Description for Technical Information Security Officer

1. Provide guidance to Business Services Group (BSG) in ensuring that projects/systems comply with security policies and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the product lifecycle

2. Perform adequate risk management, including identification, assessment and provide treatment of security risks associated with systems handled by Business Services Group. Risk assessment must be performed in accordance with the organization’s cybersecurity risk management framework

3. Provide guidance to Business Services Group related to vulnerability assessments, source code review and penetration tests so that remediation actions can be undertaken by Business Services Group within the agreed timelines

4. Provide security consulting and advisory to Business Services Group

5. Review RFP proposal compliance with security requirements

6. Review architecture design developed by Enterprise/Solution/Security Architect

7. Perform cybersecurity assurance activities across the different stages of SDLC

8. Evaluate risks related to third-party vendor and products and identify mitigating measures

9. Perform independent assessments of the technical security controls implemented within the projects/systems to determine the overall effectiveness of the controls

Qualification and Requirement

1. Degree in Computer Science, Information Systems, Engineering or equivalent

2. At least 10 years of IT security experience in areas of security governance, risk management, application security design, security project management, security operation, cloud security technologies

3. Strong risk management principles, risk articulation skills, cloud technologies, network security, data protection

4. Knowledge of cloud platforms such as AWS, Azure or Google cloud is desirable

5. Professional security certification is preferable, such as CISSP, CISM, CISA, CCSP or other similar security certifications

6. Self-motivated with the ability to work independently and as a team member with minimal direction

7. Strong interpersonal and stakeholder management skills

8. Good written and communication skills

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

about the role

The Information Security Engineer, APAC role is responsible for designing, deploying, and maintaining various security solutions in the APAC region to address the Bank’s security requirements. Reporting to the Regional Chief Information Security Officer, APAC, this is a vital role for the Bank.

• Assist the Regional Chief Information Security Officer, APAC to drive the Bank’s security transformation agenda including implementation of security strategy and technology solutions for the region.
• Ensure that the Bank’s data and infrastructure are protected by enabling the necessary security controls
• Develop a cybersecurity deployment plan such as Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) implementation.
• Develop technical solutions to automate repeatable tasks for better efficiency and further product innovation
• Configure and troubleshoot the Bank’s security systems.
• Maintain all security solution design documents, processes, and procedures and report on metrics to demonstrate effective management of the solutions.
• Review the Bank’s systems to ensure that they have met the mandatory security requirements.
• Work with the third party vendors to maintain and enhance capability and functionality of the Bank’s security products
• Lead the responses to cybersecurity incidents.
• Continuously assess cyberattack surface and exposure to protect the Bank’s sensitive information.

skills and experience required

• Minimum of 12 years' experience in information security related tasks.
• Strong knowledge in security solutions at various levels - application, infrastructure, and data.
• Experience in building, maintaining and operating various security tools.
• Hands on experience in various security systems such as firewalls, EDR / XDR, authentication systems, log management, content filtering, and web proxies.
• Good understanding of various security frameworks such as MITRE ATT&CK and NIST Cybersecurity Framework
• Professional certifications such as CISSP, CISA, and CISM.
• Good understanding of the cloud environment.
• Familiarity in scripting or automation is an advantage
• Experience in financial services or regulated environments is preferred

To apply online please use the apply function, alternatively you may contact Chloe Chen at chloe.chen(@)randstad.com.sg. (EA: 94C3609 /R1768253)

About the role

The position is part of our Cyber Fusion Center’s managed support and operations team and is responsible for day-to-day support and operations of assigned cybersecurity solutions and platforms.

Responsibilities:

• Provide support for assigned security platforms, including onsite troubleshooting, root cause analysis, prepare and present incident reports.

• Provide security knowledge in security architecture recommendation and perform the necessary best configuration.

• Provide collaboration efforts in assisting the SOC teams in incident investigation.

• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.

• Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.

• Ensure that daily operations and tasks are properly completed and followed up.

• Escalate issues and liaise with subject matter experts as required to resolve issues.

• Support after-office hours activities and standby requirements as necessary.

• Support shift rotation as necessary.

• Prepare activities report and work documentation.

Candidate requirements:

• Educational background in Information Systems, Cybersecurity or related disciplines.

