ICT Security Engineering

Direct Responsibilities

Install and administrate the servers of the SIEM Infrastructure

Develop automation on the different tasks and self-service tool

Participate to the integration of new technologies logs

Support logs parsing using custom parser/GROK development.

Project management

Be a full-time member of the Production CSIRT / SIEM Engg team and participate to the various activities of the team

Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.

Comply with regulatory requirements and internal guidelines.

Contribute to the reporting of all incidents according to the Incident Management System

Requirement

Bachelor’s degree in computer science or equivalent is a must

Production experience across the following technologies:

7 years’ experience in working of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics. (Mandatory)

7 years’ experience experience with Kafka

Good working knowledge of Linux (RedHat/Ubuntu)

Programming skills (Python or Bash) is appreciated.

Experienced production support engineer

Platform integration skills are a plus - Experience in installation, configuration, documentation and administration of multiple pre-production and production platforms in both virtual and physical environments.

7 years’ experience in automation tools (e.g. Ansible) and DevOps pipelines .

Candidate must have an overall 7 or more years of experience with minimum 4-5 years on relevant scope

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy.

You acknowledge that you have read, understood, and agree with the Privacy Policy.

Join our security team and help secure our organization through maintaining, engineering, and deploying security solutions. We use industry-standard security tools, in an automated fashion, to ensure our security teams can operate effectively and provide security to the company.

Responsibilities:

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Roles & Responsibilities

Join our security team and help secure our organization through maintaining, engineering, and deploying security solutions. We use industry-standard security tools, in an automated fashion, to ensure our security teams can operate effectively and provide security to the company.

Responsibilities:

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

• Position Title: Temple Assistant
• Location: Jln Senyum (Near Kembangan mrt)
• Working Days: 6 days (off weekday)
• Working Hours: 8.30am – 4.30pm
• Salary: $1,900 - $2,100

Interested applicants can also send your resume to WA: +65 8827 8712 (Ms Lynne) and allow our Consultant to match you with our Clients. No Charges will be incurred by Candidates for any service rendered.

TAN LEE XIAN Reg No: R24123487

The Supreme HR Advisory Pte Ltd EA No: 14C7279

Roles & Responsibilities

• With Class 3 Driving Licence – to drive Volunteers for meetings and errands
• Assist in Temple's and Memorial Hall's daily operations
• Support events organized by the Temple (Vesak, Qing Ming & Ullambana Festival)
• Attend to customers’ enquiries
• Other general / ad-hoc duties as assigned

Requirements

• Basic Computer Knowledge
• Able to work 6-day’s week (including weekends and public holidays)

• Position Title: Temple Assistant
• Location: Jln Senyum (Near Kembangan mrt)
• Working Days: 6 days (off weekday)
• Working Hours: 8.30am – 4.30pm
• Salary: $1,900 - $2,100

Interested applicants can also send your resume to WA: +65 8827 8712 (Ms Lynne) and allow our Consultant to match you with our Clients. No Charges will be incurred by Candidates for any service rendered.

TAN LEE XIAN Reg No: R24123487

The Supreme HR Advisory Pte Ltd EA No: 14C7279

Roles & Responsibilities

• With Class 3 Driving Licence – to drive Volunteers for meetings and errands
• Assist in Temple's and Memorial Hall's daily operations
• Support events organized by the Temple (Vesak, Qing Ming & Ullambana Festival)
• Attend to customers’ enquiries
• Other general / ad-hoc duties as assigned

Requirements

• Basic Computer Knowledge
• Able to work 6-day’s week (including weekends and public holidays)

• Position Title: Temple Assistant
• Location: Jln Senyum (Near Kembangan mrt)
• Working Days: 6 days (off weekday)
• Working Hours: 8.30am – 4.30pm
• Salary: $1,900 - $2,100

Interested applicants can also send your resume to WA: +65 8827 8712 (Ms Lynne) and allow our Consultant to match you with our Clients. No Charges will be incurred by Candidates for any service rendered.

