Primary Objective:

Provides 24x7 continous monitoring and detection of security alerts and escalation of security incident in aligning with the Group’s business objectives and in compliance with regulatory requirement.

Key Responsibilities:

• 24x7 monitoring on IT security abnormalities or suspicious activities and closing or escalating those alerts to Level-2 analyst in timely manner
• Investigate security alert using SIEM technology, report, data visualization, pattern and behavioral analysis
• Reach out to respective user to validate security alert
• Provide feedback on use case to Level-2 analyst for further review
• Suggest tuning on false positive security alert
• Document and maintain knowledge base of alarms (false positives, false negatives)
• Maintain the group email address and distribution lists, answer SOC main phone lines, and update all relevant documentation such as shift logs