• 2-5 years of hands-on engineering, support or operations experience in Infrastructure, Network or Security Tools

• Broad understanding of systems, network infrastructure; working experience with databases, LDAP and directory services, application servers, operating systems, and network infrastructure.

• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Shell, PowerShell, Windows Scripting, Windows console programs, .Net, Yara, Regular expression) will be a plus.

• Certificates such as ITIL Foundations, Microsoft MCSA, CISA, CISSP will be a plus.

• Ability to work independently, under the general guidance.

• Support after office hour and during weekend/public holiday

We are looking for an experienced IT Security Engineer for one of our global clients who is an established and leading Maritime service provider. This person will be responsible for providing day-to-day IT Security support for internal stakeholders within the organization. The ideal candidate would have at least 2 years of hands-on experience working in a security operation, incident response, vulnerability management or related field. Work experience for AWS and Oracle Cloud Infrastructure will be an advantage.

Responsibilities:

· Manage communications and working relationships between IT and other departments within the organization as well as multiple outside IT service providers.

· Design, develop, implement, and coordinate policies and procedures for all areas of information technology to assure data accuracy, security, legal and regulatory compliance; assure compliance with Standard.

· Implement, maintain, and ensure maximum uptime for IT systems and user support.

· Hands-on experience on IT supports and perform the hardware and software installation and maintenance.

· Support the IT infrastructure with a focus on Cloud server and in-house server in office.

· Maintain the telecommunication and data communication links, network routing and switching, firewall and security, SAN storage, server virtualization and OS maintenance, database management, end-point protections.

· Maintain IT Operations & system/network appliance, IT Administration & Resource Planning.

· Business Recovery, Security Risk & Operational Risk, Project Management, PDPA policy,
Documentation & Work Procedure Manual to ensure compliance and regulatory requirements and industry standards.

· Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring
dashboard for any abnormalities.

· Carry out any additional responsibilities assigned by the Supervisor.

Job Requirement:

· Diploma/degree in computer studies

· 2 years of experience working in a security operation, incident response, vulnerability management or related field.

· Demonstrated experience in network security, server security, endpoint security, web security etc.

· Technical knowledge Network switches, servers, PCs, printers, and other equipment all fall under the IT infrastructure engineers purview.

· Have the knowledge to manage VLANs on wired/wireless networks.

· Strong knowledge of security principles, technologies, and industry best practices.

· Experience with log analysis, malware analysis, and network traffic analysis.

· Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues, and develop effective solutions.

· Work experience for Oracle Cloud Infrastructure and AWS would be advantageous.

· Have teamwork spirit, weekend support are required when needed.

· Be fluent in English listening, speaking, reading, and writing.

Interested applicants, please send your CV to [email protected]

We regret that only shortlisted candidates will be notified.

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

About the role

The position is part of part of our managed operations team and is responsible for day-to-day management and operations of assigned cybersecurity solutions and platforms in Privilege Access Management.

Responsibilities:

Lead and drive PAM operations, providing support for assigned projects, including onsite troubleshooting, root cause analysis, incident reports etc.

Provide guidance to team members, and be responsible in knowledge transfer and training

Ensure adherence to Security Controls, Policies and Standards in place

Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.

Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.

Ensure that daily operations and tasks are properly completed or followed up.

Engagement and communication with stakeholders across departments/units to ensure PAM operational effectiveness.

Escalate issues and liaise with subject matter experts as required to resolve issues.

Support After-office hours activities and standby requirements as necessary.

Prepare activities report and documentation.

Requirement:

Educational background in Information Systems, Cybersecurity or related disciplines.

At least 3 years of hands-on engineering or operations experience with Privilege Identity Management (PAM)

Broad understanding of systems, network infrastructure; working experience with databases, LDAP and directory services, application servers, operating systems, and network infrastructure.

Knowledge in one or more general-purpose programming languages (Perl, Python, PHP, Shell, PowerShell, Windows Scripting, Windows console programs, .Net or Java) will be a plus.

Certificates such as ITIL Foundations, Microsoft MCSA, CISA, CISSP will be a plus.

Ability to work independently, under the general guidance.

Support after office hour and during weekend/public holiday.

