Deskripsi Pekerjaan
Are you an experienced Cyber Security Engineer looking for your next challenge? Stefanini, a global leader in IT services, has an exciting opportunity for you to join our highly skilled Cyber Intelligence & Security Operations Center (CISOC) team in Alabang, Metro Manila.
In this critical role, you will be responsible for implementing and managing cutting-edge security solutions, including Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST). You will be instrumental in monitoring security events, conducting vulnerability assessments, and leading incident response efforts to safeguard our global infrastructure. As part of a collaborative international team, you will work with advanced technologies to detect, analyze, and neutralize cyber threats in real time.
We are looking for a proactive problem solver who can partner with cross-functional teams to integrate security best practices into the software development lifecycle and contribute to the continuous improvement of our security posture. Your expertise will directly impact the safety and resilience of critical systems.
Stefanini provides a dynamic and collaborative environment where innovation thrives. We offer a competitive salary package, comprehensive benefits, and outstanding career growth opportunities within a global organization. If you are passionate about cybersecurity and ready to take your career to the next level, we want to hear from you. Join us and be a key player in shaping the future of digital security.
Tanggung Jawab
- Monitor and analyze security events from SIEM, IDS/IPS, firewalls, and endpoint detection systems to identify and respond to potential threats.
- Implement and manage security assessment tools (SAST, DAST, vulnerability scanners) to proactively identify weaknesses in applications and infrastructure.
- Conduct thorough vulnerability assessments and penetration tests, providing detailed reports and remediation recommendations to technical teams.
- Lead or participate in incident response activities, including containment, eradication, root cause analysis, and post-incident reporting.
- Develop, maintain, and enforce security policies, procedures, and standard operating procedures (SOPs) for the SOC.
- Collaborate with development and infrastructure teams to integrate security controls into the CI/CD pipeline (DevSecOps).
- Prepare and present security metrics, dashboards, and risk assessments to management and stakeholders.
- Stay current with emerging cyber threats, attack vectors, and security technologies to proactively improve the organization's security posture.
Kualifikasi
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 3–5 years of hands-on experience in cybersecurity operations, SOC, or a similar security engineering role.
- Deep understanding of network security, operating systems (Windows, Linux), and web application security principles.
- Proven experience with security tools: SIEM (Splunk, QRadar), EDR (CrowdStrike, Defender), and vulnerability scanners (Nessus, Qualys).
- Professional certifications such as CEH, CISSP, CompTIA Security+, or OSCP are highly advantageous.
- Strong analytical and problem-solving skills with meticulous attention to detail.
- Excellent written and verbal communication skills, with the ability to explain complex technical concepts to non-technical stakeholders.
- Experience with scripting and automation using Python, PowerShell, or Bash is a strong plus.