- Browse Job
- Analyst - Security Incident Response & DLP
- Position
- Analyst - Security Incident Response & DLP
- Department
- Information Technology
- Working Location
- Taipa / Cotai
- Post Date
- 16/09/2024
- Requirements
-
• Bachelor's degree in Computer Science, Electrical/Electronic Engineering, Information Technology related fields or 4 years related experience is a minimum
• Minimum of 2 years of relevant experience in Information Technology
• Experience with security event log analysis is preferred
• Related Digital Forensics certification is required
• Knowledge in information, data, network and cyber security technologies
• Hospitality or gaming system and infrastructure knowledge is a plus
• Proficient in both written and spoken Chinese and English
- Responsibilities
-
• Follow and maintain SJM Cybersecurity Incident Response Plan
• Determine the initial severity of cybersecurity incident according to Cybersecurity Incident Response Plan
• Coordinate with Security Operations Teams and related IT Teams for remediation in case of security incidents
• Handle cybersecurity incident across all SJM properties and Satellite Casinos with CSO Security Operations Team and other IT Teams, following Cybersecurity Incident Response Plan
• Maintain internal communications and supervise operations during and after incidents
• Prepare all incident related documents and reports
• Monitor intelligence sources to maintain situational awareness of cyber threat landscape
• Maintain knowledge of the cyber threat landscape
• Identify and pinpoint Indicators of Compromise targeting SJM Resorts or casino and resort industry
• Collect, analyze and assess malicious code behavior to defend against the malware threats or other threat indicators
• Maintain the rules based on the business needs on Data Loss Prevention system to avoid sensitive data leakage
• Conduct examinations of digital evidence and prepare evidence for investigation, when necessary
• Work with investigators to acquire digital evidence if a third party is involved
• Use a range of forensic tools and software to extract and analyze data
