ТайваньManager, Security Engineering _ DART Taiwan
1 мес. назад
ТайваньLeadOnsite
cybersecuritydetectionresponse
Lead the Detection and Response Team (DART) for cybersecurity threat detection and response in 's Taiwan region.
Обязанности
- DART(Detection and Response Team) is responsible for detecting and responding to cyber threats across , with the objective of minimizing the potential impact of cybersecurity incidents on the organization. This position is for the DART manager of Taiwan region.
- DART(Detection and Response Team) is responsible for detecting and responding to cyber threats across , with the objective of minimizing the potential impact of cybersecurity incidents on the organization, and the team currently operates through DART KR and DART US and is expanding its global coverage with the establishment of DART TW. CSOC(The Cyber Security Operations Center) proactively prevents security incidents through established detection rules and response procedures. When a potential security incident is identified, DART analyzes the event to determine whether it is a true or false positive and assesses its potential impact. For confirmed incidents, DART identifies the root cause, implements containment and mitigation measures to prevent further damage, and collaborates with cross-functional stakeholders to develop and execute long-term preventive controls, reducing the likelihood of similar incidents recurring. In addition to incident response activities, DART conducts threat hunting by analyzing a wide range of logs and artifacts collected through the SIEM platform. This enables the team to identify and address threats that may have evaded existing detection mechanisms, further strengthening the organization's overall security posture.
- Lead and analyze and responses to security incidents, and need hands-on skills
- Manage DART Taiwan members
- Analyze and respond to security anomalies, intrusion attempts, and breaches, and root cause analysis, containment, creating the report (In particular, candidates are expected to take direct ownership and lead the response to security incidents and suspected security incidents occurring in Taiwan)
- Threat hunting to find undetected security threat from the CSOC using data from end points, servers, clouds, network and other sources
- Ticket review, and security analysis escalated from CSOC
- Improvement of incident response policies and procedures, and process
- Oncall to response urgent security events or security issues
- Collaborate effectively with internal teams through efficient communication
Требования
- 15+ years of experience in information security with at least 8+ years as a Cyber Security Incident Analyst
- English proficiency is required
- Experience of analyzing security event and knowledge of AWS or Cloud environment
- Experience of analyzing system logs of Windows/Linux/Mac systems.
- Experience and skills querying SIEM for analyzing security events from the logs
- Skill to analyze big data or big size logs
- Experience of Host based security investigation (Windows, Linux, Network/Security appliances)
- Experience of analyzing security event from network security solutions (IPS/IDS, Network Monitoring solutions, Netflow, etc)
- Experience of analyzing security event from endpoint security solutions (EDR, HIPS, Anti-Virus, DLP, etc)
- Experience of analyzing security event from application (Web application, Mobile app, Email security, etc)
- Experience in Automation and Scripting using Bash, Python, PowerShell
- Proactive and proactive work attitude
- BS degree or equivalent practical experience
Будет плюсом
- Knowledge of container environments (e.g., Kubernetes, Docker)
- Current understanding of Network Traffic/Packet analysis and forensic
- Experience in Automation and Scripting using Bash, Python, PowerShell
Как откликнуться
- Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer
- The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
- Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.
Другое
- is reimagining the shopping experience with the goal of wowing each customer from the instant they open the app to the moment an order is delivered to their door. Our services in Taiwan include “Rocket Delivery” which offers next-day delivery for a wide selection of items at affordable prices, “Rocket Oversea” which offers free international delivery on millions of best-selling products from Korea, the U.S., and beyond.
- We are looking for talents to help us lead ’s expansion in Taiwan. This is an exceptional opportunity to become a part of ’s growth in Taiwan and create a world where our customers wonder, “How did I ever live without ?”
- This job posting may be closed prior to the stated end date for application if all openings are filled.
- has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
- Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.