Position: Aviation Security Officer

• Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off
• 12 hours permanent shift
• Location: islandwide
• Salary Package
  i. Gross salary: up to $2,850
  ii. Bonus of $2,500

Job Description

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X-ray screening of checked in luggages
• Any other security related roles at Airport

Chew Xing Shan Reg No: R22107044

The Supreme HR Advisory Pte Ltd EA No: 14C7279

WhatsApp: +65 83592812 [Shannon]

Position: Aviation Security Officer

• Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off
• 12 hours permanent shift
• Location: islandwide
• Salary Package
  i. Gross salary: up to $2,850
  ii. Bonus of $2,500

Job Description

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X-ray screening of checked in luggages
• Any other security related roles at Airport

Chew Xing Shan Reg No: R22107044

The Supreme HR Advisory Pte Ltd EA No: 14C7279

WhatsApp: +65 83592812 [Shannon]

Working Shift: 4 working days with 2 days off // 5 days work with 1 day off

Working Hours: 12 hours permanent shift (can choose day or night shift)

Location: Changi Airport

Salary Package: Monthly up to $2850 with joining Bonus!!!!

Job Description

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X-ray screening of checked in luggage
• Any other security related roles at Airport

Requirements:

• 1 N Levels / 1 O Level / WPLN 3 x Level 4
• Training provided, no experience needed

Interested applicants may choose to apply / Contact me your updated resume for our consultant to find you a suitable oppurtunities

Contact Number : +65 90839650

LIM JUN SHENG Reg No: R22104301

The Supreme HR Advisory Pte Ltd EA No: 14c7279

Job Description:

>Mann control room

>Remote CCTV monitoring

>Handle remote operations duties

>Response to site's emergencies/issues

>Handle daily attendance planning & check attendance

>Provide support for onsite officers

>Stand-in at the site if required

>Handle deployment issues

>Handle incoming phone calls

Job Requirements:

>Minimun Senior Security Officer (licenced by PLRD)

>RTT Trained

>Computer literate

>Basic phone etiquettes

>Able to work as a team

>Positive attitude

>Rotating Shift (8am - 8pm / 8pm - 8am)

>5,5,6,6 days work week

Interested applicants, please email to [email protected]

Shortlisted candidates will be contacted for an interview.

The Mercedes-Benz Group AG CISO heads Mercedes-Benz Global Cyber Security Department (based in Stuttgart, Germany). We are looking for an Offensive Cyber Security Specialist to join our Global Cyber Security Team. This role focuses on enhancing and implementing our global vulnerability management process to protect our customers from malicious attacks.

As part of our team, you will support and improve vulnerability management across on-premises and cloud environments for Mercedes-Benz Group AG in the APAC and Greater China regions. Your responsibilities will include working on technical topics such as the Vulnerability Disclosure Program, validating proof-of-concepts, and ensuring timely remediation of identified vulnerabilities.

You will also explore new technologies and processes to strengthen the organization’s security posture through innovative vulnerability research and detection. This role is crucial in maintaining a secure and resilient environment by proactively identifying, assessing, and mitigating security risks while collaborating with global teams to drive continuous improvement in cybersecurity practices.

