Job Opening - Global Executive

Our client, a public sector is looking for high-calibre person to fill the position.

Plan and support the monitoring, upgrades and enhancements for the security related infrastructure, including Security Information and Event Management, security incidents handling and potential cyber threats prevention.
Carry out upgrades and enhancements for security related infrastructure components which including:
- Conducting feasibility studies on security enhancements for Security Information and Event Management (SIEM), participating in infrastructure security and technical design, and overseeing the entire implementation stage of the SIEM;
- Managing and strengthening the security posture of existing IT infrastructure, including conducting security configuration reviews for servers and network appliances, enhancing protection capabilities and detection rules of endpoint protection solutions, and implementing technical security controls for protecting department from cyber threats;
- Designing and reviewing the Domain Controller (DC) security zone isolation to restrict network traffic, limiting administrative privileges, and isolate critical enterprise assets
- Assist to and formulating and executing threat-hunting hypotheses to uncover stealthy attacks, and continuously tuning SIEM, Network Detection and Response (NDR) and Endpoint Detection and Response (EDR) detection rules based on emerging threat intelligence and regular vulnerability assessments;
- Providing advanced technical support in handling security incidents, encompassing forensic, investigation, containment, recovery, escalation and leading root cause analysis follow-up actions;
- Reviewing and providing security-focused feedback on project deliverables, including Systems Analysis and Design (SA&D), implementation plans and operational procedures to ensure quality and compliance with the latest IT Security Policy and Guidelines;
- Performing daily alerts review and logs analysis for all the security related infrastructure components including SIEM, NDR, EDR and any relevant logs from servers and network equipment.

Higher Diploma or above in Computer Science, Information Technology or a related field.
The candidate shall possess the following mandatory technical skills:
- Good Communication, analytical and interpersonal skills;
- Good background in enterprise IT infrastructure (including servers, operating systems, Active Directory, and networking), enabling effective security hardening, configuration reviews, and risk mitigation;
- Experience in security monitoring, continuous threat detection, and incident response operations, utilizing SIEM, EDR, and NDR platforms to investigate and neutralize threats, and with hands-on experience working within a 24x7 security monitoring and operations environment, managing the full lifecycle of threat detection, alert triage, incident containment, and investigation;
- Support experience in designing and implementing SIEM;
- Experience in security alerts review, logs analysis and correlation between various network, servers and security devices;
- Profound knowledge in information security management for enterprise organisation;
- Experience in scripting, including bash, PowerShell, Windows command scripts, etc. for automation; and
- Experience in coordination with various project teams and vendors.

职位空缺搜寻

搜寻

Network & Security Administrator (HK$55K - $65K+) (Ref. No.: 27858)