Security Operations Analyst

Main Duties

· assigns technical tasks and manages delegation for technical issues,

· animates the team to encourage collaboration and sharing of best practices,

· has a role in supporting technical skills development and provides training when required,

· supports new technologies and leverages them to provide consistency of service across streams,

· manages service improvements for all Network and Security services supported throughout the organization,

· documents, reviews, maintains and shares relevant technical information to the team

· provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,

· implements and develops improvements based on LEAN-CA-CIB best practices,

· focuses on automation and optimum use of the team to improve efficiency,

· drives and delivers root cause for any high severity issue,

· reviews technology changes to identify potential risks,

· is responsible for problem management and resolution

· Perform real-time analysis and trending of security systems

· Respond to user incident reports and evaluates the type and severity of security events.

· Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.

· Interpret and apply security policies and procedures.

· Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

· Manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

· Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

· Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

· Fluent in English, both written and spoken

· 15+ years of Experience in managing network and security infra.

· 10+ years Experience in handling major network security projects (ex: SDWAN )

· 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.

· At least a Bachelor’s degree in any of these faculties: Computer Science/ Information Technology/ Programming & Systems Analysis/ Science (Computer Studies)

Working Hours:

· Primarily match Europe business hours

· On-call support will be expected on a rotational basis

Company Reg No.: 201131609D | License No.: 11C4684 | Madhavi Talupula

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

As a Cloud Security and Endpoint Management Specialist, you will be at the forefront of safeguarding our organization's cloud infrastructure and endpoint devices. This role encompasses managing security protocols for Office 365, AWS, and Azure, as well as overseeing Intune Mobile Device Management (MDM) solutions, and incorporating endpoint protection with tools like CrowdStrike.

Key Responsibilities:

1. Cloud Security Management:

• Implement and maintain security measures for Office 365, AWS, and Azure environments.
• Collaborate with cloud service providers to ensure adherence to security best practices.
• Conduct regular security assessments and audits, integrating threat intelligence for proactive defense.

2. Endpoint Security and Management:

• Administer and configure CrowdStrike and other endpoint protection tools to fortify defenses.
• Oversee and manage endpoint security solutions for a diverse range of devices.
• Implement and enforce security policies, ensuring compliance with industry standards and regulations.

3. Conditional Access in Azure:

• Design and implement conditional access policies in Azure, considering endpoint security parameters.
• Monitor and analyze access logs to identify and respond to potential security threats.

4. Intune Mobile Device Management (MDM):

• Administer and configure Intune MDM policies to ensure secure mobile device management.
• Collaborate with endpoint protection tools to enhance device-level security and threat detection.
• Implement and manage device compliance and conditional access policies for mobile devices.

5. Collaboration and Communication:

• Work closely with cross-functional teams, including IT, security, and compliance, to align cloud and endpoint security measures with organizational goals.
• Provide regular updates and reports on the status of cloud and endpoint security, emphasizing the integration of CrowdStrike for endpoint protection.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience in cloud security management, with a focus on Office 365, AWS, and Azure.
• Expertise in implementing and managing security measures for endpoint devices, including experience with CrowdStrike.
• Hands-on experience with Intune Mobile Device Management.
• Familiarity with conditional access policies in Azure.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.

Certifications (Preferred but not necessary):

• Microsoft Certified: Security, Compliance, and Identity Fundamentals
• AWS Certified Security - Specialty
• Certified Information Systems Security Professional (CISSP)
• CrowdStrike Falcon Certified Administrator

The main responsibilities and tasks of this position are listed as, but not limited to the following:

• To ensure compliance of Hotel Security Policies and Procedures
• To assume responsibilities during shifts.
• To keep abreast of developments within the hotel and community as they relate to security.
• To have a clear understanding of current and amended laws, employee’s handbook and all new policies and procedures which may be issued from time to time by the management.
• To take an active role in the implementation of the hotel’s fire plan including use of fire extinguishers and firefighting peripherals, rendering first aid and duties as member of CERT
• To conduct briefings for each shift, covering security information, important events or any other matter arising.
• To document all incidents occurring in the hotel in connection with crime, subversions, potential liabilities, and insurance requirements.
• To control the keys, lock system, alarm system and fire protection system.
• To make recommendations to the superiors on security related matters.
• To respond properly in any hotel emergency or safety situation.
• To observe the grooming policy as laid out in the employee’s handbook, as well as those set out by the department.
• To cooperate efficiently with all departments within the hotel directly or indirectly involved with the Security Department.
• Ensure all matter are reported to Security Supervisor /Assistant Security Manager /Security Manager.
• To perform any other duties that may be assigned by the Management.

PRODUCT AREA

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.

ADDITIONAL JOB DESCRIPTION

As a Strategic Services Function Manager, you will blend risk assessment, strategic planning, and client collaboration. You will manage a team of cyber security consultants. You'll conduct in-depth cyber maturity assessments, develop forward-thinking strategies, and lead realistic simulations that help clients prepare for and respond to cyber threats.

In this role, you will identify vulnerabilities and develop actionable mitigation plans. You'll empower clients with data-driven insights, enhancing their security posture.