TAN LEE XIAN Reg No: R24123487

The Supreme HR Advisory Pte Ltd EA No: 14C7279

Roles & Responsibilities

• With Class 3 Driving Licence – to drive Volunteers for meetings and errands
• Assist in Temple's and Memorial Hall's daily operations
• Support events organized by the Temple (Vesak, Qing Ming & Ullambana Festival)
• Attend to customers’ enquiries
• Other general / ad-hoc duties as assigned

Requirements

• Basic Computer Knowledge
• Able to work 6-day’s week (including weekends and public holidays)

• Position Title: Temple Assistant
• Location: Jln Senyum (Near Kembangan mrt)
• Working Days: 6 days (off weekday)
• Working Hours: 8.30am – 4.30pm
• Salary: $1,900 - $2,100

Interested applicants can also send your resume to WA: +65 8827 8712 (Ms Lynne) and allow our Consultant to match you with our Clients. No Charges will be incurred by Candidates for any service rendered.

TAN LEE XIAN Reg No: R24123487

The Supreme HR Advisory Pte Ltd EA No: 14C7279

Roles & Responsibilities

• With Class 3 Driving Licence – to drive Volunteers for meetings and errands
• Assist in Temple's and Memorial Hall's daily operations
• Support events organized by the Temple (Vesak, Qing Ming & Ullambana Festival)
• Attend to customers’ enquiries
• Other general / ad-hoc duties as assigned

Requirements

• Basic Computer Knowledge
• Able to work 6-day’s week (including weekends and public holidays)

Executive, Group Technology (IT Security)

The Job

Responsible for assisting the Vice President, Group Technology (IT Security) in:

• Ensuring the organization's information systems are fully operational and remain protected from external threats.
• Ensuring the organization complies to all relevant IT related legislative/regulatory requirements.

Responsibilities

• Assist in developing and driving compliance/governing framework for ongoing compliance against relevant IT legislative/regulatory requirements (e.g.PDPA, MAS TRM & PCI) and reporting to IT Management.
• Assist in developing and driving compliance/governing framework for the ongoing compliance against the organizational information security policies, standards and procedures and reporting to IT Management.
• Assist in evaluating and formulating a risk management framework for the embrace of new technologies such as Internet of Things (IOT).
• Assist in reviewing and recommending changes to information security policies, standards and procedures, taking into considerations such as deviation requests and audit findings.
• Assist in developing and driving an ongoing Information Security score card framework to reflect the state of compliance of the computing environment against the information security policies, standards and procedures.
• Assist in developing organizational IT risk management framework and conducting the risk assessments.
• Assist in conducting information security awareness and phishing programs.
• Assist in driving the evaluation & implementation of IT Security projects.
• Engage and support counterparts in China

Requirements

• Minimally 3 years of Information Security work experiences in the area of Information Security Consultancy and IT Risk Management.
• Possess security related certifications such as CISSP, CISM or CISA, with strong information security knowledge of IT legislations such as PDPA, MAS TRM and PCI, industry Information Security best practices/principles.
• Highly disciplined and diligent in driving deliverables strictly within defined timelines.
• Disciplined in being guided by a set of formalized security policies, standards, procedures and frameworks.
• Logical and methodological, with good planning, interpersonal and organizational skills.
• Able to work independently and as a strong team player.
• Experience in working in companies in bigger setup with various lines of businesses.

At CapitaLand, we advocate fair employment practices, and recruit talents based on merit and fit with our Corporate values. We provide equal opportunity for all qualified persons and build an inclusive workplace regardless of race, gender, age, religious belief, or nationality.

Only shortlisted candidates will be notified.

Office Location: 25, Ubi Road 4, #05-01, UBIX, Singapore 408621

Role:

CCTV & Security Supervisor (Construction)

• Project contract based (start from 29 Jan, estimated 27 months until project completion)
• Work Location: Changi Naval Base
• Project Office at (Lavender area)
• Working days: 5.5 days 8am to 5pm, Alt Sat Full Day
• Salary: $1600 to $3000

Requirements

• Degree in Construction Facility Management or equivalent, recognized universities under the BCA with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.

Job scope

• Supervise building CCTV & security system.

• Ensure compliance with CCTV Code & Security requirements.

• Conduct daily check on installation works.

• Conduct coordination work with other trades.

• Assure compliance to code of practice.

• Understand of CCTV & security system operation & function.

• Prepare & submit permit to work application.