Role and Responsibilities

• Analysing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information
• Collaborate on and enforce the implementation of the global Mercedes-Benz Vulnerability Management strategy
• Acting as a point of contact for APAC region for questions regarding different stages of the Vulnerability Management lifecycle, including vulnerability scanning and penetration testing
• Rate new technical vulnerabilities according to their business impact and prioritize remediation activities
• Support application and infrastructure teams on the vulnerability remediation process
• Perform vulnerability scans in the company’s internal networks
• Analyze, rate and confirm vulnerabilities reported by external researchers
• Provide duty analyst support for the Vulnerability Management operations during weekends, utilizing a pre-defined duty roaster.
• Provide project coordination support to assigned projects by the Head of Global Offensive operations towards the roll out, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.
• Provide technical inputs towards the virtual teams as assigned by the Head of Global Offensive operations towards the operational directions, method determination and other related administrative support required from time to time.
• Coordinate Enhanced Proactive Analysis initiatives, as directed by the Head of Global Offensive Operations, to facilitate internal penetration testing of applications. Provide additional administrative support as needed to ensure smooth execution of related activities.
• Coordinate and support source code analysis initiatives, as directed by the Head of Global Offensive Operations, to ensure internal source code testing meets global security standards and is adequately hardened. Provide additional administrative support as needed to facilitate the seamless execution of these activities.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Information Technology or other IT-related fields of study.
• One or more of the following professional certification is beneficial: OSCP, OSCE, CREST, SANS GIAC Penetration Tester, Web Application Penetration Tester, Exploit Researcher, Advanced Penetration Tester or similar.
• 5+ years working experience in technical offensive cyber security related field in a corporate, military, or law enforcement environment.
• Honest, Professional, strong team influencer, able to proactively support team culture that fosters knowledge sharing, excellence and collaboration.
• Able to work under pressure, facilitate discussion, decision-making, and conflict resolution.
• Excellent communicator, able to engage and effectively respond to diverse stakeholders
• Fluency in the English Language
• Self-motivated with the ability to carry out assigned tasks with minimum supervision
• Proficient understanding of networking and network security technologies.
• Good understanding of Threat Intelligence utilization towards new Vulnerability Detection
• Excellent knowledge of cyber security standards, risks, threats, prevention measures and best practices
• Experiences in improving a vulnerability management process and/or a vulnerability-scanning concept.
• Hands-on experience with vulnerability scanning and management processes and tools (Qualys and ServiceNow Vulnerability Response).
• Experience with Vulnerability Management in cloud solutions.
• Experience with Vulnerability Management Lifecycle
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills

This position is based in Singapore and a valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. Candidate may be offered a lower job level based on candidate’s experience. We regret to inform you that only shortlisted candidates will be notified.

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security Defensive Analyst to join our Cyber Intelligence and Response Centre (CIRC). The Global Cyber Security Department oversees a 24/7 follow-the-sun operation with counterparts in EMEA and NAFTA. This role focuses on providing an intelligence-driven approach towards incident response affecting any Mercedes-Benz assets and providing containtment, eradication and recovery of affected asssets involved in a cybersecurity incident in a timely and efficient manner.

Furthermore, the role requires the mitigation of identified threat, addresses identified vulnerabilities and also provide incident coordination towards internal stakeholders and external customers. The role is crucial in enabling Mercedes-Benz's business by ensuring agile security operations and maintaining a secure environment.

As a Cyber Security Defensive Analyst, you will be responsible for:

• Conducting technical analysis and triaging of triggering alerts ingested from Mercedes-Benz log sources to determine impact, scope of impact and determine corresponding remedial actions to mitigate, contain and/or otherwise limit the impact of the incident.
• Analysing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information.
• Working closely with the CIRC threat intelligence team to aid in the enhancement of contextual analysis and providing threat hunting support towards Open Source Intelligence (OSINT) related Indicators of Compromise (IoCs).
• Taking the lead in managing Mercedes-Benz end users and stakeholders in providing cybersecurity incidents updates and other related activities that might arise from time to time during the incident coordination, remediation and recovery
• Providing duty analyst support for the CIRC operations during weekends, utilizing a pre-defined duty roaster, ensuring the continued operations and monitoring of threats and triggering alerts 24 by 7, follow the sun model.
• Coordinating projects assigned by the Head of Global Defensive Operations towards the rollout, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.
• Providing technical inputs towards the virtual teams as assigned by the Head of Global Defensive Operations towards the operational directions, method determination and other related administrative support required from time to time.
• Provide guidance and technical support in mentoring and guiding newer members of the team in technical and incident management skills and processes.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study
• One or more of the following professional certification is beneficial: CISSP, GCIH or similar.
• Have good emotional intelligence and is a proven team player
• Rational and able to remain calm under pressure
• Fluency in the English Language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision
• Proficient understanding of cyber and IT security risk, threat and prevention measure
• Proficient understanding of networking and network security technologies.
• Good understanding of Forensic tools and methodolgy used in incident response
• Good knowledge of security standards and best practices
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills
• Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.
• Knowledge of Microsoft Office suite (Word, Excel, PowerPoint and Access)
• Knowledge of Splunk is beneficial

This position is based in Singapore and a valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. Candidate may be offered a lower job level based on candidate’s experience. We regret to inform you that only shortlisted candidates will be notified.

