(Logistics MNC) Security Engineer
5 дн. назад
TaiwanWorldwideOnsite
microsoft 365ai servicessecurity incident responsenetwork monitoring
Responsible for protecting information assets by implementing security solutions and managing security posture in a logistics multinational.
О компании
- The Security Engineer is responsible for the group's information assets against evolving threats, ensuring data confidentiality, integrity, and availability. Core duties include: Evaluating and implementing new security solutions and AI services Proactively assessing the security posture across on-premises networks and multi-cloud environments Managing Microsoft 365 security and enterprise data compliance strategies Architecting and deploying robust security controls Monitoring network activities and spearheading security incident response Raising employee security awareness
Обязанности
- Assess the security of information systems and networks, consistently identifying potential risks, vulnerabilities, and zero-day threats.
- Design and implement advanced security controls, including Firewalls, DLP, XDR, WAF and SOC operations etc.
- Monitor network traffic and activity for suspicious behavior and coordinate threat hunting operations.
- Plan, manage, and optimize O365 enterprise security services, including Conditional Access, Intune, and Entra ID Protection.
- Implement data protection strategies using Microsoft Purview (e.g., managing sensitivity labels.
- Understand multi-cloud environments (Azure, AWS, GCP) and provide strategic planning and recommendations for cloud security.
- Assist in the evaluation, planning, and implementation of new security solutions, ensuring secure adoption, seamless integration, and strict alignment with enterprise security architecture (Secure by Design).
- Lead Proof of Concept (PoC) phases for emerging cybersecurity technologies to address evolving business needs and threat landscapes.
- Investigate and respond to security incidents, determine the root cause, assess the impact, and execute swift corrective actions.
- Develop and integrate automated SecOps workflows using customized scripts (Python, PowerShell).
- Raise employee security awareness and conduct targeted security education and training.
- The ever-evolving nature of security threats requires continuous learning and updating of knowledge.
- High-pressure work environment when dealing with incidents.
- Need to collaborate with people from different departments.
Требования
- Bachelor’s degree in information security or a related field
- At least 3 years of relevant work experience.
- Hands-on experience with application, system, and network security
- Familiarity with cloud computing, Linux administration, and TCP/IP protocols
- Strong knowledge of security fundamentals and best practices
- Familiarity with network security, system security, application security, etc.
- Experienced in any of Microsoft Security solutions, EDR, SIEM, DLP, Firewall, SOC, Email Security, Vulnerability Assessment, WAF will be a plus.
- Strong analytical and problem-solving skills
- Excellent communication skills in English (TOEIC 700+ preferred) and teamwork skills
- Certificates: Candidates with Security or M365 related certifications (e.g. CISSP, CISM, CISA, ISO27001, MS-102, SC-100, MD-102) will be a plus.