Role

Application Security Engineer – Cyber Security

Position Overview

The primary responsibility of the Application Security Engineer – Cyber Security is to support technologies that enable the companies’ cyber security goals and objectives, securing the confidentiality, integrity and availability of software and computer information systems. The role will serve as a security engineer for software development, supporting technologies that facilitate security of the software products and services. Additional key responsibilities of role include review of vulnerabilities identified by application security technologies and processes and provide the true positive results to the appropriate software development teams, and coordination with those teams to support their triage and remediation efforts for identified, valid vulnerabilities. All duties are to be performed in accordance with departmental and Client's policies, practices, and procedures.

Essential Duties & Responsibilities

• Act as a primary technical resource in development of a comprehensive security program to support various Software Development Lifecycles (SDLCs) and ensure that software developed in this SDLC is free of security vulnerabilities.

• Manage application security program across multiple SDLCs.

• Ensure cybersecurity requirements are met prior to production release.

• Triage potential vulnerabilities identified by application security program with context of application and related business knowledge.

• Maintain understanding of core functionality of supported software and first-party applications.

• Review and understand code from both business logic and technical standpoint.

• Coordinate with developers to prioritize and remediate identified true positive vulnerabilities.

• Collaborate with software development and quality assurance teams to ensure code is free from security defects.

• Communicate cybersecurity standards applicable to technology and coding workflows.

• Working with Application Security Engineers, optimize security with existing technologies and processes.

• Provide technical guidance to developers and engineers on cybersecurity best practices.

• Review performance of controls such as threat modeling, SCA, SAST, DAST, IAST, RASP, Secrets Scanning, Container Scanning, Misconfiguration Identification, Secure Code Review, CI/CD Pipeline Security, Deployment Environment Security.

• Coordinate with software development leadership, operations leadership, IT leadership, and cybersecurity leadership to integrate application security practices across departments.

• Actively seek ways to improve secure software development processes.

Additional Responsibilities:

• Develop and maintain security policies, standards, and guidelines.

• Conduct code analysis of first-party enterprise applications, through both manual and automation-enabled processes.

• Provide remediation guidance and recommendations to developers and administrators based on identified vulnerabilities and existing technology stack.

• Work with software development teams to prioritize and validate the urgency of mitigation of identified product vulnerabilities and security feature enhancement requests.

• Stay updated with the latest cybersecurity threats and trends and incorporate this knowledge into security architecture designs and practices.

• Conduct training and awareness programs to enhance the security posture of the organization. Participate in security audits and assist in regulatory compliance efforts.

• Work closely with IT operations and software development teams to ensure secure systems deployment and operations.

• Actively contribute to the organization’s cybersecurity strategy and roadmap.

Minimum Qualifications

• Outstanding collaboration and communication skills. •Any of the following combinations of education, professional experience, or both:

At least 2 years of experience in a relevant DevSecOps role and technical degree in computer / information science; or

At least 4 years of experience in a relevant DevSecOps role; or

At least 6 years of related field work experience, at least 1 year of which in a software development role, and at least 1 of which in a cyber security role and technical degree in computer / information science; or

At least 8 years of relevant field experience, at least 1 year of which in a software development role, and at least 1 year of which in a cyber security role.

•Demonstrated experience working with technical and non-technical staff.

•Knowledge of application security, software development, and cyber security concepts.

•Basic knowledge of a broad range of IT, Security, Controls and Service Delivery standards and frameworks for example, International Standards Organization (ISO) 27001, IT Infrastructure Library (ITIL), Control Objectives for IT (CoBIT), and Capability Maturity Model Integration (CMMI).

•Experience with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure or other cloud platforms, with experience in developing and implementing software.

•Experience developing software in various coding languages such as Java, C#, PHP, etc.

• Demonstrated knowledge of web applications, cyber security, and open-source technologies.

• Safety is an essential function of this job.

• Consistent and regular attendance is an essential function of this job.

•Ability to execute multiple projects and tasks under tight deadlines.

• Provide off-hours support on an infrequent, but as needed basis. (Potential shifts may run 24/7 dueto the needs of the business).

• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

• Must be able to work varied shifts, including nights, weekends, and holidays.

