•Must have a bachelor’s and/or master’s degree in Information Technology or Computer Science from a reputable university
•Possess minimum 10 years of working experience in which at least 5 years of working knowledge in IT Security for:
o Enterprise Network
o Large Server Infrastructure
o Application Development Life Cycle
•Collaborate on the investigation of suspected incidents. Review threat management systems to classify and quantify risk and threat vectors
•Create metrics, reporting and documentation on frequency, impact, and types of incidents
•Research, develop, and keep current on threat trends, attack & defense techniques and practices
•Collaborate on research to architect and implement new technology, update existing strategies, improve process and create additional documentation
•Develop techniques and processes to identify anomalous behavioral patterns
•Identify, evaluate, test, deploy and implement complex technical security solutions to address a variety of business requirements
•Identify gaps, take ownership of tasks and become a contributor to projects as needed
•Advocate security best practices, strategy, architecture, and assist in security design consultations.
•Apply strategic and tactical responses in a high stress and challenging environment
•Expert knowledge of networking protocols and infrastructure designs; including routing, switching, data indexing and correlation, host and network intrusion detection systems.
•Experience in Incident Response, Systems Administration, Network Engineering, Scalable architectures, Software development, Software Operations, or Program Management
•Experience in conducting cyber investigations involving leaks, frauds, thefts, identity theft, counterfeiting, piracy, phishing, hackings, and threats
•Experience in large enterprise deployments and process development.
•Responsible to design and implement an effective IT incident response plan
•Act as incident response leader in events of emergency
•Coordinate among the various IT Sections to perform incident response simulation to identify areas of improvements
•Update IT incident response plan on periodic basis
•Substantial experience in development and implementation of IT controls for area of expertise is a prerequisite
•Certification in Information Security is an added advantage (e.g. Incident handling)
•Strong proficiency with at least 1 programming or scripting languages
•Must possess good English communication skills (both oral and written) with excellent interpersonal skills and pleasant professional personality
•Ability to adapt multicultural work environment
•Strong analytical and problem-solving skills