Principal Security Management Engineer

Job Description:

1. Developing and implementing security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.

2. Leading the design and implementation of security controls, including firewalls, intrusion detection systems, endpoint protection, and security information and event management (SIEM) systems.

3. Conducting regular security assessments and vulnerability scans to identify potential risks and vulnerabilities.

4. Responding to and investigating security incidents and breaches, and implementing measures to prevent future occurrences.

5. Managing and monitoring security systems and tools to detect and respond to security events and threats.

6. Collaborating with other IT teams to ensure security best practices are followed during system and software development.

7. Providing guidance and support to junior security operations engineers and other team members.

8. Staying up-to-date with the latest security trends, threats, and technologies, and making recommendations for improvement

9. Participating in incident response and disaster recovery planning and testing

Collaborating with external vendors and partners to ensure the security of third-party systems and services.

Requirements:

· Bachelor's degree in Computer Science, Information Systems, or related field.

· Strong technical knowledge and experience in security operations, network and systems administration, and incident response

· Experience with programming languages (Rust is a plus), Embedded Systems, Hardware peripherals.

· Familiarity with Operating System Security (e.g. Linux, Windows).

· Excellent problem-solving and analytical skills.

· 6+ years of professional experience in hardware and firmware security.

· Chinese speaking to liaise with Chinese counterparts

Interested applicants, Kindly email your updated resume to yvonne.chai@quesscorp.sg and we regret that only shortlisted candidates will be notified

Yvonne Chai Cheng Man

(EA License: 23115356 | UEN: 201715683K)

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

Job Purpose

A Red Team operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed “testing” team.

Team Duties

• Red Team Core (70%): primarily, as a Red Team operator, you will work closely with team members to deliver sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring Artificial Intelligence based applications such as Large Language Models (LLMs).
• Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests (“TTPs”) not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.
• Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Responsibilities
Seniority is determined by experience and demonstration of exceptional competencies including:

• Documenting and effectively publishing technology guidance and repeatable processes
• Mentoring peers in groups and individually
• Improving processes and incorporating advanced methodologies into engagements
• Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices

Knowledge and Experience

• University degree in Mathematics, Computer Science, Engineering, or related discipline
• 4 years or more direct penetration testing and red teaming experience.
• Scripting - python, bash, Go etc, software engineering, and system administration
• Offensive Security Certified Expert (OSCE) or CREST CCT qualification
• Artificial Intelligence background is a plus

Schedule

This role offers work from home flexibility of one day per week.

Intercontinental Exchange, Inc. is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin or ancestry, age, disability or veteran status, or other protected status.

Responsibilities

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

We built TikTok as a trusted platform to inspire creativity and enrich life. Our Privacy and Security team protects users on our platform by promoting privacy by design; we design architectures that treat user data respectfully, with transparency, and in line with reasonable practices. Data privacy engineering is a new technological territory that hasn't been well defined in our industry; by joining the team, you will have chance to refine the data privacy framework, use advanced privacy technology, and make a big impact on TikTok and our community.

As a Backend Software Engineer on the TikTok Privacy and Security team, you will:

• Design, build, and maintain systems that enhance privacy across the TikTok;

• Work with engineering and product teams to ensure that TikTok is compliant with privacy laws and regulations from a technical perspective;

• Respond to privacy incidents, if they occur, including collecting information on scope and root cause as well as managing remediation.

Qualifications

• BS/MS Degree in Computer Science or equivalent majors;

• Experienced in building backend services for large-scale consumer-facing applications;

• Proficiency in at least one of the following languages: Go, C++, Python, Java;

• Deep understanding of computer architectures, data structures and algorithms;

• Good team communication and collaboration skills.

Preferred Qualifications:

• Industry experience developing and implementing privacy features and solutions.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsibilities

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

We built TikTok as a trusted platform to inspire creativity and enrich life. Our Privacy and Security team protects users on our platform by promoting privacy by design; we design architectures that treat user data respectfully, with transparency, and in line with reasonable practices. Data privacy engineering is a new technological territory that hasn't been well defined in our industry; by joining the team, you will have chance to refine the data privacy framework, use advanced privacy technology, and make a big impact on TikTok and our community.

As a Backend Software Engineer on the TikTok Privacy and Security team, you will:

• Design, build, and maintain systems that enhance privacy across the TikTok;

• Work with engineering and product teams to ensure that TikTok is compliant with privacy laws and regulations from a technical perspective;

• Respond to privacy incidents, if they occur, including collecting information on scope and root cause as well as managing remediation.

