• Execute operational tasks for network security solutions, including network firewalls, intrusion prevention systems (IPS), proxies and web application firewalls (WAF).
• Monitor the performance and maintain network security solutions.
• Utilise various tools and solutions to troubleshoot and diagnose network problems.
• Identify and provide insight on WAF violations.
• Post office-hours activation for support and troubleshooting.
• Perform data tabulation and report extraction.
• Configure and install various network devices and services (e.g., routers, switches, firewalls, load balancers, VPN, QoS)
• Perform network maintenance and system upgrades including service packs, patches, hot fixes and security configurations
• Monitor performance and ensure system availability and reliability
• Monitor system resource utilization, trending, and capacity planning
• Provide Level-2/3 support and troubleshooting to resolve issues
• Work within established configuration and change management policies to ensure awareness, approval and success of changes made to the network infrastructure
• Select and implement security tools, policies, and procedures in conjunction with the company’s security team
• Liaise with vendors and other IT personnel for problem resolution
• Handle request and perform necessary network configuration.
• Coordinate the troubleshooting and incident root cause analysis for the managed equipment. It might include troubleshooting with other parties
• Review new release of vulnerabilities and provide recommendation to HDB. It includes obtaining of firmware, schedule and coordinate firmware patching with testers.

Requirements and skills

• Possess knowledge on networking protocols and technologies like TCP/IP, VLANs, VPNs, and routing/switching.
• Possess fundamental application security knowledge like interpretation of HTTP response status codes and WAF violations. Higher proficiency in application security knowledge to advice on remediation measures is an added advantage, but not mandatory.
• Proficient with network equipment from vendors like Palo Alto, Check Point, Trend Micro, Fortinet and F5.
• Experience in solutions that supports the primary job tasks, like Network Performance Monitoring (NPM) and Security Information and Event Management (SIEM).
• Understanding of network security best practices and tools.
• Strong problem-solving skills and ability to work under pressure. Willingness to learn.
• Fundamental skills on Microsoft Office products like Word and Excel.
• Additional certifications like CCNA, CCNP or product (with reference to products listed above) certifications are a plus.

• Management of Cloud infrastructure set up & implementation projects.
• Serve as the Subject Matter Expert (SME) in the development of cloud infrastructure solutions.
• Provide detailed designs on the IT projects assigned ensuring right architecture and functionality.
• Support new technology implementation.
• Highly technical and analytical, possess system thinking skill and the ability to visualize how different parts interact with the whole
• Able to support technical decisions with rationale or data points.
• Participate in Cloud Migrations for VMs using tools like Azure Site Recovery, Azure Migrate with more than 30 VMs migration or Databases would be preferred
• Apply technical knowledge, hands-on and customer insights to operate and administrate a cloud infrastructure
• Ensure all configuration conforms to high levels of performance, security, scalability, maintainability, and appropriate reusability and reliability upon deployment, aligning to design documentation specifications
• Ability to codify or implement/deploy configurations with the principles of automation by default in new projects with proper documentations
• Ability to codify or maintain cloud systems in an automated fashion using tools like Ansible, Terraform etc with proper documentation
• Collaborate with team members to engage clients in operational meetings, discussions, process betterment and contribute to optimisations for the client’s environment
• Maintain technical skills, certifications and knowledge of market trends and competitive insights; collaborate and share with the technical community specifically in the cloud space
• Ability to manage issues with proper resolution/documentation and SLAs is required for this role

• Review contract documents, perform measurements, and promptly prepare Bill of Quantities.
• Collaborate closely with the Project Team to submit progress reports, progress claims, variation orders, final accounts, and other relevant documents.

Requirements:

• Diploma in Quantity Surveying or equivalent
• At least 2 years of work experience in construction or security system industry.
• Proficient in AutoCAD and ELV systems.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R24120303

FIND YOUR 'BETTER' AT AIA

We don’t simply believe in being ‘The Best’. We believe in better - because there’s no limit to how far ‘better’ can take us.

We believe in empowering every one of our people to find their 'better' - in the work they do, the career they build, the life they live and the difference they make. So that together we can support even more people - including our own - to live Healthier, Longer, Better Lives.

If you believe in better, we’d love to hear from you.

