Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

Duties & Responsibilities:

• Managing and leading a team of engineers for presales and project deliveries
• Supporting pre-sales engagement for projects relating to Advanced Analytics
• Responsible for ensuring projects are delivered in a timely manner
• Responsible for supporting presales activities in relation to developing solution design, bill of materials and scope of work
• Deploy Advanced Analytics solution related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement to sales team and/or junior members of the team
• Perform consultancy activities such as conducting technical presentations and engagement to prospective customers, preparing scope of work, bill of materials and technical proposal for submission for tender bids
• Identity, evaluate and recommend new technologies that would be relevant to Adaptive Defence
• Provide mentorship and guidance to junior staff

Requirements:

• Bachelor’s Degree in Information Technology or Cyber Security
• Professional certificates such as SANS or ISC2 would be advantageous
• At least 7 years of IT security experience and experienced in a wide range of cyber-security technologies
• Technical knowledge in the following information security technologies & solutions is preferred: SOAR Platform / Threat Intel Platform / Threat Intel Feeds
• Experience in IT Network / System Administration will be a strong advantage
• Experience as a technical lead in large-scale projects involving multiple technologies as part of a turn-key solution
• Strong troubleshooting and analytical skills that can resolve issues as the final point of escalation
• Strong presentation, communication and written skills
• Basic project management skills
• Positive working attitude
• Passionate in information security

Job Description

The incumbent is responsible for delivering information security projects that are related to Advanced Analytics (AA), such as Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence Management and Vulnerability Management, including the execution of all project implementation activities.

Responsibilities

• Carry out pre-sales engagement for projects relating to AA

• Deploy AA related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)

• Develop SIEM correlation rules for security monitoring and detection of new threats

• Develop SIEM and Threat Intelligence report templates that are useful for analysis by the customers

• Develop playbooks for automated incident management

• Create technical documentation for the AA deployment

• Provide post-sales support services for corrective and preventive maintenance

• Carry out technical enablement

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology

• Knowledge and experience in information security technologies such as SIEM, Threat Intelligence and Vulnerability Management is preferred

• At least 3 to 5 years of IT security experience

• Good communication and written skills

• Positive working attitude

• Passionate in information security

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

The National University of Singapore invites applications for the position of Research Fellow in the Department of Computer Science, School of Computing (SoC). SoC is strongly committed to research excellence in all its dimensions: Searching for fundamental results and insights in developing novel computational solutions to a wide range of applications, building largescale experimental systems, developing theories and policies for effective management of information systems in organizations, and improving the well-being of society. We seek to play an active role both internationally and locally in the core and emerging areas of Computer Science and Information Systems.

The Research Fellow will be responsible for working closely with the Principal Investigator on one or more research projects.

(“Research fellow” is similar to “post-doctoral researcher”, in the terminology of some other countries.) The appointee is expected to work closely with Associate Prof. YU Haifeng (http://www.comp.nus.edu.sg/~yuhf) on issues related to distributed systems security and distributed computing. A key goal of the research will be to produce high-impact academic publications in premier conferences (such as CCS and SP) and journals in the area. Please see http://www.comp.nus.edu.sg/~yuhf for some example prior publications from Associate Prof. YU Haifeng’s research group.

Qualifications

- At least a PhD degree from a good university

- Good publication record

- Fluent in written and spoken English

- Ability and dedication to do world-class research

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Technical Leadership:

a. Recommend research directions, conceptualize new security tools, and mentor junior researchers.

b. Conduct internal training workshops on analysis techniques, vulnerabilities discovery, and mechanism.

• Research and Analysis:

a. Conduct in-depth research on applications, reverse engineer closed-source code, and identify exploitable weaknesses.

b. Continuously learn about the latest application security and reverse engineering techniques.

• Development:

a. Assess and verify security through design and execute tests against industry standards CIA triad: Confidentiality, Integrity, and Availability, plus Authorization and Non-repudiation).

b. Develop proof of concept (e.g. code, scripts) to demonstrate the severity of discovered vulnerabilities and propose mitigations.

c. Develop cutting-edge tools to streamline the analysis process and improve efficiency.

• Documentation and Reporting:

a. Document findings, methodologies, and recommendations for both technical staff and executive leadership.

b. Effectively communicate findings and strategy to stakeholders.

• Contribution:

a. Contribute to the Singapore cybersecurity community through publishing whitepapers, blog posts, or presenting findings at relevant conferences.

