Senior Engineer - Security Technology Operations

Senior Engineer - Security Technology Operations

• Permanent position
• Reports to the Global Head of Security Engineering & Operations
• Hybrid role; Central office location

Our Client

• A multinational insurance company

The Opportunity

The role is responsible to provide leadership to a team of security technology operations who is in responsible for daily operational matters covering all the in-scope security tools/systems. The objective is to ensure an optimal security policy framework governing each respective tool/system and in compliance with group security policies and standards. The role is expected to collaborate closely with other domains within the GISP function to support multiple lines of business units located across Asia, Africa and UK.

• Be part of the security technology operations function, including the maintenance and support of all in-scope security systems and tools.
• Work alongside with a team of security professionals responsible for endpoint protection, data loss prevention, email security, network security, vulnerability scanning, encryption and key management.
• Operate the responsibility for rule management, configuration management, workflow management and system management for each security tools/systems.
• Ensure that the implementation of each security rule is in accordance with group security standards, whitelisting and exclusions to be accompanied by the corresponding reviews and approvals.
• Adhere to security baseline standards for the respective configuration management in each tool/system.
• Design request, review, and approval workflow to ensure consistent handling, response and visibility across each security tool/system.
• Govern the system administration in terms of access approvals, patch verification, key rotation and other operational changes.
• Setup reasonable service level agreements based on request severity and impacts to ensure prompt turnaround and completion requests.
• Follow through for each security product escalation to address gaps or defects to propose workarounds or mitigation controls.
• Conduct knowledge sharing and transfer in the operational knowledge and expertise in managing each respective security tool/system to ensure security business continuity availability.
• Standardize all operational documentation for standard operating procedures and playbooks into a centralized repository for consistency and duty covering.
• Collaborate with cross-functional teams within Technology to align on balanced risk management in security tools/systems throughout the organization.

Your Background

Core Competences Required:

• Experience to be part of a operational team.
• Experience in dealing and managing stakeholder expectation from business teams, technical teams and operations teams.
• Possess strong end-to-end ownership in different security domains to drive closure of issues
• Possess good level of understanding on general technology concepts in servers, endpoint, database, networking, application, middleware and cloud.
• Possess leadership skills, stakeholder negotiation, and communication skills.
• Excellent problem-solving and analytical skills.

Education and Experience:

• Bachelor's Degree in Information Security, Computing Engineering or equivalent.
• 7+ years of experience in preferably several of these security domains - endpoint protection, data loss prevention, email security, network security, vulnerability scanning, encryption and key management.
• Prior experience in working in large organizations with regional exposure is desirable, with prior experience in financial service industry is a bonus.
• Information Security Certifications, such as CISSP, CCSP, Comptia Security+, CISA, CRISC and/or other relevant security certifications are advantageous