About the Role

This position is responsible for to providing consultation, professional advice, awareness/training on information security and key technology risk matters relating to the abovementioned geographical responsibilities, thereby contributing to building a strong information security risk culture cantered on people, processes and technology. The role will also coordinate regular governance engagements and being involved in technology-related audit engagements for AIA Singapore, and exercise professional judgment and assessments on the material to be provided by the various process and control owners for the audits.

What you will do:

Information Security & Technology Risk Metrics

• Support the alignment of various information security and technology risk metrics for management reporting and escalation – this includes reporting/escalation of outstanding or overdue action required from penetration tests, vulnerability assessments, security incidents, policy/standards deviations, third party security assessments, etc.
• Drive the monthly Technology Security Governance forum focusing on highlighting metrics impacting the Company’s cybersecurity metrics.
• Collate and review collated metrics and material relating to the Operational Risk Management forums, Key Risk Indicators and Key Risk Tolerance Indicators for cybersecurity and technology processes.

Risk Assessments, Audit and Regulatory Management

• Support Technology related audit engagements with statutory auditor and regulator, following up with relevant parties to ensure all issues identified are remediated.
• Support the delivery of annual IT risk and control self-assessment exercises according to MAS regulatory notices/guidelines, internal enterprise IT policies, and standards.

Policy, Standards and Exception Management

• Communicate material changes to internal policies/standards to collaborators. Facilitate risk evaluations and exception handling to deviations from the policies, standards and regulatory requirements.

What you should have:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• 5 years or more of relevant work experience, including at least 2 years of experience in IT audit, risk management, compliance and/or governance roles, with particular expertise and knowledge of governance reporting of technology risk issues and cybersecurity.
• Rich working experience from financial industry, big tech firms or established auditing firms will be considered favorably.
• Experience and exposure in information security standards such as ISO27001 and PCIDSS will be an advantage.
• Preferably a holder of one or more of the following information security and audit qualifications: Security+ and CEH.
• Candidates with advanced level qualifications such as CISSP, CISA, CRISC, CCSP will have added advantage.
• Good Communication, Coordination and Interpersonal Skills. Good experience working alongside and opposite external auditors as well as regulatory bodies Meticulous and analytical traits Strong programme/Project Management skills High drive, energy and good demeanor over teamwork High levels of professional integrity.
• Eagerness to learn and develop one’s knowledge in information security and computing, especially on emerging computing fields such as cloud security, DevSecOps, etc.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

Security Concierge

Chin Swee Rd (near Chinatown MRT)

6 days (8 hrs/day including 45 mins break)

Shift hours: 7am – 3pm; 3pm – 11pm; 11pm – 7am

$1800 - $2300

Responsibilities:

• Manning of fire command center
• Patrolling duties of all areas in and surrounding Hotel
• Perform escort duties, traffic and crowd control management.
• Assisting guest with luggage during arrival and departure
• Performs other related tasks

Requirements:

• Must possess valid Private Security Identification Card and WSQ certification.
• Able to perform 3 rotating shifts, including weekend and public holidays.

Lee Wan Ling | Reg No: R23116154

THE SUPREME HR ADVISORY PTE LTD | EA No: 14C7279

Location : Orchard , Singapore

Industry : Retail

Working hours : 3 Different rotating shifts inclusive of weekends and PH : 8am-5pm ; 1pm-10pm & 930pm-930am

Benefits: Basic + AWS + Variable bonuses

· Assist in the supervision of in-house security personnel and Agency guard services

· Performs rotating & night shift-duty to provide security and patrol company premises according to specified procedures

· Inspection & monitoring of security passes & goods at selected locations

· Render assistance in emergencies & investigations

· Possess a WSQ Certificate in Security Operations

• Minimum 2 years of security experience

• Instrumentation of measurement and detection equipment for military and homeland security.
• Oversee post-sales delivery of equipment, conduct scheduled maintenance, and conduct diagnostic analyses for troubleshooting and repair tasks.

Requirements:

• Higher Nitec in Electrical & Electronics Engineering or equivalent.
• At least 2 years of working experience

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Job Responsibilities:

• Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
• Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
• Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
• Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
• Enforce IT Security Policy compliance which includes assessment of security posture of the organisation’s IT assets as well as recommending appropriate measures and controls to mitigate security threats within the organisation.
• Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
• Facilitate, plan and conduct Cyber Security Awareness Training, including Cyber Security Exercises.
• Be on standby for any critical security alerts and incident management after office hours.