Qualifications

• BS/MS Degree in Computer Science or equivalent majors with minimum 3 years of working experience;

• Experienced in building backend services for large-scale consumer-facing applications;

• Proficiency in at least one of the following languages: Go, C++, Python, Java;

• Deep understanding of computer architectures, data structures and algorithms;

• Good team communication and collaboration skills.

Preferred Qualifications:

• Industry experience developing and implementing privacy features and solutions.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too

Responsibilities

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

Team Introduction

The TikTok privacy governance team is affiliated with the TikTok PDPO (Privacy and Data Protection Office), providing operational support for TikTok privacy security construction and privacy risk governance projects, including data security, APP security, application security, etc., and is committed to high-quality and efficient operation execution .

Job Responsibilities:

1. Support data classification and taxonomy methods and standards, understand business, cooperate with data team. Support analysis, identification and marking various data samples in storage, and ensure accuracy and recall rate.

2. Support AI team to improve algorithm recognition and machine learning ability, analyze badcase of algorithm recommended data labels, put forward suggestions and basis for annotation/labelling, and participate in the discussion of algorithm model improvement solutions

3. Deeply understand the business, investigate the data samples of each business line, and improve the classification standard of data labels and sample database

4. Improve the data annotation operation process, optimize the label sampling and review mechanism, and improve the efficiency of manual or automated standards

5. Participate in the functional optimization design of the annotation platform

Qualifications

1. Majored in Computer Science or IT related, with research and development in testing, data analyst or DBA experience, familiar with common data storage technologies.

2. Excellent communication and analysis skills and good reasoning skills, able to quickly understand the business and judge the sample type according to the business attributes

3. Be able to effectively do repetitive tasks and effectively with a minimum of errors

4. Knowledge of artificial intelligence and machine learning. Strong interest is preferred

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Responsibilities:-

• Assist in developing, reviewing, and teaching of lower secondary

computer education program for secondary school students in the

following areas:

· Microsoft Office Certification.

· Programming language (e.g. Python, Swift using Swift

Playgrounds or equivalent online platforms).

· Computational Thinking, reasoning and problem-solving using

ICT equipment (e.g. Python using M5GO, LEGO Mindstorms,

Micro:Bit etc).

· School Teaching and Learning platforms (Teams, Class

Notebook, etc.).

· AI tools for e.g. Copilot, ChatGPT etc.

· And others relevant applications.

• Assist in training students in Infocomm Club in creating videos,

graphic posters and animations.

• Provide support and coordinate competitions for students related to

Multimedia.

• Provide maintenance for photography equipment in school.

• Provide the technical support and service in maintaining the school

website using relevant software.

• Provide support for school programmes and events:

· Collateral materials for school programmes, events and external collaborations.

· Photography and videography support.

· Multimedia resources for teaching and learning.

• Any other duties as assigned

Required Skills & Experience:

• Proficient in conducting ICT-related training and workshops in the

following areas as well as proficient in video production:

· Microsoft Office Suites (including Teams and OneNote Class

Notebook)

· Video editing

· Coding

· AI literacy

• Preferably 3 years working experience in providing computer

enrichment program in a school environment Proficient in:

· Microsoft Office suites.

· Designing software (Pro-Create, Canva, etc).

· Video creation software (Capcut, iMovie, GarageBand,

Adobe suites etc.).

· Programming language (e.g. Python, Swift using Swift

Playgrounds or equivalent online platforms).

· School Teaching and Learning platforms (Teams, Class

Notebook, etc.).

· School website content development through Isomer.

• Has experience in various multimedia and programming projects.

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

We are looking for an experienced Senior Cloud Security Engineer to join the Cyber Security Operations team. This is a 12 months contract role to start with a potential to extend / convert based on the performance and business needs.

Roles and Responsibilities:

• The ideal candidate must have deep knowledge of security controls, tools, features, and operations for AWS / Azure. Candidate should be able to demonstrate relevant experience with implementing and enhancing detective capabilities in a fully managed AWS / Azure environment.
• The candidate should be intellectually curious about technology and the evolving threat landscape.
  This role will help to build a detection engineering process and culture for a SIEM platform covering on-prem and multi-cloud environments while serving as a technical subject matter expert for the AWS / Azure environment.
• It will partner with teams across Global Information Security to design, develop, tune, and maintain detection content to protect the and support the information security policies and/or procedures.

