Job Responsibilities:

1. Responsible for legal support in the overseas operations of a social gaming app, drafting compliance documents, and ensuring compliance in major global markets.
2. Monitor legal regulations and enforcement trends in overseas locations, provide assessments of compliance risks, offer recommendations, and drive implementation.
3. Clearly understand the needs of business departments, providing legal training and advocacy.
4. Establish and improve compliance systems related to company operations in regulatory domains and execute various compliance tasks.
5. Handle litigation, disputes involving overseas entities (Singapore entity), complaints, investigations, and dispute resolutions involving overseas law enforcement agencies.
6. Ensure daily operations of overseas entities comply with local laws and regulations.
7. Participate in legal affairs related to overseas business, such as business negotiations, drafting, revising, reviewing overseas business contracts and commercial agreements, intellectual property layout, and maintenance.

Requirements:

1. Bachelor's degree or above in a legal-related field.
2. 3 or more years of work experience, preferably in the gaming industry.

------------- Send me your resume via WhatsApp ❤

WhatsApp: (https://api.whatsapp.com/send?phone=6592377799)

I regret to share that only shortlisted candidates will be notified. www.dadaconsultants.com

EA Registration Number: R22108564

Data provided is for recruitment purposes only Business Registration Number: 201735941W. Licence Number: 18S9037

About Antina:

Founded in 2020, Antina is a JV between Starhub Mobile and M1 and is responsible for the rolling out of the 5G Standalone (SA) Radio Access Network (RAN) in Singapore for the two mobile network operators.
The Standalone 5G (SA) RAN is a game-changing ultra-high speed, low-latency network, and one which will enable new use cases across entertainment, cloud gaming, transportation, education and healthcare. 5G is used across three main types of connected services, including enhanced mobile broadband, mission-critical communications, and the massive IoT.

Non-standalone 5G (NSA) was the first stage of 5G, using a new 5G radio (or 5G NR) access network overlaid on an existing 4G LTE network core. Standalone (SA) 5G uses the 5G NR access network on a brand new 5G network core. Both approaches provide value, but many of the most exciting new features and innovative use cases of 5G can only be realized through a standalone 5G network.

Major duties and responsibilities:

• You will be a key member of the Management Team, advising the management on various issues related to the business and operation of Antina from a legal perspective.
• You will conduct effective sourcing, if required, for external and/or shareholders’ advice (legal or otherwise) on the various issues identified by the Company.
• You will be working on various matters including but not limited to commercial contracts drafting, reviewing and negotiation, corporate governance, compliance, and risk management.
• You will be maintaining and managing the regulatory risk and compliance to ensure that the Company complies with the various internal policies as set out by Management, as well as external legal and regulatory requirements.
• You will be managing external counsel and legal service providers as needed to safeguard the interest of the Company.
• You will be advising the management on updates of laws and regulations in relation to Antina’s business.
• You will be empowered to work independently and make your own business judgement, whilst training and support are available when needed.

Job requirements:

• 5 to 10 years legal experience as a practicing lawyer or as an in-house legal counsel, preferably in telecommunications, software or IT industry.
• Prior exposure to various areas of law, regulations and polices including but not limited to the technology industry is a plus.
• Keen interest in technological solutions and the industry, with willingness to learn and develop in-depth understanding of the various matters affecting the Company.
• Possess business acumen grounded with a touch of practicality and pragmatism.
• Collaboration with legal experts and the stakeholders to ensure the Company's compliance with internal policies and external legal and regulatory requirements.
• Analytical and logical with ability to work and make decisions under time pressure.
• Ability to work independently as well as in a team environment.

How to apply:

Visit our company website at www.antina.com.sg for more information or send your CV directly to [email protected].

Antina is a company driven by ability and hardwork. We adopt fair employment practices and employment decisions will be based on merit, qualifications and abilities. Antina does not discriminate in employment opportunities or practices on the basis of race, colour, religion, sex, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Perform deep research into selected applications to understand how they are designed and implemented.
• Reverse engineer or apply static and/or dynamic analysis techniques on closed source binaries to understand it’s inner workings.
• Identify weakness in systems or software that makes it possible for an attacker to abuse.
• Develop proof of concept to demonstrate the severity of the discovered vulnerability and propose mitigations.
• Develop cutting edge tools to improve and scale up the analysis process.
• Keep abreast of the latest research into application security research and reverse engineering techniques.

Minimum Qualifications:

• Diploma/bachelor’s in a computing related field or relevant practical experience
• Software development experience in a general-purpose programming language for instance, Python
• Proficiency in C/C++, assembly (x86/64)

For a more senior role, we're looking for candidates who have:

• Competency in debugging, binary reverse engineering, bypassing of anti-RE and anti-debugging techniques.
• Experience in recognizing common algorithms and patterns (in line hashing function, obfuscator) in decompiled code and ability to perform type recovery on simple to intermediate data structures.
• Ability to apply public research materials to recover file format or encoded binaries.
• Participation in public disclosure of vulnerabilities, bug bounty programs or capture the flag (CTF) competitions.

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

Job Summary:

We are currently looking for a Cyber Security Lead Engineer who will support the School by managing and maintaining the Cyber Security, Azure Infrastructure and Microsoft 365. The appointee works with the Director of Technology & Senior Cyber Security Manager to ensure the IT requirements of the end user are met.