Job Requirements:

• Degree in Information Technology or Information Security or related discipline
• Minimum 3 years of working experience in Cyber Security field.
• Good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Familiar with ISO27001 and/or PCI Data Security Standards.
• Hands-on experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.
• Familiar with modernised A.I and SecOps tools.
• Possess good project management and report writing skills.
• Security Screening will be required for potential candidates.

To apply, please visit www.gmprecruit.com and search for Job Reference: 24131

To learn more about this opportunity, please contact Yi Fang at [email protected]

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Law Yi Fang | Registration No: R1113115

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Review contract documents, perform measurements, and promptly prepare Bill of Quantities.
• Collaborate closely with the Project Team to submit progress reports, progress claims, variation orders, final accounts, and other relevant documents.

Requirements:

• Diploma in Quantity Surveying or equivalent
• At least 2 years of work experience in construction or security system industry.
• Proficient in AutoCAD and ELV systems.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R24120303

Funding Societies | Modalku is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs), which is crowdfunded by individual and institutional investors. And here at Funding Societies | Modalku we live by our core values:

• Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
• Grow Relentlessly: Strive to become our best, most authentic selves.
• Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
• Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
• Focus on Impact: Create impact through bias for action and tangible results.

As a (Senior) Security Operations Engineer you will lead efforts to identify, analyse, evaluate, and act upon security risks and threats. The Engineer will carry out security threat identification, analysis, and remediation to ensure efficient and timely mitigation of the threats, as well as understand the threats' risks and potential business impacts. The engineer will act as an incident handler and manage the end-to-end workflow of security incidents based on the defined process. The engineer will also be involved in Splunk Cloud Administration (integrations, use case creation, health check) and the development of the team’s processes and continuous service improvement.

What will you do:

Incident Response

• Monitor and analyse security alerts and incidents to identify potential threats.
• Investigate security incidents promptly, utilising various tools and technologies.
• Coordinate and execute incident response activities in collaboration with cross-functional teams.
• Contain and mitigate security incidents to minimise impact and prevent further compromise.
• Develop and implement incident response plans to enhance organisational resilience.
• Create incident report in a timely manner for applicable incidents.

Log management and Integrations

• Configure and integrate log sources into splunk cloud and create dashboards for various use cases.
• Develop and maintain log management strategies to ensure the collection and indexing of relevant data.
• Troubleshoot and optimise log sources to enhance data accuracy and completeness.
• Integrate Splunk into the needed log sources, if needed.
• Collaborate with Managed Security Service Provider (MSSP) and other internal security teams to develop and finetune correlation rules and alerts.
• Implement best practices to enhance search and reporting capabilities.

Threat Intelligence

• Stay current with the latest cybersecurity threats and vulnerabilities.
• Review threat intelligence reports and perform the necessary follow-up actions.

Collaboration

• Collaborate with internal teams and external partners to share notable incidents and improvements.
• Participate in cross-functional training exercises and simulations.
• Mentor other team members about Security Operations work.

What we are looking for:

• Strong understanding of behavioural aspects of cybersecurity incidents.
• Excellent interpersonal, communication, and presentation skills.
• Professional working habits and quality-oriented.
• Willing to work with and report under the Security Operations Manager.
• Relevant certifications related to Splunk and Incident Response are a plus.

Within KPMG Singapore, the Information Technology Services (ITS) team is responsible for providing quality IT services and solutions internally to support the business and improve efficiency.

We invite highly motivated and customer-oriented individuals to join our ITS team. As an IT Security Manager, you will be required to work closely with our ITS team and Business stakeholders to maintain and ensure a secure IT operating environment and compliance to Global IT security standards.

Responsibilities:

• Support IT security operation for the firm
• Manage, implement, and operate security solutions
• Respond to and investigate cyber security incidents
• Assist in internal IT audits and compliance
• Design and maintain security dashboard
• Perform security assessment on new IT systems and change requests

The ideal candidate should possess:

• A Degree in IT, Computer Science, Cybersecurity, Information Communication Technology or other IT related qualifications.
• 8 to 10 years of relevant working experience in IT Security, with at least 2 years in a team lead position
• Experience in security governance, risk and compliance.
• Understanding of Cloud Security fundamentals, including cryptography and the shared responsibility model.
• Strong communication skills and an excellent team player

Only shortlisted candidates will be contacted by KPMG Talent Acquisition team, personal data collected will be used for recruitment purposes only.

