To lead SOC team as well as participate with investigations, identification and reporting on cyber and data-related threats including threats coming through Cloud Computing Services.

• Perform functions of a Security analyst with the primary focus to oversee and manage the day-to-day operational aspects of SOC.
• Act as a technical lead and authoritative contact for SOC.
• Perform threat management, threat modeling, identify threat vectors and develop use cases for security monitoring.
• Ensure alignment and sound execution of the incident resolution process, with transparent communication to stakeholders including vendors and senior leadership during active incident investigations and document progress throughout the Incident Response (IR) lifecycle.
• Perform post-incident reviews to ensure continuous improvement of operations and execution and contribute to the improvement of the incident response process based on lessons learned.
• Responsible to develop and maintain SOC & IR processes, IR playbooks and follow through with implementation.
• Ensure weekly & monthly reporting is delivered to required standards and on time.

• Degree/Diploma in Computer Technology, Computer Science, Information Security, Cybersecurity, Computing, Software Engineering, IT or equivalent.
• Relevant Security Certifications. (e.g., ECSA, CEH, OSCP)
• 3+ years of experience leading or serving as a Cybersecurity Incident Response/SOC Analyst.
• Experience leading or participating cyber and data-related incident management & response, threat management, vulnerability management, cyber forensics, and giving security awareness in fast-paced environment.
• Have a working knowledge of defense in depth strategies.
• Hands on experience analyzing diverse tooling and log/data sources.
• Experience in cloud computing services.
• Practical knowledge of digital forensics concepts, and postmortem incident learnings.
• Understanding of security incident response and threat frameworks, such as MITRE ATT&CK, Cyber Kill Chain, CIS controls, NIST SP 800-61, etc.
• Understanding of industry standard frameworks (ISO 27001, NIST).
• Excellent communication (oral and written) skill both in Myanmar and English.