Cyber Security Operator

Tổng quan về công việc và trách nhiệm

 Building a security system that includes SIEM, SOAR, Firewall, VPN, Endpoint Security, EDR, XDR, etc.  Installing and developing tools for detecting vulnerabilities and bugs in applications, network protocols, across various operating system platforms.  Ensuring the security and integrity of the network system and servers that support daily business operations and key events.  Designing, installing, analyzing, troubleshooting, and maintaining information security infrastructure.  Monitoring and alerting on cyber threats, trends, and assessing malicious or suspicious activities to identify potential security risks. RESPONSIBILITY 1. Maintain SIEM, SOAR, XDR and monitor log to ensure system availability to all system users and 2. Perform security assessment and configuration, IT security event monitoring, and IT security incident management. 3. Daily responsibilities include but are not limited to deploying, implementing, and supporting a variety of security solutions. 4. Perform routine cyber-security monitoring tasks for Sendo; provide first response to security alerts performing analysis and if possible, a resolution. Escalate to team members as needed. 5. Perform control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommends remedial action. Research and evaluate new threats and security alerts and recommends remedial actions. 6. Conduct Security Awareness 7. Maintain policies, procedures, and associated training plans for system administration and appropriate use.