At KPMG in Singapore we are committed to creating a diverse and inclusive workplace. We believe that diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients and communities. As an equal opportunity employer, all qualified applicants will receive consideration for employment regardless of age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the different talents that our people bring and support every staff member in their journey to achieve personal and professional growth. One of the ways we do this is through Take Charge: Flexi-work, our flexible working framework which enables agile and innovative teams to help deliver our business goals.

WithSecure Consulting delivers research-led cyber security to defend organizations, society and people from real-world attacks and build resilience into their approach. Our people are a mix of technical and creative experts – diverse, talented, and passionate people – working tirelessly to help us advance the industry with new ways of thinking. They lead their own development, in and out of the office. They call the shots when it comes to building a place to call home in our organization.

We currently have an opening for a Senior Security Consultant within our Singapore office! Your role will involve carrying out attack simulations (Red Teaming), penetration testing and security assessments of typical and unique pieces of technology to sophisticated and progressive cloud-native systems.

We’d also love you to do some research to ensure your skills remain relevant in a fast paced world of security.

How you spend the rest of the time that’s not working with clients is your call. WithSecure has a commitment to research. Based on their skillset and inclination, our consultants get a percentage of their time dedicated to security research. Whether it is used to investigate new software, hardware or protocols, we encourage our team to push the boundaries of what is possible!

What we need:

We solve complex cyber-security problems on a daily basis and to do that requires an interesting mix of skills. To be successful at WithSecure and help our clients with their challenges we know you’ll need the following:

1. A passion for security! You love computers, you love security and you love hacking things and solving problems. If this wasn’t your job it would be your hobby. Technical excellence. You know your subject area, but you’ll also know what that subject area is without us needing to say.

2. Self-motivation You’re not going to be told what to do all the time. You are capable of figuring out what spending time working is of benefit to WithSecure and our clients and then run with it. With great freedom comes great responsibility and you also seek out guidance from those around you when you need it.

3. Communication skills - How can we add value to our clients organisations unless we can tell them what we did, how we did it, and how they can fix it? But communication also extends to sharing your knowledge with your colleagues and the wider industry. Our consultants work as a team and all members are expected to suggest and implement improvements to procedures and products based on their experience and interaction with clients. They are also encouraged to share their knowledge with the WithSecure team as part of the company’s information sharing culture.

What are we looking for?

• An ideal candidate will have; 4+ years of experience delivering hands-on cyber security consultancy projects with clients;
• Red Teaming. You were part of attack simulations in an operator role or even leading the engagement.
• WebApp Testing. You know your way around Burp, and can perform SQLi without using SQLmap.
• Infrastructure Testing. You understand that this doesn’t just mean running Nessus.
• Mobile App Testing. You are familiar with Frida and know how to tweak existing or write new Frida scripts.
• Experience in supporting the end-to-end delivery of large consultancy projects, with a team.
• Support pre-sales/scoping – a strong ability to understand and quantify client requirements, and propose consultative approaches that will deliver the best possible outcomes for the client.
• Familiarity with regional regulatory requirements for cyber security – including MAS’s TRM expectations – and how they apply to our roles.
• Mentor and grow the capabilities of fellow team members.
• Experience interfacing with non-technical, and technical stakeholders to deliver technical and non-technical information.
• Excellent verbal and written communication skills.
• Relevant practical certifications – valid and active OSCP and CREST (CRT, CCT-Inf or CCT-App)
• Additional advanced certifications pertaining to Cybersecurity would be a bonus (E.g: CCT-Inf/CCT-App/CCSAS, OSWE, OSEP, CRTO, AWS Security Speciality, Microsoft AZ-500, CKA, CKS)

What will you get from us

• Freedom – you will have the opportunity to define new ways of working how we engage with our customers, and how product value gets represented
• You will work together with experienced and enthusiastic colleagues, and within WithSecure you'll find some of the best minds in the cyber security industry
• A collaborative and supportive work environment with opportunities for career growth and advancement.
• Opportunities for continuous learning and development, including training, certification and research time.