Qualifications

JOB RESPONSIBILITIES

• Manage and inspire a highly skilled team towards surpassing our goals by driving performance and outcomes, while managing workload, scheduling resources, and ensuring the quality of their output.
• Foster expansion in the APAC region for our Strategic Services Practice through the identification and advancement of opportunities, aiding in the creation and development of Statements of Work, and participating in responses to RFPs/RFIs/RFQs. Promote a culture of continuous learning and development within the cyber security practice.
• Perform in-depth assessments to identify and analyse cyber vulnerabilities and threats. Prioritize risks based on their potential impact.
• Craft cyber risk mitigation strategies, ensuring alignment with regulations (e.g., GDPR, ISO 27001, NIST/CIS Controls).
• Collaborate with clients to tailor cyber security solutions. Generate clear reports and presentations explaining risks and mitigation plans. Scope and propose solutions to clients.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 10 years of experience in cyber security with a risk assessment focus.

PREFERRED QUALIFICATIONS

• Master's degree in a relevant field.
• Professional certifications in cyber security (e.g., CISSP, CISM, CRISC)
• Consulting and/or project management experience, and experience leading cyber security assessments, including Table-Top Exercises (TTX).
• Knowledge of security frameworks (e.g., ISO 27000, NIST CSF).
• Ability to present complex security concepts to varied audiences (e.g., technical and executive).
• Excellent communication and problem solving skills.

Job Responsibilities:

1. Support sales efforts by attending security sales meetings when necessary, providing effort estimations, and outlining project timelines for security testing.
2. Develop security acceptance test plans.
3. Offer expert technical support during security testing activities.
4. Prepare for security tests by setting up testing environments, configuring, and installing security testing tools.
5. Conduct manual or automated security testing using commercial security testing tools.
6. Perform Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests.
7. Conduct Whitebox Testing and Secure Code Review.
8. Perform Network and Infrastructure Vulnerability Assessment and Penetration Testing.
9. Perform Web, Mobile, and Desktop Application Vulnerability Assessment and Penetration Testing.
10. Identify and pinpoint vulnerabilities in the assessed target systems/applications.
11. Document and report identified vulnerabilities in the system.
12. Provide professional recommendations and advice to mitigate and resolve vulnerabilities.
13. Present security testing results to relevant stakeholders.
14. Provide weekly status reports on the progress of security testing activities.

Key Requirements:

1. Possession of one of the following certifications:CREST Registered Penetration Tester (CREST CRT)
   Offensive Security Certified Professional (OSCP)
   
2. Knowledge of conducting security testing adhering to guidelines and standards such as:Open Web Application Security Project (OWASP Top 10 Frameworks)
   Common Vulnerability Scoring System (CVSS)
   Common Vulnerabilities and Exposures (CVE)
   Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors
   
3. High proficiency in manual and automated techniques for penetration testing across various systems and applications, including but not limited to network equipment, servers, web applications, APIs, wireless systems, mobile applications, and databases. Techniques include vulnerability assessments for injection, privilege escalation, fuzzing, buffer overflows, etc.
4. Familiarity with tools such as Proxies, Port Scanners, Vulnerability Scanners, and Exploit Frameworks (e.g., Burp, Nessus, Nmap, Metasploit).

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Our client, a leading financial institution within the region, is looking for a Senior Cyber Security Lead, with a strong understanding of the threat landscape to join their team here in Singapore. As the Senior Cyber Security Lead, you will play a critical role in ensuring the security and integrity of the organization’s external attack surface. You will be responsible for developing and implementing strategies to identify, monitor, and mitigate potential threats and vulnerabilities across the firm’s digital footprint.

Responsibilities

• Lead the development and implementation of the External Attack Surface Management Solution, including tools, processes, and procedures.
• Conduct regular assessments and audits of our external attack surface to identify vulnerabilities, weaknesses, and potential threats.
• Collaborate with cross-functional teams to prioritize and address security issues identified through external attack surface monitoring.
• Stay up-to-date on emerging cyber security threats, trends, and best practices to continuously enhance our security posture.
• Provide guidance and support to internal teams on security best practices related to external attack surface management.
• Develop and deliver training programs to raise awareness and promote a culture of security within the organization.
• Act as a subject matter expert on external attack surface management and provide strategic recommendations to senior leadership.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field.
• 8+ years of experience in cyber security, with a focus on external attack surface management.
• Strong understanding of cyber security principles, methodologies, and technologies.
• Hands-on experience with external attack surface management tools and platforms.
• Proficiency in conducting vulnerability assessments, penetration testing, and threat intelligence analysis.
• Excellent analytical and problem-solving skills, with the ability to think critically and strategically.
• Effective communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.
• Relevant certifications such as CISSP, CEH, or CISM are highly desirable.

If you are passionate about security and possess the skills and expertise to make a difference, we want to hear from you.

JOB DESCRIPTION

We are looking for highly-motivated and skilled data engineer to work on a new initiative on developing advanced AI software platform for Cardiac CT diagnosis.

Successful candidate will work with a team of data scientists and data engineers to develop AI platform for hospitals and clinical trials. Successful candidate will have the opportunity to tap into a large pool of industrial data from different disciplines and to interact with the companies to understand their real data needs.

