13 дней назад
Information Security Operations Lead (Cybersecurity)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Information Security Operations Lead (Cybersecurity): Operating and improving endpoint, identity, network, email, DNS, logging, and cloud security controls for semiconductor and laboratory automation environments with an accent on hands-on security operations, incident response, and tool effectiveness. Focus on investigating real alerts, tuning detections, designing firewall segmentation, strengthening email security, and building runbooks and escalation processes.
Location: Onsite in Johor or Penang, Malaysia
Company
provides precision robotics, integrated automation systems, and contamination control solutions for semiconductor and laboratory automation markets.
What you will do
- Own the health, configuration, and effectiveness of endpoint, identity, data, network, email, DNS, and logging security platforms.
- Respond to and investigate security alerts, perform root cause analysis, collect evidence, assess impact, and drive containment and remediation.
- Tune detections, reduce alert fatigue, validate controls continuously, and ensure alerts map to real security risks.
- Design, implement, and maintain Palo Alto firewall policies, network segmentation, phishing protection, DMARC enforcement, and DNS-layer security.
- Create runbooks, playbooks, and escalation paths while standardizing security event handling globally.
- Partner with infrastructure, endpoint, and identity teams and mentor junior engineers.
Requirements
- 7–10 years of hands-on experience in security engineering, network engineering, or security operations.
- Proven experience operating and troubleshooting security tools, not only implementing them.
- Strong knowledge of endpoint and identity security, enterprise networking and firewalls, email and DNS security, and logging, detection, and investigation workflows.
- Ability to manage security incidents end-to-end and drive them to closure.
- Clear communication skills for explaining technical risk.
- Availability for onsite work in Johor or Penang, Malaysia.
Nice to have
- Cloud experience with Azure, AWS, or OCI.
- Scripting or automation experience with PowerShell or Python.
- Security or network certifications such as CISSP, Palo Alto, Cisco, or Microsoft certifications.
Culture & Benefits
- Collaborative environment focused on innovation and customer-focused technology development.
- Work arrangements may include office and remote work depending on the role, but this position is specified as onsite.
- Inclusive equal-opportunity workplace.
- Workplace accommodations are available for applicants with disabilities.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →