[LTA-ITCD] PRINCIPAL / SENIOR / EXECUTIVE CYBERSECURITY ENGINEER

[What the role is]

PRINCIPAL / SENIOR / EXECUTIVE CYBERSECURITY ENGINEER, CYBERSECURITY MONITORING & INCIDENT RESPONSE

[What you will be working on]

You will be responsible for:

• Perform monitoring and analyse security alerts from various security tools and threat intelligence sources
• Lead incident response activities including containment, eradication, and recovery from security incidents
• Develop and maintain incident response procedures and playbooks
• Ensure cybersecurity threats and risks are detected and responded to effectively through cybersecurity monitoring operations.
• Assist in coordinating the response and investigation efforts during cybersecurity incidents.
• Assist in designing and implementing cybersecurity projects that enhance the cybersecurity posture of Land Transport systems, in collaboration with various key stakeholders.
• Search, gather and analyse cyber threat information obtained from numerous sources to derive credible intelligence that is relevant to the Land Transport context.
• Work closely with relevant teams to review regularly and enhance cybersecurity incident response Standard Operating Procedures (SOPs) and playbooks to achieve better cybersecurity readiness within the Land Transport sector.
• Provide regular management updates and recommendations to ensure the effectiveness and efficiency of cybersecurity monitoring and detection in the Land Transport sector.
• Experience / knowledge in forensic investigations of security incidents.

[What we are looking for]

• Knowledge in Computer Science, Cybersecurity or equivalent.

• Candidates with requisite skills and experience might be considered for senior roles.

• Candidates with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, digital forensic, compliance and industry IT/cyber security best-practices preferred.

• Professional accreditation such as CISSP, CISM, CRISC, GICSP and GCIH would be advantageous.

• Candidates with hands-on experience in one or more of the following domains (e.g. cybersecurity threat monitoring, threat hunting, incident handling and investigation) will be an added advantage.

• Good analytical, problem-solving and critical thinking skills.

• Enjoy working with multiple parties to achieve the desired cybersecurity outcomes.

• Good oral and written communication skills.

  As part of the shortlisting process for the role, you may be required to complete a medical declaration and / or undergo further assessment.