JOB REQUIREMENT

• Bachelor degree in the field of software engineering, computer science, computer engineering, mathematics and statistics, electrical engineering, or related field.
• Possess minimum 1 year of relevant work experience
• Ability to work independently to translate research ideas into programs with efficient coding
• Basic knowledge on data analytics, machine learning, data mining
• Proficient in Python, Java Script
• Prior industry experience with engineering, financial services, healthcare, or urban development is a plus
• Able to deliver under tight schedule
• Good team player with both research and engineering ethics
• Good interpersonal and communication skills

The above eligibility criteria are not exhaustive. A*STAR may include additional selection criteria based on its prevailing recruitment policies. These policies may be amended from time to time without notice. We regret that only shortlisted candidates will be notified.

We are looking for a security executive to join us as part of the Security team, assisting in the management of the overall security of properties and events managed by The Esplanade Co Ltd, as well as to ensure the safety of the properties and event area, installations within, visitors and staff.

KEY RESPONSIBILITIES

• Security planning and operating procedures including:
• Plans security rosters and daily operations schedule for security control
• Ensures that all policies and procedures regarding security measures, crowd management controls and emergency evacuation procedures are properly implemented and adhered to.
• Liaises with relevant parties like the Police and other government agencies regarding coordination for security measures or events with VIPs.
• Security operations including:
• Assist the Head, Security in the day-to-day operations of all properties’ command centres and to ensure that they are always manned.
• Performs daily checks, inspections, and monitoring of the properties.
• Report all unusual incidents, take quick and appropriate actions to ensure the security and safety of the properties and their visitors and staff.
• Assist Head, Security to manage access control for staff, venue hirers, contractors, etc.
• Check and ensure that no illegal foreign workers are engaged within the properties.
• Conduct investigation on security matters and submit report and recommendations to Head, Security. Outsourced security personnel and security equipment and systems
• Directly supervise outsourced security personnel in the overall security coverage of the properties.
• Explain and communicate security requirements and measures to all outsourced security personnel for performance venues during and after performances and for all other spaces within the properties. Ensure adherence to all security measures and controls.
• Monitor and ensure proper conduct of outsources security personnel.
• Make regular check on the security personnel and the security of the properties.
• Assist Head, Security to organize outsourced security personnel for crowd control, traffic control and safety management within the properties.
• Au fait with the security equipment and systems of the properties.
• Department capabilities and functions
• Assumes roles and responsibilities as per assigned by Head, Security and Security Manger with regards to the maintenance, execution and improvement of the department capabilities and functions in manpower planning, logistics and administration, key management, system and equipment doctrine and audit, intelligence, etc.
• Provides regular reports and updates on the assigned responsibilities within time frames set by Head, Security and Security Manager.
• Maintain traceable and auditable records actions involving the assigned responsibilities.
• Fire safety
• Assist the Head, Security and Fire Safety Managers in reviewing and improving the overall fire safety of the properties.
• Monitor any fire alarm tests and assist in any emergency evacuation exercises.
• Assist the Head, Security and Fire Safety Managers of all properties during fire emergencies and to liaise directly with the SCDF during after-office hours whenever necessary.
• Escalate any fire safety breaches promptly to the Fire Safety Managers of respective properties whenever discovered.
• Ensure all outsourced security personnel of respective properties are au fait with the fire safety procedures and evacuation routes.
• Crisis Management
• Implement appropriate crisis management plans whenever necessary
• Assist Head, Security and Security Manager during crisis and to liaise directly with SPF during after-office hours whenever necessary.
• Ensure all outsourced security personnel of respective properties are au fait with crisis management plans

JOB REQUIREMENTS

• Minimum full GCE ‘O’ level education.
• WSQ Diploma in Security Management will have an added advantage.
• More than 3 years’ experience in supervisory positions as Police/Auxiliary Police Sergeant or SAF Specialist.
• More than 2 years security experience in management positions at corporate organizations.
• Good leadership, interpersonal, communication and analytical skills.
• Required to perform shift duties (2 shifts)
• Perform emergency call back duty

We invite you to email us at [email protected] with your resume and an indication of your current and expected salary if you are keen to join us as Security Executive. We will only notify shortlisted candidates for interview.  We thank you for your interest in the position and in the Esplanade.

Assistant/Associate Professor

DEPARTMENT OF COMPUTER SCIENCE

Location: 510 Dover Road, Singapore

Description: Full-time Assistant Professor in Department of Computer Science, DigiPen Institute of Technology Singapore. We expect to make an appointment at the Assistant Professor Level or higher, commensurate with the candidate’s academic credentials and prior experience.

Responsibilities:

• While teaching some combination of the above subjects as determined by the selected candidate's unique synthesis of interests, he/she is also expected to teach general computer science subjects (such as operating systems, data structures, design and analysis of algorithms) at the university level. Other responsibilities include academic advising, undergraduate research advising, curriculum development, institutional service and appropriate scholarly activity.