• Execute operational tasks for network security solutions, including network firewalls, intrusion prevention systems (IPS), proxies and web application firewalls (WAF).
• Monitor the performance and maintain network security solutions.
• Utilise various tools and solutions to troubleshoot and diagnose network problems.
• Identify and provide insight on WAF violations.
• Post office-hours activation for support and troubleshooting.
• Perform data tabulation and report extraction.
• Configure and install various network devices and services (e.g., routers, switches, firewalls, load balancers, VPN, QoS)
• Perform network maintenance and system upgrades including service packs, patches, hot fixes and security configurations
• Monitor performance and ensure system availability and reliability
• Monitor system resource utilization, trending, and capacity planning
• Provide Level-2/3 support and troubleshooting to resolve issues
• Work within established configuration and change management policies to ensure awareness, approval and success of changes made to the network infrastructure
• Select and implement security tools, policies, and procedures in conjunction with the company’s security team
• Liaise with vendors and other IT personnel for problem resolution
• Handle request and perform necessary network configuration.
• Coordinate the troubleshooting and incident root cause analysis for the managed equipment. It might include troubleshooting with other parties
• Review new release of vulnerabilities and provide recommendation to HDB. It includes obtaining of firmware, schedule and coordinate firmware patching with testers.

Requirements and skills

• Possess knowledge on networking protocols and technologies like TCP/IP, VLANs, VPNs, and routing/switching.
• Possess fundamental application security knowledge like interpretation of HTTP response status codes and WAF violations. Higher proficiency in application security knowledge to advice on remediation measures is an added advantage, but not mandatory.
• Proficient with network equipment from vendors like Palo Alto, Check Point, Trend Micro, Fortinet and F5.
• Experience in solutions that supports the primary job tasks, like Network Performance Monitoring (NPM) and Security Information and Event Management (SIEM).
• Understanding of network security best practices and tools.
• Strong problem-solving skills and ability to work under pressure. Willingness to learn.
• Fundamental skills on Microsoft Office products like Word and Excel.
• Additional certifications like CCNA, CCNP or product (with reference to products listed above) certifications are a plus.

• Management of Cloud infrastructure set up & implementation projects.
• Serve as the Subject Matter Expert (SME) in the development of cloud infrastructure solutions.
• Provide detailed designs on the IT projects assigned ensuring right architecture and functionality.
• Support new technology implementation.
• Highly technical and analytical, possess system thinking skill and the ability to visualize how different parts interact with the whole
• Able to support technical decisions with rationale or data points.
• Participate in Cloud Migrations for VMs using tools like Azure Site Recovery, Azure Migrate with more than 30 VMs migration or Databases would be preferred
• Apply technical knowledge, hands-on and customer insights to operate and administrate a cloud infrastructure
• Ensure all configuration conforms to high levels of performance, security, scalability, maintainability, and appropriate reusability and reliability upon deployment, aligning to design documentation specifications
• Ability to codify or implement/deploy configurations with the principles of automation by default in new projects with proper documentations
• Ability to codify or maintain cloud systems in an automated fashion using tools like Ansible, Terraform etc with proper documentation
• Collaborate with team members to engage clients in operational meetings, discussions, process betterment and contribute to optimisations for the client’s environment
• Maintain technical skills, certifications and knowledge of market trends and competitive insights; collaborate and share with the technical community specifically in the cloud space
• Ability to manage issues with proper resolution/documentation and SLAs is required for this role

• Review contract documents, perform measurements, and promptly prepare Bill of Quantities.
• Collaborate closely with the Project Team to submit progress reports, progress claims, variation orders, final accounts, and other relevant documents.

Requirements:

• Diploma in Quantity Surveying or equivalent
• At least 2 years of work experience in construction or security system industry.
• Proficient in AutoCAD and ELV systems.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R24120303

FIND YOUR 'BETTER' AT AIA

We don’t simply believe in being ‘The Best’. We believe in better - because there’s no limit to how far ‘better’ can take us.

We believe in empowering every one of our people to find their 'better' - in the work they do, the career they build, the life they live and the difference they make. So that together we can support even more people - including our own - to live Healthier, Longer, Better Lives.

If you believe in better, we’d love to hear from you.

About the Role

This position is responsible for to providing consultation, professional advice, awareness/training on information security and key technology risk matters relating to the abovementioned geographical responsibilities, thereby contributing to building a strong information security risk culture cantered on people, processes and technology. The role will also coordinate regular governance engagements and being involved in technology-related audit engagements for AIA Singapore, and exercise professional judgment and assessments on the material to be provided by the various process and control owners for the audits.

