• Monitor third party security feeds, forums, and mailing lists to gather information related to the client through automated means
• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Review vulnerabilities advisories
• Review and process threat intelligence reports
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assess each event based on factual information and wider contextual information available
• Review, propose and generate reports to automate or reduce low value event escalations
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations through SIEM Rules, DB scripts etc.
• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
• Assist the Security Analysts with the investigative works
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to detection Use Case
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

• Setup and operating Managed Endpoint and Detection Response (MDR) program and proposing enhancement to achieve better efficiency/ effectiveness
• Operating Network Traffic Analytics (NTA) program, identification of abnormalities in client’s environment
• Performs threat hunting within the clients’ technology environments to uncover indicators of threat activities
• Performs digital forensic preservation, legal documentation and electronic discovery for incidents and investigations
• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
• Supports the identification and documentation of Indicators of Compromise (IoCs)
• Leverages internal and external resources to research threats, vulnerabilities and intelligence on various threat actors and exploitation tools and platforms
• Use an analytics platform to identify threats in the available information repositories
• Perform threat research to identify potential threat vectors and work with multi-disciplines to improve prevention and detection methods
• Identify gaps in an organisation’s measurement metrics, telemetry and logging capabilities and propose enhancement strategies to achieve the intended outcomes
• Work with client’s appointed Incident Response Management team for cyber security incidents such as data security breach, Advanced Persistent Threat (APT)

Requirements

Basic Requirements

• 1 to 3 years of experience with threat hunting
• 1 to 3 years of experience in incident response handling
• 1 to 2 years of experience with digital forensics investigations
• Experience in consulting, including both internal and client facing experiences
• Ability to obtain a security clearance
• Bachelor Degree in Computer Engineering, Computer Science, Cyber Security, Information Security or other equivalents
• Ability to travel 20% of the time

Preferred Skills /Qualities

• 1 to 3 years of experience supporting or providing expert witness testimonials
• 1 to 3 years of experience in data analysis
• 1 to 3 years of experience in log analysis
• 1 to 3 years of experience in reverse malware analysis
• Experience with research, technical and business documentation and analysis.
• Knowledge of the Singapore Law, Singapore Government regulations and policies.
• Ability to demonstrate flexibility, initiative and innovation in dealing with ambiguous, fast-paced situations.
• Ability to show proficiency in one or more regional languages and dialects.
• Ability to show proficiency in Microsoft Office, Power BI and Tableau.
• Ability to show proficiency in Forensic Toolkits, e.g. EnCase Forensics, FTK Forensics, Magnet Forensics and Write Blockers.
• Ability to show proficiency in reverse malware engineering tools, e.g. IDA Pro
• Ability to show proficiency in programming and scripting, e.g. Java, .NET Programming, Python & PERL scripting, etc.
• Possession of excellent presentation and briefing skills.
• Possession of excellent oral and written communication skills.
• Professional certifications, including EnCE, GCIH, GCFE, GCFA, GREM, GNFA, GASF, GCTI, CISSP, or other SANS certifications.

Responsibilities

• Engage clients to identify requirements relating to cyber security solutions for Data Protection
• Proposal, scope and size technical solutions for clients
• Deploy competency’s related projects and provide consultation to clients with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the solution deployment
• Empower clients through technical enablement
• Provide post-sales support services for corrective and preventive maintenance when necessary

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology
• At least 5 to 8 years of IT security experience
• Experience in leveraging and expanding the capabilities of existing analytical tools and technologies; recommend new technologies as appropriate
• Experience with web security, email security and Cloud Access Security Broker (CASB) and will be preferred
• Positive working attitude
• Good communication and written skills
• Passionate in information security
• Experience in programming and scripting is preferred

Duties & Responsibilities:

• Managing and leading a team of engineers for presales and project deliveries
• Supporting pre-sales engagement for projects relating to Advanced Analytics
• Responsible for ensuring projects are delivered in a timely manner
• Responsible for supporting presales activities in relation to developing solution design, bill of materials and scope of work
• Deploy Advanced Analytics solution related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement to sales team and/or junior members of the team
• Perform consultancy activities such as conducting technical presentations and engagement to prospective customers, preparing scope of work, bill of materials and technical proposal for submission for tender bids
• Identity, evaluate and recommend new technologies that would be relevant to Adaptive Defence
• Provide mentorship and guidance to junior staff

Requirements:

• Bachelor’s Degree in Information Technology or Cyber Security
• Professional certificates such as SANS or ISC2 would be advantageous
• At least 7 years of IT security experience and experienced in a wide range of cyber-security technologies
• Technical knowledge in the following information security technologies & solutions is preferred: SOAR Platform / Threat Intel Platform / Threat Intel Feeds
• Experience in IT Network / System Administration will be a strong advantage
• Experience as a technical lead in large-scale projects involving multiple technologies as part of a turn-key solution
• Strong troubleshooting and analytical skills that can resolve issues as the final point of escalation
• Strong presentation, communication and written skills
• Basic project management skills
• Positive working attitude
• Passionate in information security

