National Capital RegionABS-CBN Corporation is the Philippines' leading information and entertainment multimedia conglomerate. The Company is primarily involved in television and radio broadcasting, as well as in the production of television and radio programming for domestic and international audiences and other related businesses. ABS-CBN produces a wide variety of engaging, world-class entertainment programs that are aired on free-to-air television.The Company is also one of the leading radio broadcasters, operating eighteen radio stations throughout the key cities of the Philippines. ABS-CBN provides news and entertainment programming for nine channels on cable TV and operates the country's largest cable TV service provider. The Company also owns the leading-cinema and music production and distribution outfits in the country. It brings its content to worldwide audiences via cable, satellite, online and mobile.The Company has interests in content development and production, cable and satellite television services, merchandising and licensing, mobile and online multimedia services, glossy magazine publishing, video and audio post production, and overseas services, all of which complement and enhance ABS-CBN's strength in content production and distribution.
RESPONSIBILITIES
JOB DESCRIPTION
Provide Cloud Security support and expertise to the company’s various cloud resources and properties. Take lead in the design, development, implementation, and monitoring of cloud security standards and controls.
Employ first-hand experience with a wide variety of enterprise computing infrastructure and private and public Cloud computing technologies on either Azure, AWS, or Oracle Cloud
Engineer and implement cloud security controls, evaluate threats and vulnerabilities, develop automated response capabilities, and communicate the controls to relevant teams.
The analyst must have the ability to convey complicated technology and security concepts to management and ideally has technical knowledge and/or experience in security, systems administration, security incident response.
Maintaining a current understanding of the latest security threats, trends and technologies is a crucial component of the position.
Develop cloud-based security procedures and policies, protecting the confidentiality, integrity and availability of information systems and company data.
The candidate must have the capability to communicate highly complex technical issues with confidentiality and sensitivity to diverse audiences as appropriate.
Engineer and develop technical designs and processes and contribute to cloud security strategies and standards
Develop and implement public cloud incident response uses cases, assess the effectiveness of existing controls.
Leverage or centralize the available logging systems throughout the different cloud organization accounts, to monitor and alert for any critical event
Utilize cloud-based APIs when appropriate to write system level tools for securing cloud environments
Provides guidance and assistance to ensure IT controls are designed to mitigate intended risks and operating effectively, ensuring cloud engineering best practices are followed
Researches and assesses new threats and security alerts, recommends and implements remedial action
Maintains an awareness of existing and proposed security standard setting groups, relevant legislation and regulations (e.g. HIPAA, GDPR, ISO27001) and how they will affect company cloud environment
Keep the Information Security Team informed of security posture by reporting performance metrics
REQUIREMENTS
Bachelor’s degree/College/University graduate on Computer Science, Computer Engineering, ECE or related fields
Minimum 3 years of experience in information security and/or relevant field, with experience supporting private and public cloud deployments, clear passion for cloud security and cloud technologies
Minimum 3-4 years of work experience in IT and Information Security field
Expert knowledge of Cloud infrastructure, security architectures, and standards
Deep technical knowledge of Amazon Web Services in GuardDuty, Lambda, EC2, S3, IAM, VPC, Cloud Watch
Working knowledge of Amazon Web Services in API Gateway, Step-function, Rout53, EBS, Elastic Cache, Auto-Scaling, Load Balancer, Cloud Formation, SNS
Working knowledge of different security technologies and concepts such as but not limited to VA, PT, SIEM, DLP gateway and endpoints, IPS/IDS, WAF, Cloud Security, IAM, Cyber Incident Response, Digital ForensicS
Working knowledge of IT Infrastructure such as but not limited to network, systems, applications, etc.
Programming knowledge (Java, PHP, C++, Phyton, scripting, etc)