Position:Security Officers

• Able to commit 4 days work 1 day off, 3 days work 1 day off schedule.
• 12 hours permanent shift
• Location: islandwide
• Salary Package: $2,650 to $3,500 (Depends on experience)

Job Description:

• Incident Response, Manage Security & Safety Systems
• Prevent unauthorised entry into the premises
• Monitor CCTV
• Patrolling and clocking
• Access control duties

Requirements:

• Secondary education

Chew Xing Shan Reg No: R22107044

The Supreme HR Advisory Pte Ltd EA No: 14C7279

WhatsApp: +65 83592812 [Shannon]

Job Highlight

• Basic Salary + High Commission + Variable Performance Bonus (earn up to $4000)
• 5 days/6 days work week
• Medical Benefits, Insurance Coverage
• Staff Purchase Discounts

Responsibilities:

• Attend to customer request and enquiries on Computer Components / Repair Service / PC Customisation
• Recommend the ideal Computer Components to customer according to their individual preference through knowledge sharing
• Maintain good relationship with customers to build customer loyalty
• Basic housekeeping of work area
• Assist in retail operations, e.g. stock take
• May be required to be involved in Trade Fair and related events

Knowledge & Skills:

• Possess good communication & interpersonal skills and is a team player
• Presentable disposition & well-groomed
• Retail sales target achievement
• Customer relationship management – maintain and create new customer profile
• Ensure inventory management for individual counter
• Ensure excellent customer service is given to the customers (e.g. product knowledge)

The College of Computing & Data Science (CCDS) invites applications for the position of Research Assistant.

Key Responsibilities:

• Develop mathematical modeling of real-time edge intelligent algorithms to support multimedia-based metaverse services
• Develop and implement optimization algorithms for resource management by using mathematical tools and machine learning techniques

Job Requirements:

• Bachelor's degree in Computer Science, Electrical Engineering, or related disciplines
• Strong research experience
• Good track record of publications
• Good teamwork and collaboration skills
• Research background in stochastic process, machine learning, and optimization

We regret that only shortlisted candidates will be notified.

Benefits

• Flexible working hours
• Work from home
• Uncapped earning

You will be expected to:

• Canvasing for new customer
• Account Management
• Prepare job ads to attract applicants
• Shortlist and Screening of candidates for interview.
• Coordinate interview arrangement and ensure candidates are well prepared.
• Ensure sales closures to achieve personal commission.

Requirements:

• Min Diploma qualification and above
• Able to work independently and remotely when required
• Certificate of Intermediaries License (CEI) is a MUST to be able to conduct EA work.
• Relevant experience in recruitment agencies is a MUST ( 2-3 years)

Interested parties who wished to apply for advertised role, please send your full resume to [email protected]

We regret that shortlisted candidate will only be notified.

Job Responsibilities:

This is a governance & response role, the person will be working as an individual contributor, reporting into the regional DLP team lead in ARMO-ORM of MUFG Bank overseeing the DLP governance and response to support APAC Business Units.

The person will be responsible for the supporting governance and response relevant to DLP, this includes responding timely to the DLP questions raised from the BUs, checking the Change Management Document basic fulfilment, conducting analysis over the alert logs in periodical basis, follow-up with the business users for the suspicious transaction.

Job responsibilities include but not limited to:

Under supervision and guidance from regional DLP team lead, support the following activities.

1. Reporting and periodical review of DLP alerts

• Conduct analysis over the false positive, self-attestation suspicious activity on periodical basis
• To receive generated reports in periodical basis to highlight the false positive rates
• Report to be distributed to APAC countries business units.

2.HVA update reminder and collection

• Send reminder to BUs in semi-annual basis to revisit the High Value Asset(HVA) list to APAC countries business units.
• Collect and consolidate the HVA updated from each BUs.
• Share the changes to DLP Rule Engineering Team to configure it to DLP system

3.Coordinate incident response

• Inform Business Unit manager to escalate to Asia Risk Management Office / Information Security team and local compliance team on incident reporting requirement on potential incidents.
• To include DLP governance team on outcome of incident assessment.
• Report the outcome to APAC DLP Steering Committee necessary members.

