Security Operation Analyst

Scope of Work

Vulnerabilities Management

1. Arrange Bi-weekly vulnerability review meeting with application team.
2. Consolidate the results from the various vulnerabilities platform (i.e. AppScan, SonarQube and Nexus Scanning)
3. Perform quarterly result consolidating and seek risk acceptance for extension of vulnerability remediation timeline.
4. Perform result consolidating and tracking of risks and timeline from other sources.

Security Testing

1. Prepare all the pre-requisite (e.g. software installation, firewall request, laptop request) to ensure security testing can be started timely.
2. Perform technical resolution for AppScan, SonarQube, Nexus and SHIP-HATS or any other security tools when required.
3. Conduct network vulnerability scan (Nmap scanning).

Security Training

1.    Administer the Secure Code Warrior training

Other Security Related Task

1. Track and coordinate the regular review activities of all IT systems
2. Track and coordinate the regular review activities for all SaaS