Mô tả Công việc
Vulnerability & Baseline management:
Conduct regular vulnerability assessments across IT systems, infrastructure, and applications; coordinate with relevant teams to prioritize, track, and remediate identified vulnerabilities.
Establish and maintain system hardening baselines across endpoints, servers, and cloud workloads in alignment with CIS Controls and security standards.
Security operations & Incident handling:
Monitor, correlate, and analyze alerts from centralized logging, Microsoft Defender and related platforms to detect anomalous activity and emerging threats. Triage and validate alerts efficiently, distinguishing actionable security events from false positives.
Investigate cybersecurity incidents, perform root cause analyses, and implement containment/ remediation measures to mitigate business impact.
Manage and monitor email security solutions; investigate and respond to phishing, business email compromise (BEC) and malware.
Aud
it support, assessment & Reporting:
Assist in gathering and verifying technical evidence, audit logs, and configurations to support internal and external security audits and compliance frameworks (like HIPAA, healthcare data privacy standards, CIS control, ...).
Maintain and update technical documentation, standard operating procedures (SOPs), and baseline configuration records.
Evaluate security solutions and conduct PoC testing; assess software security risks before deployment or operational use.
Prepare regular reports on security incidents, vulnerability metrics, emerging security risks, and attack trends for management review and continuous improvement.
Perform other related information security tasks and support projects as assigned by management