What you will do:

Information Security & Technology Risk Metrics

• Support the alignment of various information security and technology risk metrics for management reporting and escalation – this includes reporting/escalation of outstanding or overdue action required from penetration tests, vulnerability assessments, security incidents, policy/standards deviations, third party security assessments, etc.
• Drive the monthly Technology Security Governance forum focusing on highlighting metrics impacting the Company’s cybersecurity metrics.
• Collate and review collated metrics and material relating to the Operational Risk Management forums, Key Risk Indicators and Key Risk Tolerance Indicators for cybersecurity and technology processes.

Risk Assessments, Audit and Regulatory Management

• Support Technology related audit engagements with statutory auditor and regulator, following up with relevant parties to ensure all issues identified are remediated.
• Support the delivery of annual IT risk and control self-assessment exercises according to MAS regulatory notices/guidelines, internal enterprise IT policies, and standards.

Policy, Standards and Exception Management

• Communicate material changes to internal policies/standards to collaborators. Facilitate risk evaluations and exception handling to deviations from the policies, standards and regulatory requirements.

What you should have:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• 5 years or more of relevant work experience, including at least 2 years of experience in IT audit, risk management, compliance and/or governance roles, with particular expertise and knowledge of governance reporting of technology risk issues and cybersecurity.
• Rich working experience from financial industry, big tech firms or established auditing firms will be considered favorably.
• Experience and exposure in information security standards such as ISO27001 and PCIDSS will be an advantage.
• Preferably a holder of one or more of the following information security and audit qualifications: Security+ and CEH.
• Candidates with advanced level qualifications such as CISSP, CISA, CRISC, CCSP will have added advantage.
• Good Communication, Coordination and Interpersonal Skills. Good experience working alongside and opposite external auditors as well as regulatory bodies Meticulous and analytical traits Strong programme/Project Management skills High drive, energy and good demeanor over teamwork High levels of professional integrity.
• Eagerness to learn and develop one’s knowledge in information security and computing, especially on emerging computing fields such as cloud security, DevSecOps, etc.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

Security Concierge

Chin Swee Rd (near Chinatown MRT)

6 days (8 hrs/day including 45 mins break)

Shift hours: 7am – 3pm; 3pm – 11pm; 11pm – 7am

$1800 - $2300

Responsibilities:

• Manning of fire command center
• Patrolling duties of all areas in and surrounding Hotel
• Perform escort duties, traffic and crowd control management.
• Assisting guest with luggage during arrival and departure
• Performs other related tasks

Requirements:

• Must possess valid Private Security Identification Card and WSQ certification.
• Able to perform 3 rotating shifts, including weekend and public holidays.

Lee Wan Ling | Reg No: R23116154

THE SUPREME HR ADVISORY PTE LTD | EA No: 14C7279

Location : Orchard , Singapore

Industry : Retail

Working hours : 3 Different rotating shifts inclusive of weekends and PH : 8am-5pm ; 1pm-10pm & 930pm-930am

Benefits: Basic + AWS + Variable bonuses

· Assist in the supervision of in-house security personnel and Agency guard services

· Performs rotating & night shift-duty to provide security and patrol company premises according to specified procedures

· Inspection & monitoring of security passes & goods at selected locations

· Render assistance in emergencies & investigations

· Possess a WSQ Certificate in Security Operations

• Minimum 2 years of security experience

• Instrumentation of measurement and detection equipment for military and homeland security.
• Oversee post-sales delivery of equipment, conduct scheduled maintenance, and conduct diagnostic analyses for troubleshooting and repair tasks.

Requirements:

• Higher Nitec in Electrical & Electronics Engineering or equivalent.
• At least 2 years of working experience

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Job Responsibilities:

• Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
• Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
• Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
• Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
• Enforce IT Security Policy compliance which includes assessment of security posture of the organisation’s IT assets as well as recommending appropriate measures and controls to mitigate security threats within the organisation.
• Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
• Facilitate, plan and conduct Cyber Security Awareness Training, including Cyber Security Exercises.
• Be on standby for any critical security alerts and incident management after office hours.

