Job Description: • Follow and maintain SJM Cybersecurity Incident Response Plan • Determine the initial severity of cybersecurity incident according to Cybersecurity Incident Response Plan • Coordinate with Security Operations Teams and related IT Teams for remediation in case of security incidents • Handle cybersecurity incident across all SJM properties and Satellite Casinos with CSO Security Operations Team and other IT Teams, following Cybersecurity Incident Response Plan • Maintain internal communications and supervise operations during and after incidents • Prepare all incident related documents and reports • Monitor intelligence sources to maintain situational awareness of cyber threat landscape • Maintain knowledge of the cyber threat landscape • Identify and pinpoint Indicators of Compromise targeting SJM Resorts or casino and resort industry • Collect, analyze and assess malicious code behavior to defend against the malware threats or other threat indicators • Maintain the rules based on the business needs on Data Loss Prevention system to avoid sensitive data leakage • Conduct examinations of digital evidence and prepare evidence for investigation, when necessary • Work with investigators to acquire digital evidence if a third party is involved • Use a range of forensic tools and software to extract and analyze data Job requirement: • Bachelor's degree in Computer Science, Electrical/Electronic Engineering, Information Technology related fields or 4 years related experience is a minimum • Minimum of 2 years of relevant experience in Information Technology • Experience with security event log analysis is preferred • Related Digital Forensics certification is required • Knowledge in information, data, network and cyber security technologies • Hospitality or gaming system and infrastructure knowledge is a plus • Proficient in both written and spoken Chinese and English Interested parties, please apply via: • Email the detailed resume to careers@sjmresorts.com • Hotline 8297 0979 / 8297 0969