Technical skills

• Architecture and Deployment
• Cisco/Aruba Switching /Routing & WLAN
• DDI, AAA/Cisco ISE
• Network Automation: Python & Ansible
• As Built, LLD, Testing & Acceptance Testing Documentation Skills
• ZScaler & Network Security
• Certification: CCNP/CCDA equivalent
• Meraki, Palo alto, f5 loadbalancer, UTP
• Experience in network operations/maintenance and passionate about providing troubleshooting support
• Knowledge on Internet Technologies (i.e. routing, switching and general network infrastructure), and technologies associated with the ISP market
• Strong analytical and problem-solving skills, and has a flair for dealing with technical and operational problems
• Experience in IT audit or CISA/CISM certified preferred or operational risk management and control self-assessment or prior experience in implementing security solution and information security governance
• Demonstrated knowledge of global cyber threats, threat actors and the tactics, techniques and procedures (TTPs) used by cyber adversaries, particularly as they relate to the financial sector.
• Experience with models for threat analysis, such as the Diamond Model, Cyber Kill Chain and MITRE ATT&CK framework.
• Enterprise Data Network (administration, patching, upgrade and migration activities), Design, Preparing of HLD/LLD, Implementation Team leading, Service Level management, demand, incident, change management.
• Provide network WAN/LAN design, implementation, consulting, Cisco, Aruba, Juniper
• Network audit Identify the gaps and suggest the remedial solution supporting in RFP/RFI response
• Experience in running operations with ITIL processes / Project Management - PMP

• Responsible for growing and maintaining sales revenue for assigned portfolio
• Learn products at a professional and technical level
• Create strategic relationship with partners and vendors

Requirements:

• Diploma in Information Security or equivalent
• At least 3 years of experience in managing Network Security / Electronic / IT products

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Reg No. R21100996

WithSecure Consulting delivers research-led cyber security to defend organizations, society and people from real-world attacks and build resilience into their approach. Our people are a mix of technical and creative experts – diverse, talented, and passionate people – working tirelessly to help us advance the industry with new ways of thinking. They lead their own development, in and out of the office. They call the shots when it comes to building a place to call home in our organization.

We currently have an opening for a Security Consultant within our Singapore office! Your role will involve carrying out penetration testing and security assessments of typical and unique pieces of technology to sophisticated and progressive cloud-native systems.

We’d also love you to do some research to ensure your skills remain relevant in a fast paced world of security.

How you spend the rest of the time that’s not working with clients is your call. WithSecure has a commitment to research. Based on their skillset and inclination, our consultants get a percentage of their time dedicated to security research. Whether it is used to investigate new software, hardware or protocols, we encourage our team to push the boundaries of what is possible!

What we need:

We solve complex cyber-security problems on a daily basis and to do that requires an interesting mix of skills. To be successful at WithSecure and help our clients with their challenges we know you’ll need the following:

1. A passion for security! You love computers, you love security and you love hacking things and solving problems. If this wasn’t your job it would be your hobby. Technical excellence. You know your subject area, but you’ll also know what that subject area is without us needing to say.

2. Self-motivation You’re not going to be told what to do all the time. You are capable of figuring out what spending time working is of benefit to WithSecure and our clients and then run with it. With great freedom comes great responsibility and you also seek out guidance from those around you when you need it.

3. Communication skills - How can we add value to our clients organisations unless we can tell them what we did, how we did it, and how they can fix it? But communication also extends to sharing your knowledge with your colleagues and the wider industry. Our consultants work as a team and all members are expected to suggest and implement improvements to procedures and products based on their experience and interaction with clients. They are also encouraged to share their knowledge with the WithSecure team as part of the company’s information sharing culture.

What are we looking for?

• An ideal candidate will have; 2-3+ years of experience delivering hands-on cyber security consultancy projects with clients;
• WebApp Testing. You know your way around Burp, and can perform SQLi without using SQLmap.
• Infrastructure Testing. You understand that this doesn’t just mean running Nessus.
• Mobile App Testing. You are familiar with Frida and know how to tweak existing or write new Frida scripts.
• Experience in supporting the end-to-end delivery of large consultancy projects, with a team.
• Support pre-sales/scoping – a strong ability to understand and quantify client requirements, and propose consultative approaches that will deliver the best possible outcomes for the client.
• Familiarity with regional regulatory requirements for cyber security – including MAS’s TRM expectations – and how they apply to our roles.
• Experience interfacing with non-technical, and technical stakeholders to deliver technical and non-technical information.
• Excellent verbal and written communication skills.
• Relevant practical certifications – valid and active OSCP and CREST (CRT)
• Additional advanced certifications pertaining to Cybersecurity would be a bonus (E.g: OSWE, OSEP, CRTO, AWS Security Speciality, Microsoft AZ-500)

What will you get from us

• Freedom – you will have the opportunity to define new ways of working how we engage with our customers, and how product value gets represented
• You will work together with experienced and enthusiastic colleagues, and within WithSecure you'll find some of the best minds in the cyber security industry
• A collaborative and supportive work environment with opportunities for career growth and advancement.
• Opportunities for continuous learning and development, including training, certification and research time.

