Infrastructure Specialist

Role Responsibilities: Security Tool Management & Optimization

• Continuously monitor, tune, and optimize all deployed security technologies (e.g., EDR, SIEM, SOAR, vulnerability scanners, IAM tools, cloud security platforms, email security gateways).

• Ensure that all relevant features, detection rules, integrations, and automation capabilities are properly enabled and functioning.

• Perform regular health checks on tools to ensure completeness of data ingestion, sensor coverage, and system performance.

• Identify gaps or inefficiencies in tool usage and drive enhancements or corrective actions.

• Direct, drive process and documentation improvement in platform operations, escalation procedures, and workflows.

• Act as an escalation point for key production or platform related issues.

• Support and drive all related governance and audits initiatives for Security Tools Operations.

• Vendors management – To review deliverables from managed service provide and performance measurement.

Proactive Review & Feature Enablement

• Stay updated on product updates, new features, and best practices from vendors, applying them to strengthen defenses.

• Develop and execute tool enhancement roadmaps to ensure the organization is always operating at an optimized and modernized security level.

• Conduct periodic reviews to validate that tools continue to meet business, regulatory, and threat landscape requirements.

Integration & Engineering

• Work closely with Engineering, Infrastructure, Cloud, and SOC teams to ensure smooth deployment and maintenance of sensors, agents, and connectors.

Vendor & Stakeholder Collaboration

• Act as the technical owner for assigned security tools, managing vendor relationships and coordinating feature implementations or troubleshooting efforts.

• Work with internal stakeholders to ensure tool outputs support detection use cases, incident response, audits, and compliance programs.

• Manage a team with members located at onshore and offshore locations.

• Act as an escalation point for key production or platform related issues.

Role Requirements:

• At least 10 to 15 years of relevant experience, preferably in financial services or asset management industries, with a minimum of 8 years in cybersecurity platforms.

• In-depth knowledge and experience in information security policy and principles.

• Experience in MAS technology related guidelines such as Technology Risk Management Guidelines, Cyber Hygiene, Outsourcing guidelines etc.

• Strong technical knowledge of common security tools (e.g., EDR, SIEM, SOAR, XDR, email security, vulnerability management, cloud security).

• Experience tuning detection rules, configuring integrations, and conducting tool performance optimization.

• Demonstrate ability to operate in diverse environments and cultures and enjoys working in challenging and fast-paced environment.

• Self-initiated, meticulous, versatile, analytical and inquisitive.

• Strong communication and presentation skills to wide and diverse audiences.

Mandatory Skills:

• Cybersecurity service delivery, stakeholder management, SLA/KPI governance, team leadership, vendor management, operational governance in relation to following service delivery areas : SOC operations, security engineering, security tools/platform management, security incident management, risk management, vulnerability management and IAM.

Secondary Skills:

• Cloud security, PAM, GRC/compliance, SIEM/SOAR, endpoint security, network security, threat intelligence, security architecture, audit support, data protection, third-party risk, business continuity, project/program management.

• Certifications such as CISSP, CISM ,Microsoft Security certifications, or equivalent.