About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

· ICT Security Governance:
Develop and implement enterprise-wide ICT security programmes as follows:
i. Establish the cybersecurity governance structure for HDB to ensure that the security posture is robust, resilient, and pragmatic
ii. Enhance and update the IT security policy, standards, procedures so that they are always current against the evolving cyber security landscape
iii. Manage the compliance with the GovTech ICT/SS Security Policies, Initiatives, Measures and the relevant Government Instruction Manual to further strengthen the WOG and HDB ICT security posture.
iv. Establish the governance and administer the Third-Party Management Policy and Procedure

· Cybersecurity Awareness Outreach
Manage and implement Cybersecurity Awareness Framework to promote IT security awareness and outreach programme as follows:
i. Raise HDB management and staff’s security awareness and appreciation of ICT Security to ensure HDB’s information assets are protected.
ii. Create good staff cyber security hygiene through regular ICT Security outreach programme such as annual ICT Security Awareness Talk, security advisories, conduct of Phishing exercise, road show.
iii. Keep abreast of key technology and skillset in the industry to maintain ICT Security personnel skills development.
iv. Identify various channels for the conduct of the security program such as cyber range exercises, technical certification, gamification.

· Identity & Access Management
To establish procedures and standards for the Identity and Access management in HDB as follows:
i. To administer and manage the user accounts and privileged access, so as to safeguard the confidentiality of ICT assets and systems in HDB.
j. To maintain and manage the access controls to applications on premises and on Cloud.
k. Digital Certificate Management

· Quality Audit and Security Reviews
a. To serve as an independent party to perform quality auditing and report to Management on the observations and recommendations.
b. To conduct regular security reviews on application systems and infrastructure to ensure the HDB’s systems and infrastructure are secured and reliable.
You are also to:
· keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.
· lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks

You will be a Great Fit if you:

You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Engineering (Computing/Telecommunication), Cybersecurity and/or Digital Forensic or equivalent.
At least 1 years of direct and relevant full-time ICT security work experience
Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc
Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

Added advantage for candidates with knowledge in any of the following:
· Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security
· Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)
· Good understanding of the current IT/Cyber Security landscape

Candidate also need to:
· to work beyond business hours including weekend when necessary
· possess good interpersonal and communication skills
· demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail
· have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14625706/a714138f-b047-1edf-8286-5e09c172d2b8

Responsibilities

• Filing
• Preparation of legal documents and opening of conveyancing cases. Working closely with the sales team in ensuring smooth completion of transactions.
• Communication
• Liaising with Agents, Brokers, clients and related parties for further verification and clarification.
• Data Collection
• Administrative support in requesting and retrieving of necessary documents.
• Scheduling of Appointment
• Setting up of appointment for client to sign legal documents with the Solicitor as well as monitoring deadlines.
• Bank notices

Requirements

• Meticulous, well-organised and good time management.
• Able to work long hours (if required).
• Able to work both independently and as a team.

Interested candidates are invited to apply online. Only shortlisted candidates will be notified. Thank you for applying.

• Provide advice to Senior Management and BoD on risk, legal and compliance related matters.
• Provide advice on the rights and obligations of the Company and other issues arising from business activities.
• Ensures the company’s risk and compliance practices and limits are in compliance with applicable regulatory requirements.
• Liaise with other external stakeholders and regulators, including the Monetary Authority of Singapore and auditors, on issues related to risk, legal and compliance related matters.
• Escalate significant observations and possible regulatory breaches to Senior Management and the Board of Directors.
• Implement internal policies and processes related to risk, legal and compliance.
• Prepare annual work plan in relation to risk, legal and compliance functions.
• Provides training and technical support to management and employees regarding risk, legal and compliance. 

Legal & Compliance

• Draft contracts and other legal documents.
• Ensure business activities are in line with legal requirements through robust periodic reviews.
• Liaise with external counsel on legal documents, legal implications and disputes.  Review advice given by and documents prepared by external legal counsel.
• Provide compliance and legal updates including dissemination and analysis of new and/or revised laws and regulations.

Risk

• Assists in establishing and monitoring key risk indicators, as well as implement corrective action plans to mitigate risks.
• Assists in developing and enhancing policies, procedures and control assessments in response to identified risks.
• Ensure effective incident management process and timely reporting escalation of risk events
• Participates in corporate wide contingency planning/business continuity efforts. Assist to implements RHB Group business continuity framework. Coordinates training, communication, and testing of plans.