Education and Experience Qualifications:

• PhD degree in Computer Science, Computer Engineering, or a closely related field.
• At least 4 years of industry or research experience in the field of study or a closely related area.
• Strong background in one or more following areas: C/C++ programming, Computer Graphics, Computer Architectures, Parallel Processing, Computer Networks, VR/AR, Computer Vision, Data Analysis, Distributed Computation, Cyber Security.
• Work/Teaching experience or exposure to one or more following areas: game/interactive-simulation, AI, machine learning, computer vision, data science, image processing, etc.
• 2D/3D graphic programming (OpenGL or DirectX) is an added advantage.
• A commitment to teaching excellence and scholarship is also expected.

Starting Date: Immediate

Salary: Salary is competitive and commensurate with experience and education.

Application: Review of applications will begin immediately and continue until the position is filled. For a complete application, please email a letter of interest, curriculum vitae, and statement of teaching philosophy, transcript of highest degree earned, and three letters of recommendation.

Electronic submission is required with documents in either Word or PDF format attached to an email and sent to:

Email: [email protected] with subject line “Full-time Faculty of Computer Science”.

Responsibilities:

• Security products implementation for Public Key Infrastructure (PKI), Hardware Security Modules (HSM) and Privileged Access Management (PAM).

• Documentation for project requirements.

• Follow project implementation lifecycle.

• After sales support such as product incident escalation and technical support (24x7 SLA).

• Conduct user training and knowledge transfer session.

• Integration of security products.

Candidate requirements:

• Bachelor’s Degree in Computer Science/Computer Engineering/Information Engineering or equivalent.

• 1-5 years’ experience in security system integrator environment.

• Basic knowledge on networking such as TCP/IP, firewall, switching and routing.

• Working knowledge on setting up Windows/Linux servers and VM.

• Coding/scripting knowledge (Good to have).

• Knowledge in products such as Cyberark, Entrust a plus.

• May need to support after office hour and during weekend/public holiday.

• Strong analytical, problem solving and interpersonal skills.

• Keen in cyber security domain.

• Working experience and knowledge on system infrastructure with interest of exploring security product welcome to apply.

Company Introduction:

ITSEC Asia is an international information security firm offering a wide range of high-quality cyber security services and solutions in Singapore.

https://itsec.group/

Responsibilities:

Validate and provide feedback on scope of project to the sales team.

Oversee the delivery of project assigned for it's milestones, budget, quality and time of completion.

Review the completeness and accuracy of end of product.

Perform timely reporting to stakeholders regarding the status of the project.

Handle stakeholders feedback and assist with any project escalation.

Manage suppliers (in accordance to contractual obligations) to meet stipulated service levels within scope and schedule, and perform variation and technology refresh (when necessary).

Ensure cyber security projects’ comply to information control, Quality Management System (QMS) and contractual requirements.

Serve as the primary point of contact for stakeholder, communicating with stake holders is a day to day routine.

Assist with internal and external auditors on customers’ consumption of pattern.

The Successful Candidate:

Degree or Diploma in any of the following fields: IT or Computer Science, Business Administration.

Minimum 3 years of Project Management experience.

Excellent communication skills, both oral and written, with the ability to pitch ideas and manage stakeholders.

Good analytical, organization and planning skills.

A team player who can work independently.

Advantageous to have:

Experience in ICT Industry and/or Government.

Experience in leading cyber security audit, penetration testing, control reviews and others.

Knowledge in standard IT/Cyber Security policies.

Knowledge in Information systems, infrastructure topology, virtual machine technology, networking and IT security, with professional certifications are preferred.

Project Management related certification such as CITPM, PRINCE2 or PMI.

and/or to have CISA/ISO27K Audit certification

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Manager, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Experience in delivering multiple security projects and solutions across one or more of the following domains: (Information Security domains: Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Security Operations and Cyber Analytics.) This experience should include both advisory, implementation and operation experience
• Understand security concepts and how they apply to business and technology solutions
• Be able to articulate threats and risk to business and technology leaders
• Understand project management concepts and how they can be applied to security related projects
• Strong technical security skills in assessment, design, implementation, architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 6 years of relevant experience. Preferably with 2 years of experience in business consulting role in a leading consultancy firm
• Possess a CISSP certification
• Mandatory skills: Threat Modelling and Cloud Technical Risk Assessment knowledge
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.
• Solution design of Threat & Vulnerability Management solutions such as implementation of SIEM (e.g. ArcSight), Incident Response (e.g. Resilient) & Security Analytics (e.g. RSA Security Analytics) within the context of a Security Operating Centre framework
• Familiar with at least one of the following IAM technologies such as SailPoint, RSA Aveksa / VIA & Oracle (OIM, OIA)

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

Credit Bureau (S) Pte Ltd is looking for an IT Security Officer to support the IT Security Consultant with its company’s Information Security Program.

Responsibilities:

• Manage and monitoring of next generation firewalls, IPS, SIEM, WAF, EDR, 2FA.
• Evaluate security incidents and determines what response, if any, is needed
• Develop and provide security awareness training to end users.
• Conduct vulnerability assessment.
• Follow up on findings from vulnerability assessment and penetration test. Work with different stakeholders to address the findings.
• Manage vendors of IT security services and products.
• Assist in audit and compliance requirement.
• Work on new initiatives to enhance security.

