Work should be challenging.
Your work should challenge the status quo and involve defining the future, not just being dependent on it.
You prefer to operate in the deep end, figuring things out as you go, and aim to be avant-garde.
If this resonates with you, then you'll fit right in here at Propine.
Propine is re-inventing capital markets using blockchain technology.
We have collaborated with the Monetary Authority of Singapore (MAS) to become the first licensed digital asset custodian in the world.
We are re-imagining the issuance and lifecycle management of capital market products like equities, debt, structured products, and funds using blockchain technology to reduce friction and enhance value for issuers and investors.
This role requires a 'do-whatever-it-takes' mindset and the ability to operate just outside your comfort zone.
If this excites and slightly unnerves you, you might be the right fit.
Position Details
Seniority: Associate
Position Title: Threat and Incident Response Analyst
Job Description
We seek a highly motivated and skilled Threat and Incident Response Analyst to join our information security team.
The ideal candidate will be passionate about security and eager to work with the latest tools and methodologies to investigate and respond to cyber threats against our organization and assets.
Responsibilities
Identify and analyze cybersecurity threats impacting the organization.
Proactively discover new attacks using advanced security monitoring techniques and tools.
Investigate and respond to security incidents following a defined incident response process.
Create playbooks and procedures for incident response.
Collaborate with engineering to automate responses to security incidents.
Identify emerging threats and update detection and response capabilities accordingly.
Perform threat modeling across technologies and applications, ensuring security controls are in place for identified threats.
Identify relevant data sources and security monitoring use cases, onboarding them to the SIEM platform.
Operate and administer the SIEM platform.
Utilize security tools like SIEM, EDR, WAF, IDS, Netflow for threat investigation and response.
Manage threat intelligence feeds to correlate security events.
Participate in a 24x7 on-call rotation for security operations support.
Qualifications
5-7 years of experience in security threat analysis, detection, and prevention technologies.
Strong analytical skills with a self-motivated attitude to learn new technologies.
Deep knowledge of Unix/Linux, Windows, Active Directory, Databases, Cloud, and DevOps.
Experience with endpoint and network security technologies like IDS, IPS, EDR, ATP, malware defenses.
Experience with SIEM and log management tools.
Understanding of Cyber Threat TTPs, Threat Hunting, and the Mitre Attack framework.
Scripting experience.
Familiarity with threat modeling methodologies such as STRIDE and PASTA.
Effective communication skills with technical and non-technical teams across geographies.
#J-18808-Ljbffr