Security Analyst (2nd Tier Support, 45k)

Join our dynamic team to make a real impact in the world of cybersecurity, where your skills will be valued and your growth supported!

Responsibilities:

• Provide 2nd tier support for Managed Security Services, focusing on information security incident management.
• Investigate, respond to, and offer recommendations on security incidents promptly.
• Design and maintain SIEM rules, ensuring ongoing optimization.
• Implement and manage security devices (e.g., UTM, IPS, WAF) and oversee comprehensive solution design and implementation.
• Prepare, review, and update operational procedures and guidelines.
• Manage change control for security devices; test and apply patches or upgrades with proper documentation.
• Generate service reports for customers and internal stakeholders.
• Administer the Managed Security Services portal.
• Conduct regular service review meetings with customers.
• Assist with ad hoc projects and tasks as assigned.

Requirements:

• Degree in Information Technology, Computer Science, or a related field in information security.
• At least 3 years of experience in IT services, with a minimum of 2 years in information security or risk management.
• Professional certifications in information security (e.g., CISSP, CISA, GIAC, CEH, ISO 27001) are a plus but not mandatory.
• Experience in security incident analysis and management.
• Familiarity with SIEM tools, Splunk, firewalls, IDS/IPS, UTM, WAF, and UNIX/Windows system administration.
• Knowledge of vulnerability analysis and traffic, event, and packet analysis.
• Proficiency in regular expressions and SQL query language.
• Understanding of SIEM and networking technologies is advantageous.
• Strong analytical and interpersonal skills.
• Ability to work under pressure.
• Fluent in English and Chinese (Cantonese and Mandarin).