Minimum Qualifications

• Fluent in OOP such as C++, Windows or Linux APIs/syscalls and knowledge of common file formats, network protocols and encryption. - Demonstrated ability to:
• Reverse engineer C/C++ compiled binaries and recognize common algorithms and patterns in decompiled code.
• Perform type recovery on intermediate data structures and uncover logic and indirect calls within a module.
• Bypass common anti-RE and anti-debugging techniques and uncover original code obfuscated by a public obfuscator. - For a more senior role, we're looking for candidates who has the demonstrated ability to:
• Reverse engineer sophisticated software and other programs compiled in newer languages such as Golang, Rust, newer Pythons and non-C binaries.
• Recover complex code logic and indirect calls across multiple modules or files.
• Recover undocumented file format or encoded binaries through deep analysis of the program.
• Develop custom tools to recover the logic or emulate parts of the program.
• Uncover logic of heavily obfuscated or custom packed code.

Benefits

• Training & Development
• Performance Bonus
• Medical Benefits
• Hybrid Work Arrangements

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

Responsibilities:

· Delivery of Microsoft Security, Network, SIEM, SOAR, Firewall implementation

· Delivery of vulnerability, penetration testing, red teaming, and risk assessment activities

· Mentoring Junior Team members

· Responsible for Daily Operation of managed security services

· Assist Sales Team in qualifying prospects for security opportunities

· Delivering presentation of Company Cybersecurity capabilities

· Certification and Training budget for motivated staff (e.g. OSCP, CREST, Microsoft etc)

Requirements:

· Diploma or Degree holders in Computer or Information Engineering or related subjects

· 5+ years of cybersecurity and delivery experience

· Possess analytical skill

· Reporting to Security Manager to provide security support such as perform

o Network and Security Implementation

o Penetration and Vulnerability testing

o Red Teaming

o Security Configuration Assessment

o Security assessment

o Risk assessment

· Good knowledge of Network, System and Security domain

· Hands-on experience of implementing security solutions(Cisco, Microsoft, Fortinet, SentinelOne, CrowdStrike, Palo Alto)

· Knowledge of ISO 27001, NIST, COBIT, IEC62443 is a plus

· Strong knowledge of network/IT services on web / client / DNS / Email /Vulnerability/Firewall/XDR/SIEM security

· Possess presales and delivery support experience

· Proactive and can work independently or as a team

· Proficiency in writing technical proposal in English

Preferred Certifications

· Microsoft Security, Fortinet , OSCP, CREST, CEH eJPT Certification Preferred

· Azure/Microsoft/Google Security certification is a plus

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542063/2fc68717-fd53-1ede-bce4-a1fb0cb9b29f

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Work with key stakeholders to ensure high cybersecurity posture of application systems through activities such as the following:
i. Promote secure coding practices.
ii. Review of Vulnerability Assessment and Penetration Testing (VAPT) Cases
iii. Facilitate remediation of vulnerabilities arising from application security testing
iv. Setup DevSecOps through CI/CD pipeline
v. Securing Cloud Workloads
vi. Procure & Maintain Security testing Tools/services to support source code review and VAPT.

• Related works include Threat Risk Assessment, project specific cybersecurity specification, cybersecurity proposals evaluation, cybersecurity design review, System Security Acceptance Test and review, Vulnerability Assessment and Penetration Test.

• Manage and promote IT security awareness and outreach programme.

• Keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.

• lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks.

You will be a Great Fit if you:

• You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Cybersecurity or equivalent.

• At least 2 years of experience in ICT works involving the setup, development, and management of web-based systems, with at least 2years of relevant ICT security work experience.

• Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc

• Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

• Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security

• Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)

• Good understanding of the current IT/Cyber Security landscape Great Attitude to bring the best out our team
• work beyond business hours including weekend when necessary.

• possess good interpersonal and communication skills.

• demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542118/2fc68717-fd53-1ede-bce4-ce5277e5329f

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Work with key stakeholders to ensure high cybersecurity posture of HDB applications through activities such as the following:

i. Develop and promote Secure Coding Practices.
ii. Collaborate with project teams to ensure compliance with Vulnerability Assessment & Penetration Testing requirements.
iii. Review security test reports and provide recommendations on remediation measures to application project teams, where necessary.
iv. Procure and maintain security testing tools to support Static Application Security, Dynamic Application Security Testing and Vulnerability Assessment & Penetration Testing.
v. Study and propose CI/CD pipeline to support DevSecOps.
vi. Perform Software Composition Analysis.