Additional Experience Recommended

• Professional certification in multiple programming languages (C#, .NET, Java, etc.) recommended.

• Professional certifications in cyber security (CISSP, OSCP, etc.) recommended.

• Experience with CI/CD and pipeline tools such as Jenkins, Docker, Kubernetes, and others.

• Knowledge of cloud platforms and services, with experience in cloud security.

• Experience with automated software and security testing tools and techniques.

• Ability to stay updated with the latest industry trends and advancements in cybersecurity.

• Understanding of enterprise software development practices.

• Experience working with software development teams.

• Experience identifying cybersecurity vulnerabilities and weaknesses in software.

• Experience reading, writing, and auditing software in multiple programming languages.

• Strong familiarity with common vulnerabilities and attack vectors.

• Knowledge of common encryption technologies (AES, PGP, SSH, SSL, etc.).

• Knowledge of common authentication protocols (OpenID Connect, OAUTH, SAML, RADIUS, LDAP, KERBEROS, etc.).

• Previous work experience as an Application/Product Security Engineer or Software Developer.

• Experience integrating security testing into an SDLC.

• Experience with incident response and handling methodologies.

• Experience with security technologies such as intrusion detection/prevention systems (IDS/IPS), firewalls, SIEM, etc.

• Physically access all areas of the property and drive areas with or without reasonable accommodation.

• Maintain composure under pressure and consistently meet deadlines with internal and external customers and contacts.

• Ability to interact appropriately and effectively with guests, management, other team members, and outside contacts.

• Work in a fast-paced and busy environment.

Overview

In SMC and Digital Sales, we have set out with the purpose to empower our customers through the unique value of the Microsoft cloud by building a globally led, digital-first scale organization aligned with partners. Dedicated to one of the fastest growing customer segments, the Small, Medium, Corporate (SMC) and Digital Sales organization is on pace to be Microsoft’s next $100 billion-dollar business - this is where you come in. As part of local subsidiaries or Digital Sales centers around the world, you will support a dedicated set of customers in identifying and achieving their business objectives through best-in-class digital engagement and partner co-selling. You will also have an opportunity to work cross-collaboratively while living our shared SMC and Digital Sales Culture priorities: Diversity and Inclusivity, Wellbeing, Sustainability, and Learning.

This opportunity will allow you to lead at the forefront of technology by growing the Security business across Asia with unique responsibilities for accelerated business growth.

This role is flexible, requires travel across the region and allows flexible work from home.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• The Security Solution Sales- Asia role is a senior role with responsibility for accelerating the growth of the Security solution area across the Asia region which includes the following Areas: Australia, New Zealand, ASEAN, Greater China, India, Japan & Korea.
• Work with the Security sales teams and partners to accelerate the growth of Security revenue and to take market share from our competitors.
• Collaborate with GPS to build a strong and capable Security partner ecosystem that can win against the competition.
• Drive joint territory planning and co-sell with key partners and work with GPS to build a consistent ROB cadence.
• Collaborate effectively with Security SE&O to enable our sellers and drive brand awareness for Microsoft Security with our customers and partners.
• Drive Solution Area performance excellence by working with Security Sales Excellence to implement T-13M sales execution rigor across the teams to drive healthy pipeline, Security revenue and partner performance and IAP metrics.
• Coach managers and sellers so they build strong Security specialization.
• Joint responsibility for Area Correction of Error plans.
• Provide sales and technical expertise and thought leadership to connect solutions with business impact.

Qualifications

• Bachelor’s degree in business, engineering AND 12+ years relevant work experience (e.g., Strategic Account Management, consulting, Technology Sales, corporate strategy, sales, business development, product management, project management, or related field) OR equivalent experience.
• Experience in Security Solutions is required.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Homebrew is looking for an Immersion Cooling Engineer (Data Centre) for our Hardware Division. You will be designing, building and maintaining our GPU clusters and infrastructure.