4.Conduct periodical training to BUs

• Making use of the Reporting material prepared in monthly basis, prepare business users training material
• Conduct training towards respective BUs to raise their awareness
• Consider ways to measure maturity level of BUs on training

5.User inquiry response and Change Management

• Making use of the Reporting material prepared in monthly basis, prepare business users training material
• Conduct training towards respective BUs to raise their awareness
• Consider ways to measure maturity level of BUs on training

6. Support in APAC DLP Steering Committee

• Consider key inputs towards BUs stakeholders reflecting APAC DLP situation including results of incidents

7. User inquiry response and Change Request Management

• Respond to user inquiry relevant to DLP and coordinate with respective stakeholders until closure of the inquiry.
• Asia Systems Office system team to keep DLP Governance informed of Change Requests approved by Asia Risk Management Office/Information Security team and/or Asia System Office/Information Security System Management Standard team.

8. Act as required based on any other instructions from the regional DLP team lead

Job Requirements/Experience:

• Minimum 3 years of experience in helpdesk, communication and coordination with the business users.
• Ability to timely react and escalate generated alerts from DLP to ARMO Regional DLP Lead and handle queries from business units precisely.
• Good written and visual presentation skills (Excel, Word, PowerPoint)
• Ability to work effectively in a team environment, and takes initiatives to collaborate and challenge status quo, and adaptable to embrace new changes
• Strong interpersonal and analytical skills attributes
• Self-motivated and able to work independently and source for information, systematically evaluate options and recommend solutions

We regret to inform that only shortlisted applicants will be notified.

Job ID: 10067535

• Shift pattern will be 4 working days with 2 days off / 5 days work with 1 day off
• 12 hours permanent shift
• Location: Islandwide
• Salary Package
  i. Gross salary: up to $2,850
  ii. Bonus of $2,500

Responsibilities:

• Screening of passengers at designated zones
• Manual bag checks
• Usage of security screening equipment for screening purposes
• X-ray screening of checked in luggages
• Any other security related roles at Airport

Requirements:

• 1 N Levels / 1 O Level / WPLN 3 x Level 4

If you are interested to apply, kindly WhatsApp me your updated resume in DOC file and allow our Consultant to match you with our Clients.

Whatsapp: +65 8525 2419

Email: [email protected]

Tan Man Ee Reg No: R22108289

The Supreme Hr Advisory Pte Ltd EA No: 14C7279

Cyber Security Specialist (VAPT)

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Strong in VAPT management.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Degree/Certifications in CyberSecurity.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Role Purpose:

The Security Consultant delivers penetration testing & offensive security projects to ensure a successful

outcome that at least meets or exceeds the expectations of our clients.

Role Outcomes:

• The customer recognises you as a subject matter expert and they have confidence in the comprehensiveness of the testing methodology and the accuracy of the results.
• The client has prepared the testing environment prior to the project start date so that the engagement is executed smoothly and without delay.
• Penetration testing projects are delivered efficiently and on schedule.
• The quality of the Penetration Testing Report by ensuring it has been peer reviewed and approved for release to the client.
• All client data is managed in strict accordance with Vantage Point Security data security and protection policies throughout the project.

Job Summary

The cyber Security Architect is a senior-level position responsible for planning, designing, testing, implementing and maintaining our organization’s network security infrastructure. He also evaluates the security of the organization's systems for vulnerabilities. He participates to penetration tests, risk analyses on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, and comparable systems, they also evaluate these systems.

Responsibilities

• Production Level 3 support for Network and Security infrastructure.
• Design, develop, and implement secure system architectures.
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices.
• Design artefacts, spanning design, development, and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture.
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.
• Gaining a total understanding of the organization’s technology and information systems
• Planning, researching, and designing reliable, powerful, and flexible security architectures for all IT projects
• Defining, creating, implementing, and maintaining all needed corporate security policies and procedures, making sure that all employees abide by them
• Developing requirements for all IT assets including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Reviewing and approving the installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Preparing cost estimates for all cybersecurity measures and identifying any potential integration issues
• Providing technical guidance and supervision for security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization’s security systems as needed

Legal and Regulatory responsibilities:

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Minimum 8 years of experience in managing IT systems environment with about 5 years of experience in financial institutes.
• Subject matter expert on Systems , Network and Security.
• Knowledge and/or hands on working experience with emerging technologies.
• Excellent communication, interpersonal and logical skills.
• Customer service oriented and a strong team player.
• Ability to work under pressure and a commitment to solving issues.