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Manage and promote IT security awareness and outreach programme.

You are also to:
• Keep abreast of the latest industry Software security practices and technologies to manage emerging threats and vulnerabilities.
• Recommend and implement appropriate measures to improve the HDB Applications security posture.
• Lead and/or participate in the research and adoption of new technological advances and best practices in software security to mitigate future security threats.

You will be a Great Fit if you:

• Possess a strong background in software development with popular web/mobile technologies such as HTML, Javascript, Node.js, Angular, Java, ASP.NET, C#, PHP, Ruby, etc with knowledge on ICT Security, Information Security and Secure Coding.

• Have at least 2 year of relevant ICT security work experience.

• Possess one or more appropriate IT security certifications, such as CSSLP, CISSP, CRISC, CISM, CISA, CEH, OSCP, CREST etc.

• Have strong knowledge and experience in Information and Cybersecurity Risks, Vulnerability Assessment & Penetration Testing, Cloud Security, Container Security, Mobile Security, DevSecOps, Cryptography and other industry IT/cyber security best-practices.

Good to Have:

• Able to drive new initiatives for Cloud Security.
• Possess good interpersonal and communication skills.
• Proactive to troubleshoot with excellent problem-solving skills.
• Fluent in written and spoken English.
• Meticulous attention to details
• Work beyond business hours including weekend when necessary.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542112/2fc68717-fd53-1ede-bce4-bfa2bfcdb29f

About Us!

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

You will be part of the Security Operations Centre (SOC) Team who will be responsible for the following areas Tier 2 SOC Analyst responsible for investigating alerts and incidents escalated by Tier 1 Analysts, Develop and enhance SOC processes and procedures, ensuring effective operations, Coordinate with stakeholders to address, follow up and resolve security alerts. Operate and maintain security monitoring tools such SIEM, EDR and SOAR. Gather and analyse Cyber intel. Conduct Threat hunting. Lead the adoption of new technological advances and best practices in cybersecurity monitoring and response.

You will be a Great Fit if you:

- Demonstrable experience and in-depth knowledge in cyber security operations, cyber intelligence gathering, incident response and investigations.

- Have strong experience in various cyber security technologies such as IDS/IPS, firewalls, SIEM, APT, email security, web security, endpoint security, malware analysis, etc

- Have experience in threat hunting / red teaming will be preferred.

- Have at least 2 years of experience as a Tier 2 analyst in a SOC.

- Have professional certifications would be added advantage: CISSP, GIAC Certified Incident Handler, EC-Council CEH and CSA, or any other relevant qualifications

Good to Have:

- High attention to detail and quality.

- Be able to work under pressure and meet deadlines.

- Must be highly reliable, trustworthy, honest, and commitment oriented.

- Strong written and verbal communication skills

- Autonomous

- Take ownership

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542075/2fc68717-fd53-1ede-bce4-ab8bfed8329f

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

· ICT Security Governance:
Develop and implement enterprise-wide ICT security programmes as follows:
i. Establish the cybersecurity governance structure for HDB to ensure that the security posture is robust, resilient, and pragmatic
ii. Enhance and update the IT security policy, standards, procedures so that they are always current against the evolving cyber security landscape
iii. Manage the compliance with the GovTech ICT/SS Security Policies, Initiatives, Measures and the relevant Government Instruction Manual to further strengthen the WOG and HDB ICT security posture.
iv. Establish the governance and administer the Third-Party Management Policy and Procedure

· Cybersecurity Awareness Outreach
Manage and implement Cybersecurity Awareness Framework to promote IT security awareness and outreach programme as follows:
i. Raise HDB management and staff’s security awareness and appreciation of ICT Security to ensure HDB’s information assets are protected.
ii. Create good staff cyber security hygiene through regular ICT Security outreach programme such as annual ICT Security Awareness Talk, security advisories, conduct of Phishing exercise, road show.
iii. Keep abreast of key technology and skillset in the industry to maintain ICT Security personnel skills development.
iv. Identify various channels for the conduct of the security program such as cyber range exercises, technical certification, gamification.