Team 

Serving public sector customers is an integral part of ServiceNow’s business and future growth trajectory. ServiceNow is a leading provider of digital workflows for many federal, state, and local government agencies in the United States. To help these organizations successfully fulfill their missions and deliver better experiences to citizens and constituents, ServiceNow provides specialized cloud environments that meet and exceed data and security regulations and policies of our government customers. 

In this role, you will be responsible for the success of the Singapore Government Cloud (SGC) environment. You will directly work with Singapore customers across government and other regulated industries to understand their pain points and interface directly with our field sales team to grow the business. You will own the environment, develop the product strategy, stay abreast of changing government regulations around data, cybersecurity and AI and maintain the product roadmap. 

In addition, you will directly influence the roadmap of the ServiceNow Platform and suite of SaaS applications to better serve public sector customers.

You will also be responsible for managing the regulated markets product management team in the Middle East and in the Asia-Pacific region and be responsible for expanding our regulated cloud offering to other markets in the Asia-Pacific region.

Reporting to the Director of Product Management, Regulated Markets & Public Sector Industry, you will be a key member of a team that drives the growth of ServiceNow’s public sector business.

What you get to do in this role

• Understand the unique needs and pain points of Singaporean customers 
• Influence and coordinate across sales, legal, security, marketing, FP&A and other product managers to deliver the best customer experience for public sector customers
• Define and execute product strategy and roadmap for the Singapore Government Cloud (SGC) environment
• Drive P&L accountability for the SGC environment
• Support monitoring competitive intelligence as input into product strategy
• Manage and lead the regulated markets product team in MEA

SHIELD is a device-first risk AI platform that helps digital businesses worldwide eliminate fake accounts and stop all fraudulent activities. SHIELD identifies the root of fraud with the global standard for device identification (SHIELD Device ID) and actionable risk intelligence, empowering businesses to stay ahead of new and unknown fraud threats. We are trusted by global unicorns like inDrive, Alibaba, Swiggy, Meesho, TrueMoney and more. With offices in San Francisco, Miami, London, Berlin, Jakarta, Bengaluru, Beijing, and Singapore, we are rapidly achieving our mission – eliminating unfairness to enable trust for the world. 

Responsibilities

• Design and implement robust app shielding and obfuscation strategies to protect sensitive code and data within mobile applications.
• Stay updated on mobile security trends, emerging threats, and best practices in the field.
• Research and evaluate new mobile security tools and technologies. 
• Develop and maintain mobile security tools and frameworks

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• Minimum of 5 years of experience within mobile security engineering
• Expertise in app shielding and obfuscation techniques
• Deep understanding of the Android OS internals and security mechanisms
• Strong proficiency in C++ programming
• Knowledge of reverse engineering techniques
• Familiarity with mobile application development frameworks (e.g., React Native, Flutter, Xamarin)
•  Experience with security testing tools (e.g., Burp Suite, Frida, MobSF)
• Excellent analytical skills and problem solving skills 
• Ability to communicate effectively with stakeholders at all levels of the organization

• Perm
• Must have experience in security products POC, RFQ and integration and implemention for any of the tools - EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security.
• At least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.

Job Description

• Subject matter expert (SME) for the security systems owned by the Information Security Team.
• Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
• Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
• Prepare RFQ and evaluation criteria, proof of concept (POC) during product evaluation. and liaising with vendors to implement security solutions.
• Advise infrastructure teams on security design that is relevant and fit for purpose.
• Identify and assess cyber risks in the IT infrastructure environment.
• Manage individual project priorities, deadlines and deliverables.
• Any relevant ad-hoc duties.

• Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
• Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
• Experience in security products POC and RFQ.
• Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
• Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
• Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
• Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
• Strong oral, written, presentation and inter-personal skills.
• Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
• Able to work independently and in a team-oriented, collaborative environment.

Triton AI Pte Ltd
Registration Number: R1980724
EA: 21C0661

• Perm
• AWS
• Bonus
• Medical & Insurance Coverage

The Legal Counsel will play an active role in providing strategic and pragmatic advice and support in legal and regulatory matters to promote business growth whilst mitigating risks for all matters related to NTI Group’s core business.