Responsibilities

• Design: Immersion Cooling System for the GPU cluster, together with hardware, networking and data centre engineers (e.g. coolant selection, immersion tanks, heat exchangers, supporting infra)
• Build: Installation and commissioning of new system (e.g. working with vendors, setting up and testing systems)
• Emergency & Operational Response: Respond to emergency incidents and develop clear SOPs for failures (e.g. pump failures, server shutdown and migration)
• Observability & Maintenance: Develop maintenance procedures for Immersion Cooling system (e.g. fluid maintenance), and system monitoring for optimisation (e.g. flow rates, equipment or vendor choices)
• Industry Research: Stay up-to-date with the latest developments in immersion cooling technology, best practices, and industry standards

Requirements

• Battle-hardened experience in data centre operations, cooling system design, or related field
• [Plus] Experience with Immersion Cooling
• Knowledge of data centre infrastructure management (DCIM) software and tools

A World of Opportunities Awaits

Company Name: Dusit Thani Laguna Singapore

Job Title: Security Officer

JOB DESCRIPTION

• Conduct investigations and gather evidence related to theft/fraud or lost items, noise complaints, assault complaints, food poisoning complaints, and other guest complaints and incidents.
• Conduct interviews with relevant parties in order to obtain statements and information related to incidents.
• Assist with and notify manager/supervisor, local police, or other appropriate individuals in the event of accidents, attacks, or other incidents.
• Complete incident reports to document all Security/Loss Prevention related incidents such as theft, accidents, physical hazards, and fire alarms.
• Handle business interruptions and complaints, such as suspicious individuals, civil disturbances or demonstrations, noise complaints, intoxicated individuals, etc.
• Escort any unwelcome persons from the property without interrupting the orderly flow of property operation.
• Defuse guest or employee disturbances/altercations, including summoning appropriate authorities if necessary, and documenting incident.
• Follow all company and safety and security policies and procedures; report accidents, injuries, and unsafe work conditions to manage.
• Maintain confidentiality of proprietary information; protect company assets.
• Welcome and acknowledge all guests according to company standards; anticipate and address guests’ service needs.
• Speak with others using clear and professional language; prepare and review written documents accurately and completely.
• Develop and maintain positive working relationships with others; support team to reach common goals; listen and respond appropriately to the concerns of other employees.
• Ensure adherence to quality expectations and standards.
• In addition, some states may have additional licensing/registration requirements to be considered for this position.
• Move, lift, carry, push, pull, and place objects weighing less than or equal to 10 pounds without assistance. Perform other reasonable job duties as requested by Supervisors, manager.

JOB REQUIREMENTS

• Minimum education of GCE "O" or "N" Level certificate
• At least 1 year working experience in a similar position in security & safety operations
• Possesses a valid security licence
• Applicants who have taken RTT will be prioritised
• First Aid and CPR+AED certified
• WSQ Respond to Fire and Hazmat Emergency certified
• 12 hour shift / Work 4 days

BENEFITS

• Company Transport Pick-up/Drop-off Provided
• Uniform Provided, Duty Meals, F&B Discount, Dental, and Medical
• Employee Room Rate, Learning & Development Opportunities, Staff Recognition Award

*Only shortlisted candidates will be notified.

We are looking for a Cyber Security - Technology Risk Management (TRM) Program Manager on a 12-month contract term (with the possibility of extension / conversion).

Roles & Responsibilities:

Governance, Risk & Compliance:

• Enhance organizational efficiency by realigning Risk and Control resources within T&I.
• Serve as the main contact for managing Risk and Control requests, both internal and external.
• Oversee key Risk and Control projects, establish a project management office, and handle the Risk and Control budget.
• Implement efficiency programs for Risk and Control and develop measurable performance metrics.

Strategy:

• Understand business and ITSR strategies.
• Facilitate management meetings to create and manage the Risk and Control strategy in line with regulations.
• Document and track progress on Risk and Control initiatives and gather feedback for necessary changes.

Steering & Governance Committees:

• Schedule and track Governance Committee papers related to ITSR.

Business:

• Understand Technology Risk and the three lines of defense in Technology and Innovation.

Processes:

• Ensure adherence to team and Governance & Change processes for Risk and Control.

Risk Management:

• Interpret risk data, identify issues, and ensure effective risk management.
• Create and manage the Risk and Control scorecard and implement a communication model for Risk and Control.

Regulatory & Business Conduct:

• Identify, escalate, and resolve risk and compliance issues collaboratively.

Communication and Engagement:

• Manage communications and engage with stakeholders.

