(Senior) Cyber Security Manager

Job Overview:

The Cyber Security (Senior)Manager – Security Operations and DevSecOps Engineering will oversee the strategic and operational aspects of embedding security into development pipelines and managing enterprise-wide security operations. This role requires deep expertise in DevSecOps practices, security operations, and cross-functional collaboration to protect sensitive data, ensure compliance, and mitigate cyber threats. The successful candidate will drive a security-first culture while aligning with business objectives and regulatory requirements.

How You Contribute:

DevSecOps Engineering

Security Integration: Embed security practices into development workflows, including static/dynamic code analysis, vulnerability scanning, and compliance checks using tools like SonarQube, Snyk, or OWASP ZAP

Enable adoption of Infrastructure as Code (IaC) from Security perspective, using tools like Terraform or Ansible. etc, ensuring secure and scalable cloud infrastructure (AliCloud, AWS, Azure).

Collaboration: Work closely with development, operations, and security teams to foster a DevSecOps culture, providing guidance on secure coding practices and infrastructure hardening

Provide technical guidance and remediation recommendations or requirements for security risks identified during DevSecOps processes

Deliver DevSecOps solutions and trainings, sharing expertise in DevSecOps tools, processes, best practices and compliance standards to elevate team capabilities.

Security Operations

Security Operation Center

Oversee the operations of the MSOC, ensuring 24/7 threat monitoring, detection, and response.

Define and maintain MSOC processes, including incident triage, escalation protocols, and threat intelligence integration to enhance situational awareness.

Lead incident response efforts, conducting root cause analyses and implementing remediation strategies to prevent recurrence.

Collaborate with MSOC teams to optimize workflows, reduce mean time to detection (MTTD) and mean time to response (MTTR), and improve overall incident response effectiveness.

Conduct regular MSOC performance reviews, ensuring alignment with service-level agreements (SLAs) and key performance indicators (KPIs) such as incident resolution rates and false positive reduction.

Actively participate in the Group’s security incident management process, ensuring timely escalation and transparent communication with the Group Cybersecurity department.

Collaborate closely with the Group Cybersecurity department to align on policies, standards, and incident response protocols.

Report key security metrics and incident learnings to Group SOC team and participate in group-wide security exercises

Oversee endpoint protection, data loss prevention (DLP), and network security initiatives, ensuring robust defenses against cyber threats.

Security Tools management

Own the proper configuration, regular updates and optimal functioning of all security tools, including intrusion detection and prevention systems, email protection, antivirus software, firewalls, WAF and XDR solutions

Manage relationships with MSSP partners, evaluate their services and drive improvement, negotiating contracts to ensure cost-effective, high-quality services that align with organizational security needs.

Monitor MSSP performance through regular audits, ensuring compliance with agreed-upon SLAs and security standards, and addressing any service gaps or escalations.

Manage & oversight security solutions & technical policies – firewalls, email & web security, Endpoint, cloud security & solutions.

Active assesses the effectiveness of security tools, propose enhancements, and implement improvements to strengthen the overall security posture.

Security Infrastructure posture management and Enhancement

Work closely with the IT Infrastructure and Operations team to secure IT infrastructures, including networks, endpoints, and cloud environments.

Contribute to and validate the IT Infrastructure designs from a security perspective and assist operational teams in identifying and implementing appropriate measures for discovered vulnerabilities.

Leadership and Mentorship:

Provide cybersecurity guidance and mentorship to more less experienced team members.

Actively collaborate with the global SOC team to share knowledge, develop best practices, and continuously improve security processes and protocols.

Role Qualifications:

Solid knowledge and experience of security tools for vulnerability scanning, penetration testing, and compliance (e.g., Snyk, Qualys, Nessus, OWASP ZAP).

Experience with CI/CD tools (Jenkins, GitLab CI, CircleCI) and version control systems (Git).

Proficiency in cloud platforms (AliCloud, AWS, Azure) and their security services and solutions

Expertise in IaC tools (Terraform, Ansible, CloudFormation) and containerization technologies (Docker, Kubernetes).

Scripting skills in Python, Bash, or Go for automation and tooling.

A genuine passion for technical cybersecurity, and a deep desire to learn and drive change.

Minimum of 5-7 years of experience, bachelor degree in Computer Science, Information Security, or a related field.

Advanced certifications (e.g., CCNSE, CCSE, CKS, CKA, GIAC Pen-Tester, CISSP, CISM, CEH, CompTIA Security +) are a strong plus.

Knowledge of security tools and technologies, including SIEM, SOAR, firewalls, antivirus & EDR software, and Web & email protection systems.

Deep understanding of networking protocols, security technologies, and best practices

Excellent communication, collaboration & interpersonal skills.

Ability to work collaboratively in a fast-paced environment and effectively prioritize and manage multiple tasks and projects.

Proficient in English and Mandarin.