B2C SOC Support (English, Mandarin/Cantonese)

Salary undisclosed

Checking job availability...

Original

Simplified

Key Responsibilities:

24/7 alert Dashboard Monitor
Perform initial triaging of security alerts.
Follow Runbook to Perform the investigation.
Escalate the alert to the SME team as required.
Availability and Health check monitoring of SIEM platform
Document and registration of security incident in ITSM tool
Update knowledge base and KEDB articles for reference
Determine, document, and report false positives events/alerts.
Tracking the incident to closure based on the updates received from stakeholders.
Develop handover procedures to ensure consistency is maintained for incidents during shift changes.
Create and send daily reports to respective stakeholders.
Knowledge on IAM tools and attacks related to user account compromise.
Should have experience on WAF.
Knowledge of ITIL disciplines such as Incident, Problem and Change.
Knowledge on PCIDSS.
Understanding of OWASP concepts.
Experience on Threat Hunting.

Key Responsibilities:

Investigate, identify Root Cause and resolve Cyber Security Incidents escalated by Level 1 team and reduce Incident volumes where possible.
Provide daily/weekly/monthly reporting (Excluding SLA and KPI) and carry out daily, monthly, quarterly routine tasks.
Forward Incidents that cannot be resolved at Level 2 to the SME (L3) team / individual IT Asset owners for resolution.
Track, manage and Deploy permanent Fixes for recurring Cyber Security Incidents via Problem Management
Engage Third Party vendors/partners for Problem escalation/resolution, where necessary
Implement Best Industry Practice s/recommend hardening and alignment of SOC functions in accordance to ASDA adopted standards
Develop process management documentation & playbooks/runbook.
Regularly review and update playbooks to ensure they are kept up to date to respond to known emerging Threats.
Knowledge on IAM tools and attacks related to user account compromise.
Understanding of SSO authentication mechanism.
Should have experience on WAF and use case creation in WAF.
Knowledge of ITIL disciplines such as Incident, Problem and Change.
Knowledge on PCI Compliance.
Understanding of OWASP concepts.
Creation of use cases based on Threat Hunting conducted.