Job Requirements:

• Degree in Information Technology or Information Security or related discipline
• Minimum 3 years of working experience in Cyber Security field.
• Good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Familiar with ISO27001 and/or PCI Data Security Standards.
• Hands-on experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.
• Familiar with modernised A.I and SecOps tools.
• Possess good project management and report writing skills.
• Security Screening will be required for potential candidates.

To apply, please visit www.gmprecruit.com and search for Job Reference: 24131

To learn more about this opportunity, please contact Yi Fang at [email protected]

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Law Yi Fang | Registration No: R1113115

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Review contract documents, perform measurements, and promptly prepare Bill of Quantities.
• Collaborate closely with the Project Team to submit progress reports, progress claims, variation orders, final accounts, and other relevant documents.

Requirements:

• Diploma in Quantity Surveying or equivalent
• At least 2 years of work experience in construction or security system industry.
• Proficient in AutoCAD and ELV systems.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R24120303

Funding Societies | Modalku is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs), which is crowdfunded by individual and institutional investors. And here at Funding Societies | Modalku we live by our core values:

• Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
• Grow Relentlessly: Strive to become our best, most authentic selves.
• Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
• Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
• Focus on Impact: Create impact through bias for action and tangible results.

As a (Senior) Security Operations Engineer you will lead efforts to identify, analyse, evaluate, and act upon security risks and threats. The Engineer will carry out security threat identification, analysis, and remediation to ensure efficient and timely mitigation of the threats, as well as understand the threats' risks and potential business impacts. The engineer will act as an incident handler and manage the end-to-end workflow of security incidents based on the defined process. The engineer will also be involved in Splunk Cloud Administration (integrations, use case creation, health check) and the development of the team’s processes and continuous service improvement.

What will you do:

Incident Response

• Monitor and analyse security alerts and incidents to identify potential threats.
• Investigate security incidents promptly, utilising various tools and technologies.
• Coordinate and execute incident response activities in collaboration with cross-functional teams.
• Contain and mitigate security incidents to minimise impact and prevent further compromise.
• Develop and implement incident response plans to enhance organisational resilience.
• Create incident report in a timely manner for applicable incidents.

Log management and Integrations

• Configure and integrate log sources into splunk cloud and create dashboards for various use cases.
• Develop and maintain log management strategies to ensure the collection and indexing of relevant data.
• Troubleshoot and optimise log sources to enhance data accuracy and completeness.
• Integrate Splunk into the needed log sources, if needed.
• Collaborate with Managed Security Service Provider (MSSP) and other internal security teams to develop and finetune correlation rules and alerts.
• Implement best practices to enhance search and reporting capabilities.

Threat Intelligence

• Stay current with the latest cybersecurity threats and vulnerabilities.
• Review threat intelligence reports and perform the necessary follow-up actions.

Collaboration

• Collaborate with internal teams and external partners to share notable incidents and improvements.
• Participate in cross-functional training exercises and simulations.
• Mentor other team members about Security Operations work.

What we are looking for:

• Strong understanding of behavioural aspects of cybersecurity incidents.
• Excellent interpersonal, communication, and presentation skills.
• Professional working habits and quality-oriented.
• Willing to work with and report under the Security Operations Manager.
• Relevant certifications related to Splunk and Incident Response are a plus.

Within KPMG Singapore, the Information Technology Services (ITS) team is responsible for providing quality IT services and solutions internally to support the business and improve efficiency.

We invite highly motivated and customer-oriented individuals to join our ITS team. As an IT Security Manager, you will be required to work closely with our ITS team and Business stakeholders to maintain and ensure a secure IT operating environment and compliance to Global IT security standards.

Responsibilities:

• Support IT security operation for the firm
• Manage, implement, and operate security solutions
• Respond to and investigate cyber security incidents
• Assist in internal IT audits and compliance
• Design and maintain security dashboard
• Perform security assessment on new IT systems and change requests

The ideal candidate should possess:

• A Degree in IT, Computer Science, Cybersecurity, Information Communication Technology or other IT related qualifications.
• 8 to 10 years of relevant working experience in IT Security, with at least 2 years in a team lead position
• Experience in security governance, risk and compliance.
• Understanding of Cloud Security fundamentals, including cryptography and the shared responsibility model.
• Strong communication skills and an excellent team player

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities. As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth. One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.

