Security Operations Lead/ SOC

My reputable client, a HK listed enterprise is expanding their SOC team in HK. If you are keen to know more, please get in touch!

About the job:

Daily Operations

• Manage the security monitoring, detecting and analysis of events related to security, ensuring proactive and appropriate defence.
• Lead the investigation and remediation of the existing threat arising from central event monitoring tools.
• Participate on the Use Case Development supported by the SIEM and security tools.
• Work with the global SOC on responding and resolving events generated by the SIEM.

Security Projects & Deployments

• Drives the implementation of the central event monitoring tools.
• Coordinates the implementation of the other projects when necessary. Lead the integration, deployment, and various testing.
• When needed, conduct forensic investigations, malware analysis, reverse engineering, advanced investigation utilizing various in-house and open-source security tools.
• Prepares various reports and metrics as defined by the management.

About the requirements:

• Degree holder in Computer Science or related disciplines. GIAC Cyber Security Cert or CISSP qualification is a strong advantage
• 5+ years of experience in information security incident handling and SOC operations.
• Hands on Cyber security solution implementation and operation, especially in SIEM and various security tools.
• Certified Splunk Enterprise Security Administrator or Splunk Enterprise Admin is highly preferred.
• Good command of written and spoken English and Chinese (Mandarin and Cantonese)