The role reports to the Senior Cyber Security Manager.

Requirements:

· Minimum Degree in Computer Science, Engineering or equivalent

· Minimum relevant experience of 3 years and above

· Excellent knowledge of Cyber Security, Azure and Microsoft 365

· Experience in Microsoft Intune, Microsoft Defenders and Microsoft Sentinel

· Experience in managing Azure Identities and MDM

· Able to work independently as well as a good team player with good initiative

· A positive approach to working with people

· Will accept late hours and weekend work for maintenance and patching

The school is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. We will conduct thorough background checks on all successful applicants.

Please refer to “Careers” on our website at www.tts.edu.sg for a detailed job description.

5-day week – working hours are from 7.30 am to 4.30 pm (41.25 nett hours per week). Interested applicants, please submit an application letter and detailed resume, stating your current and expected salary, date of availability and contact number via the online system at https://careers.tts.edu.sg/careerportal/main.aspx. In your application, please provide the names and addresses of three people from whom confidential references may be obtained. Please indicate their professional relationship to you.

(Only shortlisted applicants will be notified)

CPE Registration No.: 196100114C | Period of Registration: 7 June 2023 to 6 June 2029

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Technical Leadership:

a. Recommend research directions, conceptualize new security tools, and mentor junior researchers.

b. Conduct internal training workshops on analysis techniques, vulnerabilities discovery, and mechanism.

• Research and Analysis:

a. Conduct in-depth research on applications, reverse engineer closed-source code, and identify exploitable weaknesses.

b. Continuously learn about the latest application security and reverse engineering techniques.

• Development:

a. Assess and verify security through design and execute tests against industry standards CIA triad: Confidentiality, Integrity, and Availability, plus Authorization and Non-repudiation).

b. Develop proof of concept (e.g. code, scripts) to demonstrate the severity of discovered vulnerabilities and propose mitigations.

c. Develop cutting-edge tools to streamline the analysis process and improve efficiency.

• Documentation and Reporting:

a. Document findings, methodologies, and recommendations for both technical staff and executive leadership.

b. Effectively communicate findings and strategy to stakeholders.

• Contribution:

a. Contribute to the Singapore cybersecurity community through publishing whitepapers, blog posts, or presenting findings at relevant conferences.

Minimum Qualifications

• Fluent in OOP such as C++, Windows or Linux APIs/syscalls and knowledge of common file formats, network protocols and encryption. - Demonstrated ability to:
• Reverse engineer C/C++ compiled binaries and recognize common algorithms and patterns in decompiled code.
• Perform type recovery on intermediate data structures and uncover logic and indirect calls within a module.
• Bypass common anti-RE and anti-debugging techniques and uncover original code obfuscated by a public obfuscator. - For a more senior role, we're looking for candidates who has the demonstrated ability to:
• Reverse engineer sophisticated software and other programs compiled in newer languages such as Golang, Rust, newer Pythons and non-C binaries.
• Recover complex code logic and indirect calls across multiple modules or files.
• Recover undocumented file format or encoded binaries through deep analysis of the program.
• Develop custom tools to recover the logic or emulate parts of the program.
• Uncover logic of heavily obfuscated or custom packed code.

Benefits

• Training & Development
• Performance Bonus
• Medical Benefits
• Hybrid Work Arrangements

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

We are JTI, Japan Tobacco International, and we are present in 130 countries. We have spent years innovating, creating new and better products for the consumers to choose from. This is our business. But not only. Our business is our people. Their talent. Their potential. We believe that when they are free to be themselves, and they are given the opportunity to grow, travel and develop, amazing things can happen.

That’s why our employees, from around the world, choose to be a part of JTI. It is why 80% of employees feel happy working at JTI. And why we’ve been awarded Global Top Employer status, ten years running.

So when you’re ready to choose a career you’ll love, in a company you’ll love, feel free to #JoinTheIdea.

Learn more: jti.com

Global Travel Retail (GTR) is among the largest volume markets in JTI, operating in 160+ countries with 37 brands. We sell JTI products to international travelers in various channels (airports, border shops, ferries, diplomatic shops, etc.) and aspire to become the No.1 Tobacco Company in Travel Retail.

GTR is a highly culturally diverse market with employees from 37 nationalities working across the globe, with the market HQ based in Geneva and several Regional Hubs around the world.

What this position is about – Purpose

The GTR Legal Manager will be responsible for providing legal advice to the GTR business on all legal matters affecting its operations. The aim is to achieve corporate and commercial objectives in a manner that ensures compliance with the law and appropriate monitoring and management of legal risk.

The Legal Manager will be responsible for all legal matters (marketing activities, products regulation, contracts, etc.) for the ASIA and MENEAT Hubs and act as 1st point of contact for the business teams. Active participation in business meetings as well as collaboration with Market and HQ Lawyers and other Legal and Regulatory Affairs functions are key.