· Identity & Access Management
To establish procedures and standards for the Identity and Access management in HDB as follows:
i. To administer and manage the user accounts and privileged access, so as to safeguard the confidentiality of ICT assets and systems in HDB.
j. To maintain and manage the access controls to applications on premises and on Cloud.
k. Digital Certificate Management

· Quality Audit and Security Reviews
a. To serve as an independent party to perform quality auditing and report to Management on the observations and recommendations.
b. To conduct regular security reviews on application systems and infrastructure to ensure the HDB’s systems and infrastructure are secured and reliable.
You are also to:
· keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.
· lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks

You will be a Great Fit if you:

You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Engineering (Computing/Telecommunication), Cybersecurity and/or Digital Forensic or equivalent.
At least 1 years of direct and relevant full-time ICT security work experience
Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc
Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

Added advantage for candidates with knowledge in any of the following:
· Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security
· Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)
· Good understanding of the current IT/Cyber Security landscape

Candidate also need to:
· to work beyond business hours including weekend when necessary
· possess good interpersonal and communication skills
· demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail
· have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542108/2fc68717-fd53-1ede-bce4-b91408ebb29f

Job Description:

We are looking for a creative and highly motivated Automotive Security and Privacy Specialist to lead research and innovation projects in the field of automotive cybersecurity and privacy. This role is driving and implementing advanced security and privacy solutions for automotive systems.

Key Responsibilities:

• Conduct research on emerging automotive cybersecurity and privacy trends. e.g., embedded security in High-Performance computing (HPC) for car, Post Quantum cryptography, privacy enhancing technology etc.

• Drive and develop innovative proof of concept (PoC) related to automotive security projects.

• Capable to deliver Invention disclosures/patents and presentations at conferences/industry events.

• Collaborate with internal and external stakeholders on automotive cybersecurity and privacy research initiatives

Qualifications

• PhD/master’s degree in computer science, Electrical Engineering, or a related field, with a deep focus on cybersecurity, or a similar qualification

• Strong understanding of embedded/automotive system security concepts (e.g., Trusted computing, Intel SGX, ARM Trustzone, hardware security modules (HSM) etc.)

• Familiar with at least one fields in embedded system security (but not limited to), e.g., high performance computing, post quantum cryptography, privacy enhancing technology, IoT security etc.

• Experience in driving and implementing innovative security and privacy solutions.

• Advanced programming skills: C, C++, Python.

• Excellent communication and presentation skills.

• Excellent problem-solving and analytical skills

Kickstart your career with NTTS’s G.L.O.W Graduate Program, the ultimate launchpad for your tech career!

G – Grow in accelerated development path
L – Lead yourself with purpose & commitment
O – Own your career journey
W – Way Forward

Our comprehensive one-year program is tailored to empower talented and driven graduates like you with valuable hands-on experience, exposure to industry experts, and a diverse range of projects that will sharpen your skills and broaden your understanding to the ICT industry.

Associate IT Security Officer is responsible for securing the organization’s cloud and on-premises application and infrastructure by filtering out suspicious activity and mitigating security risks before any breaches can occur.

The Associate IT Security Officer works across business areas or disciplines to identify and correct any flaws in the organization’s security systems. Successful candidate will undergo intensive training and receive multiple globally recognized certifications.

Working at NTT

• Perform analysis of vulnerability results & work with principal vendor to ensure remediation.
• Work with Patch Manager to ensure system patches are applied.
• Review security hardening guidelines based on best practices and monitor for compliance.
• Participate in security assessments with auditors and respective stakeholders to meet audit compliance.
• Enforce mitigation measures for failing security controls or vulnerabilities.
• Ensure security policies and procedures are adequately implemented for information systems protection.
• Educate the operations/project team on security policies and procedures.
• Verify the effectiveness security measures continue to be effective after implementation.
• Maintain good operational security documentation.
• Stay up-to-date with the latest security news, threats, and vulnerabilities.

Requirements:

• Bachelor’s Degree, preferably in Computer Science, Information Technology Engineering or related field
• Fresh graduate or less than 3 years of working experience
• Able to build and maintain cross-functional relationships with a variety of stakeholders
• Has excellent verbal/written communication and presentation skills
• Team player, resourcefulness, strong analytical skills is an advantage

A spin-out of telecom operator MyRepublic, MyRepublic Digital is an end-to-end digital enabler and accelerator that provides companies around the world the technology, skills and expertise needed to create frictionless customer experiences and thriving businesses.

Using a product-led approach, MyRepublic Digital aims to enable, simplify and accelerate digital transformation for aspiring digital brands. Its flagship offering is Encore: a cloud-native, all-digitalplatform-as-a-service that is ready to deploy pre-built with industry best practices and BSS/OSS features.

Role and Responsibilities

The incumbent will be responsible for the systems engineering to maintain the reliability and security of systems supporting a Cloud SAAS platform and some service provider Network Functions.