Key Stakeholders:

• Build and maintain networks, manage external vendors, and align with senior stakeholders including the COO, Chief Risk Officer, Head of IT, Head of Information Security, CEO Office, and Legal & Compliance Department.

Requirements and Skills:

• Minimum of 7 years of relevant experience, including at least 4 years in the financial services sector.
• Preferred backgrounds include management consulting, technology, banking, or financial services.
• Hands-on experience with MAS regulatory guidelines (e.g., MAS TRM Notice & Guidelines, Outsourcing guidelines, Business Continuity) is required.
• Strong project management skills.
• Excellent communication, presentation, and organizational abilities; strong presentation skills are essential.
• Experience in a risk assessment and running monthly audits.
• Ability to clearly define problems, conceptualize solutions, and gain buy-in.
• Proven experience in leading and executing transformation initiatives.
• Skilled in developing and implementing change management and communication strategies to support transformation.
• Proficient in data gathering, modeling, and analysis to test hypotheses and identify opportunities.
• Independent, adaptable, proactive, and empathetic with exceptional analytical, communication, organizational, and problem-solving skills.
• Bachelor’s degree in Computer Science or Information Technology; specialization in Cybersecurity is preferred. Relevant certifications such as CISSP, SSCP, CISM, or CISA are advantageous.

Argyll Scott Consulting Pte Ltd

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Overview:

We are seeking a highly skilled and experienced Senior Security Engineer to join our team. This role focuses on significantly enhancing the security posture of our platform, ensuring a robust and resilient environment for our customers' financial data. The Senior Security Engineer will be responsible for implementing advanced security measures, conducting comprehensive security reviews, and performing thorough threat modeling and risk assessments.

Key Responsibilities:

• Security Tooling Enhancement:
  • Implement and configure industry-leading security tools to enhance the overall security infrastructure.
  • Continuously evaluate and integrate new security technologies to ensure state-of-the-art protection.
• Security Design Reviews:
  • Conduct detailed security design reviews of the platform's architecture and development processes.
  • Collaborate with development teams to incorporate security best practices and improve existing design methodologies.
• Threat Modeling and Risk Assessment:
  • Develop and maintain comprehensive threat models to identify potential security threats and vulnerabilities.
  • Perform risk assessments to evaluate the potential impact of identified threats and implement appropriate mitigation strategies.
• Third-Party Security Assessments:
  • Streamline and manage the process for conducting security assessments of third-party vendors and partners.
  • Ensure third-party integrations comply with the company’s security standards and policies.

Deliverables:

• Security Tooling Implementation:
  • Successful implementation and configuration of industry-leading security tools to enhance platform security.
• Improved Security Design Practices:
  • Establish and promote improved security design practices within the development process to ensure secure coding and architecture.
• Comprehensive Threat Models and Risk Assessments:
  • Develop and maintain detailed threat models and conduct risk assessments to identify and mitigate potential security risks.
• Streamlined Third-Party Security Assessments:
  • Create and manage a streamlined process for third-party security assessments, ensuring compliance and security of external partnerships.

Qualifications:

• Proven experience as a Security Engineer or similar role, with a focus on enhancing security postures for financial data platforms.
• Strong expertise in security tooling, design reviews, threat modeling, and risk assessment.
• Experience in conducting third-party security assessments and managing vendor security compliance.
• Excellent knowledge of security technologies, protocols, and best practices.
• Strong analytical and problem-solving skills, with the ability to identify and mitigate security threats effectively.
• Excellent communication and collaboration skills, with the ability to work closely with cross-functional teams.
• Bachelor’s degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are a plus.

StarFive is a leading provider of RISCV processors, platforms and solutions. StarFive products are widely used in smart home appliances, smart monitoring, industrial robots, traffic management, intelligent logistics, wearable devices, solid state storage, network communications and edge computing, etc.

We are intensively designing next generation high performance RISC-V CPU and RISC-V-based SoC chips. Talents who are passionate in research and development for future chips are welcomed to join us. Being part of this vibrant team, you can produce world class successful commercial chips supported by efficient software stacks.

