To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB

• Normal working hours
• Exposure to latest technology

About the company

Our client is an established multinational end user company. As part of their plan to invest in technology, they are now hiring a new SOC Engineer / Analyst (Cyber Defence)- Incident Response to be part of their Cyber Security team here in Singapore.

About the job

• Reporting directly to Head of Cyber Security, SOC, your role involves:
• Ensuring incident Responses towards IT security threats are well managed. Ensuring timely triage of cybersecurity incidents, investigation and incident response for Cyber security incidents
• Managing security operation to ensure implemented security technologies and controls are effective and adequate to protect the company
• Conducting Identifying root cause and remediating of cybersecurity incidents
• Providing advisory on security threats and vulnerabilities. This includes performing vulnerability scans and analyze results of scans
• Directing post-mortem activities following critical incidents
• Overseeing the development and execution of corporate security awareness and training programs. This includes getting the buy-in of senior business stakeholders which includes securing funding for IT security programs
• Enhancing early detection capability - Driving lessons learned activities after incidence closure to identify potential gaps in security control

Skills and experience required
As a successful applicant, you will have at least 3 years of experience in IT Security / SOC / Incident response / SIEM / Splunk / Incident response.

Whats on offer

This is an excellent opportunity to join an established company with ambitions to scale up their IT security capabilities.

To apply online please use the 'apply' function, alternatively you may contact Hoon Teck TAN at https://www.linkedin.com/in/hoonteck-nologyrecruitment/ (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB (EA: 94C3609/ R1219669)

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

If you believe in developing a better tomorrow, read on. 

About the Role

WHAT YOU’LL BE DOING:

• This role includes responsibilities of managing 3 team members and overseeing operations, subsidiaries, assigned POA over specific matters and/or other appointments such as Data Protection Officer

• Maintain an oversight of all the alerts from FINTECH, MASNET, Group Cyber SOC for AIASG and provide support to incident response personnel to ensure all deliverables are met within SLAs.

• Maintain an oversight of related security posture and baseline and ensure related vulnerabilities are remediated timely as per established standard to minimize risk exposures.

• Drive local security projects and group security project facilitation.

• Develop and maintain local incident response playbooks and other detection/response related standard operating procedures to ensure compliant to the MAS regulations.

• Act for the incident response action approval chain and support any incident response obligation for third parties.

• Respond to computer security incidents according to established response processes, leverages subject matter expertise where established processes do not exist.

• Acts as a subject matter expert regarding CSIRT incident response processes from local perspective.

• Provides guidance to other stakeholders during the incident response process and follow & track all the remediation actions till incident closure.

• Chair local IMT (Incident Management Team) calls and keep senior management and stakeholder updates on the progress of cyber incident management.

• Identify and manage potential and actual operational issues within the incident detection/response domain and take corrective action whenever required

• Work as a liaison between the SOC Team, other departments, and upper management for AIASG and potentially local regulators

• Manage relationships with our customers’ and third parties’ tech incident teams and frequently interact with client management for any security incident related queries.

• Work closely with the Group SOC team to manage ongoing service delivery and onboarding of local process within the SOC alignment and compliant to the local regulations.

• Level and type of budgetary or financial control of the position, responsible for budget of Information Security and Governance unit.

• Other quantitative / qualitative measures, e.g. time, quality, feedback, etc., that are tied to the objective of the area of responsibilities.

• Downward trend in cyber security incidents and less DP incidents.

• Uplift Cyber Security process, controls and maturity level for Cyber Security Incident.

• Support for the Cyber Security score in the annual MAS CRAFT report.

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Bachelor’s degree of computer science, computer engineering or other relevant degrees

• Minimum 8 years of IT experience with at least 4 years’ of experience in cyber security incident handling in a regulated environment (e.g. FSI, government etc.)

• Strong knowledge of cybersecurity incident management covering identification, containment, response, recovery and reporting

• Sound knowledge of Cloud, Cyber Monitoring, Threat Hunting, and Cyber Threat Intelligence

• Natural ability to take the lead and drive the investigation of complex security issues, with strong analytical and problem-solving skills

• Self-driven professional interested in the world of cyber security

• Standby for the serious security incident during weekend or off-working hours if necessary

• Hands-on experience for the cyber security incident scenario preparation and tabletop exercise

• Technical understanding of enterprise network, various components and designs and strong understanding of Operating Systems, Applications, Databases in both on-prem and Cloud environment, how they are exploited and how to defend

• Good knowledge of conducting RCA for the incident

• Information Systems Security professional certifications, such as CISSP, CISA, CISM, CSSP or Cloud related.

• A team-player taking ownership and helping colleagues.

• Excellent Analytical, Coordination and Interpersonal Skills.

• Good communication skills and the communication network of the incumbent is expected to be internally within Technology Department (30%) and Enterprise Risk Management, Compliance, Internal Audit (15%), Business Departments (10%), Senior Management and Sub-Committees (10%),Group Technology and Group Information Security (20%) and external with Vendors and Service Providers (15%).

#LI-SC1

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

Job Description & Requirements

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems. Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.

Hands on Responsibilities:

·Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline

·Develop the security acceptance test plan

·Provide expert technical support during the security testing activities

·Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools

·Perform manual or automated security testing using commercial security testing tools

· Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests

· Conduct Whitebox Testing and Secure Code Review

· Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing

· Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing

· Find and pinpoint the vulnerabilities of the assess target system / application

· Document and Report the vulnerabilities found in the system

· Provide professional recommendations / advice to mitigate and resolve the vulnerabilities

· Present the security testing results to the relevant stakeholders

·Provide weekly status reporting on the security testing activity progress

Requirements:

· Bachelor's degree, preferably in computer science or information systems, or equivalent work experience

· Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role

· Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing

· Required Certifications: Any of the followings

o CREST Registered Penetration Tester (CREST CRT)

o Offensive Security Certified Professional (OSCP)

· Knowledge in conducting security testing with the following guidelines and standards

o Open Web Application Security Project (OWASP Top 10 Frameworks)

o Common Vulnerability Scoring System (CVSS)

o Common Vulnerabilities and Exposures (CVE)

o Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors

· High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)

· Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)

· Strong oral and written communication skills, including a demonstrated ability to prepare quality documentation and presentations for technical and non-technical audiences