WithSecure Consulting delivers research-led cyber security to defend organizations, society and people from real-world attacks and build resilience into their approach. Our people are a mix of technical and creative experts – diverse, talented, and passionate people – working tirelessly to help us advance the industry with new ways of thinking. They lead their own development, in and out of the office. They call the shots when it comes to building a place to call home in our organization.

We currently have an opening for a Senior Security Consultant within our Singapore office! Your role will involve carrying out attack simulations (Red Teaming), penetration testing and security assessments of typical and unique pieces of technology to sophisticated and progressive cloud-native systems.

We’d also love you to do some research to ensure your skills remain relevant in a fast paced world of security.

How you spend the rest of the time that’s not working with clients is your call. WithSecure has a commitment to research. Based on their skillset and inclination, our consultants get a percentage of their time dedicated to security research. Whether it is used to investigate new software, hardware or protocols, we encourage our team to push the boundaries of what is possible!

What we need:

We solve complex cyber-security problems on a daily basis and to do that requires an interesting mix of skills. To be successful at WithSecure and help our clients with their challenges we know you’ll need the following:

1. A passion for security! You love computers, you love security and you love hacking things and solving problems. If this wasn’t your job it would be your hobby. Technical excellence. You know your subject area, but you’ll also know what that subject area is without us needing to say.

2. Self-motivation You’re not going to be told what to do all the time. You are capable of figuring out what spending time working is of benefit to WithSecure and our clients and then run with it. With great freedom comes great responsibility and you also seek out guidance from those around you when you need it.

3. Communication skills - How can we add value to our clients organisations unless we can tell them what we did, how we did it, and how they can fix it? But communication also extends to sharing your knowledge with your colleagues and the wider industry. Our consultants work as a team and all members are expected to suggest and implement improvements to procedures and products based on their experience and interaction with clients. They are also encouraged to share their knowledge with the WithSecure team as part of the company’s information sharing culture.

What are we looking for?

• An ideal candidate will have; 4+ years of experience delivering hands-on cyber security consultancy projects with clients;
• Red Teaming. You were part of attack simulations in an operator role or even leading the engagement.
• WebApp Testing. You know your way around Burp, and can perform SQLi without using SQLmap.
• Infrastructure Testing. You understand that this doesn’t just mean running Nessus.
• Mobile App Testing. You are familiar with Frida and know how to tweak existing or write new Frida scripts.
• Experience in supporting the end-to-end delivery of large consultancy projects, with a team.
• Support pre-sales/scoping – a strong ability to understand and quantify client requirements, and propose consultative approaches that will deliver the best possible outcomes for the client.
• Familiarity with regional regulatory requirements for cyber security – including MAS’s TRM expectations – and how they apply to our roles.
• Mentor and grow the capabilities of fellow team members.
• Experience interfacing with non-technical, and technical stakeholders to deliver technical and non-technical information.
• Excellent verbal and written communication skills.
• Relevant practical certifications – valid and active OSCP and CREST (CRT, CCT-Inf or CCT-App)
• Additional advanced certifications pertaining to Cybersecurity would be a bonus (E.g: CCT-Inf/CCT-App/CCSAS, OSWE, OSEP, CRTO, AWS Security Speciality, Microsoft AZ-500, CKA, CKS)

What will you get from us

• Freedom – you will have the opportunity to define new ways of working how we engage with our customers, and how product value gets represented
• You will work together with experienced and enthusiastic colleagues, and within WithSecure you'll find some of the best minds in the cyber security industry
• A collaborative and supportive work environment with opportunities for career growth and advancement.
• Opportunities for continuous learning and development, including training, certification and research time.

