IT Security Engineer

1. Security Operations & Incident Response

• Monitor and investigate security alerts (directly or via SOC)
• Lead or support incident response for:

➢ Malware / ransomware

➢ Phishing and account compromise

➢ Insider threats

➢ Data leakage incidents

• Coordinate containment, eradication, and recovery activities
• Conduct post-incident root cause analysis and improvement actions

2. Vulnerability & Patch Management

• Perform vulnerability scanning and risk assessment
• Analyse scan results and prioritize remediation based on business risk
• Coordinate patching with IT and application teams
• Track remediation progress and report risk exposure

3. Security Tool Ownership

• Own day-to-day operation of security platforms such as:

➢ SIEM / SOAR

➢ EDR / XDR

➢ Email and web security

➢ DLP, CASB

• Tune detections, improve signal quality, and reduce false positives
• Integrate security tools with enterprise systems
• Advantage if verse in tools like Sentinel / Securonix

4. Threat Management & Intelligence

• Track emerging threats, vulnerabilities, and attack trends
• Assess relevance and impact to the organization
• Translate threat intelligence into actionable controls and detections

Requirement:
Degree in Computer Science/Information Technology or equivalent

At least 3 years’ experience in IT

Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and above)

Experience in using security tools (E.g. Security Endpoint solutions, CyberArk, Tenable Nessus, Securonix, Sentinel))

Certified with one or more of the following: QISP, CISSP, Cybersecurity Nexus, CompTIA Security+

ALTROCKS TECH PTE. LTD.