To succeed in this role, you are likely to have the following eexperience/knowledge & skills:

• Minimum 2 years’ direct experience in information security related duties. Candidate with strong information security knowledge may be considered.
• Experience in SIEM would be advantageous.
• Candidate with relevant information security certification is preferred
• Candidate must be highly analytical and effectively able to troubleshoot and prioritize needs, requirements and other issues

Technical skills

• Architecture and Deployment
• Cisco/Aruba Switching /Routing & WLAN
• DDI, AAA/Cisco ISE
• Network Automation: Python & Ansible
• As Built, LLD, Testing & Acceptance Testing Documentation Skills
• ZScaler & Network Security
• Certification: CCNP/CCDA equivalent
• Meraki, Palo alto, f5 loadbalancer, UTP
• Experience in network operations/maintenance and passionate about providing troubleshooting support
• Knowledge on Internet Technologies (i.e. routing, switching and general network infrastructure), and technologies associated with the ISP market
• Strong analytical and problem-solving skills, and has a flair for dealing with technical and operational problems
• Experience in IT audit or CISA/CISM certified preferred or operational risk management and control self-assessment or prior experience in implementing security solution and information security governance
• Demonstrated knowledge of global cyber threats, threat actors and the tactics, techniques and procedures (TTPs) used by cyber adversaries, particularly as they relate to the financial sector.
• Experience with models for threat analysis, such as the Diamond Model, Cyber Kill Chain and MITRE ATT&CK framework.
• Enterprise Data Network (administration, patching, upgrade and migration activities), Design, Preparing of HLD/LLD, Implementation Team leading, Service Level management, demand, incident, change management.
• Provide network WAN/LAN design, implementation, consulting, Cisco, Aruba, Juniper
• Network audit Identify the gaps and suggest the remedial solution supporting in RFP/RFI response
• Experience in running operations with ITIL processes / Project Management - PMP

RESPONSIBILITIES

• Work closely with SOC, CERT and other security teams and Infrastructure skill teams in daily operation and review security requirements
• Exception management: Evaluate and manage infrastructure security exceptions
• Vulnerability management: Conduct scan, assessment and remediation follow-up
• Incident management: Report and follow security incidents and their remedial actions
• Request / Change management: Conduct security assessment for infrastructure request & changes
• Review security architecture proposed by other infrastructure teams
• Deliver innovation initiative to improve overall infrastructure security and efficiency
• Manage and execute the Infrastructure related security projects
• Be the security Interface with stakeholders at all levels, from technical engineers to senior management locally, regionally and globally
• Work closely with other risk and security departments, including all 3 lines of defence
• Cyber reporting: Production of various cyber security reporting (KPIs; KRIs). Coordinate among
• Infrastructure teams to contribute to external stakeholders reporting and requests
• Conduct security & risk awareness training to the Infrastructure teams
  

PROFILE REQUIRED

• Knowledge and hands-on experiences in IT, Infrastructure and information security
• Knowledge and experience in IT infrastructure (speak the language, expertise not required)
• Knowledge in technology regulatory requirement like HKMA, SFC, MAS, GDPR, CBIRC, etc. is required
• Project management experience is desired
• Knowledge and experience in a banking environment will be beneficial but not essential
• Knowledge in the MITRE ATT&CK framework and hands-on experience on security incident investigation processes & techniques
• Security knowledge in the Public Cloud, development and specific Infrastructure domains are a plus
• Professional certification recognized by Regulatory bodies like HKMA, e.g. CISM, CISA or CISSP, is mandatory

Behavioral Skills

• Client - Understanding and Respect: I listen to clients and colleagues in order to understand and anticipate their needs
• Client - Risk: I strive to satisfy clients while taking into account risks for the company
• Team Spirit - Synergies: I make cooperation with colleagues in and outside my team a priority
• Team Spirit - Collective mindset: I Favour the team’s interest over my own results
• Responsibility - Courage: I express my convictions and make decisions with courage and respect
• Responsibility - Accountability: I make decisions in my scope of responsibilities

Company Description

Societe Generale is one of the leading European financial services groups. Based on a diversified and integrated banking model, the Group combines financial strength and proven expertise in innovation with a strategy of sustainable growth. Committed to the positive transformations of the world’s societies and economies, Societe Generale seeks to build together with its clients, a better and sustainable future through responsible and innovative financial solutions. Active in the real economy for over 150 years, with a solid position in Europe and connected to the rest of the world, Societe Generale has over 117,000 employees and supports 25 million individual clients, businesses and institutional investors worldwide (figures as of August 2023). We have a presence in 11 locations across Asia Pacific. With our regional headquarters in Hong Kong – a core hub of the worldwide Societe Generale Group – we employ around 2,300 employees in the region. In addition, Societe Generale's Global Solution Centre (SGGSC) in Bangalore and Chennai supports the Group in Asia Pacific and globally with customized business solutions.