• Ensure proper documentation is in order.

• Assist operation & construction team on site activities related to Fire & security system.

• Ensure that works carried out are following the Workplace Safety and Health Act.

• Other ad-hoc duties as assigned.

✅ Wee Yuan Huan

✅ Reg No: R21100383

✅ The Supreme HR Advisory Pte Ltd

✅ EA No: 14C7279

• Attractive Basic Salary: From $3300 Per Month
• Location: Marina Bay Sands
• Full-Time Permanent Role – 5-Day Work Week, 44 Hours (Shift Work)

We are seeking a highly skilled and professional Security Officer to join our team at Marina Bay Sands, one of Singapore’s most renowned luxury retail locations. This is an exciting opportunity to work with a leading luxury brand where you will contribute to maintaining a secure, welcoming environment for our esteemed customers and ensure the safety of high-value merchandise.

Key Responsibilities:

• Manage store access control and greet customers.
• Perform routine inspections of the premises and surrounding areas to ensure safety.
• Monitor the premises through surveillance systems, ensuring constant security coverage and prompt detection of suspicious activities
• Escort products and individuals when required, ensuring safe and secure handling of merchandise and high-profile clients.
• Respond promptly to security breaches, incidents, and emergencies, ensuring the safety of customers, staff, and assets.

Key Requirement:

• Minimum of 3-5 years of experience in security or safety management.
• Extensive experience and understanding of applicable regulatory requirements including the systems approach to safety and risk management
• Strong understanding of local security protocols, procedures, and practices.
• Detailed knowledge of local security requirements procedures and practices
• Strong analytical and problem-solving skills
• Willingness to work rotating shifts, including weekends and public holidays.

If you have a strong background in security and are looking to work in a dynamic luxury retail environment, apply today to be part of our professional team.

EA Personnel : R24124899

EA Licence : 22C1376

• Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off
• 12 hours permanent shift
• Location: Islandwide
• Salary Package
  i. Gross salary: up to $2,850
  ii. Bonus of $2,500

Responsibilities:

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X-ray screening of checked in luggages
• Any other security related roles at Airport

Requirements:

• 1 N Levels / 1 O Level / WPLN 3 x Level 4

WhatsApp: +65 9642 0989 (Han)

Email: [email protected]

Chaw Chiaw Han, Reg No：R22106723

The Supreme HR Advisory Pte Ltd, EA No：14c7279

We are seeking a highly skilled and experienced Assistant Manager in Cybersecurity Consulting to join our dynamic team. The ideal candidate will possess deep technical knowledge, strong leadership skills, and a proven track record in managing cybersecurity projects. This role involves working closely with clients to identify security risks, develop mitigation strategies, and implement solutions to protect their information systems

The role involves:

• Lead and manage cybersecurity consulting engagements, ensuring the delivery of high-quality services to clients.
• Conduct comprehensive security assessments, maturity assessments, and risk assessments.
• Develop and implement cybersecurity strategies, policies, and procedures tailored to client needs.
• Collaborate with cross-functional teams to design and deploy security solutions.
• Stay current with emerging cybersecurity trends, threats, and technologies to inform client solutions.
• Prepare detailed reports and presentations for clients, summarizing findings, recommendations, and action plans.
• Mentor and develop junior team members, fostering a culture of continuous learning and professional growth.
• Assist in business development activities, including proposal writing, client presentations, and identifying new opportunities.

The ideal candidate should possess:

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field preferred.
• Relevant certifications such as CISSP, CISM, CISA, or equivalent.
• 5+ years of experience in cybersecurity consulting, with a focus on areas such as risk management, incident response, and security architecture.
• Strong understanding of regulatory frameworks and standards, including NIST, and ISO 27001, etc.
• Excellent project management skills with the ability to manage multiple engagements simultaneously.
• Strong analytical and problem-solving skills, with the ability to think strategically and act tactically.
• Exceptional communication skills, both written and verbal, with the ability to convey complex technical concepts to non-technical stakeholders.
• Proven ability to build and maintain client relationships, demonstrating a commitment to delivering exceptional client service.
• Ability to travel as required to meet client needs.

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities. As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth. One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.