Technology / Product Experience:

• Cisco: ACI, Nexus, Catalyst, DNAC, ISE , iOS, NXOS
• Arista: Switches, EOS
• Fortinet: Firewall, IPS
• F5: LTM, ASM, APM , TMOS
• Infoblox; DNS, DHCP
• Skyhigh: Proxy
• Ivanti: Remote access
• Checkpoint: Firewall, MDS
• Trendmicro: IPS/IDS

Technology / Product Experience:

• Programming: Python/Bash/Ansible
• Tools: Wireshark/Tshark/Netflow

Work Schedule

• Required to work on Paris and/or New York and/or Asia time zone*, i.e. 2pm to 11pm/4pm to 1am (summer season) or 3pm to 12am/ 5pm to 2am (winter season), or in accordance to the planned time schedule as required. If necessary, you may also be required to start work earlier or to extend working hours.
• May be required to be available for on-call support during non-business hours and/or on weekends. Allowance is claimable for such hours.

Education Requirements

At least a Bachelor’s degree in any of these faculties:

• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Position

Data Security Specialist - Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of the company in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;
• Excellent written and oral English language skills;
• Knowledge of French language is preferred.

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:

- CISSP certified is highly preferred

- Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

• Must be experienced to cover the scope as mentioned in the SKILLS MATRIX section of this document.

SKILLS MATRIX

Technical skills

• Symantec Data Loss Prevention Administration (DLP Policy/Rules creation Specialistise): Must to have
• Trend Micro Deep Discovery Email Inspector (Phishing Prevention): Good to have
• Symantec Endpoint Protection (Anti-Virus): Good to have
• Phyton, Regular Expression, Powershell: Good to have

General skills

• Ability to prioritize effectively: Must to have
• Ability to work autonomously: Must to have
• Ability to work successfully in a team: Must to have
• Adaptability to changing environments: Must to have
• Inter-personal skills: Must to have

Management skills

• Ability to deal with issues, time management: Critical
• Manage escalated incidents: Critical
• Capacity to cooperate / work across discipline: Critical
• Capacity to develop others: Desired

Language skills

• English: Must to have
• French: Good to have

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

Position

Data Security Expert is a technical expert role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of the company in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Responsibilities

The Expert has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Expert of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Expert of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Qualifications and Profile

Functional

• 5 - 7 years of IT Security experience in administration and management of IT Security technologies primarily Endpoint Protection, Email Security and DLP, Data Classification and other endpoint & data security solutions;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;
• Excellent written and oral English language skills;
• Knowledge of French language is preferred.

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient overall security solutions like, Endpoint Protection, Email Security and Vulnerability Management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Good to have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Deploy, Upgrade and troubleshoot on DAM Solutions like IMPERVA or Guardium
• Expertise knowledge in Email Security Solutions
• Hands-on to Expertise knowledge in MS Defender for endpoint and or Cloud.
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:
• CISSP certified is highly preferred
• Symantec Certified Expert: Administration of Data Loss Prevention (any version) is highly preferred.
• Must be experienced to cover the scope as mentioned in the SKILLS MATRIX section of this document.

Technical skills

• Symantec Data Loss Prevention Administration (DLP Policy/Rules creation expertise): Good to have
• Database Access Monitoring: Good to have
• Symantec Endpoint Protection (Anti-Virus): Good to have
• Microsoft Defender Suite: Good to have
• Email Security: Knowledge
• Python, Regular Expression, Powershell: Knowledge

General skills

• Ability to prioritize effectively: Must to have
• Ability to work autonomously: Must to have
• Ability to work successfully in a team: Must to have
• Adaptability to changing environments: Must to have
• Inter-personal skills: Must to have

Management skills

• Ability to deal with issues, time management: Critical
• Manage escalated incidents: Critical
• Capacity to cooperate / work across discipline: Critical
• Capacity to develop others: Desired

Language skills

• English: Critical
• French: Good to have

Work Schedule

• Required to work on Paris and/or New York and/or Asia time zone*, i.e. 2pm to 11pm/4pm to 1am (summer season) or 3pm to 12am/ 5pm to 2am (winter season), or in accordance to the planned time schedule as required. If necessary, you may also be required to start work earlier or to extend working hours.
• May be required to be available for on-call support during non-business hours and/or on weekends. Allowance is claimable for such hours.

