What are the responsibilities and job description for the Security Analyst position at Mandarin Oriental?
Specific Responsibilities
- Monitor up-time, reliability, stability, and policy maintenance of supported security systems and work with business units to remediate identified gaps. (15%)
- Monitor and respond to network traffic anomaly event detections and provide content and malware event analysis on multiple security solutions. (20%)
- Manage and monitor multiple network and host data leakage protection (DLP) solutions. (15%)
- Investigate and manage security information and event management (SIEM) alerts. (10%)
- Monitor email and spam gateway filtering solutions and perform remediation actions for malicious events. (10%)
- Monitor application whitelisting and file integrity solutions. (10%)
- Ensure cybersecurity configuration compliance using vulnerability management solutions. (10%)
- Perform vulnerability and penetration testing remediation management. (10%)
- Ensure security agents deployed across global assets maintain 99.9% compliance monthly.
- This role is responsible for communicating with technology providers in support of the MOHG security engineers and architects which evaluate, design, and implement new technology solutions and/or support existing technical capabilities deployed globally. This position also communicates regularly with Mandarin Oriental IT groups to support deployed technologies and facilitate remediation of vulnerabilities or gaps in security tool deployments.
- Bachelor’s Degree in Information Systems, Computer Science or equivalent combination of education, training, or work experience.
- Minimum 2-4 years in the information technology and/or security field
- Must be familiar with a wide range of security technologies including, but not limited to: SIEM, IDS/IPS, malware analysis and protection, content filtering, logical access controls, identity and access management, data loss prevention, content filtering technologies, application firewalls, vulnerability scanners and security incident response.