Roles & Responsibilities

• Provide legal support to business and operational units
• Review, draft and negotiate contracts, including development, research collaboration, licensing, supply, procurement and other commercial contracts, both in English and Chinese
• Provide support to M&A, venture investment, joint ventures and other strategic partnerships transactions
• Manage and maintain contract templates
• Provide support for legal compliance – internal policies, SGX listing rules, corporate governance and related laws and regulations
• Provide support for corporate secretarial matters and Board matters
• Develop training materials and conduct training to stakeholders and business units
• Manage document management system and
• Perform any ad-hoc duties

Requirements

• LLB, Juris Doctor or equivalent degree
• At least 3 years of experience, combination of in-house role and practice in law firm(s)
• Experience in manufacturing industry, M&As, joint ventures and general corporate and secretarial work preferred
• Possess strong sense of responsibility, ability to work autonomously and in a team, robust knowledge of general contracts and commercial law, and desire to work in a fast-paced environment
• Excellent communication & interpersonal skills, embracing constructive and collegial teamwork, within department and with other departments and stakeholders
• Proficient in Microsoft Office
• Remuneration will commensurate with experience and qualifications.

(We regret that only shortlisted candidates will be notified.)

• Draft, review and advise on a broad range of banking - related contracts with respect to the businesses of the Bank (i.e.Corporate, Commercial, Retail and Treasury).
• Manage and advise on regulatory matters of the Bank – including but not limited to PDPA.
• Draft, review and advise on ISDA related matters.
• Assist in handling dispute related matters.
• Advise and participate in branch -related projects.  
• Working together with multiple internal stakeholders to prepare and advise on legal documentation, internal policies and procedures.
• Manage external counsels effectively when engaged.
• Keep abreast with the relevant laws and regulations relating to financial institutions.
• Carry out any other duties as assigned by the Head of Legal.

MAINTENANCE & ENGINEERING

• Plan and carry out preventive maintenance throughout the hotel to ensure standards are maintained for guest comfort.
• Prioritise and carry out maintenance as requested by Departments on a daily basis to ensure the smooth running of all hotel departments.
• Motivate and develop the Engineering team to reach to their fullest potential.
• Ensure guest-centric approach to works, schedules with priority placed on services which impact guest satisfaction.
• Liaise and work closely with the MCST and FCC to ensure smoother operations and consistency in approach.
•  Record meter readings and liaise with the Executive Assistant Manager regarding options to improve energy management and conservation.
• As a Fire Safety Manager, be responsible for the testing of fire alarms, emergency lighting etc. on a routine basis as required by local Council and Fire Service.
• Liaise with the Body Corporate with regards to maintenance issues and re-charge labour and materials at agreed rates
• Ensure compliance with all legislation, including Health and Safety and Environmental.
• Liaise with the Executive Assistant Manager regarding use of contractors within the Hotel, controlling expenditure and ensuring work is to the standard required by the Company and manufacture specifications.
• Ensure the cost effective and hygienic removal of rubbish from the hotel areas and monitor to ensure areas are clear and free of offensive odour.
• Be available to carry out emergency maintenance work outside of normal working hours, as required for: full power failure, evacuation fire system re-set and / or failure of mechanical systems.
• Maintain records of repair work and daily checks as required by local Council, Government and Manufacturer specifications.
• Liaise closely with all departments regarding ‘down’ rooms to expedite a quick turn around and return to inventory.
• Ensure the external areas of the hotel are neat and tidy and maintained in line with Company brand standards.
• Research, recommend and liaise with the Executive Assistant Manager regarding procedures to improve the overall efficiency of the department and to carry out project work/prepare reports as requested by the Executive Assistant Manager.
• Support the co-ordination of safety and security/risk management programs via third party providers
• Work with the operational Department Heads team to ensure InterREACT tracking and compliance
• Ensure health, safety and welfare of all ambassadors is provided for through implementation of integrated occupational safety and health program. 
• Give guidance to the effective operation of the WHS Committee.
• Ensure all ambassadors are competent in the safe and effective use of equipment and chemicals in accordance with the manufacturer’s instructions.
• Attend and actively participate in daily meetings respecting the confidentiality of issues which may be discussed formally or informally.
• Prepare monthly Engineering reports, commenting on key performance indicators and action taken to keep on target.
• Adherence to Emergency Communication procedures ensuring that enquiries from the media are only responded to by the nominated spokesperson.
• Strive to implement the AccorHotels Vision and demonstrate active use of AccorHotels Values.

