complex security issues to non-technical stakeholders
• Effective English for verbal, written communication
• Enthusiastic, thriving, good interpersonal skills

We're committed to bringing passion and customer focus to the business.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us.