What will you do – Responsibilities:

• Performs legal advice on Tobacco regulations to the business teams in the ASIA and MENEAT hubs and to GTR central functions. Performs complex research and analysis of local laws in GTR markets with a focus on product regulation and marketing activities.
• Works in close collaboration with Market Lawyers.
• Analyzes the potential impact of anticipated regulations and actively supports the Corporate Affairs Department in its advocacy efforts
• Responsible for the review, drafting, and legal negotiation of GTR agreements in the Regional hubs he/she is responsible for (e.g. sales and distribution agreements and on Smoking Lounges agreements).
• Supports the development of the GTR Route to Market strategy in these markets
• Works closely with the Legal Director on a variety of topics, such as the implementation and monitoring of JTI's Competition law Policy and International Economic Sanctions. Responsible for the preparation of training materials for these matters, including delivering the necessary training to GTR colleagues
• Closely cooperates with external counsels and ensures the quality of outsourced legal advice as well as cost control/follow-up

Whom are we looking for – Requirements:

• University Degree in Law
• Minimum 8 years of work experience in a law firm and/or multinational corporation
• Capacity to work autonomously and make effective decisions quickly, capacity to prioritize a diverse workload.
• Strong negotiation and excellent communications skills, cultural sensitivity, business and results oriented.
• Demonstrated competence as a practicing lawyer in international business transactions, contracts, distribution, and competition/antitrust areas as well as regulatory issues.
• Experience in the Travel Retail Industry is not required
• Fluency in the English language both written and verbal
• Fluency in Mandarin is an advantage.

Senior Manager, Or Manager - Cyber Security & IT Governance

Responsible for the assessment, development, implementation and maintenance of enterprise-wide cyber security and IT Governance programmes to preserve the confidentiality, integrity, and availability of information resources. As part of the IT leadership team, this individual will be expected to provide technical leadership and consultation across the organisation. S/he will also work with external experts to implement security solutions, detect, and contain cyber security incidents.

Responsibilities

Cyber Security:

Assess and review environment and cybersecurity measures to ensure security and operational effectiveness, for e.g. network, system, application, endpoint security, physical and logical access security, etc.

Review and develop security framework, information security policies, processes, procedures, and guidelines.

Conduct cybersecurity risk assessments, penetration tests, and IT controls tests.

Identify security gaps and propose mitigating measures and escalate security incidents and non-compliances on a timely basis.

Evaluate, deploy, and maintain cybersecurity infrastructure to improve cybersecurity posture. Design, implement and maintain security incident response and escalation procedures.

Monitor, analyze and correlate events to determine the best course of action, to mitigate and contain threats when detected.

improve cybersecurity awareness of staff, for e.g. by conducting awareness training. Automate security controls, data, and processes.

IT Governance:

Review and enhance IT policies, standards, guidelines, and best practices regularly to ensure that these are aligned to organization objectives and industry best practices.

Develop and implement effective change management plans (such as communication plans and training programs) to drive adoption and compliance.

Participate in audit planning meetings with internal/external auditors, collate/provide the required materials on a timely basis, validate audit findings, provide remediation solutions, and implement the agreed solutions on a timely basis.

Drive security access and activity log reviews on regular basis.

Promote IT risk management, governance, and compliance culture across the organization.

IT Management:

Contribute to IT strategic planning and budgeting. Ensure IT vendors meet contractual obligations.

Maintain up-to-date knowledge on cybersecurity technologies and standards.

Attend to any other reasonable duties as assigned by Director, Information Technology.

Requirements

Degree in engineering, science or information technology, or equivalent education.

8-10 years of related work experience in cybersecurity management and security governance.

Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

Strong understanding of cybersecurity standards.

Hands-on experience with cybersecurity tools such as Next Generation Firewalls, SASE, Endpoint Protection, Data Loss Protection, Email Security, etc.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Cyber Security, Associate Engineer

Salary: up to $4000+

Responsible in maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Assist in the development of information security policies, processes / procedures and guidelines on an ongoing basis.

• Work with vendor to conduct security assessments and penetration tests.

• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.

• Standardize and refine security incident response and escalation processes.

• Mitigate and contain threats when detected.

• Escalate security incidents and non-compliances on a timely basis.

• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM.

• Monitor information security alerts triage, mitigate, and escalate issues as needed.

• Conduct information security awareness training.

• Provide security advisory to end users on regular basis.

• IT Security Management of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

• To perform daily monitoring of logs and review of security notifications and alerts, and assist on the assessment and reporting weekly trends, incidents and security events. Abnormalities found in the review of security events must be reported to the Cyber Security Manager.

• To provide daily technical support in terms of Cyber Security operations for Sophos Endpoint Protection, Cisco FTD Firewall, Advanced Email Threat Protection, Web Application Firewall, Cisco Email Security, DG DLP, Tenable SCCV, Splunk, Cisco Umbrella, etc.

• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree/ Diploma with min 2 years related work experience in cybersecurity management in Singapore.

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

• Good command of written and spoken English.

• Excellent interpersonal and communication skills.

• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

• Position :Service Technician(CCTV/Security System)
• Location : Islandswide- Office in Outram
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $4200 gross ($3500Basic +Transport allowance $400-$750) AWS + Overtime + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance + allowance
• Duration : Permanent
• Industry : Security system

Main Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.
• Knowledge in IT/Network/Server is an added advantage.
• Independent, self-motivated individual whom is able to work under minimum supervision.

Email me at [email protected]

Do visit www.searchpersonnel.com.sg for more job listings.

***We do not charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director

Reg no.: R2090601 | EA No: 13C6684

Position

Service Manager, Data Security Services

The Service Manager for Data Security Services manages the RUN team and the related activities to data and endpoint security. He/She is the main point of contact for the service provider and the internal clients in the bank. He/She manages the budget for the scope. He/She is also responsible for the transition of the new services from other regions to Singapore and manages the project/transition. The role is a techno-managerial role and will have to be involved in DLP policy/rule modifications as well. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data and endpoint security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France, UK, and Russia) remotely from Singapore. France infrastructure represents approximately 90% of the worldwide production activities of CA-CIB.

