Analyst, Cyber Security Engineer, Information Security Services, Group Technology

Business Function

Group Technology enables and empowers the bank with an efficient, nimble, and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability, and innovation. In Group Technology, we manage most of the Bank's operational processes and strive to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Monitor developing cybersecurity events globally and escalate to the L2 team if relevant events are observed.
• Perform monitoring, risk assessment, and analysis on security tools such as Anomaly Detection systems, Firewalls, Antivirus systems, and Proxy devices.
• Follow pre-defined actions to handle security alerts, including escalation to the L2 team and other support groups.
• Execute daily ad-hoc tasks or lead small projects as needed.
• Participate in daily and ad-hoc documentation tasks.
• Create and maintain operational reports for Key Performance Indicators and weekly and monthly metrics.
• Perform the assessment phase of the Vulnerability & Threat Management process.
• Receive threat intelligence from subscribed feeds and update the Threat Intel knowledge base.
• Be ready to support any security incident response investigation within the Group, regardless of location or environment.
• Work closely with the Team Lead to review, provide feedback, and take actions to improve the methodology used in Security Operations.
• Responsible for ensuring all logged tickets are closed correctly and in a timely manner.
• Ensure timely submission of routine reports on threats, vulnerabilities, and incidents handled by the Security Operations Center.
• Keep the Security Operations Center runbooks and procedures updated.

Requirements

• Experience in security operations, preferably with incident management experience.
• Experience in the Banking industry is an advantage.
• Familiarity with security products and network devices.
• Extensive technical experience with network security practices including Intranet, Extranet, and Internet access.
• Technical experience with UNIX, AIX, Linux, and Windows.
• Knowledge of TCP/IP, DNS, web, wireless security architectures, and enterprise-grade security solutions.
• Knowledge of encryption and authentication methods such as 2FA, DES/AES/RSA, Digital Certificates, SSL/TLS, IPSec, and the development of DMZs.
• Knowledge of intrusion detection (deep TCP/IP knowledge and cybersecurity), various operating systems (Windows/UNIX), and web technologies (especially internet security).
• Ability to read and understand packet-level data, handle Network/Host Security products (NIDS/NIPS, firewalls, HIPS, AV, scanners, etc.), and understand security events from these tools.
• Ability to perform vulnerability assessment and manage such tools/processes, as well as application penetration testing or forensic analysis.
• Certifications from EC-Council, GIAC, or (ISC)² are preferred (e.g., CISSP, CEH, GCIA, CCNA).

People Skills

• Be performance-oriented; strive to excel beyond previous achievements.
• Able to work under pressure during critical situations.
• Able to work collaboratively with peers with excellent communication skills.

Job Details

Location: DBS Asia Hub

Job Role: Technology

Schedule: Regular

Employee Status: Full time