Senior Cybersecurity Specialist

at  Mandai Wildlife Reserve

Advertised on: 17 Jul 2024
Mandai Wildlife Group is the steward of Mandai Wildlife Reserve, a unique wildlife and nature destination in Singapore that is home to world-renown wildlife parks which connect visitors to the fascinating world of wildlife. The Group is driving an exciting rejuvenation plan at Mandai Wildlife Reserve, adjacent to Singapore’s Central Catchment Nature Reserve, that will integrate five wildlife parks with distinctive nature-based experiences, green public spaces and an eco-friendly resort.

JOB REQUIREMENTS:

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 4-5 years of experience in cyber security, with a focus on EDR, vulnerability management, and incident response.
• Experience with EDR solutions (CrowdStrike and Trend Micro) and vulnerability management tools (Nessus).
• Proficiency in analyzing security logs and alerts using SIEM tools (CrowdStrike LogScale).
• Proficient in using industry-standard tools like Metasploit and Cobalt Strike to identify and exploit vulnerabilities.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Relevant certifications (e.g., CISSP, CISM, CEH, GIAC) are a plus.
• Strong knowledge of cyber security principles, practices, and frameworks (e.g., NIST, ISO 27001) are a plus.
  Specialization
  :
  Administration / Support Function
  Type of Employment
  :
  Permanent
  Minimum Experience
  :
  4
  Work Location
  :
  Corporate Office

We are looking for a skilled Senior Cybersecurity Specialist with 4-5 years of experience in managing endpoint detection and response (EDR), vulnerability management, security monitoring and analysis, and incident response. The successful candidate will be responsible for safeguarding our information systems by identifying and mitigating potential threats, responding to security incidents, and ensuring the continuous improvement of our security infrastructure. The ideal candidate will have a good background in information security, familiarity with various attack vectors, and the ability to stay updated with the latest security trends and technologies. Excellent problem-solving skills and a proactive approach to security are essential for this role.

Endpoint Detection and Response (EDR):

• Manage and configure EDR solutions to detect, analyze, and respond to security threats and incidents.
• Conduct regular monitoring and analysis of EDR alerts to identify potential security breaches.
• Implement new capabilities to enhance EDR solutions in the ever-expanding information systems landscape of Mandai.

Vulnerability Management:

• Conduct simulated attacks on our systems using industry-standard tools like Metasploit and Cobalt Strike to identify and exploit vulnerabilities.
• Perform regular vulnerability assessments and scans across the organization’s network and systems.
• Identify, classify, and prioritize vulnerabilities based on risk and impact.
• Collaborate with IT and development teams to remediate identified vulnerabilities and ensure timely resolution.
• Track and report on the status of vulnerabilities and remediation efforts.

Incident Response:

• Lead the response to security incidents, including identification, containment, eradication, and recovery.
• Conduct root cause analysis and post-incident reviews to prevent recurrence and improve incident response processes.
• Develop and maintain incident response plans and playbooks.

Security Monitoring and Analysis:

• Monitor security information and event management (SIEM) systems and other security tools to identify and investigate suspicious activities.
• Analyze security logs and alerts to identify potential threats and anomalies.
• Develop and implement use cases and detection rules to enhance security monitoring capabilities.

Security Awareness and Training:

• Conduct security awareness training sessions for employees to promote best practices and security hygiene.
• Develop and distribute security awareness materials and communications.

Documentation and Reporting:

• Maintain accurate and up-to-date documentation of security policies, procedures, and incidents.
• Prepare regular reports on security metrics, incidents, and compliance status for management.