Education Requirements

At least a Bachelor’s degree in any of these faculties:

• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

About BCS:

BCS is NETS’ wholly owned subsidiary, and is an entity within the NETS Group. It manages and operates clearing and payment infrastructure for the Singapore Automated Clearing House, including Fast And Secure Transfers (FAST), Inter-bank GIRO (IBG), Cheque Truncation System (CTS), and provides services for PayNow and SGQR Central Repository.

Position Summary:

You will be part of the BCS Security team where you will work in a highly collaborative environment with cross-functional teams.

You will work in the Governance, Risk & Compliance (GRC) team. You are an expert in cybersecurity frameworks, policies and standards. You are part of the line 1.5 team that ensures the organisation’s compliance to the applicable regulatory requirements.

Key Responsibilties:

• Maintain cyber security policies, standards and procedures
• Manage and perform cyber risks and assessments
• Develop cyber risk documents
• Mitigate cyber security risks
• Conduct research on emerging cyber security & risk management trends, issues and alerts
• Track and monitor new security regulatory guidelines, and assess the compliance of and impact to the organization
• Assess the security deviations and risk acceptance raised by other business units
• Review and update cybersecurity risk assessment methodology and conduct cybersecurity risk assessment for critical systems
• Track remediation efforts for security & audit deficiencies

Requirements:

• Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields
• At least 8 years’ of experience working in technology and/or cybersecurity governance
• Working experience in a highly regulated environment is preferred
• Strong understanding and familiarity with regulatory requirements such as IM8, MAS Notice on TRM, MAS Notice on Cyber Hygiene, MAS Technology Risk Management Guidelines, MAS Outsourcing Guidelines and the CSA Cybersecurity Code of Practice
• Strong understanding of NIST Cybersecurity Framework
• Cybersecurity professional qualifications such as CISSP, CISM, CRISC, CISA, GSEC, CCSK or equivalent would be advantageous
• Excellent problem-solving and analytical skills with a keen eye for details
• Good written and communication skills with ability to interact and engage with stakeholders and all levels of management, including non-technical colleagues
• Ability to work well under pressure and respond to tight deadlines
• Keen interest to constantly improve competency with a positive attitude
• Familiar with emerging technologies and possess an interest to stay abreast of industry developments (e.g. DevOps, Cloud, APIs, service-oriented architectures etc).
• Proficiency with application development experience and programming/coding/Powershell scripting will be an advantageous
• Prior experience in implementing Cybersecurity products such as IAM tools is a plus

Implement security operations strategy

• Contribute to the definition of the overall security strategy

• Align security operations functions with the organisation’s overall business objectives

• Advise senior leaders on critical issues that may affect corporate security objectives

• Advise the design and implementation of security policy and controls

• Provide expertise on security technologies and innovative security concepts

• Provide technical and operational oversight for security tool deployment and implementation

Operate/Monitor security systems

• Develop plans for operating/monitoring security systems (e.g. endpoint security tools, firewalls, etc)

• Guide the identification and measurement of critical security operations metrics

• Develop detection and alerting rules

• Review/approve firewall rules

• Review/approve changes on AV systems

• Monitor levels of service of the security operations

• Present periodic status reports to management

Security planning, review & compliance

• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades

• Monitor compliance to security policies, regulations, rules and norms

• Participate in reviews/gap analysis of posture and compliance and follow-up with proposed treatment plan

• Authorised/Unauthorised software installation reviews

• Drive continuous improvement of security operations

Respond to security incidents

• Set internal guidelines for effective processing and escalation of incidents

• Review reports on incidents and breaches

• Develop contingency and disaster recovery plans for specific security incidents

• Coordinate prioritisation of alarms and resources for incident responses

• Oversee the development of emergency protocols

• Recommend systems and procedures for the prevention, detection, containment and correction of security breaches

• At least 15 years' of experience in IT Security

• Strong knowledge and experience in End User Computing, Server, Network and Security spaces

• Strong experience in supporting Windows, Linux, Vulnerability scanning tools, Firewalls and WAF