Technical skills

• Architecture and Deployment
• Cisco/Aruba Switching /Routing & WLAN
• DDI, AAA/Cisco ISE
• Network Automation: Python & Ansible
• As Built, LLD, Testing & Acceptance Testing Documentation Skills
• ZScaler & Network Security
• Certification: CCNP/CCDA equivalent
• Meraki, Palo alto, f5 loadbalancer, UTP
• Experience in network operations/maintenance and passionate about providing troubleshooting support
• Knowledge on Internet Technologies (i.e. routing, switching and general network infrastructure), and technologies associated with the ISP market
• Strong analytical and problem-solving skills, and has a flair for dealing with technical and operational problems
• Experience in IT audit or CISA/CISM certified preferred or operational risk management and control self-assessment or prior experience in implementing security solution and information security governance
• Demonstrated knowledge of global cyber threats, threat actors and the tactics, techniques and procedures (TTPs) used by cyber adversaries, particularly as they relate to the financial sector.
• Experience with models for threat analysis, such as the Diamond Model, Cyber Kill Chain and MITRE ATT&CK framework.
• Enterprise Data Network (administration, patching, upgrade and migration activities), Design, Preparing of HLD/LLD, Implementation Team leading, Service Level management, demand, incident, change management.
• Provide network WAN/LAN design, implementation, consulting, Cisco, Aruba, Juniper
• Network audit Identify the gaps and suggest the remedial solution supporting in RFP/RFI response
• Experience in running operations with ITIL processes / Project Management - PMP

• Responsible for growing and maintaining sales revenue for assigned portfolio
• Learn products at a professional and technical level
• Create strategic relationship with partners and vendors

Requirements:

• Diploma in Information Security or equivalent
• At least 3 years of experience in managing Network Security / Electronic / IT products

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Reg No. R21100996

WithSecure Consulting delivers research-led cyber security to defend organizations, society and people from real-world attacks and build resilience into their approach. Our people are a mix of technical and creative experts – diverse, talented, and passionate people – working tirelessly to help us advance the industry with new ways of thinking. They lead their own development, in and out of the office. They call the shots when it comes to building a place to call home in our organization.

We currently have an opening for a Security Consultant within our Singapore office! Your role will involve carrying out penetration testing and security assessments of typical and unique pieces of technology to sophisticated and progressive cloud-native systems.

We’d also love you to do some research to ensure your skills remain relevant in a fast paced world of security.

How you spend the rest of the time that’s not working with clients is your call. WithSecure has a commitment to research. Based on their skillset and inclination, our consultants get a percentage of their time dedicated to security research. Whether it is used to investigate new software, hardware or protocols, we encourage our team to push the boundaries of what is possible!

What we need:

We solve complex cyber-security problems on a daily basis and to do that requires an interesting mix of skills. To be successful at WithSecure and help our clients with their challenges we know you’ll need the following:

1. A passion for security! You love computers, you love security and you love hacking things and solving problems. If this wasn’t your job it would be your hobby. Technical excellence. You know your subject area, but you’ll also know what that subject area is without us needing to say.

2. Self-motivation You’re not going to be told what to do all the time. You are capable of figuring out what spending time working is of benefit to WithSecure and our clients and then run with it. With great freedom comes great responsibility and you also seek out guidance from those around you when you need it.

3. Communication skills - How can we add value to our clients organisations unless we can tell them what we did, how we did it, and how they can fix it? But communication also extends to sharing your knowledge with your colleagues and the wider industry. Our consultants work as a team and all members are expected to suggest and implement improvements to procedures and products based on their experience and interaction with clients. They are also encouraged to share their knowledge with the WithSecure team as part of the company’s information sharing culture.

What are we looking for?

• An ideal candidate will have; 2-3+ years of experience delivering hands-on cyber security consultancy projects with clients;
• WebApp Testing. You know your way around Burp, and can perform SQLi without using SQLmap.
• Infrastructure Testing. You understand that this doesn’t just mean running Nessus.
• Mobile App Testing. You are familiar with Frida and know how to tweak existing or write new Frida scripts.
• Experience in supporting the end-to-end delivery of large consultancy projects, with a team.
• Support pre-sales/scoping – a strong ability to understand and quantify client requirements, and propose consultative approaches that will deliver the best possible outcomes for the client.
• Familiarity with regional regulatory requirements for cyber security – including MAS’s TRM expectations – and how they apply to our roles.
• Experience interfacing with non-technical, and technical stakeholders to deliver technical and non-technical information.
• Excellent verbal and written communication skills.
• Relevant practical certifications – valid and active OSCP and CREST (CRT)
• Additional advanced certifications pertaining to Cybersecurity would be a bonus (E.g: OSWE, OSEP, CRTO, AWS Security Speciality, Microsoft AZ-500)

What will you get from us

• Freedom – you will have the opportunity to define new ways of working how we engage with our customers, and how product value gets represented
• You will work together with experienced and enthusiastic colleagues, and within WithSecure you'll find some of the best minds in the cyber security industry
• A collaborative and supportive work environment with opportunities for career growth and advancement.
• Opportunities for continuous learning and development, including training, certification and research time.