Skills and Experience

• Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or related field.
• Eight (8) or more years relevant Cyber Security experience with at least five (5) years in Cloud SOC and/or Purple Team roles.
• Highly organized and motivated self-starter who can deliver results with minimal direction.
• Experience writing and tuning detections.
• Experience with SIEM tools.
• Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS.
• Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Experience with a range of AWS . Azure native services and tools (i.e. Guard Duty, Security Hub)
• Understanding of threat frameworks, such as MITRE ATTCK for Cloud and D3FEND.
• Understanding of Risk Management principles.
• Experience in building, configuring, operating and/or securing cloud infrastructure and applications in AWS / Azure with either native cloud service provider capabilities or 3rd party vendor tools.
• Ability to independently assess risks and identify vulnerabilities in infrastructure with an eagerness to suggest new processes, policies, and overall improvements to internal security controls.
• Experience partnering with incident response teams, threat intelligence researchers, Red/Purple teams, and/or HUNT researchers.
• Familiarity with common Information Security and data protection frameworks and standards (i.e. CIS, NIST, HIPAA, GDPR, PCI DSSS, ISO 270001).
• Ability to navigate and collaborate effectively within a geographically complex and dispersed global corporation.
• Excellent verbal and written communication skills with ability to distill key data points and effectively present information.
• Preferable Certifications
  CCSP / CCSK
  CISSP / CISM / Security +

Argyll Scott Consulting Pte Ltd

Your new company

This is a multinational investment bank.

Your new role

• Develop and implement a comprehensive cloud DLP security strategy that aligns with the organization's goals and compliance requirements.
• Design and architect secure cloud solutions, considering aspects such as network security, identity and access management (IAM), encryption, and data protection.
• Guide implementation of proactive measures to address security concerns effectively.
• Ensure that cloud security practices adhere to industry standards and regulatory compliance, such as GDPR, HIPAA, or SOC 2.

What you'll need to succeed

• Minimum of 10 years of experience in information security, with at least 5 years focused on cloud security. Prior experience as a Security Architect or similar role is highly desirable.
• Experience with developing performance baselines for DLP tools.
• Proficiency in cloud platforms such as AWS, Azure, or Google Cloud, including knowledge of their security services and best practices.
• Certified Cloud Security Professional (CCSP) preferred.

What you'll get in return

• Challenging yet fulfilling career with an equal opportunity employer.
• Various opportunities to learn and upgrade your skill sets
• Competitive remuneration package and benefits

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email [email protected] for a confidential discussion.

Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D

Position Overview: As a Supply Chain Intern, you'll be integral to our efforts in leveraging data for informed decision-making and operational enhancements within our supply chain. Working closely with our skilled team, you'll contribute to advancing our supply chain analytics capabilities, utilizing your coding proficiency and expertise in Microsoft Power BI.

Responsibilities:

• Collaborate with the team to identify data-driven opportunities for refining processes and optimizing our supply chain.
• Develop, maintain, and improve coding-based tools and scripts to streamline data collection, transformation, and analysis.
• Create and maintain interactive, insightful Microsoft Power BI reports and dashboards to visualize supply chain data and key metrics.
• Identify trends, patterns, and anomalies within supply chain data to provide actionable insights.
• Support data integration across various supply chain systems and databases.
• Gather requirements from cross-functional teams and translate business needs into technical solutions.
• Stay updated on emerging trends in supply chain analytics, coding practices, and Power BI features, and contribute innovative ideas.
• Gain understanding of current processes and support daily/weekly report generation and ad hoc tasks.
• Analyze data from various sources (e.g., ERP, Rapid Response, PBI) in collaboration with the supply chain operations team.
• Identify opportunities to optimize supply chain processes through data analysis.
• Collaborate with cross-functional teams to develop reports and processes aimed at reducing complexity and improving efficiency.
• Present findings and insights to the supply chain operations team for further action.
• Show interest in digital tools and technologies (e.g., web pages, Gen AI, ChatGPT).
• Demonstrate knowledge in Computer Science, PowerApps, Power Automate, VBA, and Power BI.

Qualifications:

• Currently pursuing a degree in Supply Chain Management, Business Analytics, Computer Science, or related field.
• Proficiency in analytics or visualization platform coding languages such as Python, R, Tableau, MS VBA, or similar.
• Prior experience with Microsoft Power BI report development preferred.
• Familiarity with data manipulation, transformation, and visualization techniques.
• Strong analytical mindset and problem-solving skills.
• Effective communication and collaboration skills.
• Ability to work independently and manage tasks within set timelines.
• Willingness to learn and adapt in a dynamic environment.