Responsibilities：

• Maintain the automation of development environment (CI testing) and integrate the performance modelling and simulation platform and framework for micro-architecture explorations
• Investigate the current state of the art of CPUs and system on chip architecture including cache, on-chip interconnect, and memory hierarchy
• Implement simulation models for performance modelling of System-on-Chip components like caches, interconnect, and memory controllers
• Maintain, porting and cross-compile the benchmarks and master the sampling and trace-based simulation techniques
• Join the activity of micro-architectural exploration and data analysis for different benchmarks a
• Join the activity of architecture optimization for next generation of processor
• Develop automation strategies to maintain our core performance simulation models with strict quality gating and high-quality data reporting

Qualification：

• BS/MS with course work in Computer Architecture/Systems Engineering/Software Development
• Familiarity with software development and integration; usage of tools like JIRA, GIT, GERRIT, JENKINS
• Ability to setup benchmark suite (eg: Geekbench, SPEC), profile and gather performance results
• Having basic knowledge of modern processor architecture and cross-compilation environment (e.g. embedded system development)
• Able to program with assembly languages to enable benchmark porting and debugging
• Competent in C/C++ and scripting languages (Perl/Python)
• Skillful on working in Linux server environment
• Fresh Graduates are welcome
• Strong interpersonal skills, written and oral; good team player
• Curiosity to learn and execute at fast pace; communicate effectively with mentors and other team members

Title: Security Architect

Responsibilities:

• Spearhead the development of security reference architectures and design patterns to be adopted as enterprise standards and foundational elements. Advocate for the consistent use of standard security controls and design patterns organization-wide.
• Conduct thorough security architecture reviews for projects to ensure the integration of effective security controls aligned with reference designs.
• Identify design gaps in existing or new systems. Lead the evaluation, review, and recommendation of security controls to address identified risks.
• Provide security advisory to stakeholders at all levels, including both IT and Non-IT teams. Communicate security requirements for IT systems across various domains such as Data, Network, Workload, Cloud, and Application security.
• Drive innovation in cybersecurity systems architecture and design. Stay current with technology trends and engage with regulatory bodies, industry experts, and professional organizations.

Job requirements

• Degree in Information Security, Computer Science/Engineering, or a related discipline.
• Minimum 10 years of relevant security experience across various security domains.
• Security certifications such as CISSP, TOGAF, CCIE

Interested applicants, please do forward a copy of your updated CV to [email protected]

We apologise that only shortlisted candidates will be notified. Thank you

Eames Consulting Group (Singapore) Pte Ltd

EA Licence: 16S8091 | EA Registration Number: R1442954

Who are we?

We are the System Architecture Group at StarFive in Singapore. We focus on micro-architectural design, modeling, exploration and benchmarking. We help leadership and different stakeholders to make a data driven design decisions.

Job scope:

• CPU, cache, bus interconnection micro-architecture design and exploration
• Build the confidence performance model that can quantify the results with data-driven methodology
• Using existing benchmarks and writing own synthetic testing to correlate performance with RTL implementation
• Understand the HW/SW interface and requirements coming from SoC and software teams and independently working on possible modelling and simulation solutions

What are we looking for?

• BS/MS/PhD with relevant experience in Computer Architecture or strong interest in System Design/Computer Architecture
• Proficient in C/C++ and scripting languages (Perl/Python)
• Knowledge of one or more areas in computer architecture: CPU pipeline, cache hierarchy, interconnect network architectures etc
• Any prior experience in developing simulation-based performance models for SoC subsystems for architectural exploration and design tradeoffs evaluations is a plus
• Familiarity with Verilog/System Verilog/Chisel required but not mandatory
• Knowledge of RISC-V ISA is valuable but not mandatory
• Knowledge of assembly language in any of the ISA (X86, ARM etc) is valuable
• Any prior experience is bare metal environment for benchmarking using performance monitoring tools like perf etc is valuable
• Working knowledge of operating system (e.g. Linux) internals and/or compiler is preferred but not mandatory
• Ability to deliver high quality analysis and independently drive modeling tasks is preferred
• Curiosity and Enthusiasm to explore advance state of the art technologies with calculated risks
• Strong interpersonal skills, written and oral; good team player

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Who are we?

We are the System Architecture Group at StarFive in Singapore. We focus on micro-architectural design, modeling, exploration and benchmarking. We help leadership and different stakeholders to make a data driven design decisions.

