Senior Manager, Global Security Incident Response

REQ14901 Senior Manager, Global Security Incident Response (Open)

POSITION SUMMARY:

The Senior Manager, Global Security Incident Response is responsible in the detection, triage, containment and post analysis of threats and the response to detected threats and cyber-attacks. The role is to build out a mature cyber defense capability for Melco and ensure that the cyber response is advanced and repeatable to ensure the industrialization of Cyber defense within the organization.

PRIMARY RESPONSIBILITIES:

• 1. Senior Manager, Global Security Incident Response function for Melco-Resorts and all business units globally.
• 2. Lead initiatives and projects to enhance or build new capabilities in Melco, related to threat intelligence, security monitoring, triage and incident response.
• 3. Drive continuous enhancement of the cyber incident responses procedures and playbooks to support effective and efficient incident investigation and response.
• 4. Manage external vendor performing 24x7 security monitoring and triage for Melco.
• 5. Lead a small team of cyber incident responders and threat intel analysts globally to maximize the value on detection and response
• 6. Coordinate and influence the Information Security team to ensure the use cases tools and arch are fit for purpose
• 7. Work with peers and CISO to ensure the correct automation, contextualization and response capabilities are built across all areas
• 8. Coordinate with Information Security team to define the right framework that facilitates evaluation of weaknesses or new risks, which require engineering continuous improvement.
• 9. Recommends and/or executes management policies to hire, transfer, suspend, layoff, recall, discharge, re-assign or discipline employees.
• 10. Performs ad hoc functions as may be required.

KEY PERFORMANCE INDICATORS:

• 1. Quality delivery of cyber security monitoring across all Technology assets.
• 2. On time and on budget delivery of Information Security monitoring and incident response program uplifts or deployments and aligned with IT and InfoSec roadmap
• 3. Ensure Melco Incident response teams has a clear road map to baseline against industry standards and measure the team’s adoption rate and report through Security Risk function any adoption issues
• 4. Controls are delivered in a cost- effective way using processes and resources aligned with Melco goals.
• 5. Information Security incident response support and governance are provided to all business units

QUALIFICATIONS:

I. Experience

Minimum of 10 years working in IT security incident response management roles

• II. Education
• 1. A bachelor’s degree in computer science and an information security or other similar technical
• 2. certification such as Certified Information Systems Security Professional (CISSP) or Certified
• 3. Desirable certifications - ITIL, GIAC certified incident handler, GIAC Reverse Engineering, CISM, EC Council Computer Hacking Forensics Investigator (CHFI), Certified Ethical Hacker (CEH), OSCP
• 4. Malware (GREM), GIAC Certified Forensic Analyst (GCFA)

III. Skills / Competencies

• 1. Knowledge and tech skills
• 2. Excellent knowledge of emerging cyber security, technologies, threats and vulnerabilities Excellent knowledge of emerging cyber security, technologies, threats and vulnerabilities
• 3. Experience with Red/Blue teaming exercises and familiarity with MITRE ATT&CK framework
• 4. Familiarity with laws, rules and regulations including privacy i.e GDPR
• 5. Familiarity with NIST CSF, NIST IR lifecycle and NIST NICE
• 6. Excellent knowledge and understanding of security operations and control frameworks
• 7. Excellent knowledge and understanding of various frameworks/regulations such as PCI, NIST Cybersecurity Framework, ISO27001 or similar
• 8. Excellent knowledge of Advanced Persistent Threats, attack tools, techniques and methods used by adversaries.

• 9. Excellent organization, project management mindset
• 10. Experience leading a security incident response team
• 11. Excellent knowledge of penetration testing services and techniques.

• 12. Excellent communication skills including management of crisis response efforts
• 13. Excellent written and verbal communication skills and ability to perform working under pressure (i.e incidents)
• 14. Experienced in multicultural and regional team management
• 15. Ability to define, prioritize and execute process in a structured manner.
• 16. Experience in an operational capacity as part of an IT Security incident response function
• 17. Experience with networking and TCP/IP traffic, along with Firewall, IDS/IPS, SIEM, SOAR,EPP, EDR, APT, Proxy, IAM, NAC, DLP, Vulnerability Management, Antivirus, Anti-spam, and Spyware solutions.
• 18. Experience conducting log and activity review, along with stream or packet capture, in support of intrusion analysis
• 19. Desirable - experience on SIEM solutions such as next generation SIEM solutions and programming and scripting

IV. Other Attributes

• 1. Displays a high commitment to delivering results
• 2. Leads others to achieve business objectives
• 3. Communicates effectively
• 4. Achieves agreed objectives and accepts accountability for results
• 5. Displays the highest level of integrity
• 6. Ability to maintain discretion
• 7. Self-motivated
• 8. Approachable