Security Engineer - SOC

Our client is looking for a security engineer to support their operation.

Responsibility:
1. Experience in security operations (Both on-prem and cloud)
a. Perform regular vulnerability scanning and reporting
b. Perform vulnerability remediation
c. Perform regular patching
d. Work with 3rd party SOC for alerting
2. Experience in application security
a. Knowledge on application code review
b. Support development team on penetration test and application scanning process
c. Support security mitigation during software development
3. Experience in security products/solutions evaluations
4. All kind of project Implementation on security area


Requirements:

1. At least 3 years in 2nd line support of security operations
a. Concept of threat and vulnerability operations
b. Use SCCM to manage both workstation and server patching and reporting
c. Use Rapid7 for vulnerability management
d. Use Microsoft Defender for endpoint security
e. Follow up SOC alert – incident response and remediation
f. Concept of solution lifecycle management and follow up (e.g. remediate on EOL services/equipment)
2. Basic cloud knowledge (Both Azure and AWS)
3. Basic knowledge in identity & access management.
4. Intermediate on security concept a. PKI
b. Authentication (SSO, MFA…etc.)
5. Nice to have some security certificates (e.g. CEH, CISA, CISSP, CCSP….etc.)