SOC, Assistant Manager

PRIMARY RESPONSIBILITIES

● To assist manager lead and manage the 24x7 CMS-SOC team.
● Responsible for SOC team's day-to-day operation, including hiring, training, and assessing staff.
● Resource management for CMS-SOC includes but is not limited to the following: -
●Planning and Assignment of headcount for new SOC projects
●Planning of headcount for new and existing SOC projects at planned intervals 

● Resolve issues encountered by the SOC team members and escalate to Management if required 

● Maintain team spirit and motivate team morale
● Promote a healthy working culture
● Post-sales activities on CMS-SOC include but are not limited to supporting solution implementation and servicing customers.
● To onboard/change scope/decommission client for CMS-SOC for 24x7 services.
● Subject matter expert for CMS-SOC for Managed Services Security, Business Continuity and Security Operations management.
● Develop, maintain and update processes to strengthen the current CMS-SOC include but are not limited to operations manuals, policies, standards, guidelines, procedures, and reporting
● Creation of periodic reports for CMS-SOC Operations to the Management
● Responsible for compliance to Client SLA, ISMS Control, ISAE Control, Organization Control, Regulator Control, and Applicable Law for CMS-SOC.
● Part of security analysis to monitor and investigate the incident event.
● Hands-on experience in malware analysis (inclusive of reversing malware) and response.
● To comply with the Information Security Policy in the organization.
● Constantly review existing methods and approaches, addressing any communication or process gaps.
● Work with Head Of IT Operation and Head Of Cybersecurity Solution Services to provide internal infrastructure support.
● Participate in marketing activity from the commercial team

Requirements

REQUIREMENTS
● Possess at least a Degree in Cybersecurity, Computer Science, Information Technology, or another relevant field.
● At least 4-7 Years of experience in IT Security, Information Security, or Cybersecurity
.● At least 5 years of working in a security or network operation center and understanding SIEM tools.
● Experience in managing Cybersecurity Operations and Threat Analysis within IT Applications, Cloud networks, and IT Infrastructure.
● Knowledge of the following technical SOC skills: Incident Response, Log Analysis, TCP/IP, Network Traffic Analysis, Antivirus/Malware, Intrusion Detection/Prevention, Packet Analysis Techniques, Event Correlation, and Incident Triage. ● Certifications such as CISA, CISM, CISSP are preferred.
● Experience in troubleshooting and resolving Firewall, Cybersecurity Attack, Threat Management, and Vulnerability issues.
● Good understanding of the Cybersecurity Monitoring process, flow best practices, privacy, and risk policies to protect the business against Cybersecurity attacks and threats.
● Experience in performing vendor management
● Ability to handle high-pressure situations with critical stakeholders
● Good analytical skills, problem-solving and interpersonal skills
● Enjoy working in a team-based environment.
● Excellent command of verbal and written in both English and Bahasa Malaysia.

Skills

Cyber Security, Security Information And Event Management (SIEM), Cyber Threat Intelligence