About cynapse

cynapse is an awarded AI Software Product company specializing in AI-based Enterprise-grade Video Content Analytics (VCA) and Generative AI in highly challenging environments. cynapse’s software platform is leveraging cutting-edge cloud/on-premise, computer vision, AI, DNN, and IoT/Edge technologies.

The company is led by globally renowned experts who previously headed large groups at Microsoft and Intel. The company HQ is located in Singapore (One North Area)

We are looking for a highly motivated intern to join our AI & Computer Vision team that delivers innovative Computer Vision solutions to global customers. You will conform to high standards and work in a cutting-edge, dynamic, and professionally challenging environment.

Objectives:

As part of your role you will:

• Research public ML models and data sets
• Accurately label images, videos, or other visual data according to provided guidelines and criteria. This can include drawing bounding boxes, polygons, or other shapes around objects of interest
• Prepare data for machine learning training in the areas of classification, tracking, behavioral analysis, anomaly detection and much more
• Work with our AI Full time engineers to define business challenges that require the use of various ML/DNN & Computer Vision Algorithmic techniques

Qualifications:

• Completed at least 1 year of studies as part of a Diploma/Bachelor/Master in one of the the following subjects : IT/Engineering/Computer Science/Information Systems/Statistics/Mathematics
• At least 3 months experience in Python programming
• Completed at least 1 Uni/Online hands-on course in Machine Learning
• Experience with one or more ML tools such as Tensorflow, PyTorch etc.
• Analytical Thinking
• Bonus Area: Understanding Computer Vision (i.e. some experience with OpenCV)

Duration- Available for at least a 6 months internship. Able to work at least 4 days a week and preferably full-time. we are flexible with start and end dates and allow flexibility to accommodate exams. leave etc.

Due to the nature of the role, the position is considered for candidates that are only based in Singapore or has experience studying/working in Singapore

Job Types:Internship, Fresh graduate, Student job

Benefits:

• Flexible schedule
• Health insurance
• Professional development
• Work from home

Supplemental Pay:

• Performance bonus

Work Location: In person

Role:

Security Supervisor (CCTV)

• Project contract based (start from 29 Jan, estimated 27 months until project completion)
• Work Location: Changi Naval Base
• Project Office at (Lavender area)
• Working days: 5.5 days 8am to 5pm, Alt Sat Full Day
• Salary: $1600 to $3000

Requirements

• Degree in Construction Facility Management or equivalent, recognized universities under the BCA with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.

Job scope

• Supervise building CCTV & security system.

• Ensure compliance with CCTV Code & Security requirements.

• Conduct daily check on installation works.

• Conduct coordination work with other trades.

• Assure compliance to code of practice.

• Understand of CCTV & security system operation & function.

• Prepare & submit permit to work application.

• Ensure proper documentation is in order.

• Assist operation & construction team on site activities related to Fire & security system.

• Ensure that works carried out are following the Workplace Safety and Health Act.

• Other ad-hoc duties as assigned.

✅ Wee Yuan Huan

✅ Reg No: R21100383

✅ The Supreme HR Advisory Pte Ltd

✅ EA No: 14C7279

• Instrumentation of measurement and detection equipment for military and homeland security.
• Oversee post-sales delivery of equipment, conduct scheduled maintenance, and conduct diagnostic analyses for troubleshooting and repair tasks.

Requirements:

• Higher Nitec in Electrical & Electronics Engineering or equivalent.
• At least 2 years of working experience

