Senior Manager, Global Security Incident Response

POSITION SUMMARY: 

The Senior Manager, Global Security Incident Response is responsible in the detection, triage, containment and post analysis of threats and the response to detected threats and cyber-attacks. The role is to build out a mature cyber defense capability for Melco and ensure that the cyber response is advanced and repeatable to ensure the industrialization of Cyber defense within the organization.

PRIMARY RESPONSIBILITIES:

1.    Senior Manager, Global Security Incident Response function for Melco-Resorts and all business units globally.
2.    Lead initiatives and projects to enhance or build new capabilities in Melco, related to threat intelligence, security monitoring, triage and incident response.
3.    Drive continuous enhancement of the cyber incident responses procedures and playbooks to support effective and efficient incident investigation and response.
4.    Manage external vendor performing 24x7 security monitoring and triage for Melco.
5.    Lead a small team of cyber incident responders and threat intel analysts globally to maximize the value on detection and response
6.    Coordinate and influence the Information Security team to ensure the use cases tools and arch are fit for purpose
7.    Work with peers and CISO to ensure the correct automation, contextualization and response capabilities are built across all areas
8.    Coordinate with Information Security team to define the right framework that facilitates evaluation of weaknesses or new risks, which require engineering continuous improvement.
9.     Recommends and/or executes management policies to hire, transfer, suspend, layoff, recall, discharge, re-assign or discipline employees.
10.    Performs ad hoc functions as may be required.  

KEY PERFORMANCE INDICATORS: 

1.    Quality delivery of cyber security monitoring across all Technology assets.
2.    On time and on budget delivery of Information Security monitoring and incident response program uplifts or deployments and aligned with IT and InfoSec roadmap
3.    Ensure Melco Incident response teams has a clear road map to baseline against industry standards and measure the team’s adoption rate and report through Security Risk function any adoption issues
4.    Controls are delivered in a cost- effective way using processes and resources aligned with Melco goals.
5.    Information Security incident response support and governance are provided to all business units 

QUALIFICATIONS:

I.    Experience

Minimum of 10 years working in IT security incident response management roles

II.    Education 
1.    A bachelor’s degree in computer science and an information security or other similar technical
2.    certification such as Certified Information Systems Security Professional (CISSP) or Certified
3.    Desirable certifications - ITIL, GIAC certified incident handler, GIAC Reverse Engineering, CISM, EC Council Computer Hacking Forensics Investigator (CHFI), Certified Ethical Hacker (CEH), OSCP
4.    Malware (GREM), GIAC Certified Forensic Analyst (GCFA)

III.    Skills / Competencies 

1.    Knowledge and tech skills
2.    Excellent knowledge of emerging cyber security, technologies, threats and vulnerabilities Excellent knowledge of emerging cyber security, technologies, threats and vulnerabilities
3.    Experience with Red/Blue teaming exercises and familiarity with MITRE ATT&CK framework
4.    Familiarity with laws, rules and regulations including privacy i.e GDPR
5.    Familiarity with NIST CSF, NIST IR lifecycle and NIST NICE
6.    Excellent knowledge and understanding of security operations and control frameworks
7.    Excellent knowledge and understanding of various frameworks/regulations such as PCI, NIST Cybersecurity Framework, ISO27001 or similar
8.    Excellent knowledge of Advanced Persistent Threats, attack tools, techniques and methods used by adversaries.

9.    Excellent organization, project management mindset
10.    Experience leading a security incident response team
11.    Excellent knowledge of penetration testing services and techniques.

12.    Excellent communication skills including management of crisis response efforts
13.    Excellent written and verbal communication skills and ability to perform working under pressure (i.e incidents)
14.    Experienced in multicultural and regional team management
15.    Ability to define, prioritize and execute process in a structured manner.
16.    Experience in an operational capacity as part of an IT Security incident response function
17.    Experience with networking and TCP/IP traffic, along with Firewall, IDS/IPS, SIEM, SOAR,EPP, EDR, APT, Proxy, IAM, NAC, DLP, Vulnerability Management, Antivirus, Anti-spam, and Spyware solutions.
18.    Experience conducting log and activity review, along with stream or packet capture, in support of intrusion analysis
19.    Desirable - experience on SIEM solutions such as next generation SIEM solutions and programming and scripting

IV.    Other Attributes

1.    Displays a high commitment to delivering results
2.    Leads others to achieve business objectives
3.    Communicates effectively
4.    Achieves agreed objectives and accepts accountability for results
5.    Displays the highest level of integrity
6.    Ability to maintain discretion
7.    Self-motivated
8.    Approachable