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Our client is a global bank with regional IIT presence in Singapore. They are inviting applicant for their Project Manager (IT Security) role

Roles

· Managing project initiation including cost-benefit analysis and project papers for IT security projects

· Managing RFQ, RFP for outsourced projects

· Managing communications with stakeholders

· Preparing and tracking of project plans, resources, budgets , spent, etc

· Running Project Steering Comm

· Ensuring deliverables are tracked and issues managed accordingly

· Prepare management and status reports to various teams

· Ensuring project governance as well as preparing project management updates , reports to stakeholders

· Managing vendors deliverables and relationship

Requirements

• Strong and Proven Technology PM with min 10 years of experience
• Prior experience in managing large and complex infrastructure or IT security projects in banking are a must
• Experience working in banking or vendor environemtn or large regional projects
• Resourceful with excellent communication skills to manage stakeholders
• Strong people management skills
• Must have prior experience managing project value of Min SGD 1 Mil
• Knowledge in best Project Management practices, processes

Interested candidates please email your latest resume to [email protected]

• Preparing payments and petty cash reimbursements.
• Preparing instalments of vehicles and loans.
• Updating of creditors listing.
• Oversee the function of Accounts Receivables.
• Submitting and monitoring of payroll via internet banking weekly and petty cash reimbursement for SO freelance wages.
• Assist the HR Department in any payments such as final wages or any other urgent payments.
• Weekly fund reporting.
• Prepare monthly costing for SO Full Time & Part Time.
• Monthly financial report to be prepared within 2 weeks after the month ends.
• Daily bank reconciliation.
• Preparing and submission of Good Service Tax (GST) evert quarterly to IRAS.
• Preparing yearly financial report to Auditor.
• Preparing of financial year budgeting and propose or provide recommendations to the following year’s budget accordingly.
• Managing of bank tokens for approval.
• Preparing report and present during monthly management meetings.
• Preparing documents for Secretarial.
• Managing reconciliation in MYOB system.

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

JOB DESCRIPTION

The Google Cloud Platform team helps customers transform and build what's next for their business — all with technology built in the cloud. Our products are developed for security, reliability and scalability, running the full stack from infrastructure to applications to devices and hardware. Our teams are dedicated to helping our customers — developers, small and large businesses, educational institutions and government agencies — see the benefits of our technology come to life. As part of an entrepreneurial team in this rapidly growing business, you will play a key role in understanding the needs of our customers and help shape the future of businesses of all sizes use technology to connect with customers, employees and partners.

ADDITIONAL JOB DESCRIPTION

As a Security Sales Specialist on the User Protection Services (UPS) team, you will help us grow our cybersecurity business by building and expanding relationships with new and existing customers. You will work with customers to deliver true business value, demonstrate product functionality, and provide a comprehensive overview of key business use cases. You will lead day-to-day relationships with external customer stakeholders, leading with empathy, while identifying innovative ways to multiply your impact and the impact of the team as a whole. You will have shared responsibility to uphold and grow an excellent team culture. You will partner with internal Google Cloud Partner Sales teams to grow their security businesses and drive overall value for Google Cloud Partners.

Qualifications

JOB RESPONSIBILITIES

• Construct and execute an effective territory development plan for your territory, meeting or exceeding quarterly goals.
• Develop and drive pipeline, managing cycles from lead generation to customer onboarding.
• Build and maintain relationships to influence long-term strategic direction, and act as a trusted advisor to both the local Specialist and Google Cloud Platform Sales leadership. Host Security product enablement sessions for GCP and Specialist team members through team or quarterly meetings, or large scale events.
• Partner with Marketing, Customer Success, or Channels teams in your territory to educate clients, managed service providers, and local technical communities on User Protection Services products and other associated security offerings.
• Represent User Protection Services in regional forecasts and team meetings, and serve as stakeholder to regional Google Cloud leads, reporting current, accurate, and timely forecasting and business performance in tools.

MINIMUM QUALIFICATIONS

• Bachelor's degree or equivalent practical experience.
• 7 years of experience in a sales role in the enterprise software or cloud space.
• 5 years of experience in promoting to clients in the enterprise cybersecurity or IT field.

