Senior Information Security Analyst (Attack Surface Reduction) | Singapore, SG

Senior Information Security Analyst (Attack Surface Reduction)

Work Location: Singapore, Singapore

Hours: 40

Line of Business: Technology Solutions

Pay Details: We're committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with a member of our HR Team and ask compensation related questions, including pay details for this role.

Job Description:
The Senior Information Security Analyst is responsible for reducing the attack surface across multiple different domains within TD.

• Identify, triage, analyze and remediate security incidents in real time such as phishing campaigns, other e-mail threats, unauthorized access, and suspicious activities across multiple different domains.
• Provide expertise and guidance in the detection and mitigation of cyber threats across different domains.
• Threat analysis and mitigation tasks involving endpoint security, cloud environments, email applications, anti-phishing services, domain monitoring, SIEM usage and risk analysis.
• Conduct threat hunting for various threats across different attack surfaces.
• Initiate, coordinate, and prioritize responsibilities and follow through on tasks to completion.
• Monitor and research cyber threats with a direct or indirect impact to TD assets.
• Participate on projects of moderate to high complexity to provide complex reporting, analysis and assessments at the functional, business line or enterprise level.
• Liaise with third party vendors to ensure proper delivery of services.
• Develop and manage processes to track identified incidents or hunts to resolution.
• Triage information received from vendors and manage that information through internal workflows.
• Conduct risk assessment, required controls definition, control procedure appropriateness, vulnerability assessments and any other relevant areas.
• Adhere to internal policies and procedures, technology control standards, and applicable regulatory guidelines.
• Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement.
• Other duties as assigned.

Job Requirements

• 7 - 10 years of relevant experience.
• Expert knowledge of IT security and risk disciplines and practices.
• Advanced knowledge of organization, technology controls, security, and risk issues.
• Demonstrated ability to contribute and participate in complex, comprehensive or large projects and initiatives.
• Knowledge on DMARC/SPF/DKIM, Malware Analysis, Email Security, SIEM platforms, Threat Intelligence and Orchestration Platforms, Endpoint Security, and MITRE TTPs.
• Highly effective communication skills with the ability to influence stakeholders and business units, experienced in conveying technical concepts to business and non-technical individuals.
• Strong organizational and self-directing skills. Ability to initiate, coordinate and prioritize responsibilities and follow through on tasks to completion.
• Must have excellent written, presentation and oral communication skills.
• Proficient in problem-solving and decision-making skills.
• Ability to work well under minimal supervision highly trustworthy, acts with integrity, takes pride in work, and seeks to excel, be curious and adaptable.

Background and Education:

• Completion of a Bachelor's degree or equivalent program in Computer Science, Management Information Systems or similar field is required.
• Completion of at least one of the following: GIAC (GSEC, GCIH, GCIA, GCFE, GCFA), CCNP, CCNA, CISSP.