Senior Security Engineer

The Security Engineer performs real-time analysis and trending of security log data from various security devices and systems. He/She maintains data sources feeding the log monitoring system, develops and maintains detection and alerting rules. He responds to user incident reports and evaluates the type and severity of security events. He executes initial triage of incidents to rule out false positives. He documents incidents and develops reports. He identifies recurring security issues and risks and develops mitigation plans and recommends process improvements. He interprets and applies security policies and procedures. He is required to be on standby with on-call availability with varied shifts including nights, weekends and holidays.

He is diligent and takes an analytical approach to perform real-time analyses. He is skilled in synthesising trends and insights, and is confident in putting forth
creative mitigation plans and solutions to security incidents.

**Monitor security systems**
- Perform audits, reviews, security control assessments, and tests of security operations based on established schedules
- Perform real time analysis and trending of security log data from various security systems
- Analyse security event data to identify suspicious and malicious activity
- Provide inputs to improve security monitoring rules and alerts
- Document processes related to security monitoring

**Maintain security operations**
- Implement security protocols
- Create emergency response procedures
- Maintain data sources feeding the log monitoring system
- Schedule security checks in accordance with reporting schedules
- Prepare periodic status reports for presentation to management

**Respond to security incidents**
- Review security incident reports
- Evaluate the type and severity of security events
- Assist with establishing procedures for handling detected security events
- Provide status updates during the life cycle of an incident
- Create final incident report detailing the events of the incident
- Support the maintenance and update of business recovery/contingency plans and/or procedures

**Provide user support**
- Respond to user requests for technical assistance
- Assess incident severity
- Set clear user expectations on issue resolution
- Update users on changes in status during issue resolution
- Manage user accounts

Requirements / Qualifications:

- Knowledge of next-gen firewall technologies
- Knowledge of the Cisco Firepower, Checkpoint, Palo Alto and/or Fortinet
- Solid understanding of common TCP/IP architecture, principles, operations and controls.
- Solid understanding of network security firewall UTM technologies, trends, vendors, processes and methodologies.
- Solid understanding of common IPS/IDS architectures and implementations.
- Strong understanding of basic protocols used by the internet, such as HTTP(S), DNS, TLS
- Solid understanding of basic networking concepts, such as routing, switching, firewall, and common enterprise security monitoring tools.
- Solid understanding of information security principles
- High degree of personal integrity and ethics as well as a passion for protecting people and systems
- Constantly striving for excellence using objective, transparent and agreed upon standards
- Excellent written and oral communication and presentation skills for leadership, technical and business audiences
- Understanding the concepts for network detection and reaction.
- Possess industry-recognized security certifications (e.g., Cisco Certified Security Professional, CCNA-S, Check Point Certified Security Administrator, Palo Alto Networks Certified Network Security Engineer.)