SECURITY

• Direct and manage all activities and responsibilities of the Security Department.
• Establish, implementation and ensure compliance of Security Standard Operating Procedures, rules and regulations, to ensure that standards are in accordance with the operations manual.
• Manage all Investigation, incidence reporting and any cases of infringement of the hotel’s rules and regulations.
• Lead, guide and mentor the security team ensuring that they are sufficiently trained with all the security policies and procedures.
• Plan and schedule the day-to-day activities of all security ambassadors, to ensure that all hotel areas are properly and adequately secured at all times.
• Maintain close liaison with governmental authority to ensure compliance.
• Responsible for all resolutions to complaints and emergency situations.
• Develop and recommend to the management safety and security measure to safeguard VIP’s and other guests, special functions in the hotel, hotel property and ambassadors and vehicles in hotel property.
• Ensure that all the security ambassadors are fully conversant with the operation of all fire equipment in the hotel that the Engineering Department.
• Investigate the report of any thefts and use sound judgment in dealing with these matters, seeking the concurrence of the management if a police report is to be made
• Prepare annual security budgets/goals, develops working methods and plans to carry out goals, compares actual accomplishments against goals periodically and take necessary corrective action.
• Any other reasonable request within your range of competence as required by Management.

• Providing legal advice on public procurement related activities and participating in multi-disciplinary task force for public tenders
• Negotiation, drafting, analysis, and review of various commercial agreements (distribution, agency, license, services, etc.) 
• Management of litigation in close cooperation with local lawyers
• Advising the subsidiaries on an occasional basis on a variety of legal matters relating to e.g. competition law, financing solutions, social law and HR matters in order to harmonize good legal practices
• Contribute to elaborate various internal policies and procedures
• Risk management
• Provide training and guidance to the business

Key Responsibilities:

• Develop new custom parsers for parsing and field extraction of new log source types, including testing and finetuning
• Research, evaluate and identify the most appropriate mechanism for efficient parser development
• Modify and enhance existing parsers to adopt to log variants
• Document the newly created or modified parsers
• Work with engineering team to deploy and test the new or modified parsers
• Update development progress and issues to team lead
• Provide inputs to Delivery Managers on log format changes required to reuse existing parsers

Requirements:

• At least 3 years of relevant work experience in log management, log onboarding to SIEM, connector development, scripting and/or data engineering
• Certified as Splunk Core Power User or higher
• Experienced in Splunk Processing Language and Regex
• Good working knowledge of cloud environment (AWS and/or Azure)
• Please note that this role will be 8 months direct contract.

The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.

He/she will be responsible for his/her career by providing professional services to implement turnkey projects for our clients. A problem solver, he/she will treat each technical issue as a learning opportunity and challenge. No two days will be the same as opportunities are aplenty in deploying challenging solutions in various enterprise settings.

Roles & Responsibilities:

• Engage clients in identifying business and technical requirements relating to cyber security solutions for GRC, VMS, Data Protection (DLP)
• Deploy projects and provide consultation to clients as a Subject Matter Expert (SME) from Design to Implementation phase in System Development Lifecycle (SDLC)
• Create technical documentation for the solution deployment
• Empower clients through technical enablement
• Communicate and handover to support team (L1) after implementation
• Support as post-sales support services (L2) when necessary

The ideal candidate should possess:

• At least 2 to 5 years of IT or Cyber Security experience
• At least 1 to 2 years of implementation experience in one or more of Vulnerability Management (VM), Data Protection and Governance, Risk and Compliance (GRC) solutions
• Problem solver with strong analytical skills
• Dynamic individual and team player with positive working attitude
• Good communication and written skills
• Passionate about Cyber Security
• Relevant diploma or degree qualifications in Information Technology or Cyber Security

Candidates with more years of relevant experience may be considered for the role of a Senior Consultant.

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.

Responsibilities

• Engage clients to identify requirements relating to cyber security solutions for Data Protection
• Proposal, scope and size technical solutions for clients
• Deploy competency’s related projects and provide consultation to clients with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the solution deployment
• Empower clients through technical enablement
• Provide post-sales support services for corrective and preventive maintenance when necessary

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology
• At least 5 to 8 years of IT security experience
• Experience in leveraging and expanding the capabilities of existing analytical tools and technologies; recommend new technologies as appropriate
• Experience with web security, email security and Cloud Access Security Broker (CASB) and will be preferred
• Positive working attitude
• Good communication and written skills
• Passionate in information security
• Experience in programming and scripting is preferred

Customer Relation Officer Responsibilities:

• Taking part in brainstorming sessions and suggesting innovative ideas.
• Assisting with the development and distribution of PR materials, including brochures, pamphlets, newsletters, and videos.
• Editing and proofreading social media content, videos, press releases, emails, and other communications about clients that will be sent to the public.
• Assisting with the organization and execution of various media and PR events.
• Managing PR materials, filing, copying, and performing other clerical tasks.
• Answering phones, responding to emails and inquiries, and performing other administrative tasks.
• Managing calendars and media lists.
• Maintaining the PR database, documenting media coverage, and tracking PR metrics.
• Developing and maintaining positive relationships with clients, stakeholders, media, and vendors.