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

Key Responsibilities:

• Develop new custom parsers for parsing and field extraction of new log source types, including testing and finetuning
• Research, evaluate and identify the most appropriate mechanism for efficient parser development
• Modify and enhance existing parsers to adopt to log variants
• Document the newly created or modified parsers
• Work with engineering team to deploy and test the new or modified parsers
• Update development progress and issues to team lead
• Provide inputs to Delivery Managers on log format changes required to reuse existing parsers

Requirements:

• At least 3 years of relevant work experience in log management, log onboarding to SIEM, connector development, scripting and/or data engineering
• Certified as Splunk Core Power User or higher
• Experienced in Splunk Processing Language and Regex
• Good working knowledge of cloud environment (AWS and/or Azure)
• Please note that this role will be 8 months direct contract.

Job Highlights
• Attractive salary package
• Fully sponsored certified security training
• Stable career with job progression in rank system

Benefit Summary:
• Gross Salary $2600 - $4400
• Annual Increment
• Sign Up Bonus -$35000

Responsibilities:
• Infrastructure protection
• Training and consultancy
• Event and asset security management

Requirements:
• Team player with ability to react appropriately in stressful situations
• Able to work shift

Send your Cv to linda at forteemp.com.sg

Where Innovation meets Excellence.

Be a part of a globally renowned management consulting firm that is on the front line of industry disruption. We are a mid-size player with an entrepreneurial spirit that works with a market-leading brand in every sector, while our parent organization Infosys is a top-5 powerhouse IT brand that is outperforming the market and experiencing rapid growth.

Our consulting business is annually recognized as one of Australia’s top firms by the Financial Times and Forbes due to our client innovations, our cultural diversity and the dedicated training and career paths we offer to our consultants.

As we look to strengthen our team with top talent that can shape the future for our firm, we seek entrepreneurial-minded individuals that value a highly diverse culture where differences are embraced, that want to have a voice with top management and that are rewarded for collective achievement. We are committed to fostering an inclusive work culture that inspires everyone to deliver their best!

The Team

Our Cyber team helps some of the largest global firms and most recognizable local brands solve their cyber security challenges. With diverse services from the strategic, advisory, and tactical levels, we help our clients understand the threat, reduce their risk and increase their resilience against cyber-attacks.

The Role

·       Conduct NIST CSF risk assessments

·       Work on global projects with a truly global team, with the support of over 300,000 technical staff from our parent organization.

·       Contribute to the development of consulting go to market offerings and innovative solutions targeted at the C-Suite executive community that help them to understand and mitigate their cyber risks.

·       Help design innovative new services to lead the market incorporating AI and ML where it brings value

·       Support presales, sales and account management pursuits from a subject matter expert perspective

·       Have considerable client connect in local Singapore/ Malaysia/ Thailand/ Indonesia Market to position Cyber Offerings and close deals

About You

You will have already achieved strong career progression to date, and experience working with recognized consulting brands and large commercial sector clients.

Your security experience must include

·       A relevant undergrad or post grad degree (Infosec, Cyber Security, Information Technology)

·       12-15 years+ in the field of cyber security/infosec delivery & Sales

Your diverse Security experience may include one or some of below:

·       A thorough understanding of NIST CSF

·       A thorough understanding of ISO27001

·       Cyber Due Diligence Assessments

·       Cyber Incident Management

·       Third- Party & Supply chain Cyber Risk Management

·       Incident Response Plan review

·       Supporting bids, RFP responses and proposals

·       Crisis Management Exercises (CMX)

·       CISSP, CISM, CISA, GSLC, GSTRT, GCPM,

·       Target Operating Models (TOMs)

·       Cyber Security Roadmaps

·       Cyber Incident Review

·       Utilizing Cyber Threat Intelligence reports

·       Cyber security compliance programs (GDPR)

·       Cyber Security Risk Assessments of Maturity Assessments

·       Design and/deliver awareness training

·       Identity and Access Management

And you will have worked in one or some of the following industries:

·       Financial Services

·       Manufacturing

·       FMCGs

·       Retail, Consumer Packaged Goods, Logistics

·       Energy & Utilities

·       Telecommunications & Media

Our ideal candidate will be:

·       Able to balance technical and commercial considerations to develop practical recommendations for our clients

·       Able to build strong and effective business relationships at all levels

·       Able to support and oversee staff with less experience in their tasks

·       Able to explain complex subjects without using jargon (both written and verbal)

·       Be comfortable working collaboratively in a fast-moving and ambitious global team where the client comes first

·       Fluent in English and another language

·       Please note, you must hold the relevant and suitable right to work

Why Join Us?

For the right talent that want to be part of a diverse team, innovation-driven practice and a high-performance culture, we offer industry-leading compensation and benefits, along with top training and development opportunities so that you can grow your career and achieve your personal ambitions. Curious to learn more? We'd love to hear from you.... Join us today!

Desired Skills and Experience

• CIO Advisory
• Cyber Security