Job Purpose *
Assess and disseminate actionable threat intelligence across all Group Technology domains and stakeholders to drive the necessary actions and awareness.
Key Responsibilities *
1. Develop and refine cyber threat intelligence collection and analysis processes
2. Collect and process both technical and non-technical, internal and external, threat intelligence
3. Produce detailed intelligence analysis reports on cyber threats with a potential to impact CIMB
4. Present relevant findings to both technical and non-technical audiences and develop executive briefings
5. Issue advisories on critical threats and vulnerabilities
6. Identifies gaps in both processes and technology, develop capabilities to enhance existing cyber threat intelligence functions
7. Support detection and response teams with context and analysis support, provide industry expertise and recommend relevant remediation and countermeasures
8. Develop in-house tools to assist with collection and analysis of intelligence information
9. Assist CERT during major cyber incident.
Job Specification *
Qualifications
(Basic Degree/Diploma, etc.) • Bachelor's Degree or Professional Qualification in the relevant discipline (IT / Cybersecurity / Computer Science)
Professional Qualification and/or Regulatory, Licensing requirements • Security certifications e.g. CompTIA Security+, GIAC Security Essentials (GSEC), Certified Threat Intelligence Analyst (CTIA), etc are preferred.
• Network certifications e.g. CCNA, CCNP, etc are added advantages
Relevant Work Experience • Minimum of 3 years of experience in IT security, preferably in threat intelligence analysis role or cyber incident response of a banking environment.
Required Competencies and Skills *
Competencies/Skills
(Essential to succeed in this job)
Technical/Functional skills
• 3+ years of work experience in one or more of the following roles: SOC Analyst, Cyber Threat Hunter, Cyber Crime investigations, Cyber Threat Analysis, Cyber Threat Campaign Tracking.
• Understanding of common operating systems and IT Infrastructure such as Windows, Unix/Linux, Active Directory, firewalls, proxies, etc.
• Familiarity with automation concepts and proficiency in scripting languages such as Python, Perl, Ruby, JavaScript, Powershell, etc.
• Strong analytical skills and critical thinking skills
• Effective communication skills (both written and verbal)
• Strong organization, prioritization, and rationalization skills.
Personal skills (Soft Competencies [Core/Leadership])
• Highly results-oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Ability to plan, organize and prioritize tasks.
• Ability to work effectively as a team.
• Good analytical, technical, written and verbal communication skills.