Company Overview
Cathay Bank is the first commercial bank in Southern California established by Chinese Americans. With a legacy of fostering financial growth, we support individuals and businesses by providing sustainable lending and financial solutions for generations.
Our comprehensive range of financial services includes personal banking, business banking, treasury management, international banking, and wealth management solutions. With a network of over 60 branches across California, New York, Washington, Illinois, Texas, Maryland, Massachusetts, Nevada, and New Jersey, we are committed to serving diverse communities. Internationally, we extend our reach through a branch in Hong Kong and representative offices in Beijing, Shanghai, and Taipei.
Essential Functions
- Optimize and fine-tune Security Information and Event Management (SIEM) and other security tools to minimize false positives, address existing gaps, and enhance overall system maturity.
- Configure and manage SIEM and security tools in alignment with the Security Operations Center’s (SOC) requirements.
- Develop and adapt new threat analyses in response to emerging cybersecurity risks and intelligence.
- Support incident response efforts by analyzing security events, log data, and incidents to safeguard critical information and systems, including but not limited to Microsoft Windows Active Directory, financial applications, network security, endpoint security, and data loss prevention tools.
- Ensure compliance with baseline security configurations, recommending and implementing enhancements as needed.
- Oversee the installation, maintenance, and monitoring of security rules for preventive solutions such as antimalware, security gateways, firewalls, and SIEM tools.
- Assist in security and vulnerability assessments, contributing to the development and execution of corrective actions based on findings.
- Collaborate with vendors to troubleshoot issues and optimize security tool performance.
- Collect and analyze performance and compliance data from IT and IS sources to enhance security operations.
- Coordinate with managed security service providers to ensure seamless security operations.
Qualifications
Education
- Bachelor’s or Master’s degree in Information Technology, Business Administration, or equivalent professional experience.
- Formal training in Information Security and SIEM solutions is required.
- Security+, SSCP, or CISSP certifications are preferred.
Experience
- At least 3 years of experience working in a Security Operations team.
- Minimum 2 years of hands-on experience with SIEM solutions.
- Strong knowledge of operating and monitoring network and endpoint security solutions.
- Familiarity with industry security frameworks such as NIST CSF, CIS, and OWASP.
- Experience with Threat Intelligence platforms and Cloud Security tools is preferred.
- Proficiency in Regex and custom scripting is a plus.
- Experience with SIEM administration, configuration, and fine-tuning is highly desirable.
Skills & Abilities
- Excellent problem-solving and communication skills.
- Strong interpersonal and collaboration abilities.
- Self-motivated with a willingness to learn and grow.
- Ability to mentor and train less experienced colleagues.