To be part of Cyber Threat team, tier 3 SME and mentor to the SOC team. This role required continuous detection, analysis, investigation, response, and mitigation of advanced threats before they affected the bank's IT infrastructure via a proven and documented cyberthreat model, e.g., Mitre Attack Framework
Preferred level of Experience (by years/function/industry):
- 4 - 5 years of information security experience
- 1 - 2 years supporting incident response and/or investigations
- Experience reviewing and assessing logs for anomalous activity indicating the presence of a threat
- Knowledge and ability to identify threat actor attack methods and track their developments
- Experience using Threat Model e.g. Cyber Kill Chain & Mitre ATT&CK
- Extensive experience conveying complex information in simple, succinct explanations
- Exceptional attention to detail
Other skills required (if applicable):
- Strong technical writing skills
- Extensive experience with analytical tradecraft
- Thorough understanding of cybersecurity principles
- Ability to work independently and build relationships
- Efficient research methodologies
- Ability to relate & convert technical threats with business risks
- Strong proficiency with scripting and programming languages (e. g. Python, PowerShell, Java, NodeJS, Perl, etc).
- Strong communication & writing skills for reporting and analysis on cumulative findings
KEY RESPONSIBLITIES
Solution
- Maintaining of SIEM solution including Splunk, Imperva and etc. (Task including compliance to patch and obsolescence framework requirement)
- Ensure events / logs from all relevant devices are sending to SIEM solution in a complete and accurate manner
- To produce monthly SIEM system health report (completeness and accurate)
Hunting
- Perform threat hunting through industry accepted methodologies including Hypothesis Driven investigation, IOC driven Investigation or Machin Leaning Investigation
- Analyze host, network traffic, IDS/IPS/DLP events, packet capture, firewall logs and other relevant solutions
- Provide forensic analysis of network packet captures, DNS, proxy, Netflow, malware, host-based security and application logs, as well as logs from various types of security sensors
- Identify gaps in IT infrastructure by mimicking an attacker s behaviors and responses
- Perform offensive validation on identified TTP’s
Detection & Response
- Continuously develop SIEM use cases based on Mitre Attack framework based on threat landscape
- To onboard all use cases to Security Operation Center for 24 x 7 monitoring and timely response
- Continuously onboard new IOC to threat prevention solution to ensure known threat are prevented at all time
- Continuously improve processes for use across multiple detection sets for more efficient Security Operations
- Develop dashboards and reports to identify potential threats, suspicious/anomalous activity, malware, etc.
- Assist in the design, evaluation, and implementation of new security technologies
Skills Required
- 4-5 years of information security experience
- 1-2 years supporting incident response and/or investigations
- Experience using threat models (MITRE ATT&CK, Cyber Kill Chain)
- Experience maintaining and managing SIEM solutions (e.g., Splunk, Imperva)
- Experience reviewing and assessing logs for anomalous activity and threat indicators
- Strong proficiency with scripting and programming languages (Python, PowerShell, Java, NodeJS, Perl)
- Strong technical writing and communication skills for reporting and analysis
- Extensive experience with analytical tradecraft and efficient research methodologies
- Thorough understanding of cybersecurity principles and ability to map technical threats to business risk
What We Do
We are a multinational regional financial services provider that is committed to deliver complete solutions to our clients through differentiated segment offerings and an ecosystem that supports simple, fast and seamless customer experience, underpinned by cohesive and inspired workforce and relationship built with stakeholders Headquartered and listed in Malaysia, RHB Banking Group is the longest established local bank, formed though the mergers of several banks, the oldest of which was founded in 1913. RHB Banking Group and its subsidiaries provide a full range of services ranging from retail banking, business banking, corporate and investment banking, Islamic banking, transaction banking to treasury, insurance, asset management, private equity and stockbroking services. TOGETHER WE PROGRESS Our strong heritage is the foundation of our commitment to continue serving the community. For over a 100 years, we have been helping people and businesses grow and succeed, and will continue to do so. Our experience gives us an in-depth understanding of the needs of our customers and partners, inspiring us to constantly innovate and improve to serve them better. With their unending support, we have established ourselves with a strong footprint throughout Malaysia and we are now present in 9 other countries across the ASEAN region. We hope our legacy and pursuit for excellence continues as we tirelessly cultivate and nurture the next generation through our actions and words, preparing a brighter future ahead. We thank those who believe in us and welcome everyone to join us on our exciting journey of progress. The time has come for us to move forward in unison, to realise our greater potential together. Our new brand promise "Together We Progress” honours our past, celebrates the present and welcomes the future. We invite you to join us as we work towards a better and brighter future for all.