Funding Societies | Modalku is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs), which is crowdfunded by individual and institutional investors. And here at Funding Societies | Modalku we live by our core values:

• Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
• Grow Relentlessly: Strive to become our best, most authentic selves.
• Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
• Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
• Focus on Impact: Create impact through bias for action and tangible results.

As a (Senior) Security Operations Engineer you will lead efforts to identify, analyse, evaluate, and act upon security risks and threats. The Engineer will carry out security threat identification, analysis, and remediation to ensure efficient and timely mitigation of the threats, as well as understand the threats' risks and potential business impacts. The engineer will act as an incident handler and manage the end-to-end workflow of security incidents based on the defined process. The engineer will also be involved in Splunk Cloud Administration (integrations, use case creation, health check) and the development of the team’s processes and continuous service improvement.

What will you do:

Incident Response

• Monitor and analyse security alerts and incidents to identify potential threats.
• Investigate security incidents promptly, utilising various tools and technologies.
• Coordinate and execute incident response activities in collaboration with cross-functional teams.
• Contain and mitigate security incidents to minimise impact and prevent further compromise.
• Develop and implement incident response plans to enhance organisational resilience.
• Create incident report in a timely manner for applicable incidents.

Log management and Integrations

• Configure and integrate log sources into splunk cloud and create dashboards for various use cases.
• Develop and maintain log management strategies to ensure the collection and indexing of relevant data.
• Troubleshoot and optimise log sources to enhance data accuracy and completeness.
• Integrate Splunk into the needed log sources, if needed.
• Collaborate with Managed Security Service Provider (MSSP) and other internal security teams to develop and finetune correlation rules and alerts.
• Implement best practices to enhance search and reporting capabilities.

Threat Intelligence

• Stay current with the latest cybersecurity threats and vulnerabilities.
• Review threat intelligence reports and perform the necessary follow-up actions.

Collaboration

• Collaborate with internal teams and external partners to share notable incidents and improvements.
• Participate in cross-functional training exercises and simulations.
• Mentor other team members about Security Operations work.

What we are looking for:

• Strong understanding of behavioural aspects of cybersecurity incidents.
• Excellent interpersonal, communication, and presentation skills.
• Professional working habits and quality-oriented.
• Willing to work with and report under the Security Operations Manager.
• Relevant certifications related to Splunk and Incident Response are a plus.

Representing a tech giant who is currently looking for a Security Application Engineer. You will manage and implement security measures in cloud environments. This role will be reporting directly to the Director of Security and Director of Engineering.

Responsibilities:

• Proficiency in C# and Ruby on Rails to comprehend and fortify the company's codebase.
• Creation and implementation of secure infrastructure on cloud platforms, emphasizing network configurations and access controls.
• Configuration and management of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools.
• Analysis of penetration test findings and collaboration with developers to enact corrective actions.
• Promotion of security-driven changes across the engineering team utilizing JIRA and scrum methodologies.
• Integration of security principles into design through the development of design patterns and shared libraries for engineers.
• Establishment of a comprehensive Security Software Development LifeCycle (SSDLC).
• Cooperation with development teams to integrate security seamlessly into the development process.
• Adoption of a DevSecOps approach to encourage collaboration among development, operations, and security teams. Additionally, providing guidance and training to engineers on security standards and internal security protocols.

Job Requirements:

• Min 5 to 8 years of relevant experience in rolling out secure coding practices and security engineering on cloud platforms.
• Possession of certifications such as CISSP, CEH, AWS Security Specialist, or OSCP.
• Proficiency in security frameworks like CIS v8 and security coding methodologies such as OWASP.
• Demonstrated experience in the implementation or maintenance of CIS v8 controls.
• Established track record in a security engineering capacity, specializing in cloud security and secure coding practices.
• Familiarity with C# and Ruby on Rails.
• Proficiency in both Windows and Linux operating systems.

