UOB Federal Territory of Kuala Lumpur, Malaysia
United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia Pacific, Europe and North America. In Asia, we operate through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia and Thailand, as well as branches and offices. Our history spans more than 80 years. Over this time, we have been guided by our values – Honorable, Enterprising, United and Committed. This means we always strive to do what is right, build for the future, work as one team and pursue long-term success. It is how we work, consistently, be it towards the company, our colleagues or our customers.
About The Department
Group Technology and Operations (GTO) provides software and system development, information technology support services and banking operations.
We have centralized and standardized the technology components into Singapore, creating a global footprint which can be utilized for supporting our regional subsidiaries and the branches around the world. We operate and support 19 countries with this architecture to provide a secure and flexible banking infrastructure.
Our Operations divisions provide transactional customer services for our businesses while also focusing on cost efficiency through process improvements, automation and straight through processing.
Job Responsibilities
- Perform daily health checks on cybersecurity applications, including Splunk, FireEye, NDR, SOAR, BAS, Syslog-ng, ISWVA, and CAS.
- Assist in troubleshooting technical issues to ensure security applications run smoothly.
- Help with resolving audit findings and support audit-related activities as directed.
- Respond to incidents involving cyber defense applications within the expected timeframes.
- Document technical steps, solutions, and process changes for reference.
- Participate in routine patching and updating of cyber defense applications to keep them secure.
- Work with cybersecurity and IT teams to resolve issues affecting security tools.
- Engage in configuration management to optimize application performance.
- Test and validate changes to settings or policies on firewalls, sensors, and defense tools.
- Assist in performing regular backups and data integrity checks for application data.
- Support vulnerability assessments for cyber defense tools and help fix any issues.
- Coordinate with third-party vendors for application support and troubleshooting.
- Help with log aggregation to ensure accurate data flow within cyber defense applications.
- Create basic dashboards, alerts, and reports in Splunk to improve visibility.
- Manage access control for cyber defense applications in line with security policies.
- Perform routine performance tuning to keep cybersecurity tools efficient.
- Assist in maintaining documentation on application configurations and troubleshooting steps.
- Support disaster recovery exercises for cybersecurity tools to ensure continuity.
- Participate in a rotating on-call schedule for after-hours support as needed.
Others
Communicate effectively with a variety of internal teams and third party service providers / vendors for the delivery of cyber defence services / solutionsCapable of managing a variety of priorities and deliverables in an operational, interrupt driven environment with minimal guidance or supervision.Work within established practices and handling guidelines to triage device outages.Work with internal technical teams and engineers in technical troubleshooting and forums.Available to respond to any requests and assist with troubleshooting activities along with proper documentation.Resolve standard / routine issues with no guidance and complex / unusual issues with minimal guidance.Education
Diploma / Degree in engineering / Computer Science / IT / Cyber Security from a recognized education institutionCyber Security product certifications will be favorable although not mandatoryTechnical Skills
5 to 7 years of relevant experience in managing and deploying Cyber Security technologiesMinimal 2 years of relevant working experience in a SOC environment and related processes would be an added advantageGood working knowledge of network security (i.e. Firewalls, WAF, IDS, IPS, VPN, HIPS, ADS and TCP / IP protocols)Familiar with Big Data Analytics, EDR, SIEM and other cyber technologiesAnalytical problem solver and good at troubleshooting technical issuesGood understanding of SQL / Database, SOAP-XML, Restful APIAnalytical problem solver and good at troubleshooting technical issuesSoft Skills
Good written and verbal communication skillsProcess aware mindsetStrong analytical and problem solving skillsEffective time management and organizational skills.Team player, including ability to establish and maintain effective working relationships within and across the organisationOther Requirements
Willingness to participate in an on-call rotation to support incident response and infrastructure availability.Seniority level
Mid-Senior level
Employment type
Full-time
Job function
Information Technology
Industries : Financial Services and Banking
#J-18808-Ljbffr