PREFERRED QUALIFICATIONS

• Experience starting a territory from scratch, and understanding the security partner ecosystem.
• Knowledge of product and solution and market trends in cybersecurity and cloud.
• Ability to build continuous relationships, promote to C-level executives across security and IT business units, and ensure customer success and adoption leading to customer expansion.
• Ability to prioritize, plan, organize, and communicate sales activity, complex concepts, technical benefits in business terms at the executive level.
• Strong problem-solving, communication, presentation and active listening skills and a proven ability to create leverage by enabling others.

• Assist with duties at the following Duty Posts:

1. ­ Security Control Room Duty;
2. ­ Lobby Duty;
3. ­ Loading Bay;
4. ­ Patrolling or Observation Duty;
5. ­ Back of House;
6. Or at any position where operations in Security field will benefit

• Ensure that all security systems function smoothly. Initiate immediate corrective action when fault is detected
• Assist Management, employees and guests in every way that is consistent with the protection and prevention objectives
• Coordinate with various departments and government agencies on routine matters and during emergency
• Monitor back of house areas with particular attention to unauthorized entry and exit points
• Maintains records in respective Log Books for future reference
• Keep Manager or Crisis Management Team informed on the latest development of situation in a crisis
• Conduct inventory on keys, passes, walkie-talkies, pagers and all other accountable stock
• Perform other reasonable duties assigned by the assigned by the Management

Only shortlisted candidates will be contacted.

Summary of the role

The primary responsibility of the Red Team Analyst is to protect Marina Bay Sands' gaming, retail, and hospitality sectors from cyber threats. This includes conducting adversarial simulations, red/purple team exercises, and security assessments. All duties are to be performed following Marina Bay Sands’ policies and procedures. All duties are to be performed in accordance with the department and Marina Bay Sands’ policies, practices and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

Adversarial Simulation:

• Perform comprehensive analyses and simulations to mimic cyber threats and identify vulnerabilities.
• Execute threat-led penetration testing and red/purple team exercises using frameworks such as MITRE ATT&CK and TIBER-EU.
• Conduct attack simulation exercises using Tactics, Techniques, and Procedures (TTPs) that cyber threat actors use to plan and execute cyber-attacks.

Red Team Activities:

• Conduct authorized offensive security operations to test the effectiveness of cyber defenses and simulate cyber-attacks.
• Execute penetration tests on external and internal infrastructures, web applications, and mobile applications to identify security weaknesses and misconfigurations.
• § Perform social engineering assessments (email phishing, vishing, physical access attacks) to simulate password theft, system infiltration, and malware/ransomware deployment.
• Perform source code reviews to identify software vulnerabilities and detect malicious embedded code.
• Assess security configurations for cloud, server, network, and middleware infrastructures.
• Review IT architecture for both cloud and on-premises environments.

Forensics and Incident Response:

• Lead cyber incident investigations and response efforts.
• Collaborate with cybersecurity specialists to maintain and update security testing methodologies.
• Perform other related duties as assigned.

Job Requirements

• Minimum diploma with at least 3-5 years of hands-on cybersecurity experience in relevant areas.
• Preferred certifications: CISSP, OSCP, CRTP, CRTO, OSWE.
• Experience in Gaming, Banking, or Critical Infrastructure InfoComm Industry is an advantage.
• Effective verbal and written communication skills.
• Proficiency with offensive security tools such as Cobalt Strike, Empire, Havoc, Mythic.
• Experience in setting up red teaming Command and Control (C2) infrastructure, including web/proxy servers, redirectors, domain frontingSkills in developing malicious payloads and understanding obfuscation and encryption techniques.
• · Proficiency in at least one scripting language (e.g., Bash, PowerShell) and/or programming language (e.g., Python, C, C#, C++, Java).
• Understanding of basic networking concepts and Internet protocols (e.g., TCP/IP, HTTP(S), SMTP, DNS, SSL/TLS).
• Knowledge of industry-recognized security testing standards and penetration testing methodology.
• Strong understanding of enterprise technologies, operations, and security evaluations.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

This position reports to the Finance Manager and assists the management team in accounting functions.

Reponsibilities

• Prepare and send quotation, invoice, credit note and monthly statement.
• Perform data entry to update Accounts Payable and Receivable records.
• Check, verify and process invoices, expense claims & reimbursements.
• Verify timesheet against attendances submitted.
• Process bank transactions for payroll and vendors.
• Keep proper record of finance documents and bank statements.
• Perform Payroll and Bank Reconciliation.
• Assist in preparation of project costings and monthly reports.
• Other ad-hoc duties assigned by management.

Requirements

• Candidates with basic accounting knowledge or experience preferred.
• Proficient in Microsoft Outlook, Excel and Word.
• Organized and meticulous, able to multitask and work independently.