• Preferable experience in cloud-native security platforms and offerings from AWS or Azure

• Knowledge of patch management for OS and security products (Firewalls, Windows, Linux)

• Strong knowledge of endpoint security tools

• Preferred Knowledge of vulnerability assessment tools and techniques

• Preferred knowledge in conducting risk assessments

• Preferred Security/ITIL/Vendor certifications including but not limited to: (Fortinet NSE4, CISSP, CCSP, CEH, ITIL, CCNA-Security)

Responsibilities:

- Design and implement integration solutions for various physical security systems, including access control, video surveillance, intrusion detection, video analytics and alarm systems

- Ability to understand and address customer requirements and translate them into technical solutions

- Collaborate with product teams to address specific customer needs and feedback

- Design and propose security technology solutions tailored to different verticals

- Collaborate with cross-functional teams to gather requirements and define project scope

- Conduct site surveys and assessments to determine integration needs and best practices

- Conduct POC, demo, testing and setup of security system and video analytics

- Manage and execute projects with strong project management skills

- Develop documentation, including system specifications, integration plans, and user manuals

- Stay updated on industry trends, technologies, and best practices related to physical security

Requirements:

- Bachelor’s degree in Computer Science, Engineering, or a related subject

- Programming skills in Python, C++ and/or Javascript

- Fullstack experience is strongly preferred

- Strong understanding of networking, database management, and software integration

- Familiarity with industry standards and protocols (e.g., ONVIF, BACnet, etc.)

Nice to have:

- Professional experience working with VMS systems and integrating 3rd party solutions

- B2B (Business-to-Business) experience in physical security

- Technical security system certifications (I.e., Gallagher, Genetec, BICSI, Milestone) and/or related IT (i.e., CCNA) certifications preferred

- Possess market knowledge in physical security industry for verticals ie. transportation, commercial building, hospitality, etc.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish. Do you wish to be challenged to think creatively? The people here at Apple don’t just craft products - they build the kind of wonder that’s revolutionized entire industries. It’s the diversity of those people and their ideas that inspires the innovation that runs through everything we do, from amazing technology to industry-leading environmental efforts. Join Apple, and help us leave the world better than we found it.

Description

Apple is looking for a skilled security professional to join its Apple Information Security SPAN organization, within the Supplier Trust function. The ideal candidate will have a solid technical background and significant experience in Information Security, with a particular emphasis on the assessment to remediation lifecycle. In this role, you will collaborate with a global team of security experts operating to secure the posture of critical manufacturing and corporate suppliers, with a primary focus on identifying and remediating findings. Your contributions will play a key role in safeguarding Apple’s customers, brand, and data through essential security controls. This position offers the opportunity to work on innovative technologies and processes with worldwide impact.

Minimum Qualifications

• Ability to evaluate, conduct security assessments and monitor security posture of third-party Suppliers.
• Proven experience in handling and conducting large-scale security remediations with track record of effective threat mitigation.
• Ability to provide guidance to Suppliers on mitigating risks posed due to open Information Security gaps in assessment reports.
• Skills to deliver recommendations and timely updates to management on the risk level of Suppliers.
• Experience working with large-scale, globalized, multi-lingual business environments.
• Experience simultaneously working with multiple constituencies, balance disparate priorities, and solve problems in high-demand situations.
• Ability to develop security metrics to track efficiency of controls and remediation efforts and generate reports for management on insight of organization’s security posture.
• Ability and skills to ensure all security assessments and remediation activities are aligned with relevant regulatory requirements and industry standards.
• Strong ability to analyse complex data sets, identify patterns, anomalies and potential threats. Familiarity with data analytics tools is a plus.

Preferred Qualifications

• Outstanding communication skills and attention to details on sophisticated issues.
• Strong personal leadership traits such as self-accountability, priority management, and pride in work.
• Relevant industry certifications such as CISSP, CISM, CEH or OSCP.
• Proven ability to work within various cultural settings.

