Purpose of position: 2nd/3rd level support and functional/technical consultancy in specialised technical areas with ownership and direction of technical solution(s) in full lifecycle .
General responsibility: Acting as 2nd/3rd level support for IT security incidents reported in our security tools.
Area of responsibility: Together with the Chief Information Security Officer, making sure that ROCKWOOL is cybersafe by:
- Monitor and solve IT security incidents and followed up that root causes are identified.
- Continuously making sure we have the best available and configured Microsoft Defender platform to operate from.
- Participating in IT security area projects
- Support IT security design of solutions
- Optimize solution based on IT security requirements
- Providing, together with the team, stable IT security day to day operations.
Tasks:
- Develop, configure and do support on the Microsoft Defender platform.
- Follow up on alerts from our EDR system.
- Follow up on alerts from our SIEM system.
- Do forensics on IT security incidents
Interface to the rest of the organisation: Facilitate the dialog and collaboration with other Digital departments especially Platforms in order to mature and increase the efficiency of security.
Facilitate the dialogue with Group Operational Technology and Group Development outside of Digital.
Qualifications & competences:
- At least 7 years of experience within IT security.
- At least 5 years of experience with Microsoft Defender Platform.
- Experience with ISO 27xxx, NIST Cybersecurity framework, CIS 18 or similar.
- Know how to investigate IT security incidents
- Experience with Elastic Security (SIEM), Trend Micro Vision One, is an advantage.
- Experience with Python programming and/or PowerShell is an advantage
- Know how to perform vulnerability tests and penetration tests as well as perform digital forensics investigations is an advantage.
- Technical insight into OT or Industrial Control Systems (ICS) is an advantage.
- Have a relevant degree e.g. in engineering, computer engineering or computer science and/or have obtained certificates such as CISSP, CISM, CRISC, ESL or similar.
- The desire and ability to work with a lot of different cultures is a pre-requisite as well as the skills to interact with whole organisation.
- Ability to conduct security assessments to identify vulnerabilities and recommend corrective actions.
- Ability to ask hard questions and pursue topics until an adequate answer is reached
- Analytical and problem-solving skills
- Goal oriented and the ability to deliver on time is essential.
- A natural curiosity for acquiring new knowledge
- Fluent in written and spoken English at a professional level.
- Travel activities are a natural part of the job. Expected travel days is around 10-15 days per calendar year.
You will located and work out of our offices in Subang Jaya, Malaysia