Other details

• Hybrid work arrangements: 2 to 3 days WFH per week.
• Working days: Monday to Friday
• Working hours: 9am - 6pm
• Benefits: Medical benefits and insurance coverage.

Summary of the role

The primary responsibility of the Governance Analyst is to perform duties in one or more of the following areas: vulnerability management, cyber data governance, risk and verification, cyber policy/standards/standard operating procedures development, and penetration testing and red teaming. All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

• Cyber governance, risk and verification which performs risk assessments, system security and industrial control system zone security plans including listing controls, gaps in implemented controls and tracking remediation of gaps, and provides input to the risk register
• Network and Operating Systems Security Configuration assessment which performs security configuration reviews including hardening controls, firewall rules review, web/application security configurations
• Penetration testing and red teaming which includes performing security testing to identify security vulnerabilities on LVSC applications and environment, providing recommendations for remediation, and tracking and remediating found issues.
• Cyber policy/standard and standard operating procedure creation, review, distribution, and maintenance
• Vulnerability management which includes successfully scanning the LVSC computing environment for secure configurations and vulnerabilities, researching and eliminating false positives, tracking and remediating found issues, and tracking and performing the exception processes
• Performs other related duties as assigned.

Job Requirements

• Minimum diploma with at least 5 - 8 years cyber security hands-on experience in one or more of the areas listed in place of a degree.
• Preferrable to have a current and in good standing CISSP or similar certification, and Offensive Security (OSCP, OSWE, OSEP) or Crest (CRT, CCT) certifications
• Demonstrated experience in at least 1 area in the following list:
• Cyber Vulnerability Management
• Cyber Governance, Risk and Verification
• Cyber Policy/Standard/Standard Operating Procedures
• Cyber Penetration Testing and Red Teaming
• Working knowledge of threats and vulnerabilities and their significance to cyber risk, network operations, and end-point security
• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Overview

With over 18,000 employees worldwide, the Microsoft Customer Experience & Success (CE&S) organization is responsible for the strategy, design, and implementation of Microsoft’s end-to-end customer experience. Come join CE&S and help us build a future where customers come to us not only because we provide industry-leading products and services, but also because we provide a differentiated and connected customer experience.

Join our Security Customer Success Unit at Microsoft, a dynamic team dedicated to ensuring the security and success of our customers. As a Security CSA (Cloud Solution Architect) Lead, you will play a pivotal role in shaping our field execution strategies and driving customer success in a rapidly evolving cybersecurity landscape.

The Customer Success team will drive change management and adoption activities with key business decision makers and IT decision makers, helping reduce implementation risk, driving usage of existing solutions, and identifying opportunities to accelerate the path for customers to realize business value from their investments.

Responsibilities

Customer Centricity

• Drive positive Customer Satisfaction & become a trusted advisor. Provide feedback & insights from customers/partners. Be the Voice of Customer to share insights and best practices, connect with Global Security teams at Microsoft, Engineering and Product teams to remove blockers and influence the solution roadmap.
• Experience in the implementation (end to end) of Data Security projects with Data Security Platforms, preferably experience with Microsoft Purview (Information Protection, Data Loss Prevention, Information Risk Management)
• Guides other team members to focus on customer/partner experience through efficient delivery and ensuring a seamless and connected customer experience. Supports definition of customer/partner conditions of success. Anticipates customer/partner dissatisfaction and unmet needs and executes strategies to improve experience, value realization, and acceleration of customer transformation.
• Lead and execute Field Usage and Consumption Strategy projects, providing structure and guidance to ensure successful outcomes.