● Evaluate, integrate, and deploy security tools including Zero-Trust Security, Identity and Access Management, Endpoint Detection and Response, Security Information and Event Management

● Evaluate, integrate, and deploy monitoring tools for Cloud and IT services

● Review system and security logs, create rules and automations to correlate events and incidents, build analysis reports for critical events

● Ensure internal and external compliance audits are completed and due diligence and remediation actions are carried out according to schedule Work with SRE’s and IT Support to test and deploy patches for security vulnerabilities

● Work with CREST-certified VA/PT provider to ensure all assets are scanned and vulnerabilities tracked and remediated

● Maintain Telephony, RADIUS and DNS service uptime of 99.9%

● Design and deploy engineering solutions to provide capabilities including:
○ Monitoring and Alerting
○ Security Lifecycle Management
○ Patching and Integration Testing
○ Infrastructure Orchestration
○ Systems Automation

● Incident Management

● Improve the security, design and reliability of the infrastructure

● Maintain systems documentation

● Accept and meet challenging deadlines

Qualifications

● Degree or Diploma in Computer Science or related field of study

● Experience with the following is preferred:
○ Cloud service providers: AWS /GCP
○ Compliance Standards: ISO27001 / CIS20 / SRII
○ Automation Frameworks: Ansible / Salt
○ Vulnerability Scanners: Accunetix, Tenable
○ WAF/IDS/IPS: Palo Alto / Fortinet / Wazuh
○ IAM: Okta / CyberArk / BeyondTrust
○ Collaboration tools: Slack / Jira / Confluence
○ Source Code Repositories: Gitlab / BitBucket
○ Hypervisors: ESXi / Proxmox
○ Monitoring Tools: Grafana / InfluxDB / Prometheus / Datadog / New Relic
○ Reverse Proxy: NGINX / Traefik

● Strong background in Linux is a must

● Good understanding of Networking

● Ability to write scripts in various languages such as Bash, Python, PHP

● Ability to self-learn

● Well organized, attention to details and able to multitask

● Desire to explore and learn new technologies

What we offer in return:

● Exciting opportunities to create and grow in a rapidly growing organisation that is a disruptor in the telco space.

● Amazing colleagues and culture that encourages you to do your best work while staying authentic and true to yourself.

● A work culture that puts your individual needs at the core: Remote, Hybrid or In-Office – choose a work rhythm that suits you and your team. We focus on outcomes and believe that you can deliver your best work, working anywhere, anytime.

● Wellness first. We believe that wellness goes beyond team celebrations and birthday parties. Our holistic approach to wellness gives you opportunities to recharge, connect and explore, at and outside work. In addition to the standard leave entitlements, we offer:

● 1 day of wellness leave every quarter for you to take or your health and wellbeing, and explore your personal passions.

● 20 days to work from anywhere each year, allowing you more flexibility to explore and connect with your interests while delivering work you will be proud about.

MyRepublic values and behaviour that we look for:

From being the first to launch 1Gbps broadband plans and the first network optimised broadband service for gaming in Singapore, to crafting workplace practices that put wellbeing at its core, our values guide us in everything we do at MyRepublic Digital. It’s the secret sauce that makes us tick. If you espouse the following, we know you would fit in great with us:

● Never Settle: We dream big. We are constantly curious and embrace bold ideas.

● Stronger Together: We create together. We win together, we fail together. We grow together, we celebrate together. We are at our strongest together.

● Empowered to Deliver: We deliver on our commitments. We are empowered to move fast and with confidence to get the right things done.

● We Care: We care for ourselves, one another and our customers. We value authenticity and embrace differences. We create the space to recharge, connect and explore to bring our best selves to work.

We believe that skills, knowledge, and experience can come from a diverse range of life experiences. You may not have ALL the listed requirements for this role but this should not hold back! If you believe that you have what it takes for this position, are willing to learn, and you identify with the values and mission of MyRepublic Digital, we would love to hear from you. We celebrate diversity and look forward to hearing from a diverse group of applicants. We do not discriminate on any factor in our hiring process.

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

About the Centre for Quantum Technologies (CQT)

The Centre for Quantum Technologies (CQT) in Singapore brings together physicists, computer scientists and engineers to do basic research on quantum physics and to build devices based on quantum phenomena. Experts in this new discipline of quantum technologies are applying their discoveries in computing, communications, and sensing.