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• Overall 5-8 years relevant work experience in Endpoint Security, EDR / XDR or similar roles required
• Develop, implement, and manage security controls to block and mitigate security threats across the IT infrastructure.
• Understand perimeter and endpoint security solutions and create policies based on specific requirements.
• Evaluate business risks and the control environment to identify weaknesses, then design effective controls.
• Regularly review and adjust existing policies to ensure they remain effective and aligned with the latest security threats and best practices.
• Hands on experience on EDR/XDR or Next Gen AV tools like Carbon Black, Palo Alto
• Experience as a Security Incident Responder or SOC analyst/manager
• Hands on experience in Symantec Endpoint Protection Manager.
• Good in SEP configuration and troubleshooting endpoints.
• Good in SEPM policies configuration SEPM up gradation from old 11.x to 12.x new version.
• Generating AV Compliance Report.
• Threat log analysis and event Monitoring Certificate Management L2/L3 Venafi Trust Platform.
• Sharing reports with stakeholders/clients Endpoint Security L2/L3 Symantec Endpoint Protection.
• Hands-on to Manage Windows Defender ATP capabilities.
• Good knowledge in XDR .
• Should have expertise knowledge on ADR, SCCM configuration, WSUS configuration and AAD configuration.
• To manage AV policy, ASR policy, EDR policy and Firewall policy.
• Hands-on to manage Co-managed devices from console.
• Knowledge to Query Advanced hunting and to create Custom detection rules.
• Knowledge on Next gen Antivirus, EDR, Device Control.
• Knowledge on Threat hunting & Intel, Malware search & analysis.
• Knowledge on Managing and protecting identities in Azure AD.

Security Infrastructure Analyst

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents,reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance with the SLA,
• implements and develops improvements based on best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively assists in identifying the most technical skilled candidates for open roles,

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time;Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN )
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• Atleast a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Responsibilities

- Responsible for analysis, investigation and traceability of underground/blackmarket industry cases.

- Perform real-time analysis and trending of security log data from various security devices and systems, leveraging on in-depth analysis of understand industry exploitation chains and knowledge of most underground sources in non-China areas.

- Respond to user incident reports and evaluates the type and severity of security events.

- Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules

- Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.

- Constantly keep up with the latest attacks in the underground industry, identify business logic risks and independently conduct traceability or investigation.

- In-depth understanding of various business risks such as eCommerce/Payment/Advertisment business with the ability to lead discovery, data analysis, investigation, evidence collection, traceability analysis and communication with business teams.

Minimum Qualifications

- More than 3 years of security or anti-fraud work experience with high learning ability.

- Familiar with the various attack methods of the underground industry, experience in penetration testing and data analysis is preferred.

- Good data analysis skills and observation, able to accurately describe and identify attack patterns, and understand key points from large datasets.

- Good communication and coordination skills, strong analytical skills, process management skills, experience in cross-team cooperation, strong execution.

Preferred Requirements

- Automatic data gathering and analysis tools development and scripting skills are preferred.

- Reversing engineering is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

Our Cloud Security Solution team is responsible for the Go To Market of cloud security products, and aims the success of product commercialization.

Responsibilities

1. Responsible for developing security products targeting customers in Southeast Asia region, and identifying potential business opportunities.

2. Deeply understand customer requirements, develop cutting-edge solutions as a technical expert, provide consulting services to our partners.

3. Familiar with cloud security products and able to deliver matured solutions in different attack and defense scenarios.

Minimum Qualifications

1. More than 5 years of experience in developing security solutions, with a proven track record in operating security operations that exceeds 1 million USD.

2. Have experience in exploring solution scenarios, and have practical applications and best practices.

3. Be familiar with the principles and protection methods of common cloud security products, including at least three areas such as application security, host security, network security, identity security, data security, and security operations.

4. Possess strong communication skills and teamwork spirit; willing to take calculated risk; strong professional working ethics; result-oriented.

Preferred Qualifications

1. Proven track record in developing overseas cloud security markets is highly preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

- Propose, plan, and execute Red Team Operations to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards based on realistic threats to the organization.

- Maintain a deep understanding of ByteDance Enterprise Products, how they work, and how they could be attacked or abused.

- Conducts security exercises that emulate real-world threats, TTPs that are most relevant to our organization.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations.

- Collaborate across multiple defense/product teams to propose enhancements and improve current security offerings.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

Strong knowledge in some of these various disciplines: red team operations, infrastructure security, MITRE, TTPs.

- An adversarial mindset to emulate a real-world attacker.

- Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.

Preferred Requirements

- Red Team Experience in an enterprise environment.

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Summary

The Cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization's systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.

Responsibilities

• Production Level 3 support for Network and Security infrastructure.
• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed

Legal and Regulatory responsibilities:

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Minimum 8 years of experience in managing IT systems environment with about 5 years of experience in financial institutes.
• Subject matter expert on Systems , Network and Security.
• Knowledge and/or hands on working experience with emerging technologies.
• Excellent communication, interpersonal and logical skills.
• Customer service oriented and a strong team player.
• Ability to work under pressure and a commitment to solving issues.

