Win More E. Email & Phone Number

Las Pinas, Ncr, Ph

Washington, District Of Columbia, United States

Responsible for reviewing suspicious threat activity via logs and security applications to determine the nature of a possible threat and decide on necessary remediation actions for many systems, including but not limited to Operating Systems, network devices, AV systems, and more. Collaborating with stakeholders to escalate recommendations and actions to the senior team in real-time against systems under attack with clear and concise reports representing the overall summary, analysis, actions taken, and recommendations for escalated incidents via a platform ticketing system. In addition, validate operations during the shift, if there is any issue that needs escalation, monitor stakeholders' requests via their escalated ticket, and let the senior team know if there was additional support needed. Supporting cyber defense functions to protect organizations from cyber security incidents that have the potential to cause negative impacts.• In-depth knowledge of cybersecurity concepts such as cyber-attacks and techniques, threat vectors, risk management, and incident management• Investigate, document, and report on information security issues and emerging trends• Incident Response - reporting of cyber security incidents, mitigation advisement, quality review and after action• Use SOC monitoring tools and have a working understanding of systems. Such as SIEM systems, Intrusion Detection Systems, Data Loss Prevention and Antivirus Systems toreview and analyze pre-defined events• Provide analysis and identify trends of security log data from many heterogeneoussecurity devices indicative of incidents• Cyber Intelligence - IOC vetting and disposition• Countermeasure Implementation - assist in recommendations for content to detectincidents, including new IOCs for blocking and detection• Cyber hunt - monitor and assess complex security devices for patterns and anomalies,using manual search queries to identify threats reported via an alert or manual hunt

Hong Kong Sar

Responsible for interpreting, conducting analysis, and making recommendations for resolution from security logs sources and alerts from the (SIEM, IAM, CASB, EDR, SEG & other security tools) and other threat detection systems for threat activity from our managed services Security Operations Center (SOC). Act as team leader and responsible for cyber security incidents arising (e.g. for end-point devices such as laptops, desktops, servers, firewalls, routers, O365, SEG, security devices, etc), including those escalated by Security Operations Center (SOC). This involves following up with the respective end users and IT personnel to ensure incidents are effectively closed. Representing Group-level IT Security COE across IT teams at key cross-team projects/Initiatives and managing Group-level IT Security project plan, schedule, issue/dependency tracking, and security check on Pre and Go-Live. Facilitate security requests on the firewall, email, etc whitelisting review & approval. Oversee tracking, follow-up, and closures of issues/incidents to achieve 100% SLA completion. Report incident statistics and provide analysis of incidents. Prepare regular cyber security status reports for submission to the Leadership team. Provide advice to IT/End users and manage the cyber security policies, procedures, and best practices. Perform periodic reviews on Privilege accounts, policy, Risk acceptance forms, and vendor assessment renewal. Conduct quarterly and targeted phishing exercises and other simulated security attacks to gauge the company’s response, including educating vulnerable users. Prepare content/material for security awareness training, and phishing campaigns, and work with HR teams on refresher and other new courses. Designing, optimizing, and continuously improving security products and conducting testing to ensure the full functionality of the policies in placeCommunicate cyber security advisories to IT/End users. Support security operations on-call duty

Shenzhen, Guangdong, China

A in depth theory and hands on training in cloud computing, networking, and virtualization using the Huawei elastic cloud server.

Manila, National Capital Region, Philippines

Las Piñas, National Capital Region, Philippines