Department Description

The IT Infrastructure department, Global Technical Services (GTS), is one of the major stakes for the bank and is at the heart of Societe Generale group's strategy.Today, the Digital Transformation raises important challenges around IT Architecture, Infrastructure and Security. Many of these challenges are opportunities to imagine new experiences for our clients and new way to deliver IT services.Within the Resources and Innovation division, GTS department plays a key role in the Digital Transformation. With more than 3500 GTS staff located across the world, GTS develops innovative projects while delivering operational excellence for infrastructure services to 117,000 employees and 32 million external clients.GTS staff motivation comes from the new technologies they deliver to enhance agility of the various business lines (Cloud, Big Data, Continuous Delivery).GTS/SEC is the operational risks and security management function of GTS. Being the first line of defence for Societe Generale, its main objectives includes:

• Protecting the GTS infrastructures, the associated IT services and manages the operational risks
• Secure Infrastructure of the bank via detect and respond security incidents
• Improve the level of operational risk and security management for GTS
• Provide seamless security by design, focusing on critical assets and data protection
• Raise Security Awareness for SG staffs
• Be the Governance, Risk & Compliance Expert Center for GTS
  

At Toku, we create bespoke cloud communications and customer engagement solutions to reimagine customer experiences for enterprises. We provide an end-to-end approach to help businesses overcome the complexity of digital transformation in APAC markets and enhance their CX with mission-critical cloud communication solutions. Toku combines local strategic consulting expertise, bespoke technology, regional in-country infrastructure, connectivity and global reach to serve the diverse needs of enterprises operating regionally.

As we continue creating momentum for our products in the APAC region and helping customers with their communications needs, we are seeking a Security Analyst to be a trusted consultant and advisor on all matters relating to threat detection, alerts monitoring, and incident response. Reporting to our Information Security Manager, you will be a key point of contact both on in-house initiatives at Toku and consultatively for specific client projects. You will have ownership on identifying, diagnosing, solutioning, escalating, documenting and reporting incidents and threats, performing risk assessments and working towards improving and optimising systems and procedures.

This role offers broad exposure over a number of information security aspects, with potential growth paths towards GRC, InfoSec, Cybersecurity and more. In addition, you be part of a new and growing security function at Toku, and will be highly visible across stakeholders and teams, liaising regularly with senior architecture, development, cybersecurity and network stakeholders both in-house and externally. Join us as we strengthen our security posture, inspire a culture of compliance, and drive our organization towards a secure and resilient future.

Want to be part of our journey?

What would you be doing?

• Identify and evaluate existing security risks, both in-house and on client projects, and implement enhancements.
• Review and respond to alarms/tickets, taking action to prioritise, resolve / escalate, log and report to internal and external stakeholders according to best practices. From here, perform and document risk assessment reports.
• Attend client site meeting periodically, answering clients’ risk management and security questions and addressing / reporting security concerns.
• Review security incident and event logs, and monitor threat intelligence feeds, optimising and contributing to ongoing threat intelligence.
• Collaboratively work with security vendors for incident response and alerts monitoring.
• Analyse, and report compliance against security controls, identifying areas for improvement in data collection, assurance processes, and security procedures.
• Identify acceptable levels of residual risk and assist with action plans, policy, and procedural changes for risk mitigation.
• In addition to monitoring and threat detection, proactively assist / manage various in-house security projects and initiatives and provide guidance on security matters for other projects.
• Ensuring audit trails, system logs and other monitoring data sources are reviewed periodically and follow and adhere to regulatory policies.
• Coordinate and oversee security testing procedures (vulnerability assessment, code scanning) to verify the security of systems, networks, and applications, and assist in the remediation of identified risks.
• Stay up to date on latest security trends and standards, conduct research on security improvements and provide recommendations to clients and stakeholders.

We would love to hear from you if you have:

• A degree in a reputable university.
• At least 3-5 years of relevant work experience in IT information security analysis, governance, risk, and compliance.
• Working knowledge of Security Information & Event Management (SIEM) systems, Vulnerability Management, and Patch Management
• Experience in monitoring, tracking, and troubleshooting user activity logs using AWS CloudWatch and CloudTrail.
• Experience in scripting languages like Python, Powershell, Bash and SQLs.
• Knowledge of networks, firewalls, proxies, intrusion detection/prevention systems, concepts, and technologies, ideally with knowledge of EC2 incidences, GuardDuty or similar, and actions using AWS Lambda
• 3+ years of endpoint administration or support experience with Linux and Windows devices
• Experience with intrusion/manipulation techniques, and standard methodologies for Linux system hardening and process isolation.
• Prior experience in incident response and threat hunting
• Knowledge of DevSecOps principles and practices
• Professional information security certifications such as CISSP, CompTIA Security+, AWS Security Certifications, or equivalent are a bonus for this role.
• Confidence in presenting, with strong verbal and written business communication skills, and the ability to educate a non-technical audience about various security measures.
• Excellent analytical skills and attention to detail.

What would you get?

Flexible working locations

Training and Development

Discretionary Yearly Bonus & Salary Review

Healthcare Coverage based on location.

20 days Paid Annual Leave (excluding Bank holidays)

If you would love to experience working in a start-up growing at an accelerated speed, and you think you tick most of the requirements, join us!

JOB DESCRIPTION

We are looking for highly-motivated and skilled data engineer to work on a new initiative on developing advanced AI software platform for Cardiac CT diagnosis.

Successful candidate will work with a team of data scientists and data engineers to develop AI platform for hospitals and clinical trials. Successful candidate will have the opportunity to tap into a large pool of industrial data from different disciplines and to interact with the companies to understand their real data needs.