Job Description

The applicant will be in charge of an experimental platform for quantum processors with neutral atoms arrays, under the direct supervision of a SRF. In addition, the applicant will take an active role in the development of ultra-stable laser systems for Rydberg excitation and explore possible collaborations in this research area. Finally, the applicant will supervise a research team composed by at least a RA or a PhD student. The applicant will report on the progress to the lead-PI in a weekly basis.

Job Requirements

• To have a Bachelor degree in Physics
• To have a successful experience in atomic physics or related fields

Position

Service Manager, Data Security Services

The Service Manager for Data Security Services manages the RUN team and the related activities to data and endpoint security. He/She is the main point of contact for the service provider and the internal clients in the bank. He/She manages the budget for the scope. He/She is also responsible for the transition of the new services from other regions to Singapore and manages the project/transition. The role is a techno-managerial role and will have to be involved in DLP policy/rule modifications as well. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data and endpoint security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France, UK, and Russia) remotely from Singapore. France infrastructure represents approximately 90% of the worldwide production activities of CA-CIB.

Team works in Asia and Europe time zones and flexible rotational shift is based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect.
• Encryption Solutions: Disk Encryption, File and Folder encryption.
• Database Audit Monitoring solutions.
• Email and Web Phishing Prevention solutions.
• Vulnerability Management Services.
• Access Management.

Detailed Job Responsibilities

The Team Manager has a wide spectrum of responsibilities and actions.

As the manager of his/her team, he/she:

• Assigns the tasks and manages delegation.
• Sets and reviews the work organization according to activity’s requirements and people’s needs and validates the schedules.
• Animates the team to encourage collaboration and sharing of practices.
• Has a role in supporting people development.
• Participates to recruitment process for the team.
• Vendor relation management.

As the manager of his/her scope of activity, he/she:

• Meets stakeholders on a regular basis to discuss improvement plans, action plans, evolving threats and changing risks, and provide feedback on policies, standards, procedures, guidelines. ISS leads security for GIT and is the main entry point for internal clients outside of GIT (Business Lines, BCP, LGL, and Compliance for security topics).
• The service includes, but is not limited to, incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management, but also global projects like End of Life, New Builds, migrations and upgrades etc., participation in global Infra events (like Power down and DR Tests).
• Ensures activity is performed in compliance with norms, standards, processes and procedures.
• Gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting.
• Reporting and auditing.
• Monitors operational KPI and ensure tickets are losed within SLA.
• Ensures documentation is up to date and relevant for use.
• Implements cross-functions activities including continuous improvement initiatives.
• Estimates the yearly budget, sets monthly forecasts and follows up BAU/Project monthly balance.

As an experienced professional in Security domain, he/she:

• Supports his/her team or experts’ diagnosis when technical issues raise in his/her scope of expertise.
• Is aware of the global IT structure so that he/she anticipates interrelationships within the organization.
• Manage L0/L1/L2/L3 activities which involve direct relationships with end users and L3 activities (architecture, design, project management, etc.).
• Provide oversight to all Data Security activities to ensure adequate performance, efficiency, and availability.
• Engage with technical peer, Service managers, Architect and project teams on technology roadmap and projects, especially with GIT architecture security team.
• Ensures the IT Production activities regarding his/her perimeter are performed correctly by the team, complying with defined norms, standards, processes and procedures.
• Has to make sure that the defined KPI is met on a day-to-day basis for Incident, request, problem, change management etc.
• Has to monitor and push for improvements in the team’s productivity.
• Be available and able to drive/manage any complex or high severity incidents that occur within the scope of their role.
• Engage in Projects and project deliveries.
• Drive and deliver root cause for any high severity issues.
• Has to be responsible for providing direction, proactive and reactive support services to maintain the availability and reliability of systems infrastructure in accordance to the SLA.
• Is involved in security incident diagnosis or investigations to help provide evidence or facts during diagnosis or investigation.
• Manage requests from stakeholders on data security tools to provide extracts, reports or information when required.

As the first point of contact for the Service Provider, he/she:

• Manages the daily relationship with the Service Provider and escalates when needed.
• Follows up Provider KPI and related actions.
• Coach and develop partner resources to meet the objectives.

As the first point of contact for internal Clients, he/she:

• Manages the daily relationship with internal Clients including planning, requests clarification, risks mitigation and service quality.
• Prepares client feedback for the monthly review.
• Serve as point of escalation on major incidents.
• Have to maintain a smooth relation with partners, vendors and global clients/teams.