If you're interested in this role, click 'apply now' ,or email [email protected] for a confidential discussion.

• Location: Town area
• Salary: Up to $7000
• Hybrid work arrangement (can be discussed with the Hiring Manager)
• Candidate must be willing to stand-by 24/7 (we can offer stand-by allowance)
• Do note that this is a 6 months contract to perm

Responsibilities:

• Engage in and improve the whole Java Management Service lifecycle of applications deployment and operation
• Improve the existing continuous deployment pipeline for a wide range of functionalities across geographically separated zones
• Improve JMS Observability platform, Security and Incident management to meet the SLAs and SLOs defined for all cloud services
• Architect highly available and scalable service
• Skills to troubleshoot and trace symptoms back to the root cause
• Document and present methodologies to operations, engineering, and executive teams
• Educate the wider engineering organization on design and operational best practices for distributed computing
• Helping to meet the SLAs/SLOs for internal and external services and continual improvement of operational processes (weekly ops meetings, metrics, etc)
• Build tools and automation to improve system observability, availability, reliability, performance/latency, monitoring, emergency response
• On-call duties

Requirements:

• Related experiences in this field
• Able to commit as soon as possible

HOW TO APPLY:

Interested applicants, please submit your updated resume in PDF/MS Word format to [email protected]

Please state your availability, current & expected salaries for processing purpose.

All applications will be treated in the strictest confidence.

We regret that only shortlisted candidates will be notified.

Tay Bi Hui Avery

Reg no: R23112677

EPS Consultants

95C5630

Company Overview

Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content. To this end, we created a platform that delivers content governance, compliance, and protection to customers. The platform unifies, tracks, controls, and secures sensitive content moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all sensitive content communication. Kiteworks is carrying its bold vision forward while maintaining strong profitability and growth. This is a perfect time to join the company as it moved into a high growth phase and there are many opportunities to make a meaningful contribution to its future.

The Role

We are looking for a highly driven, talented, and self-motivated Senior Applications Security Engineer to be part of our growing application security team. You will be part of a team that is up to date on emerging security vulnerabilities and threats, and works toward improving the security of our products and our CI/CD environment and process.

Key Responsibilities:

• Develop automation and security tools to enhance the security posture.
• Research, evaluate, and integrate new security technologies/tools within CI pipelines.
• Perform STRIDE threat modeling before each product release.
• Provide consultation in design and security reviews for new features.
• Conduct product code reviews with a security-focused lens.
• Execute white box security scans and implement system/application hardening measures.
• Document security fixes and support customer service with security advisories.
• Maintain comprehensive documentation and handle CVE filings.
• Analyze reported vulnerabilities, assess risks using CVSS methods, and determine impact.

Job Requirements:

• Bachelor’s or master’s degree in computer science or computer engineering, specializing in cybersecurity.
• at least 2 years of hands-on experience in cybersecurity roles.
• In-depth knowledge of common web application vulnerabilities and mitigation strategies.
• Proven ability to validate and implement security fixes; manage bug bounty reports effectively.

Key Skills and Experiences:

• Demonstrated expertise in integrating security measures into CI/CD pipelines using Jenkins, GitLab, etc.
• Proficiency in executing and interpreting results from SAST and DAST tools.
• Strong background in Linux system hardening and implementing CIS security standards.
• Proficiency in PHP and Python for security-related tasks.
• Hands-on experience with blue team responsibilities like DFIR and security hardening.
• Familiarity with AWS and Azure; additional experience considered advantageous.
• Security certifications (e.g., SANS) are highly valued.

Desired Attributes:

• Exceptional analytical skills coupled with a meticulous problem-solving approach.
• Excellent written and verbal communication skills.
• Proven ability to convey complex technical concepts to diverse audiences.
• Passionate about Kitework’s domain and mission.

Compensation/Perks

You will be rewarded with a competitive compensation package, including excellent benefits and stock options. Other benefits include: medical, dental, and 18-21 days annual leave

• Review contract documents, perform measurements, and promptly prepare Bill of Quantities.
• Collaborate closely with the Project Team to submit progress reports, progress claims, variation orders, final accounts, and other relevant documents.

