Monitors SIEM, trouble tickets / email notifications and in-person escalations, logs from ICS infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices such as switches, firewalls, IDS/IPS;
The Apps Support Tech Lead Analyst is responsible to partner with multiple technology teams to ensure appropriate integration of functions to meet goals; identify and define necessary system enhancements; analyze existing system logic, identify problems; and recommend and implements solutions.
Monitor and report on all security related alerts, incidents and breaches and provide assistance in the investigation and resolution of security incidents, when required
Conduct proactive threat hunting activities based on cyber threat intelligence sources, known adversary tactics, techniques and procedures (TTPs), and emerging threat trends.
The Active Defense Center is responsible for the early and effective detection and prevention of attacks on the bank's data integrity and information security in the exciting environment of Cyber Security. We achieve this together with our 3 existing ADC locations in Singapore, Frankfurt and New York together with our new 24/7 first level SOC in KL. We are responsible for the detection and proactive defense against cyber-attack scenarios and actively define and manage the implementation and configuration of appropriate security measures.
Lead and manage the 24x7 Security Operations Centre (SOC) operations, including any Managed Security Service Provider (MSSP) or MDR partner, ensuring security events are monitored, triaged, escalated and resolved within defined Service Level Agreements (SLAs)
Conduct cyber intelligence investigations and research to derive insights and assessments, including producing intelligence reports to inform strategic stakeholders and decision-makers.
Security Architect is expected to lead solutioning partnerships with E level stakeholders from IT and business to define and deliver API, Cloud and new emerging security reference architectures and solutions.
Maintain the security posture and system hardening for both on-premises endpoints and cloud IT infrastructure (e.g. AWS, Azure), including the management of Government security monitoring services such as the Government Cyber Security Operations Centre (GCSOC) and Automated Baseline Log Review (ABLR).