Senior Analyst

We’re not like most. We don’t just overcome obstacles - we don’t see them. Instead, we see the potential in every person, and every situation. We don’t wait for opportunity to appear - we create it. Meet ASM. A company that has been searching for people just like you._

**Who is ASM?**

ASM is a leading, global supplier of semiconductor wafer processing equipment. Our ambitious team is dedicated to delivering innovative technology solutions to the world’s leading semiconductor manufacturers. We have over 3,800 employees based in 14 countries, including Belgium, Japan, Netherlands, South Korea, Singapore, Taiwan and United States. Together we work to develop Epitaxy, ALD, PEALD, Vertical Furnaces and PECVD thin-film deposition technologies for our customers. Our goal is to remain an industry leader by being ahead of what’s next. We accomplish this by focusing on finding collaborative solutions to make integrated circuits, or chips, smaller, faster and even more powerful.

**ASM, an inclusive workplace**

We at ASM are a truly global organization that works diligently with an open-mind in all areas of our business. We strive for a culture and work style that fosters trust and transparency. We put our people first, and that is how we will continue to succeed. We are an equal opportunity employer and value diversity. We recognize and value the differences between individuals, including gender, ethnicity, religious beliefs, sexual orientation, knowledge and experience, work background, age, skills, amongst others. Recruiting and developing a diverse workforce provides a wide range of perspectives. This enables a culture of continuously exploring and adopting new technological ideas and innovations, and it also enables us to deliver excellent products and service to our clients.

**Position summary**:
This role is responsible for overseeing and partnering with other IT functions to execute the day-to-day L2 Security Operations activities within the SecOps track, which includes but not limited to Incident Response, Vulnerability Management, Security Reviews and Automation. Secondarily, this role is also required to assist the Global SDO Manager in building the Global Security Defense & Operations function to perform security detection & monitoring, data loss prevention, threat intelligence, and threat hunting. This role will work closely with other members of the IT functions and the Cybersecurity Team (Line 2) to identify and mitigate potential cyber security risks.

**Key Responsibilities**:

- Oversee and manage the SecOps services operational effectiveness and SLAs
- Develop, maintain, and execute the overall SecOps operations capability roadmap
- Participate in the planning and development of the roadmap for the overall Cybersecurity Operations to drive continuous improvement in maturity and capability
- Responsible for the delivery of vulnerability management services and manage activities associated with attack surface reduction and proactive management of potential vulnerabilities
- Perform secure code review and assist developers in triaging code scan results
- Participate in the automation and implementation of tools to enhance detection, response and recovery functions and security posture.
- Identify infection/compromise in the company utilizing threat intelligence and indicators of compromise (IOCs) from different threat Intel sources and regulators
- Generate security reports and metrics as required, and provide timely and periodic updates to Global IT management on security operations matters
- Align with Cybersecurity team (Line 2) to drive implementation of Cybersecurity policies and standards, and the adoption of Cybersecurity frameworks.
- Assist in enhancing the incident response life cycle, security tools, playbook, and security processes for daily security operations.
- Participate in the annual table-top exercise / cybersecurity recovery drills
- Utilize and understand the common data available from security tools, including Log Management, EDR, SIEM, Vulnerability Management, Firewall, WAF, IPS, Antivirus, IRM and DLP
- As the key personnel in the investigation of cyber security incidents and threats, this individual must be able to engage as required (including holidays and weekends) at the time of major incidents.
- Bachelor’s degree relevant to Cybersecurity, Information Technology, Computer Science/Engineering (or equivalent)
- At least one security certification such as GCIH, ECIH, CEH, CHFI, CISSP
- Minimum IT working experience of 6 years, with at least 2 years of experience in leading the Security Operations or Incident Response. People management experience is a must have.
- Ability to develop security standards and guidelines on best practices and industry standard
- Experience in major Cybersecurity incidents management for an enterprise level environment is a plus
- Knowledge of different domains of IT Security cyber kill chain, IOCs, attack frameworks, and phishin