Senior Info Security Specialist

Job Description

*About Standard Chartered We are a leading international bank focused on helping people and companies prosper across Asia, Africa and the Middle East.To us, good performance is about much more than turning a profit. Its about showing how you embody our valued behaviours - do the right thing, better together and never settle - as well as our brand promise, Here for good.Were committed to promoting equality in the workplace and creating an inclusive and flexible culture - one where everyone can realise their full potential and make a positive contribution to our organisation. This in turn helps us to provide better support to our broad client base. Make an impact every day with Trust, Data and Resilience (TDR)Our TDR team sits within the Group Operations function and is responsible for mission-critical areas including cyber, information, data, privacy and resilience. These are challenges that impact our clients globally. Our TDR team develops the platforms, drives the processes and builds partnerships to benefit millions of people every day. They thrive in providing solutions to complex issues, devote time and energy to designing new and innovative solutions, and all in an environment that demands being risk-aware, not risk-averse. TDR chooses progress over perfection and aims to always participate with a constructive purpose. The team makes an impact wherever they are based, be it in our offices around the world, our Global Business Solution centres in China, India, Malaysia and Poland, or even from our home.Now you have an opportunity to make a meaningful impact with a diverse and passionate team of creators, innovators and achievers. With us, you ll learn, be inspired, and make an impact every day. The success of our work hinges on how we use the unique diversity of our people to realise the effects we seek to achieve: Always on. Always safe. Always Simple.The Role Responsibilities

• Lead a team of Malware specialists and drive automations to improve the threat detection efficacy and build intelligence repository on Malware behaviours and harness them in security controls and SIEM tools.
• Improve Service delivery efficacy through orchestration and deliver client centric automations.
• Lead and drive automation to reduce the time of risk closure and embedding security in build stage.
• Use expertise in malware reverse engineering and analysis to evaluate and analyse complex malicious code through the use of tools, including disassemblers, debuggers, hex editors, un-packers, virtual machines, and network sniffers.
• Provide subject matter expertise in the detection, analysis and mitigation of malware, trends in malware development and capabilities, and proficiency with malware analysis capabilities
• Support the maintenance of malware analysis platforms and tool sets, identify requirements for new malware analysis capabilities, and contribute to the development of new malware analysis tools and techniques
• Implement or develop malware controls across various tools and process.
• Effective manage stakeholder and keeping them appraised with Metrics and risk commitments timelines
• Scripting whenever required achieving short/long term requirements.
• Understand tools that identify zero day cyber threats and work to protect from them
• Ability to landscape, standardize, improvise the malware analysis environment
• Participate in research and development of malware protection tools & capabilities
• Help create documentation for corporate security policies
• Assist during noncore business hours during an emergency, critical or large-scale incident

Our Ideal Candidate

• Minimum 10 years experience in-depth malware analysis
• Minimum 3 to 5 years experience as Security Monitoring and Analytics expert
• Strong Knowledge of Malware Analysis and understanding malware anatomy to exercise proactive measure
• Experience with source code analysis, and reverse engineering.
• Experience is analysing binaries of x86,x64,ARM,C,C++,.net,Delphi.
• Experience using Commercial (IDA Pro, Hex-Rays, WinDbg, etc.) and Open Source (OllyDbg, Radare, GDB, etc.) malware analysis tools.
• Experience developing in Python, C, C++, and/or C#
• Understanding of x86, ARM, and x64 architectures
• Understanding of network protocols and networking concepts
• Strong understanding of Windows Operating System Internals and Windows APIs
• Understanding of the PE file format and experience parsing structured or unstructured data
• Technical proficiency over Cyber Threat functions and Assessment
• Experience and working knowledge of SIEM and controls including malware protection, firewalls, intrusion detection systems, content filtering, Internet proxies, encryption controls, and log management solutions, Vulnerability Assessment, Threat intelligence.
• Strong initiative, problem solving and critical thinking skills
• Demonstrated ability to work collaboratively as part of a team
• Excellent writing and communication skills

Apply now to join the Bank for those with big career ambitions.To view information on our benefits including our flexible working please visit our career pages . We welcome conversations on flexible working.,

Keyskills :
customer relationscomputer hardwaredatabase administrationidsmicrosoft accesssubject matter expertiselog managementmalware analysisvirtual machinescontent filteringsecurity controlscorporate security