[LTA-ITCD] PRINCIPAL / SENIOR / EXECUTIVE CYBERSECURITY ENGINEER

Job description

[What the role is] PRINCIPAL / SENIOR / EXECUTIVE CYBERSECURITY ENGINEER, CYBERSECURITY MONITORING & INCIDENT RESPONSE [What you will be working on] You will be responsible for: Perform monitoring and analyse security alerts from various security tools and threat intelligence sources Lead incident response activities including containment, eradication, and recovery from security incidents Develop and maintain incident response procedures and playbooks Ensure cybersecurity threats and risks are detected and responded to effectively through cybersecurity monitoring operations. Assist in coordinating the response and investigation efforts during cybersecurity incidents. Assist in designing and implementing cybersecurity projects that enhance the cybersecurity posture of Land Transport systems, in collaboration with various key stakeholders. Search, gather and analyse cyber threat information obtained from numerous sources to derive credible intelligence that is relevant to the Land Transport context. Work closely with relevant teams to review regularly and enhance cybersecurity incident response Standard Operating Procedures (SOPs) and playbooks to achieve better cybersecurity readiness within the Land Transport sector. Provide regular management updates and recommendations to ensure the effectiveness and efficiency of cybersecurity monitoring and detection in the Land Transport sector. Experience / knowledge in forensic investigations of security incidents. [What we are looking for] Knowledge in Computer Science, Cybersecurity or equivalent. Candidates with requisite skills and experience might be considered for senior roles. Candidates with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, digital forensic, compliance and industry IT/cyber security best-practices preferred. Professional accreditation such as CISSP, CISM, CRISC, GICSP and GCIH would be advantageous. Candidates with hands-on experience in one or more of the following domains (e.g. cybersecurity threat monitoring, threat hunting, incident handling and investigation) will be an added advantage. Good analytical, problem-solving and critical thinking skills. Enjoy working with multiple parties to achieve the desired cybersecurity outcomes. Good oral and written communication skills. As part of the shortlisting process for the role, you may be required to complete a medical declaration and / or undergo further assessment.