Position Overview
The Security Engineer supports security systems and operations administration, monitoring and maintenance. They should be alert and vigilant in performing monitoring activities and is able to analyze and resolve security-related issues critically and events including escalation of incidents for validation and remediation.
The engineer is required to be on standby with on-call availability with varied shifts including nights, weekends and holidays on rotational basis. This is a 2-year direct contract role.
Role & Responsibilities
- To configure, implement and maintain all security platforms (E.g. Firewall, Intrusion Prevention, Web Application Firewalls, Web Proxies, DNSSEC)
- Perform assessment of Security Advisories and provide recommendations to the team
- Ensure that all security devices are configured in accordance network security best practices
- Perform periodic vulnerability testing and ensure the remediation of all findings
- Perform regular review of security logs to identify potential operational/security issues
- Perform regular patching of security devices to ensure that devices firmware are kept up to date
- Ensure that all incidents are resolved within the required SLA
- Ensure that all Service Requests are completed within the required SLA
- Ensure that Work Instructions are in place and kept up-to-date for the delivery of all operational tasks
- Continuously review and improve Operations Efficiency (E.g. improving operational efficiency through automation)
- Generates routine reports in the required format
- Secure users and servers internet access
- To support and implement new initiatives
Requirements
- Holding any of following professional certificate are preferable: CISSP, CISCO CCIE, PCNSE and ITILv4
- Possess a diploma/degree in Engineering or IT Bachelor Degree in Computer
- Extensive technical know-how of network security devices (E.g. Firewall, Intrusion Prevention, Web Application Firewalls, Web Proxies, DNSSEC)
- Hands-on experience in at least 2 of the security devices (E.g. Firewall, Intrusion Prevention, Web Application Firewalls, Web Proxies, DNSSEC)
- 5 years experience and knowledge in Enterprise IT infrastructure covering routing, switching, load balancers, data center nexus/ACI and security devices
- Strong knowledge with Web proxy and CCNP is a must, or either in network automation tools like experience in working with automation tools (E.g. ansible), monitoring & observability and logging systems (E.g. ELK).
- Proficient in at least one scripting languages (E.g. YAML, JSON, Bash)
- Strong technical skills in areas of systems engineering, systems administration, networking, and security.
- Strong problem-solving skills and be able to troubleshoot and resolve complex issues quickly.
- Excellent communication skills
EA Licence No: 11C5502 | EAP Registration No: R22109400