Team works in Asia and Europe time zones and flexible rotational shift is based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect.
• Encryption Solutions: Disk Encryption, File and Folder encryption.
• Database Audit Monitoring solutions.
• Email and Web Phishing Prevention solutions.
• Vulnerability Management Services.
• Access Management.

Detailed Job Responsibilities

The Team Manager has a wide spectrum of responsibilities and actions.

As the manager of his/her team, he/she:

• Assigns the tasks and manages delegation.
• Sets and reviews the work organization according to activity’s requirements and people’s needs and validates the schedules.
• Animates the team to encourage collaboration and sharing of practices.
• Has a role in supporting people development.
• Participates to recruitment process for the team.
• Vendor relation management.

As the manager of his/her scope of activity, he/she:

• Meets stakeholders on a regular basis to discuss improvement plans, action plans, evolving threats and changing risks, and provide feedback on policies, standards, procedures, guidelines. ISS leads security for GIT and is the main entry point for internal clients outside of GIT (Business Lines, BCP, LGL, and Compliance for security topics).
• The service includes, but is not limited to, incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management, but also global projects like End of Life, New Builds, migrations and upgrades etc., participation in global Infra events (like Power down and DR Tests).
• Ensures activity is performed in compliance with norms, standards, processes and procedures.
• Gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting.
• Reporting and auditing.
• Monitors operational KPI and ensure tickets are losed within SLA.
• Ensures documentation is up to date and relevant for use.
• Implements cross-functions activities including continuous improvement initiatives.
• Estimates the yearly budget, sets monthly forecasts and follows up BAU/Project monthly balance.

As an experienced professional in Security domain, he/she:

• Supports his/her team or experts’ diagnosis when technical issues raise in his/her scope of expertise.
• Is aware of the global IT structure so that he/she anticipates interrelationships within the organization.
• Manage L0/L1/L2/L3 activities which involve direct relationships with end users and L3 activities (architecture, design, project management, etc.).
• Provide oversight to all Data Security activities to ensure adequate performance, efficiency, and availability.
• Engage with technical peer, Service managers, Architect and project teams on technology roadmap and projects, especially with GIT architecture security team.
• Ensures the IT Production activities regarding his/her perimeter are performed correctly by the team, complying with defined norms, standards, processes and procedures.
• Has to make sure that the defined KPI is met on a day-to-day basis for Incident, request, problem, change management etc.
• Has to monitor and push for improvements in the team’s productivity.
• Be available and able to drive/manage any complex or high severity incidents that occur within the scope of their role.
• Engage in Projects and project deliveries.
• Drive and deliver root cause for any high severity issues.
• Has to be responsible for providing direction, proactive and reactive support services to maintain the availability and reliability of systems infrastructure in accordance to the SLA.
• Is involved in security incident diagnosis or investigations to help provide evidence or facts during diagnosis or investigation.
• Manage requests from stakeholders on data security tools to provide extracts, reports or information when required.

As the first point of contact for the Service Provider, he/she:

• Manages the daily relationship with the Service Provider and escalates when needed.
• Follows up Provider KPI and related actions.
• Coach and develop partner resources to meet the objectives.

As the first point of contact for internal Clients, he/she:

• Manages the daily relationship with internal Clients including planning, requests clarification, risks mitigation and service quality.
• Prepares client feedback for the monthly review.
• Serve as point of escalation on major incidents.
• Have to maintain a smooth relation with partners, vendors and global clients/teams.

As a member of ISAP/ITS, he/she:

• Facilitates collaboration and spread of information from and to the team.
• Participates to the department’s activities including brainstorming, team building and other team or transversal actions.
• Fosters innovation mindset.
• Contributes to ISAP/ITS global branding and communication.
• Manage budget (once a year) and forecast (monthly)
• Focus on automation and optimum use of the team to improve efficiency.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

v Work Timing is flexible and is scheduled to manage the operations within business hours of Asia and Emea timezone.

v Role may have to attend and lead any critical issues escalated outside of working hours, when operational needs.

Qualifications Requirements

Ø Minimum 12 years of IT Security experience and with 3-4 years of team management experience.

Ø Must be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science.

Ø Must have knowledge of different domains of IT Security.

Ø Must have managed a team size of 8 or more Security Specialists in an enterprise level environment;

Ø Must have prior hands-on experience in managing the IT Security Solutions.

Ø Must have experience in working in Production setup in Run (Operations) mode.

Ø Must have working experience in managing the endpoint and data security solutions for a Large enterprise level environment, working experience in financial organization is preferred.

Ø Ability to apply risk based approach while working on assigned responsibilities.

Ø Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions.

Ø Excellent in analytical, communication and documentation skills.

Ø Ability to organize work and be able to priories work as per the needs of Production Operation’s needs.

Ø Must have strong understanding of ITIL processes and comfortable working in process oriented environment.

Ø Ability to work independently and as well as a part of team and is able to work under minimal supervision.

Ø Should have time management skills and able to manage work in fast moving environment.

