Chief Information Security Office - Cyber Security Analyst, Triage - Singapore

Chief Information Security Officer - Cyber Security Analyst, Triage - Singapore

Location: Singapore

Business Area: Engineering and CTO

Ref: 10039246

Description & Requirements

We protect Bloomberg.

There's no such thing as a "safe system" - only safer systems. Our security teams work to build and maintain the safest operating environment for Bloomberg’s users. The security analysts within the Cyber Security Operations Center are the main defenders of the company. The Cyber Security Analyst - Triage's function, within the CSOC, is considered to be a key pillar in Bloomberg’s security, as they are the initial responders to security events. Are you a motivated technical professional, who has a passion towards cyber security? And are accomplished in a systems- or applications-support role, or already have cyber security experience? In this security role, Bloomberg will provide you the opportunity to apply your current skills, while you rapidly develop new ones that are required in the cyber security field.

The Bloomberg CSOC is responsible for the detection of cyber threats, and when detected, responsible for the rapid response, across both the diverse lines of business and the global network. The CSOC is an open and collaborative environment, where members work together to identify and address the latest cyber security threats facing the company. The CSOC is staffed 24 x 7 x 365, with varying shifts, and multiple tiers of support, ranging from first response teams to the Computer Incident Response Team. Furthermore, there is opportunity to work with these more experienced members on some of the latest cyber security defense technologies.

In this role, we'll trust you to:

1. Work within a dedicated shift, 8AM – 6PM, Wednesday through Sunday, to support the 24x7x365 Cyber Security Operations Center (some holiday coverage may be required)
2. Demonstrate passion and good judgement as a network defender
3. Identify, and act as the initial responder, to all security events
4. Learn and understand the broader security of Bloomberg’s environment
5. Monitor for events that match predefined criteria, and respond accordingly to standard operating procedures, as well as use good judgement for matters where a procedure doesn’t exist
6. Bring to closure a significant majority of events without the involvement of other teams
7. Share robust case notes when raising issues in order to help the next team member
8. Remain up-to-date with cyber security threats and trends
9. Deliver on relevant cyber security metrics and measurements for the role and area of responsibility
10. Collaborate directly with colleagues across the firm to resolve security matters while furthering the program’s brand with a constructive and thoughtful approach
11. Respond to varying seniority levels of employees and contractors throughout Bloomberg to address cyber security concerns
12. Ensure appropriate coverage for the assigned shift and provide ample awareness to changes to commitments
13. Produce and maintain documentation and standard operating procedures
14. Generate ideas for continued improvement, including conceptual design of new threat scenarios

You'll need to have:

1. A diploma or a degree in cyber security or a related technical field
2. Minimum 1+ years of experience in a cyber security related role (e.g., Cyber Security Operations Center)
3. Experience dealing with non-physical Security Operations, Incident Analysis, and/or Network and Host Log Analysis
4. Deep understanding in logs from a variety of sources, their log events, and Splunk
5. Knowledge of enterprise network and host security controls
6. Ability to be autonomous but proactive in reaching out for support
7. Good familiarity with operating systems (Windows, Linux and MAC)
8. Deep understanding of cyber security trends and potential threats
9. Knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs and enterprise antivirus products
10. Good communication and interpersonal skills and the ability to take initiative
11. Dedication to role and ability to collaborate with team members

We'd love to see:

1. Knowledge of AWS, Azure, and GCP cloud platforms
2. Previous experience working with a Security Information and Event Management (SIEM) platform
3. Certifications in the information security space (CompTIA Security+, SSCP, CEH)
4. Familiarity with programming / scripting

If this sounds like you:

Apply! If we think you are a good match we'll get in touch to let you know the next steps.