Apple is an Equal Opportunity Employer that is committed to inclusion and diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants, including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Job Description

• Supporting CISO and Team lead with engagement and supporting Com Care Sector on Cyber Security initiatives.
• Drive the HIB Compliance program and outreach to the Sector.
• Support CISO in managing Sector Cyber Security team.
• Support the Sector & Digitization team engagement with Sector on Cyber Security
• Drive the Cyber Essential+ certification & Trust Mark certification program

Requirements

• Degree in Information technology with at least 10 years of working experience in Cyber Security or IT
• Professional certification in CISM, CRISM, CGEIT will be an advantage
• Has relevant work experience in both vendor and end user environment
• Demonstrate competency to provide consultancy or advisory to internal or external customer
• Cyber Security Governance and Assurance Knowledge
• Good stakeholder management, IT/Cyber Risk Management
• Good understanding of Cyber Security best practices and standards (NIST, ISO27000, Cyber Kill Chain, MITRE)
• Successful candidate will be offered a 2-year contract

Summary of the Position

He/She will be a technical RUN expert for all Network Security services in the company. As such, he/she will provide support and act as the last level of escalation point for all production support activities within the Network Security operations team in Singapore. He/She is accountable for the overall health and stability of the technical solutions within his scope. He/She has to effectively work with technical peers such as architects, peer experts and project teams on technology road maps and projects. He/She will have control over the scope of technical activities, develop best practices, manage knowledge and ensure the necessary trainings are imparted to the team wherever applicable.

The 20-member Network-Security team operates the RUN activities and delivers projects for its infrastructure scope.

An Expert has a wide spectrum of responsibilities and actions.

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on the company's best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into the comapny's operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support the company's technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• Fluent in English, both written and spoken
• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN )
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• At least a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

US Data Centre

• Design and implement advanced security architectures for IT and OT environments against emerging threats.
• Take lead in development and integration of custom security solutions to both digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of both IT and OT systems.
• Develop and refine incident response strategies in respond to and recover from security breaches promptly and effectively.
• Collaborate with IT and OT teams to ensure the seamless integration of security technologies across all platforms.
• Technical lead for all projects involving cybersecurity technologies while meeting industry standards and compliance requirements.
• Stay update to date on the latest cybersecurity technologies and trends
• Mentor junior engineers and analysts,
• Prepare and present detailed technical reports and security briefings to senior management, making strategic recommendations

Requirement

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO27001, NIST, SOC2, and others relevant to IT and OT cybersecurity.
• Exceptional problem-solving skills and the ability to make critical decisions under pressure.
• Excellent communication skills, capable of articulating complex security issues to stakeholders at all levels within the organization.

Job Description

The role is responsible to design, develop and implement secured application architecture. As an Application Security Manager, you will be responsible for ensuring the security of our applications throughout their lifecycle. You will work closely with development teams, architects, and other stakeholders to implement robust security measures and best practices. This role requires a deep understanding of application security principles, excellent leadership skills, and the ability to effectively communicate and collaborate across teams.

Responsibilities

• Develop and implement application security policies, standards, and procedures.
• Conduct regular security assessments and code reviews to identify vulnerabilities and risks.
• Design and execute security testing strategies (e.g., penetration testing, vulnerability scanning).
• Work closely with development teams to integrate security into the SDLC (Software Development Life Cycle).
• Evaluate, design, and support the build and implement security solutions for Mobile and Web applications
• Provide guidance and support on secure coding practices and security architecture.
• Collaborate with application and infrastructure teams to ensure end-to-end security of applications.
• Provide oversight of application security control metrics
• Deliver Application security training and awareness
• Coordinate red teaming exercise to simulate real-world cyberattacks and assess on defensive capabilities
• Stay up-to-date with the latest security threats, trends, and technologies.
• Communicate security risks and recommendations to senior management and other stakeholders.

Qualifications

• Degree in computer science or related field
• 6-10 years’ experience in the domain of application security and development
• Ideally, you have completed or are about to complete a Security certification (e.g. CISSP, CSSLP, CEH)
• Proven experience in application security, with a strong understanding of web application vulnerabilities (OWASP Top 10, etc.).
• Hands-on experience with security tools such as static analysis tools, dynamic analysis tools, and penetration testing tools.
• Experience in conducting security assessments.
• Solid understanding of cloud security principles and practices (AWS, Azure, etc.).
• Experience desirable with Java, .Net, C++ and IOS/Android development
• Excellent communication skills with the ability to explain technical issues to non-technical stakeholders.