Ø Should have hands-on technical exposure on wide spectrum of endpoint and data security technologies e.g. Symantec Data Loss Prevention (DLP), Symantec Endpoint Protection, Phishing Prevention and other IT Security technologies.

Ø Must have experience in defining, designing and configuring DLP Policies as per the business requirements.

Ø Professional Certifications:

• CISSP, CISM certified is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng.

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Ensure security systems are utilised to their maximum capabilities.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Provide security consultancy, technical guidance, expertise, solutioning and education.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Review firewall requests.
• Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
• Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
• This is an individual contributor role. Deliver tasks with minimal supervision.
• Strong communication skills.

Requirements

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions (both applications and infrastructure) are developed and designed with security inbuilt.

Key Responsibilities

•Provide security consultancy, technical guidance, expertise, solutioning and education for en-terprise.

•Advise application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

•Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

•Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

•Perform threat modelling on security critical applications. Keep up to date on emerging secu-rity threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews and audits to ensure security assurance is achieved.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables. This is an individual contributor role. Strong communication skills.

Requirements

•Degree in IT or related fields, with at least 5 years in information security, especially in the application security space.

•Professional security certifications (CISSP, CSSLP, CEH, CCSP etc) preferred.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.

•Strong in-depth working knowledge in secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), Software Compo-sition Analysis (SCA).

•Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud technolo-gies. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

•Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc. Any prior vulnerability management experience preferred.

•Strong oral, written, presentation and inter-personal skills.

•Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

A. Overall Purpose of The Job

The primary role of the Infrastructure Security Engineer is to support our security technologies to ensure smooth daily operation and its maintenance. This includes project delivery and subsequent refresh program for all the in-scope security devices.

B. Key Responsibilities

● Provide expert guidance and oversight in the day-to-day administration of various security tools, including Crowdstrike EDR, Netskope SWG, CyberArk PIM/PAM, and others.

● Take a sme role in building, implementing, and maintaining the CyberArk PIM/PAM solution within the Organization environment, ensuring the smooth operation of CyberArk PAM/PIM activities on a daily basis.

● Proactively identify issues and suggest potential solutions in operations.

● Manage and execute maintenance tasks, system upgrades, and the implementation of service packs, patches, hot fixes, and security configurations.

● Lead in-depth investigations into complex technical issues, collaborating closely with vendors until resolutions are achieved, and delivering comprehensive Root Cause Analyses (RCAs).

● Collaborate effectively with Server/Network/DB/App teams to efficiently onboard and configure devices and privileged identities.

● Demonstrate expertise in creating customized reports and dashboards within security tools, tailored to meet specific requirements.

● Maintain and update Standard Operating Procedures (SOPs), security standards, and procedures, ensuring they reflect best practices and the latest security protocols.

● Operate within the established configuration and change management policies to ensure that all changes made to security devices are well-documented, approved, and ultimately successful.

● Play a crucial role in the implementation of new infrastructure security technologies and products at Organization. This includes selecting the most suitable product vendor, conducting Proof of Concepts (POCs), and overseeing the product's implementation in collaboration with a preferred Systems Integrator (SI) partner.

C. Job Profile

Required Skills and Knowledge

● 7-8 years of valid experience in Infrastructure Security operations and projects

● 5-6 years of hands on experience in CyberArk PIM/PAM

● 3-4 years of hands on experience in any Endpoint Detection & Response and Secure Web Gateway technologies preferably Crowdstrike and Netskope

● Good understanding of Network Technologies, Systems, and Database

● Good understanding of security concepts (e.g., encryption, least privilege, need to know basis access, unauthorised access)

● Strong verbal and written communication skills and ability to work with all levels of management

● Firm understanding of IT Service Management processes and project management (i.e., ITIL and Agile)

● Team player and self-motivated

Required Qualifications

● Certifications in CyberArk Certified Delivery Engineer is preferred

● Cybersecurity certification such as CompTIA Security+ or CEH is an advantage

● University degree in Computer Science or a related field is preferred

Purpose

The principal role is to manage the security platform for the 3.5GHz C-Band RAN system so as to ensure the RAN network is adequately protected and secured against cybersecurity threats and incidents.

Duties and Responsibilities:

1. Oversee the overall operation and functions of the JVCo security platform.
2. Monitor Cyber Security Events for the JVCo 3.5 GHz C-Band Radio systems, including: Review event logs from the respective systems and ensure that there are no anomalies in the logs. Raise report on any security incidents to IMDA/SH/M1.
3. Coordinate with StarHub and M1 to administer cybersecurity measures to prevent, manage and respond to cybersecurity threats and incidents.
4. Coordinate with StarHub and M1 to assess and monitor the compliance of the JVCo with the JVCo/SH/M1 organization cybersecurity policy.
5. Work with Starhub and M1 to engage external vendor to perform Vulnerability Assessment in order to ensure compliance to IMDA 5G security requirement.
6. Collaborate with StarHub and M1 to engage external parties to perform external and internal Penetration Test for Network and Applications.
7. Ensure the security platform is up to date with tracking and identifying the latest security threat to the JVCo network and system.
8. Conduct regular scanning of JVCo RAN System to ensure the accuracy of the Asset Inventory and track any Vulnerabilities in the Asset.
9. Facilitate and work with StarHub and M1 in the preparation for any audit (e.g TCS, Mobile TIRA).
10. Administer all system and user management functions of the 5G security platform, which include: Assigning access right to users of StarHub, M1 and the equipment vendors, upgrading softwares and hardwares, and system/database maintenance.