As a member of ISAP/ITS, he/she:

• Facilitates collaboration and spread of information from and to the team.
• Participates to the department’s activities including brainstorming, team building and other team or transversal actions.
• Fosters innovation mindset.
• Contributes to ISAP/ITS global branding and communication.
• Manage budget (once a year) and forecast (monthly)
• Focus on automation and optimum use of the team to improve efficiency.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

v Work Timing is flexible and is scheduled to manage the operations within business hours of Asia and Emea timezone.

v Role may have to attend and lead any critical issues escalated outside of working hours, when operational needs.

Qualifications Requirements

Ø Minimum 12 years of IT Security experience and with 3-4 years of team management experience.

Ø Must be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science.

Ø Must have knowledge of different domains of IT Security.

Ø Must have managed a team size of 8 or more Security Specialists in an enterprise level environment;

Ø Must have prior hands-on experience in managing the IT Security Solutions.

Ø Must have experience in working in Production setup in Run (Operations) mode.

Ø Must have working experience in managing the endpoint and data security solutions for a Large enterprise level environment, working experience in financial organization is preferred.

Ø Ability to apply risk based approach while working on assigned responsibilities.

Ø Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions.

Ø Excellent in analytical, communication and documentation skills.

Ø Ability to organize work and be able to priories work as per the needs of Production Operation’s needs.

Ø Must have strong understanding of ITIL processes and comfortable working in process oriented environment.

Ø Ability to work independently and as well as a part of team and is able to work under minimal supervision.

Ø Should have time management skills and able to manage work in fast moving environment.

Ø Should have hands-on technical exposure on wide spectrum of endpoint and data security technologies e.g. Symantec Data Loss Prevention (DLP), Symantec Endpoint Protection, Phishing Prevention and other IT Security technologies.

Ø Must have experience in defining, designing and configuring DLP Policies as per the business requirements.

Ø Professional Certifications:

• CISSP, CISM certified is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng.

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Purpose

The principal role is to manage the security platform for the 3.5GHz C-Band RAN system so as to ensure the RAN network is adequately protected and secured against cybersecurity threats and incidents.

Duties and Responsibilities:

1. Oversee the overall operation and functions of the JVCo security platform.
2. Monitor Cyber Security Events for the JVCo 3.5 GHz C-Band Radio systems, including: Review event logs from the respective systems and ensure that there are no anomalies in the logs. Raise report on any security incidents to IMDA/SH/M1.
3. Coordinate with StarHub and M1 to administer cybersecurity measures to prevent, manage and respond to cybersecurity threats and incidents.
4. Coordinate with StarHub and M1 to assess and monitor the compliance of the JVCo with the JVCo/SH/M1 organization cybersecurity policy.
5. Work with Starhub and M1 to engage external vendor to perform Vulnerability Assessment in order to ensure compliance to IMDA 5G security requirement.
6. Collaborate with StarHub and M1 to engage external parties to perform external and internal Penetration Test for Network and Applications.
7. Ensure the security platform is up to date with tracking and identifying the latest security threat to the JVCo network and system.
8. Conduct regular scanning of JVCo RAN System to ensure the accuracy of the Asset Inventory and track any Vulnerabilities in the Asset.
9. Facilitate and work with StarHub and M1 in the preparation for any audit (e.g TCS, Mobile TIRA).
10. Administer all system and user management functions of the 5G security platform, which include: Assigning access right to users of StarHub, M1 and the equipment vendors, upgrading softwares and hardwares, and system/database maintenance.

Job Requirements

Qualifications:

1. Degree in Computer / Telecommunication Engineering or related qualification or possess at least three years of related working experience.

Technical Skills:

1. Experience in conducting Vulnerability Assessment and Penetration Test
2. Experience in conducting security audit and setting cyber security policy
3. Experience in managing Cyber Security Operation
4. Candidates with CISSP/CISA/GIAC or equivalent certification is an advantage

Interpersonal skills:

1. Able to work independently and is also a good team player.
2. Possess good communication skills.
3. Strong commitment to work and have good initiatives.

How to apply

Apply via myCareersFuture or send your CV directly to [email protected].

Antina is a company driven by ability and hardwork. We adopt fair employment practices and employment decisions will be based on merit, qualifications and abilities. Antina does not discriminate in employment opportunities or practices on the basis of race, colour, religion, sex, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Visit our company website at www.antina.com.sg for more information.

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

Data Security Expert- Data Security and Endpoint Security

Data Security Expert is a technical expert role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Expert has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Expert of the team, he/she:

• act as the last level of escalation for the team members
• own Incident,Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Expert of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

PRODUCT AREA

Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.