Funding Societies | Modalku is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs), which is crowdfunded by individual and institutional investors. And here at Funding Societies | Modalku we live by our core values:

• Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
• Grow Relentlessly: Strive to become our best, most authentic selves.
• Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
• Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
• Focus on Impact: Create impact through bias for action and tangible results.

As a (Senior) Security Operations Engineer you will lead efforts to identify, analyse, evaluate, and act upon security risks and threats. The Engineer will carry out security threat identification, analysis, and remediation to ensure efficient and timely mitigation of the threats, as well as understand the threats' risks and potential business impacts. The engineer will act as an incident handler and manage the end-to-end workflow of security incidents based on the defined process. The engineer will also be involved in Splunk Cloud Administration (integrations, use case creation, health check) and the development of the team’s processes and continuous service improvement.

What will you do:

Incident Response

• Monitor and analyse security alerts and incidents to identify potential threats.
• Investigate security incidents promptly, utilising various tools and technologies.
• Coordinate and execute incident response activities in collaboration with cross-functional teams.
• Contain and mitigate security incidents to minimise impact and prevent further compromise.
• Develop and implement incident response plans to enhance organisational resilience.
• Create incident report in a timely manner for applicable incidents.

Log management and Integrations

• Configure and integrate log sources into splunk cloud and create dashboards for various use cases.
• Develop and maintain log management strategies to ensure the collection and indexing of relevant data.
• Troubleshoot and optimise log sources to enhance data accuracy and completeness.
• Integrate Splunk into the needed log sources, if needed.
• Collaborate with Managed Security Service Provider (MSSP) and other internal security teams to develop and finetune correlation rules and alerts.
• Implement best practices to enhance search and reporting capabilities.

Threat Intelligence

• Stay current with the latest cybersecurity threats and vulnerabilities.
• Review threat intelligence reports and perform the necessary follow-up actions.

Collaboration

• Collaborate with internal teams and external partners to share notable incidents and improvements.
• Participate in cross-functional training exercises and simulations.
• Mentor other team members about Security Operations work.

What we are looking for:

• Strong understanding of behavioural aspects of cybersecurity incidents.
• Excellent interpersonal, communication, and presentation skills.
• Professional working habits and quality-oriented.
• Willing to work with and report under the Security Operations Manager.
• Relevant certifications related to Splunk and Incident Response are a plus.

Representing a tech giant who is currently looking for a Security Application Engineer. You will manage and implement security measures in cloud environments. This role will be reporting directly to the Director of Security and Director of Engineering.

Responsibilities:

• Proficiency in C# and Ruby on Rails to comprehend and fortify the company's codebase.
• Creation and implementation of secure infrastructure on cloud platforms, emphasizing network configurations and access controls.
• Configuration and management of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools.
• Analysis of penetration test findings and collaboration with developers to enact corrective actions.
• Promotion of security-driven changes across the engineering team utilizing JIRA and scrum methodologies.
• Integration of security principles into design through the development of design patterns and shared libraries for engineers.
• Establishment of a comprehensive Security Software Development LifeCycle (SSDLC).
• Cooperation with development teams to integrate security seamlessly into the development process.
• Adoption of a DevSecOps approach to encourage collaboration among development, operations, and security teams. Additionally, providing guidance and training to engineers on security standards and internal security protocols.

Job Requirements:

• Min 5 to 8 years of relevant experience in rolling out secure coding practices and security engineering on cloud platforms.
• Possession of certifications such as CISSP, CEH, AWS Security Specialist, or OSCP.
• Proficiency in security frameworks like CIS v8 and security coding methodologies such as OWASP.
• Demonstrated experience in the implementation or maintenance of CIS v8 controls.
• Established track record in a security engineering capacity, specializing in cloud security and secure coding practices.
• Familiarity with C# and Ruby on Rails.
• Proficiency in both Windows and Linux operating systems.

If you're interested in this role, click 'apply now' ,or email [email protected] for a confidential discussion.