Customer Relation Officer Requirements:

• Experience with video production and editing.
• Excellent copywriting and editing skills.
• Experience with social media platforms.
• Outstanding computer skills, including experience with databases and design software.
• Strong communication, teamwork, and presentation skills.
• Good organizational and time-management skills.
• Attention to detail.
• Willingness to stay up-to-date with the latest industry trends and methods.
• May Include weekend, holidays
• Working Hours 6pm to 3am

Job Overview

The role of a Cyber Account Managers is responsible for effectively articulating the value of Ensign Infosecurity Cyber Security offerings to commercial prospects and clients through strategic selling skills.

Duties and Responsibilities

· Involved in the direct sales process by managing new and existing accounts

· Develop and lead security account plans and strategies for each assigned account using all available resources (executive sponsors, marketing, product partners, services BU, etc)

· Drive sales revenue growth through new project identification, creation and cross-sell opportunities.

· Forecast and report activity accurately in line with the sales target allocation

· Identify major projects within the accounts and running activities to build a strong client relationship

· Serves as a key point of contact between the client and the organization

· Informs clients of new integrated solutions offerings and recommends integrated solutions that suit clients’ business needs

· Craft high-level relationships within assigned accounts to win incremental product and services business

· Responsible for preparation and submission of bids documents and proposals

· Work with technical resources to present a competitive analysis, proposals and solutions to response to client requirement

Requirements

· Experience selling integrated cyber security solutions (that bring together both hardware and software products) in large or complex deal in commercial sector ($500K+) to achieve revenue/sales targets

· Validated track record of over-achievement

· Able to build and execute on an account plan with a security approach

· Adept at communicating with a largely technical audience

· Able to conduct product demonstrations

· Experience in applying solution-selling methodologies to improve corporate revenue growth

· Track record of closing both tactical and strategic opportunities

Preferred Skills /Qualities

· Good all round knowledge of Security Market in commercial sector

· Direct touch sales combined with experience working in a matrixed organisation

· Good interpersonal, communication and presentation skills

· Self starter

· High level of attention to detail

· Relevant security diploma, certifications or security vendor certifications is preferred

Duties & Responsibilities:

• Carry out pre-sales engagement for projects relating to AA
• Deploy AA related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Develop SIEM correlation rules for security monitoring and detection of new threats
• Develop SIEM and Threat Intelligence report templates that are useful for analysis by the customers
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement

Requirements:

• Good Diploma or Bachelor’s Degree in Information Technology
• Knowledge in information security technologies such as SIEM, Threat Intelligence and Vulnerability Management is preferred
• At least 2 to 5 years of IT security experience
• Good communication and written skills
• Positive working attitude
• Passionate in information security

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Duties & Responsibilities

• Engage clients to identify requirements relating to cyber security solutions such as Database Security, Application and Cloud Native Security
• Conduct Solutions Presentations and Perform Proof of Concept (POC) / Proof of Value (POV) for clients to ensure the solution meets their requirements
• Respond to RFP, ITQ, RFQ, generate proposals, scope, and size technical solutions for clients
• Conduct project deployments and provide consultation to clients as a Subject Matter Expert (SME)
• Create technical documentation for the solution deployment
• Perform knowledge transfers / trainings to clients through technical enablement
• Provide post-project support services for corrective and preventive maintenance when necessary

Requirements

• Good diploma or bachelor’s degree in Information Technology
• Experience with Cloud Computing Platforms, Database Security and Application Security will be preferred
• Experience in leveraging and expanding the capabilities of existing analytical tools and technologies
• Experience with DevOps and Cloud Native Security is advantageous
• Knowledge in information security technologies & cyber threat actors, cyber-crimes and fraudulent activity targeting the technology or various industries
• Positive working attitude
• Good communication and written skills
• Passionate in information security
• Experience in programming and scripting is preferred

Key Responsibilities

• Perform implementation, maintenance, support and operation of the project's security monitoring use cases
• Maintain understanding of the architecture and work with security team to understand the use cases to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Adhere to established change management process and other service management process in day-to-day tasks
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Review, propose and generate dashboards and reports to automate monitoring of systems and log and threat intelligence feed ingestion, and reduce low value event escalations
• Build rules and intelligence to detect threats in all monitored assets
• Implement and devise detection method of such threats in our security operations through SIEM use cases etc
• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Review and update data enrichment, including use of threat intelligence to enhance fidelity of detection
• Review and maintain UEBA data sources and use cases