Requirements:

• Diploma in Quantity Surveying or equivalent
• At least 2 years of work experience in construction or security system industry.
• Proficient in AutoCAD and ELV systems.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R24120303

Location : Orchard , Singapore

Industry : Retail

Working hours : 3 Different rotating shifts inclusive of weekends and PH : 8am-5pm ; 1pm-10pm & 930pm-930am

Benefits: Basic + AWS + Variable bonuses

· Assist in the supervision of in-house security personnel and Agency guard services

· Performs rotating & night shift-duty to provide security and patrol company premises according to specified procedures

· Inspection & monitoring of security passes & goods at selected locations

· Render assistance in emergencies & investigations

· Possess a WSQ Certificate in Security Operations

• Minimum 2 years of security experience

Executive Summary

Smart IMS Inc provides Digital technology & Cloud transformation services, Application & Infrastructure Management Services, Unified Communications, and Insurance implementation services to customers across the Americas, Europe, Middle East, and Asia-Pacific regions. As the trusted technology and business partner of leading MNCs, including Global Investment Banks, Smart IMS is also a Microsoft Gold Certified Partner, Oracle Platinum Partner and AWS MSP Partner.

We are looking to hire a Network Security Operations Engineer in Singapore to support our client, a top global investment bank, to handle day-to-day operations managing the global Networking and Security Infrastructure.

Responsibilities:

• Responsible for day-to-day operations of Global Network and Security Infrastructure
• Demonstrate Advance level of Troubleshooting, configuration and maintenance of Network and security devices.
• Expert level skills in configuring and troubleshooting F5 Load balancers and Proxy Devices
• Expertise in troubleshooting Checkpoint and juniper firewall
• Cisco routing and switching, LAN/WAN Infrastructure support.
• Good Understanding of networking protocols such as BGP, EIGRP, OSPF, MPLS
• Experience in DNS, DHCP infrastructure.
• Experience managing wireless environment.
• Good experience using multiple firewalls platform including Cisco ASA, Checkpoint, Palo Alto and FortiGate

Skills:

• 5 -8 years of relevant experience working in (NOC) environment
• Experience with either F5 or Avi Load Balancers is required
• Proxy device experience in either Bluecoat or McAfee proxy is necessary
• Familiarity with AAA framework and past experience with Network Access Control (NAC) solutions such as Cisco ISE, Aruba Clear Pass
• Past relevant experience in Banking or Financial Industry will be an advantage
• Drive Major incidents calls independently and keep the communication channel updated.
• Good understanding of ITIL methodology, in-depth knowledge in incident, change and Problem management process.
• Good communication skills and should be a great team player.

• Preparing payments and petty cash reimbursements.
• Preparing instalments of vehicles and loans.
• Updating of creditors listing.
• Oversee the function of Accounts Receivables.
• Submitting and monitoring of payroll via internet banking weekly and petty cash reimbursement for SO freelance wages.
• Assist the HR Department in any payments such as final wages or any other urgent payments.
• Weekly fund reporting.
• Prepare monthly costing for SO Full Time & Part Time.
• Monthly financial report to be prepared within 2 weeks after the month ends.
• Daily bank reconciliation.
• Preparing and submission of Good Service Tax (GST) evert quarterly to IRAS.
• Preparing yearly financial report to Auditor.
• Preparing of financial year budgeting and propose or provide recommendations to the following year’s budget accordingly.
• Managing of bank tokens for approval.
• Preparing report and present during monthly management meetings.
• Preparing documents for Secretarial.
• Updating sales in food platform eg: Foodpanda , Grabfood , Chopes.
• Managing reconciliation in MYOB system.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Responsibilities
• Plan, implement, manage, monitor, and upgrade IT security solutions.
• Support projects by delivering project deliverables and completing milestones.
• Develop and maintain technical, operational, and configuration documentation necessary for project implementation.
• Coordinate and manage vendors for product implementation and troubleshooting.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of security measures, ensuring their continued efficacy post-implementation.
• Provide technical support and incident response for IT security infrastructure components to the maintenance team.

Requirements:
• Proficient in Endpoint Security solutions, including Anti-Malware, Host Firewall, Application & Change Control, Disk Encryption, and EDR.
• Knowledgeable in Identity & Access Control solutions, such as PKI solutioning, Hardware Security Module (HSM), Privileged Access Management, 2FA, and OS Hardening Policies.
• Implement Endpoint or Identity & Access Control Security tools.
• Familiarity with various operating systems like Windows or Linux.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568