Infrastructure & Security Engineer (SIEM, Active Directory)

Key responsibilities

• Conduct feasibility studies on security enhancements for Security Information and Event Management (SIEM), participate in infrastructure security and technical design, and oversee the entire implementation stage of the SIEM
• Manage and strengthen the security posture of existing IT infrastructure, including conducting security configuration reviews for servers and network appliances, enhancing protection capabilities and detection rules of endpoint protection solutions, and implementing technical security controls
• Design and review the Domain Controller (DC) security zone isolation to restrict network traffic, limit administrative privileges, and isolate critical enterprise assets
• Formulate and execute threat-hunting hypotheses to uncover stealthy attacks, and continuously tune SIEM, Network Detection and Response (NDR) and Endpoint Detection and Response (EDR) detection rules based on emerging threat intelligence and regular vulnerability assessments
• Provide advanced technical support in handling security incidents, encompassing forensic, investigation, containment, recovery, escalation and leading root cause analysis follow-up actions
• Review and provide security-focused feedback on project deliverables, including Systems Analysis and Design (SA&D), implementation plans and operational procedures to ensure quality and compliance with the latest IT Security Policy and Guidelines
• Perform daily alerts review and logs analysis for all security related infrastructure components including SIEM, NDR, EDR and any relevant logs from servers and network equipment

About you

• Higher Diploma / Degree in Computer Science or related subjects

• At least 4 years experience in IT industry

• Strong foundational background in enterprise IT infrastructure (including servers, operating systems, Active Directory, and networking), enabling effective security hardening, configuration reviews, and risk mitigation

• Solid experience in security monitoring, continuous threat detection, and incident response operations, utilizing SIEM, EDR, and NDR platforms to investigate and neutralize threats

• Hands-on experience working within a 24x7 security monitoring and operations environment, managing the full lifecycle of threat detection, alert triage, incident containment, and investigation

• Solid support experience in designing and implementing SIEM

• Solid experience in security alerts review, logs analysis and correlation between various network, servers and security devices

• Profound knowledge in information security management for enterprise organisation

• Solid experience in scripting, including bash, PowerShell, Windows command scripts, etc. for automation

• Solid experience in coordination with various project teams and vendors

• Strong communication, analytical and interpersonal skills

If interested for the above position, please send detailed resume with current and expected salary as well as date of availability by sending email to [email protected]

For more job opportunity, please visit our website: www.clts.com

The personal information is collected strictly for recruitment purpose only.