#EG Cyber Engineer (Crowdstrike)

Assessment Report:
Review of existing Host-Based Firewall, Custom IOA, Asset Discovery, Configuration Baseline, and Network Equipment Vulnerability detection scope, including configuration and log review, findings, gaps, validation results, and recommended actions.
Remediation and Tuning Plan
Prioritised list of configuration updates, false-positive tuning actions, rule corrections, and validation activities.
Host-Based Firewall Output:
Provide a Host-Based Firewall artefact containing policy design findings, workstation validation results by institution and cluster, rule and host group mapping, duplicate or disabled rules, rules and policies recommended for merge or removal, identified configuration gaps, blocked traffic review observations, approved remediation actions, and the final Host-Based Firewall policy baseline.
Custom IOA Output:
Provide a Custom IOA artefact containing rule group and policy assignment review results, IOA alert findings, validation against approved use cases, false-positive tuning recommendations, refined exclusions, redundant or unused IOA rules identified for review, rule logic or regex adjustment recommendations, and the final Custom IOA baseline.
Asset Discovery Output:
Provide an Asset Discovery artefact containing the discovered asset listing, onboarding status, CMDB and MDOTS comparison, cluster and institution mapping, unmanaged or duplicate asset identification, inactive or decommissioned asset indicators, unsupported OS indicators, ownership status, and recommended follow-up actions.
Configuration Baseline Output:
Provide a Configuration Baseline artefact containing exported configuration references, policy assignment mapping, policy status, host group mappings, exclusions, exception justification, identified configuration gaps, recommended remediation actions, review cadence, and final approved CrowdStrike configuration baseline.
Detect Network Equipment Vulnerability via CrowdStrike:
Establish and provide the process for detecting network equipment vulnerabilities through CrowdStrike, identify and validate vulnerability findings against CMDB and asset ownership records, perform sample verification to eliminate false positives, provide periodic reporting on findings and remediation status, and develop the necessary operational documentation, governance framework, and knowledge transfer materials to support ongoing operations.
Testing and Validation Evidence:
Evidence of agreed testing outcomes, including validation screenshots, test cases, findings, and closure status.
Operational Handover Guide:
Step-by-step operational guidance for ongoing support, including troubleshooting, change handling, review cadence, and escalation path.
Knowledge Transfer Session:
Walkthrough session with the Day 2 Operations team covering completed work, configurations, operational processes, and open items.
Degree or higher in Cybersecurity, Computer Science, Engineering, or Information Systems.
Possess at least 3 years of experience in cybersecurity, IT infrastructure, or related technical roles
Understanding of network protocols, firewalls, and security architectures
Good communication skills with ability to work collaboratively in teams
Adaptable and comfortable working in fast-paced project environments
Certification: CrowdStrike Certified Falcon Administrator, CCFA preferred
Due to project sensitivity, we can only consider Singapore Citizen

Employment type
Full-time

Work arrangement
No