Business Impact

• Position and deliver solutions that drive Security product usage and develop opportunities to drive Customer Success business results & help Customers get value from their Microsoft investments. Identify resolutions to Customer blockers by leveraging SA subject matter expertise.
• Deliver according to MS best practices & using repeatable IP. Accelerate Business Value of overall Security adoption by improving security posture and ensuring that the solution exhibits “Secure by Design” framework, such as high-performance levels, security, scalability, maintainability, appropriate reusability, and reliability upon
• Collaborate and orchestrate with other CSAs and MS stakeholders including FastTrack, partner, and Microsoft Consulting in developing complex end-to-end Enterprise solutions with the Microsoft Security platform.
• Drives consumption and usage rigor and discipline by developing and leading inclusive and regular rhythm of business (ROB) processes for a large subsidiary. Delivers on business commitments, collect performance data, report performance to Global Lead and Strategy Team, and informs future plans and decisions (e.g., forecasting, anticipated barriers). Leads a coaching rhythm in alignment to Microsoft's coaching framework and worldwide rhythym framework practices, integrated both locally and with Corporate.
• Creates culture to drive operational and pipeline excellence, with particular focus on the key performance indicators (KPIs) covering operating model metrics (e.g., growth, velocity, efficiency, resource allocation) to ensure consistent execution against strategy. Escalates to ensure removal of blockers related to the customer business and/or internal processes to deliver technical and operational excellence in Customer Success teams and accelerate customer adoption. Leads area-level/global-level rhythm of business (ROB) and instills a sense of urgency for strategic agility through other leaders. Identifies widespread or global patterns in blockers and develops strategies to resolve and prevent them in the future. Assesses and prioritizes high-impact technical blockers, and coaches team to enable resolution. Leverages systems for identifying leading and lagging indicators of success across customer success pipeline at the area/regional level (as appropriate). Drives area/regional accountability (as appropriate) to identify gaps in execution leading to optimizing customer success delivery for value realization.

Technical Leadership

• Leverages credibility and expertise to act as executive-level technical sponsor and leader for customers and partner ecosystem to continuously evolve and grow through the digital transformation journey (e.g., increase usage/consumption to drive customer expansion, upsell and renewal recapture rates). Provides area/global thought leadership for technical integration and innovation with the area leadership team. Creates culture of technical community engagement with customers and partners to influence actions and results at senior and executive levels of their organizations. Drives technical executive sponsorship with the customer and partner and influences strategy for regional scale. Leads critical engagements with customer and partner senior leadership, providing executive support for the Customer Success Unit (CSU) team to align operational plans with the organization's strategies to drive customer and partner obsession.
• Advocates to drive customer technical requirements with corporate product and engineering teams. Creates an internal feedback loop to drive broad, systemic continuous improvement for customers across Microsoft (e.g., security, product support). Leverages and creates customer and employee forums for open feedback and collaboration across teams. Invests in building and maintaining a strong network with corporate engineers to quickly meet customer and partner needs.
• Serves as an expert/spokesperson, as appropriate around key technical, operational and customer success topics (e.g., product/service lifecycle, customer perspective) to influence and drive recognition for Microsoft solutions and brands by speaking at events, having an active presence on social media platforms, and encouraging organizational participation. Leverages subject matter expertise to be and influencial voice in the area/globally, clarifying technical and operational questions and technology position. Supports Customer Success Unit (CSU) community-building internally and externally by providing community thought leadership and orchestrating with professional network to promote learning.

Qualifications

Required/Minimum Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting
• OR equivalent experience
• 4+ years of experience and understanding of large-scale security deployments in enterprise-wide environments.

Additional or Preferred Qualification

Desired Microsoft Technology & Industry Equivalent. Certification in one or more of the following areas:

• Programming experiences, using Microsoft Information Protection SDK (e.g. PowerShell, C#, Python)
• Technical Certification in Microsoft SC-400 – Microsoft Information Protection Administrator)

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

About the client

Our client is a prominent global trading platform, established in Australia, and serving millions of users worldwide. They specialize in delivering an integrated digital service platform designed for investors. Their offerings include market data, news, analysis, and comprehensive trading services, all within a user-centric fintech ecosystem.

About the role

The role involves planning, creating frameworks, roadmaps, processes, and controls, as well as coordinating across business and technical stakeholders to monitor and detect security threats and respond to security incidents.

• Develop and implement the company’s cyber/info-security efforts to ensure compliance with information security requirements stipulated by financial services regulators. Plan and construct the company's cybersecurity and protection systems, continuously enhancing cybersecurity management and environment to ensure network system security and availability.
• Manage the company’s response to and relationship with info-security-related audits/compliance matters and inquiries from regulators or appointed auditors. This includes overseeing security compliance activities such as PCI/GDPR audits and IT security compliance related to financial regulations.
• Conduct daily security checks, analyze and detect potential security threats and vulnerabilities in the company's business systems and internal office environment. Conduct security audits and provide employee security awareness training.
• Oversee safety inspections in the company's R&D process and optimize related processes.
• Manage internal and external network attacks, phishing attacks, virus infections, intrusion defense, and other security incidents. Provide monitoring, early warning, response, and emergency response.

