What You’ll Be Doing

• Administer and operate security information and event management (SIEM) technologies and associated processes as a BAU function including the cultivation of cyber threat intelligence, threat models, and use-case and the implementation and refinement of detection rules.
• Onboarding of additional data sources to the SIEM, correlating data across diverse technologies and environments.
• Manage the response process and conduct end-to-end incident investigation. including analysis of attack artifacts to establish incident scope, impact assessment and containment strategies.
• Manage the technical vulnerability management process including monitoring of disclosure sources, evaluation of penetration test report, the use of vulnerability scanning solutions, and engaging IT system owners to assist with evaluation and remediation.
• Manage and support security solutions such as EDR, ZTNA and DLP.
• Go beyond finding security issues and work to provide solutions.
• Provide technical expertise regarding architecture and implementation design of new solutions.
• Provide general security support in the continued uplift and improvement of the environment.

What We Are Looking For - Some of the following

• Proficient English required, as this role involves regular written and verbal communication with global teams and stakeholders.
• Expertise in SIEM solutions within diverse physical and cloud environments.
• Working, up-to-date knowledge of potential exploits, attacker tools, techniques, procedures, and managing threat intelligence sources.
• Experience with native cloud security tools.
• Experience with vulnerability scanning solutions and best practices.
• Experience working with cloud network and application environments.
• Exposure to incident response processes, procedures, methods, and tools.
• Understanding of desktop and server operating systems.
• Experience with network security (e.g., firewall, IDS/IPS, routing, encryption).Experience with host-level security and hardening.
• Understanding of SDLC security practices.
• Current or past certifications (e.g., CC, Security+, relevant vendor certs).
• A keen interest in security and ongoing learning.

What We Offer

• Flexible working environments
• Birthday Leave
• 12 weeks parental leave (after 12 months continuous service), and 5 days of study leave.
• Creative, fun, and contemporary work environments
• Motivated team of industry experts and plenty of learning opportunities
• Celebrated success with internal awards programs
• Health and wellness program
• Generous performance bonus structure

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.