IT Security Specialist

[What the role is]

As members of our Security Operations Centre (SOC) Team, you will be at the forefront of cybersecurity defence, playing a critical role in safeguarding HDB's ICT infrastructure. Whether delivering timely and actionable threat intelligence to help the organisation anticipate, detect and respond effectively to evolving cyber threats, or engineering and maintaining a robust security operations capability by equipping the SOC with the right tools, platforms and technologies, you will be an integral part of a team dedicated to keeping HDB's digital environment secure.

[What you will be working on]

Cyber Threat Intelligence Analysis  

• Continuously review and enhance the cyber intelligence framework to provide a systematic and organized framework for collecting, processing, and   leveraging   intelligence to enhance HDB's cybersecurity posture and decision-making capabilities.   

• Integrate the cyber intelligence framework with the HDB's Security Operations Cent re   (SOC) and incident response team and ensure that the intelligence gathered is effectively used to detect, prevent, and respond to cyber threats.   

• Continuously   monitor   and collect information from multiple sources, including threat intelligence feeds, security vendors, dark web forums, social media, and other online platforms, to   identify   emerging cyber threats and attack trends.   

• Analy s e the collected threat intelligence data to   identify   patterns, trends, and potential cybersecurity risks .    

• Prioritize and triage threats based on their relevance and potential impact to HDB.   

• Conduct in-depth analysis of threat actors, their motivations, capabilities, and tactics, and provide insights on potential risks and impacts to the organization's systems, networks, and data.   

• Produce regular and ad-hoc reports, briefings, and alerts on emerging threats, trends, and risk assessments to relevant stakeholders, including senior management, incident response teams, and other cybersecurity teams. The report shall also provide technical information in a clear and actionable format for various stakeholders.   

• Provide   timely   and   accurate   intelligence support on a rostered 24/7 standby duty, and when activated during security incidents,   assist   incident response teams in understanding the nature and scope of the threat, and provide guidance on containment,   remediation   and recovery strategies.   

• Support vulnerability management efforts by analy s ing threat intelligence data to   identify   vulnerabilities, exploit trends, and potential targets, and prioritize patching and mitigation activities.   

SOC Engineering  

• Research and evaluate new and emerging security tools,   platforms   and technologies, and assess their technical feasibility and suitability for integration into the organisation's existing security infrastructure and workflows.  

• Liaise with product vendors to conduct Proof-of-Concept (POC) and technical evaluation of security   tools,   platforms   and technologies .  

• Responsible for the procurement and implementation of   security tools,   platforms   and technologies .  

• Perform knowledge transfer, prepare documentation, and hand over the operations of newly implemented security tools,   platforms   and technologies to the Security Operations team.  

Process Innovation and Automation  

• Design and refine SOC processes and procedures to enhance operational efficiency and reduce response times.  

• Implement automation and artificial intelligence solutions to optimise SOC operations, improve threat detection   and response   capabilities.  

Professional Development and Cross-Functional Collaboration  

• Participate in diverse SOC activities including   security monitoring,   threat   hunting   and incident response   to broaden your   expertise   and accelerate career development within HDB's growing cybersecurity function.  

[What we are looking for]

• Have demonstrable experience and in-depth knowledge in   cyber threat intelligence analysis and SOC engineering .  

• Possess strong experience with various cybersecurity technologies including IDS/IPS, firewalls, SIEM platforms, email security, web security, cloud security, and endpoint security solutions.  

• Have at least 2 years of experience as an engineer and/or cyber intelligence analyst in a SOC environment or equivalent cybersecurity engineering/operations role.  

• Demonstrate strong analytical and problem-solving skills with meticulous attention to detail.  

• Can work effectively under pressure, meet critical deadlines, and make sound decisions during security incidents.  

• Strong written and verbal communication skills, with ability to explain technical concepts to diverse stakeholders across the organisation.  

• Have experience in   cyber intelligence analysis, implementation of security monitoring and detection solutions, and project management.  

• Hold professional certifications such as EC-Council Certified Threat Intelligence Analyst (CTIA), SIEM , SOAR   and XDR/EDR product certifications, or other relevant cybersecurity qualifications.  

Good to Have:  

• Exceptional attention to detail and commitment to quality in all security operations.  

• Proven ability to work autonomously while   maintaining   high standards   of reliability, trustworthiness, and integrity.  

• Natural sense of ownership and accountability, taking initiative to drive continuous improvement in security processes.  

• Collaborative mindset with ability to work effectively across cross-functional teams.  

• Knowledge of cloud security frameworks and experience with modern security orchestration tools.  

Successful candidates will be offered a   1+1 year   contract in the first instance.