JOB DESCRIPTION

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

With your technical expertise you will manage project priorities, deadlines, and deliverables. You will design, develop, test, deploy, maintain, and enhance software solutions.

Qualifications

JOB RESPONSIBILITIES

• Write and review backend infrastructure code.
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact on hardware, network, or service operations and quality.
• Perform technical security assessments, code audits and design reviews.
• Develop technical solutions to help mitigate security vulnerabilities.
• Advocate security and secure practices throughout Google Payments.

MINIMUM QUALIFICATIONS

• Bachelor’s degree in Computer Science, or a related technical field, or equivalent practical experience.
• 3 years of experience with software development in one or more programming languages, or 1 year of experience with an advanced degree in an industry setting.
• 3 years of experience in software or application security.

PREFERRED QUALIFICATIONS

• Master's degree or PhD in Computer Science or related technical field.
• Software development experience in C++ or Java.
• Knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.
• Effective communication skills.

Nera Telecommunications Ltd (Nera) is a global system integrator that customizes end to end solutions for customers. With 40 years of successes as a technology solution provider and headquartered in Singapore with businesses over 16 countries. Our goal is to deliver the best, value added IT solutions to all our customers. We are committed to giving our customers quality products and top tier services. We are available at www.nera.net.

We are looking for the following position: Senior Security Consultant for Identity Governance and Administration as a subject matter expert to join NERA Telecommunication (Nera)’s Cybersecurity team.

As an individual contributor and reporting to VP, Cybersecurity, you will be responsible for:

Responsibilities:

• Presales and Delivery of on-prem/Cloud based IGA/IAM project including providing the consulting service for IGA/IAM operation.
• Develop process and procedure on regular IGA/IAM life cycle.
• Prepare proposals / statement of work (SOWs) and respond to RFPs by articulating NERA’s Security value proposition against the customer defined requirements and propose winning solutions.
• Uses in-depth solution knowledge to provide technical expertise to sales staff and the customer through sales presentations and product demonstrations for building new relationships, driving opportunities and defining innovative security solutions to our customers.
• Own and positively develop the relationships with key technical decision makers and influencers within the target customers.
• Engaging customers and partners, capturing requirements, proposing technical solution and overseeing the selection of technologies/products, scoping and estimating resources and effort needed to deliver the business value solutions to the customer successfully and achieving high level of customer satisfaction – to own and manage the whole process.
• Engage with customers as a trusted advisor, listening and understanding their challenges and requirement – both technical and business, and clearly articulate and communicate to the sales team, and document them.
• Research and develop appropriate working solution and value proposition, engaging with the respective solution principal and services to address customer requirement.
• Scope and clearly translate defined requirements, proposed solutions and value proposition into proposals/Statement of Work (SOW).
• Present and articulate our value proposition to customers at all levels within the organization both technical and business audience (including C-levels).
• Demonstrate a strong knowledge of the solutions and services offered by NERA overall.
• Be a trusted advisor who provide sound security advise to customer and help them establish business case, including TCO and ROI justification, and shape requirement.
• Be the solution owner, taking lead and working with cross-functioning team including professional services, product management, sales and marketing to drive the development of market-driven solution and services, and also for marketing events.
• Ensure personal technical, communication and commercial skills are kept up to date to ensure successful execution of role, e.g. maintaining CPE, attending training, webinars.

Requirements:

• At least 5 years of strong hands-on experience in IGA/IAM solutions.
• Programming Skills: Java, Python, or PowerShell, and the ability to write scripts to automate tasks in IGA/IAM solutions.
• Knowledge of LDAP and Active Directory.
• Working experience in providing consulting service for the IGA/IAM operation and processes.
• Able to write/develop custom IGA/IAM connector will be an advantage.
• Experience working in a customer-facing role and comfortable presenting to a small to medium audiences on both technical and business-related topics.
• Experience in preparing technical architecture blueprint and responding to large scale complex RFP is highly desirable.
• Professional security related qualification such as CISSP, CISM, CRISC, CISA, GIAC or equivalent are highly desirable.
• Broad experience and understanding of security regulatory framework and guidelines in the region are highly desirable.
• Broad experience and understanding of industry standards, framework and best practices such as ISO27001, PCI DSS, NIST, etc is highly desirable.
• Broad experience and understanding of security trend, threat landscape and framework such as the cyber kill-chain.
• Excellent oral and written communication skills.

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators