Network Security (Cyber Defense Team) (T00031002)

• Practical Operation Control and Continue Improvement The Protection, Detection and Response Sophisticated Cyber Threat coming from Public Channel Interfacing according to Bank’s Policy and Standard Defined

• Control Configuration, change, review the Cyber Defense Technology e.g. CloudWAF, WAF, IPS, Anti-DDoS, to ensure that visibility and control meet the organization and international standard which always up-to-date cybersecurity capability to protect the cyberthreat

• Gathering and preparation, co-ordinate, to build collaboration with Domestic banking sector and National Cyber Security and also Regulation and Banking sector CERT.

• Readiness for Assessment and also Simulation Cybersecurity Test preparation in many aspects / angles based upon Statistic Recording and Threat Intelligence from Internal Factor and External Factor.

• Co-ordinate and control External Provider or 3rd Party for Business Relation in order to response the Cybersecurity Events and Incident Against Cyber Attacked from public Accessing.

• Studying and Educate of TTP (Tactical, Technical and Procedure) of new Cyber Attacked and Gather Information Feeds of Cyber Threat Intelligence purposing to propose new-approach of Cybersecurity Countermeasure

• Cyber Risk Mitigation and Control to meet Cyber Risk Appetite according for highest Business outcome and objectives

Qualification:

• Bachelor’s Degree in engineering /IT or relevant field with at least 5 years work experience in Information Security or Cybersecurity.

• Robust skills of TTP (Tactical Technique and Process) of Threat hunting and Incident Responder which is certified by global certificate.

• Strong Malicious Activity Identification and Investigate and mature the containment strategy and deployment on Digital Banking Technology and environment.

• Expert in Investigation Tools and Forensic Investigation.

• Good Experience and Understanding in Zero Day Attack/Target Attack, Live Response, Cyber kill chain, Containment, Virtual Patch, Mitigation Recommendation.

• Develop Program of Threat hunting Program both Proactive-Reactive Strategy to reduce the impact to the bank.

• Exercise Paybook and IR plan for regular and red-team blue team.

• Good command in English and Explain root-cause of Impact.

• Preferable Certified in CEH A or other related Cyber security certifications.