JOB REQUIREMENT

• Bachelor degree in the field of software engineering, computer science, computer engineering, mathematics and statistics, electrical engineering, or related field.
• Possess minimum 5 years of relevant work experience
• Ability to work independently to translate research ideas into programs with efficient coding
• Basic knowledge on data analytics, machine learning, data mining
• Proficient in Python, Java Script
• Prior industry experience with engineering, financial services, healthcare, or urban development is a plus
• Able to deliver under tight schedule
• Good team player with both research and engineering ethics
• Good interpersonal and communication skills

The above eligibility criteria are not exhaustive. A*STAR may include additional selection criteria based on its prevailing recruitment policies. These policies may be amended from time to time without notice. We regret that only shortlisted candidates will be notified.

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Job Summary

• This role is responsible for maintaining and improving the organizations cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.
• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree in engineering, science or information technology, or equivalent education with 3-5 years of related work experience in cybersecurity management and security governance.
• Candidates with additional experience will be considered for the Senior Cyber Security Analyst position
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)
  SASE (Zscaler, Netskope, Skyhigh)
  Tenable Security Center Continuous View
  Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)
  Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)
  Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)
  SIEM (e.g., Splunk, QRadar)
  CyberArk PAM and IAM
  
• Job Reference: QW8VR6R9

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Kindly email your resume in a detailed Word format to [email protected]

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd

Tel: 6950 9754

EA Registration Number: R22110899

EA License number: 02C4944

EA Personnel: Celeste Wong Xin Yann

Company Introduction

The Fourth Paradigm is a major player in China's intelligent decision-making market, dedicated to rapidly implementing enterprise-level artificial intelligence on a large scale. We provide technologies, products, and solutions centered around "decision-oriented AI" and "generative AI", facilitating the digital transformation of traditional enterprises. Our clientele spans various industries including finance, retail, manufacturing, energy and electricity, telecommunications, and healthcare. At The Fourth Paradigm, we prioritize independent research and application of cutting-edge technologies across various AI fields, contributing to the development of national artificial intelligence technologies and application standards. Our expertise lies in areas such as Automatic Machine Learning (AutoML), Transfer Learning, Automatic Reinforcement Learning, and Environmental Learning. We released our self-developed multimodal large model product, "4Paradigm SageGPT", in February 2023, accumulating dozens of early AIGC industry applications in China. In September 2023, we were listed on the Hong Kong Stock Exchange.

Our Team

The Ministry of Science and Technology is currently focusing on cutting-edge technology research and application implementation in fields such as AI big models, computer vision, natural language processing, machine learning, decision optimization, and speech. Internally, we adopt a more equal and friendly open-source community model, allowing everyone to freely choose tasks according to their interests and wishes. In such an environment, you can have close contact with many different technical fields and business tracks, thereby quickly improving your comprehensive capabilities. We provide a first-class work environment, innovative work models, sufficient computing resources, and competitive compensation and benefits. If you are an outstanding R&D talent passionate about exploring cutting-edge technological developments and transforming advanced scientific research results into practical products, we look forward to your joining!

Base Locations: Beijing/Shanghai/Shenzhen/Wuhan/Singapore

Interview Format

If you are shortlisted, you will undergo the online written test stage, which includes code and algorithm questions. You will be notified of the specific time and arrangement of the written test through email and SMS. After passing the written test, you can enter the second interview stage. The entire interview process consists of about 2-3 rounds. If the interview is approved, the offer can be quickly issued for integration into the job.

Job Details

Responsibilities:

• Designing and developing computer vision algorithms, including general object detection, retrieval, and segmentation; image/video classification and understanding; OCR; multimodal large model training, optimization, and compression; graph neural network; 3D vision, etc.
• Applying algorithms from computer vision and other fields to practical scenarios to solve real-world business problems.
• Open-sourcing innovative practices via GitHub Repo/Paper/Tech Report and other forms.

Requirements:

• Bachelor's degree or above, with relevant professional knowledge in computer vision, artificial intelligence, graphics, image processing, etc.
• Good programming skills, familiar with Python/C++/OpenCV/PyTorch/TensorFlow/Linux, etc.
• Understanding commonly used deep learning/large model algorithms and proficient usage of deep learning frameworks.

Bonus Points:

• Strong coding skills preferred, with experience in various competitions and awards (e.g., Kaggle, Tianchi, DF, DC, etc.), programming competitions such as ACM, or significant influence from open-source projects on GitHub.
• Priority given to those who have published papers in top international conferences or journals such as TPAMI, IJCV, CVPR, ICCV, ECCV, TIP, MM, ICLR, ICML, NeurIPS.
• Relevant technical or competitive experience in the field of large model multimodality.

PharmEng Technology has been providing quality services to leading manufacturers of healthcare and pharmaceutical products since 1997. Our specialists hold expertise in Commissioning & Qualification, Validation, Quality Systems, Regulatory Affairs, Engineering, and Training to ensure that our clients can keep on providing the world with their cost-effective and high-standard healthcare products. At PharmEng Technology, we strive to cultivate the best working environment where empowerment, passion and perseverance are nurtured while serving our clients to achieve their unique business goals. We are seeking for a Computer System Validation Engineer with experience in pharmaceutical engineering for a role in Singapore.