Job scope:

• Understand the mainstream GPGPU architecture and their design choice
• Using existing ML or HPC background to propose the possible architecture improvements and exploration possibilities
• Can deeply understand the programming model of each architecture and its impacts and influence on eco-system
• Maintain and build the confidence model for both verifying with software tools and profiling the performance so at to understand different architecture design choices

What are we looking for?

• BS/MS/PhD with relevant experience in Domain Specific Accelerators/Machine Learning
• Knowledge of different machine learning algorithms (eg: CNN, LSTM, DNN, GNN etc) and their execution model in GPU/CPU; understanding of parallel execution models like SIMD, SIMT etc
• Familiarity with GPGPU (eg: CUDA/OpenCL) programming models is preferred but not mandatory
• Any prior experience in developing simulation-based performance models for domain specific accelerators
• Proficient in C/C++ and scripting languages (Perl/Python)
• Knowledge in one or more AI programming frameworks – Tensorflow, Pytorch etc
• Knowledge of RISC-V ISA is valuable but not mandatory
• Ability to deliver high quality analysis/results and independently drive modeling tasks is preferred
• Curiosity and Enthusiasm to explore advance state of the art technologies with calculated risks
• Strong interpersonal skills, written and oral; good team player

StarFive is a leading provider of RISCV processors, platforms and solutions. StarFive products are widely used in smart home appliances, smart monitoring, industrial robots, traffic management, intelligent logistics, wearable devices, solid state storage, network communications and edge computing, etc.

We are intensively designing next generation high performance RISC-V CPU and RISC-V-based SoC chips. Talents who are passionate in research and development for future chips are welcomed to join us. Being part of this vibrant team, you can produce world class successful commercial chips supported by efficient software stacks.

Responsibilities：

• Lead the compiler design/implementation for RISC-V processors
• Develop and maintain compilation target for RISCV V-Extension
• Optimize the compilers to generate high quality binaries for AI and multimedia applications
• Support custom instructions from architecture team
• Write patents

Qualification：

• Bachelor’s degree and above in Computer Science or related fields
• Experienced in compiler frameworks like LLVM and GCC
• Competent in with C/C++ language
• Familiar with computer architecture
• Familiar with assembly language
• Strong learning capability, good communication and collaboration skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.
• Key Requirements:
• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Position: Chief Information Security Officer

Job Description

Developing and implementing secure processes and systems used to prevent, detect, mitigate, and recover from cyberattacks

Educating and managing technology risk in collaboration with business leaders

Building and driving a cybersecurity strategy and framework, with initiatives to secure the organization's cyber and technology assets

Continuously evaluating and managing the cyber and technology risk posture of the organization

Implementing and managing the cyber governance, risk, and compliance (GRC) process

Reporting to the most senior levels of the organization (the CEO and board of directors, or equivalent)

Developing, justifying, and evaluating cybersecurity investments

Developing and implementing ongoing security awareness training and education for users

Leading cybersecurity operations and implementing disaster recovery protocols and business continuity plans with business resilience in mind

Requirements and qualifications

Relevent Cybersecurity licences or qualifications

Technical Skills

In-depth knowledge of information security

Experience with security technologies and tools

Understanding of network security, application security, and data protection principles

Soft Skills

Strong leadership and management abilities.

Excellent communication and interpersonal skills.

Ability to work under pressure and handle stressful situations.

Strategic thinking and problem-solving skills.

Job Description

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Skills Required

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.

EA Number: 11C4879

VP - Security by Design Architect, Technology Risk

Responsible for incorporating security measures into the architecture of the client’s systems and applications from the initial design phase. This role involves ensuring that security is a foundational element, rather than an afterthought, in the development and implementation of IT systems.

Responsibilities:

Threat Modelling:

• Identifying potential security threats and vulnerabilities early in the design process.
• Evaluate existing system security postures and recommend enhancements

Security Requirements:

• Defining and integrating security requirements into the system's architecture.
• End-to-end accountability of the overall security design of financial services projects.
• Collaborate with project teams to ensure that security requirements are considered and assessed.