Technology / Product Experience:

• Cisco - ACI, Nexus, Catalyst, DNAC, ISE , iOS, NXOS
• Arista - Switches, EOS
• Fortinet - Firewall, IPS
• F5 - LTM, ASM, APM , TMOS
• Infoblox - DNS, DHCP
• Skyhigh - Proxy
• Ivanti - Remote access
• Checkpoint - Firewall, MDS
• Trendmicro - IPS/IDS

Technology / Product Experience:

• Programming - Python/Bash/Ansible
• Tools - Wireshark/Tshark/Netflow

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact-for ourselves, our company, and the users we serve. Join us.

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices, including Los Angeles, New York, London, Paris, Berlin, Dubai, Mumbai, Singapore, Jakarta, Seoul, and Tokyo.

The Business Risk Integrated Control (BRIC) team of TikTok, is missioned to:

- Protect TikTok users, including and beyond content consumers, creators, advertisers.

- Secure platform health and authenticity of community experience .

- Collaborate with cross-functional stakeholders to improve TikTok infrastructures, services, tools and algorithms, towards a higher standard of privacy and security.

The BRIC team works to measure and minimize the damage implied by inauthentic behaviors on TikTok and its extended platforms, covering multiple classical and novel interity/security areas such as fake account, fake traffic, spam, scraping, cyberbullying, live room risks, incentive fraud, monetization abuse, etc.

In this team, you will have a unique opportunity to:

- Have a first-hand experience contributing to TikTok's key security initiatives.

- Build scalable, resilient, intelligent integrity solutions that are also privacy-safe and user-friendly.

- Solve product and technical challenges that are often first-seen and highly adversarial. Both quick short term tactics and long term strategical moves are expected at various paces.

- Be part of a diverse and enthusiastic global workforce, grow with and learn from security and integrity experts across Asia, Europe, North America, etc.

Responsibilities

- Research and develop cutting edge techniques to detect and prevent unwanted automation on the web

- Develop and maintain defensive, compatible, reusable, testable and low-footprint client-side JavaScript.

- Work together with other stakeholders to research malicious tools, identify newest attacks and build anti-automation measures.

Qualifications

Minimum Qualifications

- Computer science related majors, bachelor degree or above, more than 2 years of working experience

- Proficiency in JavaScript and browser APIs

- Deep understanding of HTTP, TLS stack and distributed systems architecture

- Familiarity with web development cycles (e.g. package management, module bundling, unit, and integration testing, browser capabilities, etc.)

Preferred Qualifications:

- Thrives with cross-team, cross-functional collaboration

- Strong interest in information security

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact-for ourselves, our company, and the users we serve. Join us.

The Business Risk Integrated Control (BRIC) team of TikTok, is missioned to:

- Protect TikTok users, including and beyond content consumers, creators, advertisers.

- Secure platform health and authenticity of community experience .

- Collaborate with cross-functional stakeholders to improve TikTok infrastructures, services, tools and algorithms, towards a higher standard of privacy and security.

The BRIC team works to measure and minimize the damage implied by inauthentic behaviors on TikTok and its extended platforms, covering multiple classical and novel interity/security areas such as fake account, fake traffic, spam, scraping, cyberbullying, live room risks, incentive fraud, monetization abuse, etc.

In this team, you will have a unique opportunity to:

- Have a first-hand experience contributing to TikTok's key security initiatives.

- Build scalable, resilient, intelligent integrity solutions that are also privacy-safe and user-friendly.

- Solve product and technical challenges that are often first-seen and highly adversarial. Both quick short term tactics and long term strategical moves are expected at various paces.

- Be part of a diverse and enthusiastic global workforce, grow with and learn from security and integrity experts across Asia, Europe, North America, etc.

Responsibilities

- Research and develop cutting edge techniques to detect and prevent unwanted automation on the web

- Develop and maintain defensive, compatible, reusable, testable and low-footprint client-side JavaScript.

- Work together with other stakeholders to research malicious tools, identify newest attacks and build anti-automation measures.

