Working at Techlab
At TechLab, we strive to build a team that is integrated and highly driven, to provide robust protection and strengthen defense against cybercrime. As an equal opportunity employer, we believe that anyone can bring their unique skills and talents to the team – and make a difference in the fight against cybercrime.
Keep in touch
Even if you don’t see an opening that fits your skills, do email your resume to [email protected] as we might have a future job opening that would be suitable for you.
Our Values
Be Curious – We are constantly learning and innovating
Have an Open Mind – We are flexible and adaptive to new experiences and ideas
Teamwork – We work together to achieve one goal
Execution – We believe that just a vision and strategy is not enough;
Strive to Excel – We believe in surpassing ordinary standards
Persistence – We make things simple and never give up
Respect – We value diversity, respect each other’s differences and listen to one another
Joy – We find satisfaction in bringing joy to others
Fun – We believe that having a little fun makes a big difference
Work with us
SIEM Administrator - 1 opening
RESPONSIBILITIES & SPECIFIC ACCOUNTABILITIES
- The SIEM administrator must integrate the security devices in the organization’s security infrastructure with the SIEM solution to ensure that security events are captured and analyzed.
- Ensure that the SIEM solution is up-to-date and maintained to ensure that it remains effective in identifying and analyzing security events.
- Analyze the security events that are captured by the SIEM solution to identify potential security threats and vulnerabilities.
- Must work with other members of the security team to respond to security incidents that are identified through the SIEM solution.
- Prepare reports and documentation on the security events that are captured and analyzed by the SIEM solution. These reports are used to provide visibility into the organization’s security posture and to identify areas that require improvement.
- Continuous learning about update and new technology
- Must continuously evaluate the effectiveness of the SIEM solution and identify areas that require improvement to ensure that the organization’s security posture remains strong.
iSeries Administrator - 1 opening
RESPONSIBILITIES & SPECIFIC ACCOUNTABILITIES
- Responsible for working on iSeries Tech Refresh project.
- Troubleshoot, monitor and administer the iSeries software and hardware.
- Perform the day-to-day computer operations which includes firmware and OS upgrades.
- Ensure that job is performed promptly, accurately, timely and according to schedule & dependencies.
- Perform administration and problem management in the iSeries environment.
- Perform ad-hoc work requests promptly and accurately.
- Maximizes up-time, performance, and availability of the AS/400 systems.
- Good knowledge in TCP/IP protocols.
- Knowledge of AS400 networked systems, access and security guidelines and procedures.
SOC Level 2 Analyst
Education: Bachelor’s degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline.
RESPONSIBILITIES & SPECIFIC ACCOUNTABILITIES
- 3 years of experience as SOC Level 2 Analyst.
- Work collaboratively with all clients, Track incident detection and closure.
- Execute risk hunting activities
- Responsible for security event management, and response.
- Analyze every incident report raised by SOC Engineer and determine the incident severity.
- Monitor security access and report suspicious activity to a higher level or team members.
- Conduct security assessments regularly to identify vulnerabilities and perform risk analysis.
- Analyze breaches to determine the root cause.
- Conduct audits of logging and correlation.
- Conduct monthly security use case reviews and correlation audits.
- Track SOC performance in terms of SLAs and incident quality.
- Perform quarterly evaluations for L1 and L2 analysts and report feedback to SI management.
- Generate reports for IT administrators, business managers, and security leaders.
- Advise and implement necessary changes to counter attacks or improve security standards.
- Keep security systems up to date and contribute to security strategies.
- Document incidents to contribute to incident response and disaster recovery plans.
- Collaborate and generate documentation for knowledge transfer with other analysts on duty to effectively resolve security breaches.
- Build out Incident Response automation and triage security alerts.
- Respond to security incidents.
- Monitor the health of customer security sensors and SIEM infrastructure.
- Deliver scheduled and ad-hoc reports.
- Work closely with the Level 3 team towards the continuous improvement of the service.
- Eager to learn, practice, and improve knowledge of updates and new technology.
- Possess excellent interpersonal and communication skills.
- Willing to work in shifts.
- Must have certifications.
TECHNICAL PROFICIENCY
- Sentinel, Qradar (SIEM), XDR, Sandbox, IPS, IDS, Threat Intelligence, Servers (Windows, Linux), workstations and/or Networks
- SIEM, Security Orchestration Automation and Response, Security Monitoring, or any other Security Management
- Endpoint detection and response, endpoint protection, or any other Endpoints Security Product
SOC Level 1 Analyst
RESPONSIBILITIES & SPECIFIC ACCOUNTABILITIES
•Responsible for security event monitoring, management and response
• Document security breaches and assess the impact.
• Collaborate and generate documentation for transfer knowledge with other analysts on duty to effectively resolve security breaches.
• Build out Incident Response automation and Triages security alerts.
• Collects data and context necessary to initiate Level 2 escalation.
• Responds on security incidents.
• Monitors health of customer security sensors and SIEM infrastructure.
• Delivers scheduled and ad-hoc reports.
• Works closely with Level 2 & Level 3 team towards the continuous improvement of the service
• Must possess excellent interpersonal and communication skills.
• Must be willing to work on Shifts
TECHNICAL PROFICIENCY
• Basic knowledge on Security, Servers (Window, Linux), workstations and/or Networks.