Requirements

• 1- 2 years of experience in security operations in a SOC environment
• 1- 2 years of experience in creating, finetuning and maintaining correlation rules and SIEM dashboards
• Working experience in Regex and/or scripting
• Strong critical thinking / contextual analysis abilities
• Strong investigative and analytical problem solving skills
• Stakeholder management
• Meticulous with an eye for details
• Product certification such as Splunk Enterprise Certified Administrator or equivalent
• Professional certification such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage
• Good understanding of whole of government environment would be an advantage

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

Duties & Responsibilities:

• Managing and leading a team of engineers for presales and project deliveries
• Supporting pre-sales engagement for projects relating to Advanced Analytics
• Responsible for ensuring projects are delivered in a timely manner
• Responsible for supporting presales activities in relation to developing solution design, bill of materials and scope of work
• Deploy Advanced Analytics solution related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement to sales team and/or junior members of the team
• Perform consultancy activities such as conducting technical presentations and engagement to prospective customers, preparing scope of work, bill of materials and technical proposal for submission for tender bids
• Identity, evaluate and recommend new technologies that would be relevant to Adaptive Defence
• Provide mentorship and guidance to junior staff

Requirements:

• Bachelor’s Degree in Information Technology or Cyber Security
• Professional certificates such as SANS or ISC2 would be advantageous
• At least 7 years of IT security experience and experienced in a wide range of cyber-security technologies
• Technical knowledge in the following information security technologies & solutions is preferred: SOAR Platform / Threat Intel Platform / Threat Intel Feeds
• Experience in IT Network / System Administration will be a strong advantage
• Experience as a technical lead in large-scale projects involving multiple technologies as part of a turn-key solution
• Strong troubleshooting and analytical skills that can resolve issues as the final point of escalation
• Strong presentation, communication and written skills
• Basic project management skills
• Positive working attitude
• Passionate in information security

Job Description

The incumbent is responsible for delivering information security projects that are related to Advanced Analytics (AA), such as Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence Management and Vulnerability Management, including the execution of all project implementation activities.

Responsibilities

• Carry out pre-sales engagement for projects relating to AA

• Deploy AA related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)

• Develop SIEM correlation rules for security monitoring and detection of new threats

• Develop SIEM and Threat Intelligence report templates that are useful for analysis by the customers

• Develop playbooks for automated incident management

• Create technical documentation for the AA deployment

• Provide post-sales support services for corrective and preventive maintenance

• Carry out technical enablement

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology

• Knowledge and experience in information security technologies such as SIEM, Threat Intelligence and Vulnerability Management is preferred

• At least 3 to 5 years of IT security experience

• Good communication and written skills

• Positive working attitude

• Passionate in information security

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Responsibilities:

· Delivery of Microsoft Security, Network, SIEM, SOAR, Firewall implementation

· Delivery of vulnerability, penetration testing, red teaming, and risk assessment activities

· Mentoring Junior Team members

· Responsible for Daily Operation of managed security services

· Assist Sales Team in qualifying prospects for security opportunities

· Delivering presentation of Company Cybersecurity capabilities

· Certification and Training budget for motivated staff (e.g. OSCP, CREST, Microsoft etc)

Requirements:

· Diploma or Degree holders in Computer or Information Engineering or related subjects

· 5+ years of cybersecurity and delivery experience

· Possess analytical skill

· Reporting to Security Manager to provide security support such as perform

o Network and Security Implementation

o Penetration and Vulnerability testing

o Red Teaming

o Security Configuration Assessment

o Security assessment

o Risk assessment

· Good knowledge of Network, System and Security domain

· Hands-on experience of implementing security solutions(Cisco, Microsoft, Fortinet, SentinelOne, CrowdStrike, Palo Alto)

· Knowledge of ISO 27001, NIST, COBIT, IEC62443 is a plus

· Strong knowledge of network/IT services on web / client / DNS / Email /Vulnerability/Firewall/XDR/SIEM security

· Possess presales and delivery support experience

· Proactive and can work independently or as a team

· Proficiency in writing technical proposal in English

Preferred Certifications

· Microsoft Security, Fortinet , OSCP, CREST, CEH eJPT Certification Preferred

· Azure/Microsoft/Google Security certification is a plus