Job Requirements

Qualifications:

1. Degree in Computer / Telecommunication Engineering or related qualification or possess at least three years of related working experience.

Technical Skills:

1. Experience in conducting Vulnerability Assessment and Penetration Test
2. Experience in conducting security audit and setting cyber security policy
3. Experience in managing Cyber Security Operation
4. Candidates with CISSP/CISA/GIAC or equivalent certification is an advantage

Interpersonal skills:

1. Able to work independently and is also a good team player.
2. Possess good communication skills.
3. Strong commitment to work and have good initiatives.

How to apply

Apply via myCareersFuture or send your CV directly to [email protected].

Antina is a company driven by ability and hardwork. We adopt fair employment practices and employment decisions will be based on merit, qualifications and abilities. Antina does not discriminate in employment opportunities or practices on the basis of race, colour, religion, sex, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Visit our company website at www.antina.com.sg for more information.

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

Data Security Expert- Data Security and Endpoint Security

Data Security Expert is a technical expert role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Expert has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Expert of the team, he/she:

• act as the last level of escalation for the team members
• own Incident,Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Expert of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

- To answer occasional phone calls from public

- Station on Site to attend to feedbacks

- Attend monthly site meeting and prepare minutes of meeting

- Need to do site administration work:

Purchase orders, compilation of Delivery oders, Workers attendance and Work pass and safety course attendance

- Minimum 2 Years experience in public relations service or hospitalities and tourism field

- 5-Day work week

Site Office Location:

Ang Mo Kio Industrial Park 2

50 metres walking distance from Ang Mo Kio Ave 1

Bus Stop No: 54101

Job Objectives:

Tasked with aiding the Security Manager in safeguarding properties and ensuring the well-being of guests, employees, and the hotel. Supervise all activities of security staff to ensure compliance and proper application of department regulations and hotel policies. Documents all action in the department, including: emergencies, loss, theft, or accident.

Primary Responsibilities

• Manages the Security Department, alongside with Security Manager.
• Oversees the security department and their day to day operations.
• Trains all security personnel in their areas of responsibilities.
• Reviews policies, procedures, and instructions on a regular basis.
• Evaluates possible hazards or threats to security.
• Promotes a safety attitude amongst all employees.
• Ensures safety of persons in the hotel and property assets.
• Reports irregularity in employee or guest behavior.
• Handles loss, damage and accidents.
• Handles, documents, and follows up with necessary persons any accidents occurring in the hotel premises.
• Investigates theft as reported by guest or employee.
• Documents all action in the department, including: emergencies, loss, theft, or accident.
• Participates in weekly department heads meeting in absence of Security Manager - Rooms Division Meeting and any others if requested.
• Secondary liaison for interacting with government officials, ministries, and law enforcement agencies.
• Reviews emergency procedures regularly.
• Delivers security training and promotes awareness within the hotel.
• Performs other duties as assigned by Security Manager.

Job Requirements

• Minimum education of High Vocational diploma in any discipline. Bachelor degree holder have an advantage.
• At least 3 years’ experience in a similar position in security & safety operations.
• Basic knowledge of local laws, investigative methods and fire safety.
• Criminal-free record
• Have good English communication skills both in written and spoken
• Possess professional disposition with good communication and interpersonal skills

PRODUCT AREA

Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.

JOB DESCRIPTION

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

With your technical expertise you will manage project priorities, deadlines, and deliverables. You will design, develop, test, deploy, maintain, and enhance software solutions.

Qualifications

JOB RESPONSIBILITIES

• Write and review backend infrastructure code.
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact on hardware, network, or service operations and quality.
• Perform technical security assessments, code audits and design reviews.
• Develop technical solutions to help mitigate security vulnerabilities.
• Advocate security and secure practices throughout Google Payments.

MINIMUM QUALIFICATIONS

• Bachelor’s degree in Computer Science, or a related technical field, or equivalent practical experience.
• 3 years of experience with software development in one or more programming languages, or 1 year of experience with an advanced degree in an industry setting.
• 3 years of experience in software or application security.

PREFERRED QUALIFICATIONS

• Master's degree or PhD in Computer Science or related technical field.
• Software development experience in C++ or Java.
• Knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.
• Effective communication skills.

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processes only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description:

Applications are invited for the following full-time position in the Saw Swee Hock School of Public Health at the National University of Singapore (NUS):

Research Assistant (1 year)

We are looking for a full-time research assistant to support an MOE-funded research project on cancer and public health. The successful candidate will work closely with the principal investigator and a team of cancer clinicians and researchers, and will have the opportunity to gain hands-on experience in socio-behavioural research to improve cancer care.

Responsibilities:

• Assist with the administration and management of research projects, including coordinating the research team’s meetings and activities and preparing the research ethics application.
• Conduct research fieldwork, including recruiting participants, coordinating interview schedules, administering informed consent forms, conducting qualitative interviews and transcribing interviews verbatim.
• Conduct qualitative data analysis, and work with the research team in preparing research reports/manuscripts.

Requirements:

• Excellent academic writing and communication skills in English.
• Experience of successfully managing multiple tasks concurrently.
• Some qualitative research skills and experience, including at least some experience with conducting semi-structured interviews and/or analysing qualitative data and interest in learning how to conduct socio-behavioural research in cancer care.
• Highly organized and able to work effectively under pressure, use independent judgement, produce high-quality quality work, and problem solve within time constraints.
• Able to work independently as well as with a team.

