Purpose of position
- Participate in all aspects of information security and network security including intrusion detection, incident response, vulnerable assessment
- Application security and compliance with the corporate information security policy
Job Description
- Responsible for operating , administrating and improving security technologies including DLP, Antivirus, IPS/IDS, End Point Protection, Web Application Firewall, Network Access control
- Participate in improving Security Processes and Procedures
- Deploy, build, test new security technologies, which include the development operational manual
- Participate in technical risk assessment and security exposures analysis of systems and networks
- Participate in or lead the Incident Response activities
- Perform daily, monthly report of Security status
- Maintain current inventory of all Security solution
- Responsible for managing day to day operations, and administration
- Perform backup, restore and disaster recovery of security systems
- Implements policies to ensure the security and integrity of the network and system
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.
Job Requirements
- IT relevant experience or equivalent combination of experience performing Security Engineering / Planning / Operations
- Experience in medium to complex computing environments, with advanced knowledge in security technologies and services
- Hands-on experience with at least two or more of the following Enterprise Security Technologies:
- Network Intrusion Prevention / Detection (IDS/IPS)
- Virtual Private Networks; SSL, IPSec and Site-to-Site
- Enterprise Class Stateful Inspection Firewalls
- Network Access Controls (NAC)
- Web Filter and WAF
- Windows Server OS & Desktop OS
- Network Packet Inspection
- Directory Services including LDAP, AD and Secure Authentication Technologies
- Knowledge of Information Security risk assessment methodologies and standards
- Experience developing technical documentation, including reports, proposals, statements of work, and whitepapers
- Experience handle security solution such as firewall, IDS/IPS, NAC, Web Filter, WAF
- Additional experience with other network, security than Cisco is preferable
- Certifications : Preferred – Any IT Security certification
