Associate Technology Analyst - Cybersecurity

Job Description:

Working as part of the Sime Darby Motors Cybersecurity team in the following areas:

Information security management

• Applies and maintains specific security controls as required by organisational policy and local risk assessments.
• Communicates security risks and issues to business managers and others. Performs basic risk assessments for small information systems.
• Contributes to the identification of risks that arise from potential technical solution architectures. Suggests alternate solutions or countermeasures to mitigate risks. Defines secure systems configurations in compliance with intended architectures.
• Supports investigation of suspected attacks and security breaches.

Threat Management

• Monitor, access and report security threat within the corporate network environment
• Transforms collected information into a data format that can be used for operational security activities.
• Cleans and converts quantitative information into consistent formats.

Security Operation

• Receives and responds to routine requests for security support. Maintains records and advises relevant persons of actions taken.
• Assists in the investigation and resolution of issues relating to access controls and security systems.
• Documents incident and event information and produces incident, exception, and management reports.

Vulnerability assessment

• Perform and monitor vulnerabilities management to identify risks in existing software and operating systems.
• Data massaging, analysis and reporting for vulnerability assessment.
• Applies standard techniques and tools for vulnerability research including proactive websites scan and business applications scan.
• Uses available resources to update knowledge of relevant specialism.
• Analyses and reports on activities and results.
• Collaboration with various stakeholders and follow up on the assessment

Community and awareness

• Participate in Cybersecurity community
• Contribute to the company’s Cybersecurity awareness program and update knowledge portal

Job Requirements:

Level 300- Level 400 knowledge of one or more of the following technology domains:

• Anti-Virus and Anti-Malware (Systems and Endpoints)
• Vulnerability scanning and research.
• Email, Web Gateways, encryption data leakage knowledge
• Intrusion Detection, Prevention and Response
• Next Generation Firewalls, Web Application Firewalls
• Patch and Vulnerability Management
• Compliance programs (NIST, ISO 27001, ISM)
• Passion for Cybersecurity, and how Cybersecurity is an enabler for business success
• Proven experience in working within a Cybersecurity operation functions
• Familiarity with determined adversaries and how malicious software persists on compromised systems
• Knowledgeable of the Threat Landscape and common attack vectors
• Experience with the response of computer security incidents.
• Practical, hands-on experience deploying and configuring threat detection technologies like Microsoft Defender, Intune and Azure Sentinel.
• Be a self-starter who takes ownership of opportunities; works independently manages multiple simultaneous projects and deals well with ambiguity and last-minute changes
• Have a growth mindset to learn new skills
• You will have an analytical mind and be passionate about discovery, finding problems and opportunities for improvement, seeking innovative ways to improve and enhance efficiency and customer experiences.
• Good interpersonal skills
• Strong oral and written communication skills
• Ability to work well in a team.
• Ability and willingness to adapt quickly to change and the ability to shift quickly as priorities and circumstances change.
• Aptitude for acquiring new skills and knowledge.
• Experience working with system integrator, project roll out.
• Experience in Automotive industry a plus

Job Qualifications:

• Tertiary degree in IT with Cybersecurity and with ICS2 Security, CompTIA Security +, Microsoft Security Compliance, Identity Fundamentals, Microsoft Security Operations Analyst, Microsoft Identity and Access Administrator, Microsoft Cybersecurity Architect preferable.
• Minimum 2+ years commercial IT experience