Best Practices:

• Ensuring adherence to security best practices and standards throughout the development lifecycle.
• Test and verify that the security requirements are properly implemented.
• Provide expert guidance and support to development teams on secure coding practices, security testing, and vulnerability management.

Risk Management:

• Assessing and mitigating risks associated with the system's design.

Collaboration:

• Working with development, operations, and other teams to ensure security is integrated across all stages.

Compliance:

• Ensuring that the system complies with relevant regulations and industry standards.

By focusing on security from the beginning, the Security by Design Architect helps create systems that are inherently more secure and resilient against potential threats.

Requirements:

• Degree in Computer Science, Computer Engineering or Information Security related fields.
• 5+ years’ experience in security engineering, with deep expertise in one or more security domains.
• Broad appreciation of overall security architecture and how various security technologies interact to achieve overall security defence.
• Familiarity with security engineering and design principles across applications, databases, infrastructure and network
• At least 3 years’ experience in Application Security.
• CISSP, CISM, CCSP, CISA, or AWS Certified Security
• Experience in Cloud Security is a must.
• Familiarity with MAS TRM, PCI DSS and PCI PTS is a must.
• Familiarity with DevSecOps and Shift-Left security principles.
• On top of developments in cyber threats and advances in security protection

Compensation:

• Competitive salary
• Excellent benefits

Apply now to be considered for this excellent opportunity.

SLOANE SHOREY

Compliance | Risk | Resilience

Sloane Shorey Consulting is a recruitment firm specialising in compliance, risk, and resilience across Asia and the Middle East. Since 2017, we have partnered with banking and financial services companies, multinational and local corporations, and consulting firms on hiring.

Sloane Shorey is a Ministry of Manpower Licensed Employment Agency: EA License 20S0307

Job Description

• Supervise building CCTV & security system.

• Ensure compliance with CCTV Code & Security requirements.

• Conduct daily check on installation works.

• Conduct coordination work with other trades.

• Assure compliance to code of practice.

• Understand of CCTV & security system operation & function.

• Prepare & submit permit to work application.

• Assist operation & construction team on site activities related to Fire & security system.

• Other ad-hoc duties as assigned.

Requirements

· Degree in Construction Facility Management or equivalent, recognized universities under the BCA.

· Possess excellent interpersonal skills and communication skills and a leader to influence.

· Efficient, Good Analytical Skills and Able to work independently.

· Experience in a marine construction company is favorable.

· Proficient in Microsoft Office, MS Project and AutoCAD.

· Able to start work immediately or short notice.

At Pontiac Land, our Human Capital Vision is:

Each individual valued, respected and contributing.

Each team cohesive, learning and aligned.

Each leader serving, coaching and modelling excellence.

Exciting benefits and opportunities await talents who join us! We seek to offer the following:

• A nurturing and team-based culture, with structured training and career development opportunities
• Comprehensive medical coverage, health and wellness programmes and Flexible Benefits for customized suite of benefits
• Unique schemes and benefits and inclusive of employee rates at our hotels and retail mall, subsidized lunch, birthday leave, examination leave and volunteer leave.

Job Responsibilities

• Perform Patrolling duties for office towers/shopping malls/residential buildings
• Respond to emergencies which includes but not limit to lift traps, power failure, fire/security alarm activation
• Respond promptly to tenants and guests’ feedback and request
• Report of all security breaches and building defects
• Conduct routine checks to ensure workplace compliance to WSH and other legal requirements, Code of Practice and Singapore standards
• Provide high service standard to tenants and guests towards achieving customer delight

Job Requirements

• Minimum 1 year of related experience as a security officer (Candidates with relevant experience could be considered for a Senior role)
• Candidates with more experience will be considered for senior role
• Valid SIRD Security Licence is required
• 8 hours rotating shift/6 days’ work week

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

· Perform analysis, prioritization and classification of risk.

· Handle day-to-day security vulnerability assessments and operational request.

· Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.

· Proactive monitoring of remediation plans and progress.

· Schedule security checks in accordance with reporting schedules.

· Continuous enhancement of existing security vulnerability assessment process.

· Verifies security controls are implemented accordingly.

· Review security incident reports

· Evaluate the type and severity of security events

· Assist with establishing procedures for handling detected security events

· Create final incident report detailing the events of the incident

· Prepare periodic status reports for presentation to management

· At least 5 year working experience in vulnerability management and incident response.