Responsibilities

• Provide technical guidance into the commissioning, qualification and start-up of various equipment and facilities.
• Lead the development of key qualification deliverables during the project lifecycle to ensure project is well defined, and the action plan to test the system is applicable and relevant.
• Lead qualification processes throughout the project lifecycle such as VPP, Risk Assessments, RTM, FCCA/dRA, DQ, FAT, SAT, IQ, OQ and PQ as appropriate to ensure timely completion and to ensure all quality and engineering specifications are met.
• Prepare protocols, execute protocols, summarize data, resolve deviations, prepare final reports.
• Lead C&Q of either Process Controls (i.e. DCS, PLCs, SCADA/Historians) or Building Automation Systems (i.e. Siemens Insight / Desigo, JCI Metasys) is required.
• Experience with C&Q of upstream or downstream bioprocess systems, or other process equipment, utilities, facilities in pharma, biologics, aseptic fill-finish and API is considered a strong asset.
• Coordinate meetings with cross-functional departments, to drive project progress, facilitate decisions, provide updates.
• Engage other departments, as required, for design reviews and decisions.
• Travel may be occasionally required for meetings with clients, equipment fabricatio vendors or Factory Acceptance Testing (FATs).
• Work may require occasional support over shutdowns or extended hours, specifically during installation and commissioning / validation phases.
• Client-management (maintain key Client relationships in support of business development and pursuit of new work), project scheduling/budgeting, coordination of client and resources for effective project delivery, supporting business development (providing technical support to the sales as required for proposals/opportunities), presenting at industry conferences/publishing papers etc.
• Visit construction and installation sites.
• As this position requires working on client sites, you will need to comply with the client’s safety rules including mandatory vaccination policies for COVID-19, where applicable.
• Supervise contractors during critical testing of system and equipment.
• Other duties as assigned by client, and/or PharmEng, based on workload and project requirements.

Qualifications

• Excellent written and spoken English is required including the preparation of technical documents in English
• Years of experience: 5+ years for years of experience in commissioning, qualification or validation of various systems within the pharmaceutical/biotech industry, where minimum 5+ years should include direct C&Q experience with either process automation or building automation systems in the pharma/biotech industry.
• Knowledge of requirements for a cGMP operations, including SOPs, Change Controls, Validation.
• Experience with developing and executing validation projects.
• Risk-Based Commissioning & Qualification approaches, such as ASTM E-2500 or ISPE ICQ, is considered an asset, but not required.
• Knowledge of GAMP and Data Integrity requirements.
• Knowledge of the V-Model for Computer System Validation is required.
• Knowledge of ISA-88 and ISA-95 Standards is considered an asset.
• Experience with commissioning & qualification of either process control systems (i.e. PCS, SCADA, Historians) or building automation systems (i.e. Siemens Insight / Desigo, JCI Metasys) is considered an asset.
• Experience with commissioning and qualification of biotech process equipment (upstream or downstream or both), such as some, but not all, of the following: fermentation, bioreactors, downstream purification processes (chromatography, TFF, UF) is considered an asset.
• Experience with commissioning and qualification of process equipment for aseptic fill-finish and pharmaceutical API and OSD manufacturing processes as well as food/ FMCG manufacturing processes are considered an asset.
• Previous Pharmaceutical/Biotech experience is mandatory for this role.
• Experience with Qualification or Validation of clean utilities, HVAC/ISO clean rooms.
• Experience with thermal Validation is considered an asset.
• Experience with preparation and execution of URS’s, DQ’s, RTMs, Risk Assessments, CPPs, VPPs, FATs, SATs, IOQs, NCRs, Final Reports.
• Lead teams of Validation staff, manage staff priorities, provide mentorship/oversight, help staff resolve issues. Leadership is considered an asset, but not required.
• Possess leadership skills, and be able to take initiative to lead projects, involving multiple stakeholders, departments, and varying complexity.
• Possess mentorship skills, to coach and develop junior and intermediate employees.
• Engineering or Science degree, preferably in Automation, Instrumentation, Mechanical, Electrical, Electromechanical, Chemical, Biochemical or a related discipline.
• Ability to lift 50 lbs.
• Travel may be required on occasion.
• Ability to handle multiple projects and work in a fast-paced environment.
• Strong multi-tasking skills.

Why PharmEng Technology?

Our consultants come from different areas of the Pharmaceutical/Biotech/Medical Device industries and have extensive experiences obtained from world-class organizations in North America, Europe, and Asia. At PharmEng Technology, we value everyone’s unique talents and work together to support our clients. We offer continuous career growth, competitive wages, opportunities for travel and a team mentality that sets us apart from our competitors. It is the growth of our staff that continues to grow our company globally.

EEOC Statement

At PharmEng Technology, we don’t just accept difference — we celebrate it, we support it, and we thrive on it for the benefit of our employees, our clients, and our community. PharmEng Technology is proud to be an equal opportunity workplace.

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

• Implement software development/support for automated computer vision equipment.
• Participate in Software Development Life Cycle.

Requirements:

• Diploma in Engineering
• At least 2 years of working experience in Visual Studio Development Environment.
• Good understanding of automated Computer Vision equipment, image procession automatic

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996