Desirable:

• Degree or relevant experience in social science methodology or health care.
• Experience with Atlas.ai/NVivo and R or similar software to manage qualitative data or the interest to learn.
• Experience in conducting qualitative interviews.
• Able to speak Mandarin/Chinese dialects or Malay/Tamil is an advantage as some research participants may only speak their mother tongue.

Recruitment is open immediately and will continue until the position is filled. Applicants should send the following documents during the job application:

1. Cover letter highlighting career goals and relevant experience
2. Curriculum Vitae, containing details of three named referees

Qualifications

• Bachelor’s Degree in a social science or health discipline.

Job Description

You will be a member of the Group Information Security Team responsible for ensuring that IT solutions are developed and designed with security inbuilt.

Key Responsibilities

• Provide security consultancy, technical guidance, expertise, solutions, and education for the enterprise.

• Advise IT application and infrastructure teams on application and infrastructure security design that is relevant and fit for purpose.

• Align security architecture frameworks and standards with business strategies and functions. Maintain Cyber risk management framework and perform assessment of applications for emerging areas like cloud security, machine learning etc.

• Advise and review application security design to detect potential security issues and for each issue, propose and drive remediation tasks. Develop application security blueprints. Propose and/or develop training courses to advance developers’ security knowledge.

• Advise and review security by design concepts in Cloud platforms such as GCP, AWS or Azure Cloud.

• Advise and review the compliance of integrating security tools and processes into the DevOps pipelines.

• Advice and review the adherence to security requirements for low code platforms.

• Perform threat modeling on security-critical applications. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group. Define scope and review the results of security tests, reviews, and audits to ensure security assurance is achieved.

• Manage individual project priorities, deadlines, and deliverables. Any relevant ad-hoc duties.

• Review RFP proposal compliance with security requirements.

• This is an individual contributor role. Strong communication skills are required.

• Note: You could be posted to any subsidiary in the SIA Group.

Requirements

• Degree in IT or related fields, with at least 7 years in information security, especially in the application security space.

• Professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.) preferred.

• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

• Strong in-depth working knowledge of secure application development techniques. Secure by Design. Secure source code review. Prior experience with any of the following tools: Static Application Security Testing (SAST), Dynamic Application Security (DAST), and Software Composition Analysis (SCA).

• Strong understanding of Agile, DevSecOps, OWASP Top 10, and securing cloud platforms, such as AWS and GCP. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc. Any prior vulnerability management experience is preferred.

• Strong understanding of technologies such as WAF, Anti Bot Protection

• Prior experience in application development and knowledge of the DevOps platform is desired.

• Strong oral, written, presentation and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

Company Overview

Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content. To this end, we created a platform that delivers content governance, compliance, and protection to customers. The platform unifies, tracks, controls, and secures sensitive content moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all sensitive content communication. Kiteworks is carrying its bold vision forward while maintaining strong profitability and growth. This is a perfect time to join the company as it moved into a high growth phase and there are many opportunities to make a meaningful contribution to its future.

The Role

We are looking for a highly driven, talented, and self-motivated Senior Applications Security Engineer to be part of our growing application security team. You will be part of a team that is up to date on emerging security vulnerabilities and threats, and works toward improving the security of our products and our CI/CD environment and process.

Key Responsibilities:

• Develop automation and security tools to enhance the security posture.
• Research, evaluate, and integrate new security technologies/tools within CI pipelines.
• Perform STRIDE threat modeling before each product release.
• Provide consultation in design and security reviews for new features.
• Conduct product code reviews with a security-focused lens.
• Execute white box security scans and implement system/application hardening measures.
• Document security fixes and support customer service with security advisories.
• Maintain comprehensive documentation and handle CVE filings.
• Analyze reported vulnerabilities, assess risks using CVSS methods, and determine impact.

Job Requirements:

• Bachelor’s or master’s degree in computer science or computer engineering, specializing in cybersecurity.
• at least 2 years of hands-on experience in cybersecurity roles.
• In-depth knowledge of common web application vulnerabilities and mitigation strategies.
• Proven ability to validate and implement security fixes; manage bug bounty reports effectively.

Key Skills and Experiences:

• Demonstrated expertise in integrating security measures into CI/CD pipelines using Jenkins, GitLab, etc.
• Proficiency in executing and interpreting results from SAST and DAST tools.
• Strong background in Linux system hardening and implementing CIS security standards.
• Proficiency in PHP and Python for security-related tasks.
• Hands-on experience with blue team responsibilities like DFIR and security hardening.
• Familiarity with AWS and Azure; additional experience considered advantageous.
• Security certifications (e.g., SANS) are highly valued.

Desired Attributes:

• Exceptional analytical skills coupled with a meticulous problem-solving approach.
• Excellent written and verbal communication skills.
• Proven ability to convey complex technical concepts to diverse audiences.
• Passionate about Kitework’s domain and mission.

Compensation/Perks

You will be rewarded with a competitive compensation package, including excellent benefits and stock options. Other benefits include: medical, dental, and 18-21 days annual leave

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document.

· In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.

· Prepare UAT document and perform UAT as per document.

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.

· Ability to deliver MFA Solutions for specific use case requirements.