Skills and Experience requirements

• 5 years or more of experience in information security/cybersecurity.
• Familiarity with OWASP Top 10 and DDoS attack principles and protection.
• Proficiency in information security/cybersecurity skills such as offensive and defensive tactics, penetration testing, and vulnerability assessment.
• Familiarity with commonly used security tools and products.
• Experience with one or more public cloud security products.
• Understanding of TCP/IP principles.

Interested candidates who wish to apply for the advertised position, please click on "Apply Now". We regret that only shortlisted candidates will be notified.

Job Code: ANNH

EA License: 01C4394, R1872517 (Ho Hsien Ni)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates to collect, use and disclose your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services, complying with Government’s health advisories and such other purposes stated in our privacy policy. Our full privacy policy is available at https://www.persolkelly.com.sg/policies . If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

Position Overview

Assist in managing Infrastructure and IT Security related, for Regional Office (South Asia Ocean Region).

Responsibilities

• Support tRhe Regional Cloud Infrastructure hosting all the Critical Regional Business Solutions.
• Support Cloud Consolidation and Integration to Common Cloud for the Region.
• Plan, Design and Setup adequate Infrastructure for Operation Companies (OPCOs) to connect to Global and Regional Solutions.
• Support various Regional IT Infra projects, with primarily focus on Infrastructure, Elimination of Legacy hosted Infra.
• Support SD-WAN and other Infra Initiatives for the Region.
• Work closely with Global / Regional / Country IT teams to implement & Support Global IT Security Initiatives
• Manage other duties as assigned for Automation of Patch Management (Using Manage Engine), for GSOC, implementing Multi-Factor Authentication (MFA), Zscaler, Rapid 7 (Vulnerability Management), Trend Micro EDR and Others.
• Supporting initiatives advised by Global Security Audit (GSA) teams, resulting in overall improvement of IT Security Posture for the region.
• Assist in Documentation of IT Section Policies.
• Regular PDCA and follow up with Countries, to ensure Adherence for the above Initiatives.

Requirements & Qualifications

• Minimum Bachelor’s degree in IT or related field.
• Minimum 5 to 7 years In-Depth experience in Handling IT Infrastructure & IT Security at a Regional Level.
• Business driven with a Strong understanding of Prevalent / Current IT infrastructure and IT Security Solutions.
• Infrastructure Management and IT Security Skills.
• Cloud Solution Skills with a Must have experience to handle a regional Cloud Setup using AZURE.
• Understanding of relevant technology requirements required to handle the Responsibilities mentioned above.
• Strong Project Management Skills.
• Proven strength in strategic and conceptual thinking and design, implementation, and execution of strategies.
• Strong problem-solving and Co-ordination skills.
• Strong Vendor Management Skills.
• Good verbal and written communication skills.
• Proficient in Microsoft O365 Tools (Word, Excel, PPT and Others)
• Business trravelling may be required for this position.

Job Location

2 Changi South Avenue 2, Singapore 486354

Role:

You will be part of the Security team (Governance, Risk and Compliance) and will work in a highly collaborative environment with cross-functional teams, to ensure compliance to the applicable regulatory requirements.

Responsibilities:

• Maintain cyber security policies, standards and procedures
• Manage and perform cyber risks and assessments
• Develop cyber risk documents
• Mitigate cyber security risks
• Conduct research on emerging cyber security & risk management trends, issues and alerts
• Track and monitor new security regulatory guidelines, and assess the compliance of and impact to the organization
• Assess the security deviations and risk acceptance raised by other business units
• Review and update cybersecurity risk assessment methodology and conduct cybersecurity risk assessment for critical systems
• Track remediation efforts for security & audit deficiencies

Requirements:

• Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields
• At least 5 years’ of experience working in technology and/or cybersecurity governance
• Working experience in a highly regulated environment is preferred
• Strong understanding and familiarity with regulatory requirements such as IM8, MAS Notice on TRM, MAS Notice on Cyber Hygiene, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines and the CSA Cybersecurity Code of Practice
• Strong understanding of NIST Cybersecurity Framework
• Cybersecurity professional qualifications such as CISSP, CISM, CRISC, CISA, GSEC, CCSK or equivalent would be advantageous
• Familiar with emerging technologies and possess an interest to stay abreast of industry developments (e.g. DevOps, Cloud, APIs, service-oriented architectures etc).
• Proficiency with application development experience and programming/coding/Powershell scripting will be an advantageous
• Prior experience in implementing Cybersecurity products such as IAM tools is a plus

Interested candidates are requested to send their resumes to [email protected] with current, expected salaries, notice period etc