My reputable client is expanding their team in HK, if you are looking for a stable in-house position, please get in touch for a quick chat!

About the job:

• Implement and lead appropriate framework, policies, and processes to deliver a global CTI service
• Lead the team to perform internal vulnerabilities/ POCs validation
• Conduct threat hunting inside the employed solutions (i.e., SIEM, EDR, NDR, etc.)
• Analyse tactics, techniques, and procedures (TTP) of attacking groups, helping to identify, prepare for, and prevent attacks by explaining motives and capabilities
• Manage the global CTI projects including technical advisory, implementation, and timeline
• Manage the strategy approach to facilitate the CTI integration with SOC
• Conduct analysis on the company’s security posture and the technical specification for the procurement of CTI services and Cybersecurity projects
• Design the workflow and develop the process for handling CTI related tasks
• Conduct analysis on the alerts/ incident/ information triggered by the CTI services, and report the findings and recommendations on the remediation steps
• Conduct analysis on the feeds from the vendors (i.e., IOCs, IOAs, reports) and provide recommendation

About the requirements:

• Solid hands-on experience on pen testing/ vulnerability validation tools (e.g., Cymulate)
• Good knowledge of SOC design, integration, implementation, and verification
• Good understanding of security incident handling and SOC operating model
• Broad knowledge of cyber security concepts including vulnerabilities, web and application security, access controls and secure architectures.
• Understanding modelling and capable of creating high level models to validate architecture decisions and measure bandwidth performance compared to requirements
• Familiar with the MITRE ATT&CK Framework, NIST CSF, CIS Controls, Threat modelling, OWASP Top Ten Most Critical Web Application Security Risks.
• Project management experience preferred