· Familiar with at least one vulnerability scanner.

· Strong analytical skills and ability to work independently.

· Good team player as well as strong communications skills with stakeholders at all levels

· Possess QISP, CEH, CISSP and/or related security certification.

· Experience in healthcare industry is an added advantage.

· Degree in Computer Science, Engineering or equivalent.

Company’s Profile
Julian Grey's client specialises in offering digital transformation solutions, assisting their clients to break through into the digital space with cutting-edge technology in Cloud, DevOps, Cyber Security & Analytics.

Responsibilities

• Analyse and identify security gaps in existing data centers and cloud infrastructures.
• Perform risk assessments to mitigate security risks in information systems and processes.
• Lead system security testing to ensure all security requirements are met before deployment.
• Work with development and engineering teams to integrate security into the SDLC.
• Develop and maintain security policies to comply with industry standards and regulations.
• Advise on security architecture and design to ensure robust protection mechanisms.
• Manage vulnerability assessments and penetration testing to identify and address security weaknesses.
• Create and deliver security training programs for employees and stakeholders.
• Stay updated on emerging security threats and technologies, recommending improvements.
• Assist in developing and implementing incident response plans and participate in investigation.

Requirements

• Expertise in information security, including risk assessment, system security acceptance testing, security-by-design principles, professional certifications (CISSP, CISM), and deep knowledge of security frameworks like ISO 27001, NIST, CIS Controls, and the Cybersecurity Act of 2018.
• Proficient in security tools and technologies (SIEM, IDS/IPS, firewalls, endpoint protection, Wazuh), technological architectures (on-premises data centers and cloud), and capable of explaining complex security concepts to non-technical stakeholders.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Interested Applicants

Please WA Bryan Tay @ 97559161
Shortlisted candidates will be notified

Bryan Tay
Reg No. R23112463
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Responsibilities:

1. Establish and Enhance Cloud Security Compliance:

• Build and improve the cloud security and compliance framework.
• Research industry security products and compliance practices and apply them to the company's cloud services.

2. Respond to Online Security Issues:

• Provide professional solutions and security recommendations to address online security incidents.
• Ensure timely resolution of security events.

3. Track Industry Security Cases:

• Study the technical principles behind industry security incidents.
• Internally share knowledge related to security cases.

4. Conduct Regular Security Audits:

• Engage in red team-blue team exercises with the testing team.
• Ensure the overall security of the system.

Requirements:

• Education: Bachelor's degree or higher.
• Relevant Majors: Background in Electronics, Telecommunications, Computer Science, Network Engineering, or Software Engineering.
• Programming Language Skills: Proficiency in at least one of Java, Python, or Go, ability to solve problems through programming.
• Security Experience: Prior experience in web application security, network security, container security, or data security is advantageous.
• Soft Skills: Strong logical thinking and rigorous problem-solving abilities, excellent learning capacity, communication skills, and teamwork spirit, passion for technology and a desire to contribute to technical advancements.
• Ability to speak and write in Chinese as the incumbent requires to liaise with the China HQ counterparts/personnel for work or project related matters

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including policies, procedures, and standards that align with industry best practices and regulatory requirements.

- Conduct regular security risk assessments to identify vulnerabilities and risks, and work with relevant departments to develop mitigation strategies.

- Provide guidance and support for compliance with data protection laws, regulations, and standards (e.g., GDPR, ISO 27001, SOC 2).

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management.

- Develop and lead security awareness training programs to educate employees on security best practices and emerging threats.

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

Minimum Qualifications

- Bachelor's or master's degree in Information Security, Computer Science, Information Technology, or a related field.

- Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

- A minimum of 5 years of experience in information security, risk management, or IT governance, with at least 2 years in a leadership role.

- Strong knowledge of information security principles, frameworks (e.g., NIST, ISO 27001), and regulations (e.g., GDPR, CCPA).

- Experience with security risk assessment methodologies and tools.

- Familiarity with data analysis tools and software to support risk analysis and reporting efforts, ensuring data-driven decision-making in the risk management process.

- Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

- Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

- Strong analytical and problem-solving skills.

- Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.