香港商默升科技有限公司台灣分公司

Job Description: We are seeking a Senior Security Analyst to join our cybersecurity team in Taiwan. This role is vital to protecting the organization from threats, managing security operations, and driving vulnerability and patch management programs. The ideal candidate has deep hands-on experience in security alert triage, incident response, vulnerability scanning, and is motivated to stay ahead of evolving cyber threats. Responsibilities Security Monitoring & Response • Monitor security alerts using SIEM and other telemetry sources. • Triage, investigate, and escalate potential threats and anomalies. • Perform root cause analysis and document incident timelines. Incident Handling & Threat Investigation • Monitor security alerts using SIEM and other telemetry sources. • Lead or support incident response processes and forensic investigations. • Develop incident reports, post-incident reviews, and mitigation strategies. • Collaborate with global SOC or MDR providers if applicable. Patch Management & Vulnerability Assessment • Coordinate and track system patching with IT/engineering teams. • Perform regular vulnerability scans using Vulnerability Scanning tools. • Prioritize vulnerabilities based on CVSS scores and business impact. Security Tools & Process Improvement • Maintain and enhance existing **CrowdStrike**, **Microsoft Defender**, and SIEM tooling. • Participate in tool selection, testing, and integration. • Contribute to security playbook creation and update SOPs. Compliance & Documentation • Support audits, compliance (e.g., ISO 27001, NIST, local Taiwan PDPA). • Maintain accurate documentation of incidents, investigations, and mitigations. • Assist in business continuity planning and tabletop exercises. Required Skills • Fluent in English; Mandarin fluency is preferred for local coordination. • Proficiency in scripting (Python, Bash, PowerShell) is a plus. • Understanding of fundamental security concepts and best practices. • Knowledge of endpoint protection, firewalls, and intrusion detection systems. • Basic knowledge of cloud platforms (AWS, Azure, GCP). • Eagerness to learn and adapt to new technologies and security trends. • Strong understanding of Windows, Linux, and networking fundamentals • Good understanding of Windows and Unix basics • Network communications and routing protocols (e.g., TCP, UDP, ICMP, BGP, MPLS, etc.) • Common internet applications and standards (e.g., SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.) • Preferred certifications (e.g., CompTIA Security+, CEH, Microsoft SC-200, GIAC Certified Incident Handler (GCIH)) are a plus. Preferred Skills(optional): Experience working with products in the following categories • Enterprise password vaults • Vulnerability scanning and management • SIEM • PKI • Application control • Network micro-segmentation • Virtualization