· Assist in reviewing Technical Design Specifications (TDS) document for security projects

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

· Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.

· Hands on experience Cisco FirePower NGIPS.

· Basic understanding of Networking – Routing and Switching Protocols.

· Ability to manage medium to large size project and ensure completion within the projected timeline.

· Build customer relationship to manage the projects in a congenial way.

· Team Player highly spirited, sharing project experience with peers.

· Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

[What you will be working on]

In addition to your teaching duties, you will carry out industry or consultancy projects to help you remain relevant in your profession and to evolving changes in industry, and maintain strong linkages with industry and schools. You will also have the opportunity to have industry attachments or experience on a regular basis to update your skills, knowledge and practices of your profession.

- Design, develop and deliver relevant course materials in On-Premise and Cloud based Networking, System Administration, IT Security, Digital Forensics, Cyber Security, Security Penetration Testing & Operations and Programming

- Facilitate e-learning, enrichment and other self-directed learning.

- Supervise students in project works, competitions, and internship.

- Handle other academic-related duties and administration.

- Be involved in student development and mentoring, outreach programmes and community works.

- Engage in relevant research activities for lifelong professional development purpose.

[What we are looking for]

You should have at least 3 years of relevant experience in Computer Science, Information Systems, or Information Security, and preferably relevant work experience in the security industry.

- Passion for teaching and student development.

- Knowledge in

• networking concepts such as router, switches, wireless access points etc.

• operating systems such as Windows Servers, Linux, Mac etc.

• security concepts such as firewall, VPN, IDS/IPS, Antivirus, SIEM, IAM, web/app security etc.

• working in virtualized environment such as Hyper-V, VMWare, VirtualBox, Xen, KVM etc.

• Knowledge in programming / scripting languages such as Java, Python, C# etc.

- Aptitude to learn new technologies in the security suite.

- Professional certifications such as CCNA/CCNP, MCSE/MCSD, CEH/CHFI, CISSP/CISA, OSCP, Cloud Certifications (AWS/Google/Azure), will be an added advantage.

Those with good and relevant experience can look forward to Senior Lecturer or equivalent positions, with career development opportunities to leadership positions in the Colleges or Headquarters.

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.

[What you will be working on]

In addition to your teaching duties, you will carry out industry or consultancy projects to help you remain relevant in your profession and to evolving changes in industry, and maintain strong linkages with industry and schools. You will also have the opportunity to have industry attachments or experience on a regular basis to update your skills, knowledge and practices of your profession.

- Design, develop and deliver relevant course materials in On-Premise and Cloud based Networking, System Administration, IT Security, Digital Forensics, Cyber Security, Security Penetration Testing & Operations and Programming

- Facilitate e-learning, enrichment and other self-directed learning.

- Supervise students in project works, competitions, and internship.

- Handle other academic-related duties and administration.

- Be involved in student development and mentoring, outreach programmes and community works.

- Engage in relevant research activities for lifelong professional development purpose.

[What we are looking for]

- You should have at least 3 years of relevant experience in Computer Science, Information Systems, or Information Security, and preferably relevant work experience in the security industry. 

- Passion for teaching and student development. 

- Knowledge in 
• networking concepts such as router, switches, wireless access points etc. 
• operating systems such as Windows Servers, Linux, Mac etc. 
• security concepts such as firewall, VPN, IDS/IPS, Antivirus, SIEM, IAM, web/app security etc. 
• working in virtualized environment such as Hyper-V, VMWare, VirtualBox, Xen, KVM etc. 
• Knowledge in programming / scripting languages such as Java, Python, C# etc. 

- Aptitude to learn new technologies in the security suite. 

- Professional certifications such as CCNA/CCNP, MCSE/MCSD, CEH/CHFI, CISSP/CISA, OSCP, Cloud Certifications (AWS/Google/Azure), will be an added advantage.

Those with good and relevant experience can look forward to Senior Lecturer or equivalent positions, with career development opportunities to leadership positions in the Colleges or Headquarters. 

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.

[What you will be working on]

In addition to your teaching duties, you will carry out industry or consultancy projects to help you remain relevant in your profession and to evolving changes in industry, and maintain strong linkages with industry and schools. You will also have the opportunity to have industry attachments or experience on a regular basis to update your skills, knowledge and practices of your profession.

[What we are looking for]

You should have at least 3 years of relevant work experience in the electronics security industry dealing with Device-to-System or System-to-System integration.

You should have good knowledge and skills in at least two or more of the following areas:

- Design and development of security systems using Python, C/C++ on Windows, Linux or Mobile (Android / IoS) platforms.
- Design, install, configure, test and maintain Integrated Security Systems comprising video surveillance, access control and intrusion detection components.
- Experience in deploying video analytics solutions such as facial / license plate recognition, crowding, detecting abnormal traffic conditions etc using machine learning / deep learning technologies.
- Experience in designing, setting up and operating of a Security Command Centre
- Good understanding of networking, TCP/IP connectivity and general cybersecurity practices to ensure a smooth implementation of security projects.
- Provide theory and practical hands-on technical training of security system products for end users.
- Professional certifications and experience in deploying automation solutions for security system/operations will be an added advantage.

Those with good and relevant experience can look forward to Senior Lecturer or equivalent positions, with career development opportunities to leadership positions in the Colleges or Headquarters.

Applicants may check their application status at the end of 8 weeks from the closing date of this job posting.