Qualifications

Minimum Qualifications

- Computer science related majors, bachelor degree or above, more than 2 years of working experience

- Proficiency in JavaScript and browser APIs

- Deep understanding of HTTP, TLS stack and distributed systems architecture

- Familiarity with web development cycles (e.g. package management, module bundling, unit, and integration testing, browser capabilities, etc.)

Preferred Qualifications:

- Thrives with cross-team, cross-functional collaboration

- Strong interest in information security

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

• According to the company’s long-term vision, formulate and integrate cybersecurity strategies into a companywide strategic plan by collaborating with cross-functional teams to design and implement secure infrastructure and application solutions
• Understand expectations of the company regarding continuous growth, establish concrete goals, and create mid-term strategies to achieve goals
• Drive the Global Cyber Defense Strategy, maintain ready forces and capabilities to conduct cybersecurity operations
• Anticipate future internal and external trends and implications and create appropriate cybersecuritymeasures
• Build understanding of cyber threats in each level. Develop detection & protection measures continuously, lead the technical solution implementations to be prepared to defend Santen from disruptive or destructive cyberattacks
• Ensure the security incident management process are executed properly by all parties by tracking the resolution process and making sure the known issues are addressed according to risk management methodology
• Lead the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved
• Verify and continuously improve the Recovery Process performed during or after a security incident to ensure that it meets business requirements and is effective and practical
• Manage the Major Security Incident Management process, under Global Head of Information Security,and guide/train different stakeholders, including SOC team, DIT leaders and technical managers
• Support the Disaster Recovery and Business Continuity framework, initiatives, and execution
• Improve Santen’s cybersecurity maturity level by increasing overall awareness and providing security advice/insights on technical requirements to DIT and non-DIT leaders (both Information Systems and Industrial Control Systems global leaders)
• Lead global programs & project implementations, planning the delivery of risk mitigation solutions and answering technical questions, reviewing current security measures, recommending enhancements, and identifying areas of security weakness
• Perform technical risk assessments (IT & OT) of all new global solutions and third parties, identify potential gaps and make sound recommendations for mitigating the risks on a global scale
• Implement the Internal Cybersecurity Framework to support the state-of-art technologies and Santen regulatory and organizational requirements (ISO 27001, NIST, Data Privacy Laws)
• Implement and improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps: Discovery, Reporting and Remediation
• Guide the technical teams (Global IT Infra, Regional IT Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated on a timely manner, perform the escalations on time
• Manage the global vulnerability scan and penetration test exercises
• Manage the relationship and contracts with the external suppliers to obtain the best value for Santen
• Determine the need for covering the risks on company’s threat landscape and continuously search for the most strategic product & services to deliver the needed capabilities
• Keep track of changes in Santen’s business, threat landscape, product innovations and rebalance according to the risk appetite
• Build and maintain robust partnerships with market leaders (e.g. Gartner, ISF) to deter shared threats in our industry
• Build close partnerships and implement efficient internal processes with business and technical teams to detect and mitigate threats before they can be exploited
• Lead projects to implement new cybersecurity solutions or frameworks by developing business cases or conducting opportunity studies when needed
• Understand projects and services specificities in a multi locations environment with many remote management situations
• Ensure there are continuous PDCA (Plan, Do, Check and Action) cycles to improve services and solution in place in relations with KPIs/SLAs in place or to be developed
• Maintain good working relationships with internal stakeholders globally, especially with Digital & IT management
• Support his/her Digital & IT peers in charge of infrastructure, service operations and business applications to provide the right information security advice or solutions allowing them to provide the contributions to business domains
• Manage the suppliers by defining clear guidelines and objectives, relying on KPIs in coordination with the governance in place. Challenge organization and governance in place to verify the company is obtaining best value and that vendors are meeting our information security needs and requirements
• Develop and own the budget proposal for the cybersecurity domain in accordance with the company guidance on budget directions
• Ensure financial governance and efficient use of resources to meet business objectives.
• Execute the budget in respect of its objectives in terms of services to operate, solutions to deliver
• Perform ongoing security maturity level assessment to evaluate the effectiveness of security controls and explain the effectiveness to project teams, business stakeholders and senior management

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996