Job Description

une Protect strives to be the go-to insurtech for millennials and Gen Z. We are listed on the main market of Bursa Malaysia since 2013 where our main business is insurance, reinsurance and going forward - insurance technology solutions! We are simplifying consumer\'s experience with different products and technology that complement consumer\'s lifestyle needs!

There\xe2\x80\x99s a lot of things happening at Tune Protect and we are looking for creative, agile, independent and fast paced - all rounder hustlers to join us on this challenging, yet amazing journey. If you\xe2\x80\x99re experimental and aren\xe2\x80\x99t afraid to make mistakes, welcome!

Here, you will formulate creative solutions for our customers, juggle numerous items in making them simple, own and drive initiatives, and collaborate with super fun and hard-working group of people who are utterly passionate about their mission.

The Core Jobs:

• Working with the SOC and infrastructure team to analyse and remediate security tickets, EDR operations (for example scanning and ensuring endpoints are clean of vulnerabilities), Email Security on MS365, DLP (for example blacklisting/whitelisting websites etc), and PAM (for example work with the infrastructure team to ensure all critical user ids are covered).
• Be hands-on and able to utilize/configure our existing security software such as Trend Micro EDR, Forcepoint DLP, Tycothic PAM, and Microsoft 365 email security. Familiarity or experience in using and/or configuring other endpoint protection software, data leak prevention software, privileged access management software, and/or firewalls is a strong advantage.
• Strong understanding and experience in firewall configuration (Fortigate and Palo Alto) a strong advantage
• Strong understanding and experience in hardening OS such as Linux and Windows
• Understanding Microsoft Active Directory and its security is a strong advantage.
• Assess and manage security risks and implement best practices to minimize them. Monitor and analyze cybersecurity incidents and threats
• Perform regular VAPT on our infrastructure and all new applications internally or with an external vendor. Work with those vendors to ensure their reports are remediated as needed and verified. Experience as a VAPT tester is an advantage
• Work with infrastructure and cloud engineers and leads to ensure security is handled correctly from design to operations at the network and server level. This includes knowledge of sound security practices from a technical perspective.
• Understand industry frameworks like Mitre Att&CK. Stay up to date with the latest security trends and technologies to ensure the company stays ahead of evolving threats
• Ensure regular reporting on security statistics is compiled on time and presented to management.
• Work with cross-functional teams to ensure that all on-premise and cloud-based systems and applications are secure
• Work closely with IT audit to ensure all audit discovery and remediation is performed ahead of deadlines

Experience/Education:

• Degree in Information Technology (IT), Computer Science or other related discipline with relevant experience in security operations
• IT Security experience with 2-4 years or more hands-on experience in any branch of security. Experience being in a lead role an advantage
• Professional certification such as CISM, CISA, CSXP, CISSP, CREST, GPEN or equivalent an advantage
• Knowledge/experience in Information Security, IT Risk, and IT Governance including BNM RMIT. Strong understanding of IT security principles and practices.
• Familiarity with security frameworks and regulations such as NIST, ISO 27001, and SOC 2 an advantage
• Operational experience working with or in a SOC is an advantage.
• Able to work under broad direction and a self-motivated individual who can work independently. Responsible and accountable for work performed and decisions taken.
• Ability to quickly learn new or unfamiliar technology and products using documentation and internet resources if required.
• Good communication skills written and spoken
• Good analytical and problem-solving skills including the ability to visualize and plan troubleshooting steps.
• Ability to work collaboratively with other parties towards a common goal.

\xef\xbb\xbfWe look after our tribe really well! On top of insurance coverage for you and your family, we provide free flow of coffee, tea and biscuits, professional accreditation support and generous amount of e-learning courses and annual leaves! We practice hot desking and take social networking very seriously!

Tune Protect