As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Only for Singaporeans/PR's

Job Responsibilities:

1. Responsible for legal support in the overseas operations of a social gaming app, drafting compliance documents, and ensuring compliance in major global markets.
2. Monitor legal regulations and enforcement trends in overseas locations, provide assessments of compliance risks, offer recommendations, and drive implementation.
3. Clearly understand the needs of business departments, providing legal training and advocacy.
4. Establish and improve compliance systems related to company operations in regulatory domains and execute various compliance tasks.
5. Handle litigation, disputes involving overseas entities (Singapore entity), complaints, investigations, and dispute resolutions involving overseas law enforcement agencies.
6. Ensure daily operations of overseas entities comply with local laws and regulations.
7. Participate in legal affairs related to overseas business, such as business negotiations, drafting, revising, reviewing overseas business contracts and commercial agreements, intellectual property layout, and maintenance.

Requirements:

1. Bachelor's degree or above in a legal-related field.
2. 3 or more years of work experience, preferably in the gaming industry.

------------- Send me your resume via WhatsApp ❤

WhatsApp: (https://api.whatsapp.com/send?phone=6592377799)

I regret to share that only shortlisted candidates will be notified. www.dadaconsultants.com

EA Registration Number: R22108564

Data provided is for recruitment purposes only Business Registration Number: 201735941W. Licence Number: 18S9037

PRODUCT AREA

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.

ADDITIONAL JOB DESCRIPTION

As a Strategic Services Function Manager, you will blend risk assessment, strategic planning, and client collaboration. You will manage a team of cyber security consultants. You'll conduct in-depth cyber maturity assessments, develop forward-thinking strategies, and lead realistic simulations that help clients prepare for and respond to cyber threats.

In this role, you will identify vulnerabilities and develop actionable mitigation plans. You'll empower clients with data-driven insights, enhancing their security posture.

Qualifications

JOB RESPONSIBILITIES

• Manage and inspire a highly skilled team towards surpassing our goals by driving performance and outcomes, while managing workload, scheduling resources, and ensuring the quality of their output.
• Foster expansion in the APAC region for our Strategic Services Practice through the identification and advancement of opportunities, aiding in the creation and development of Statements of Work, and participating in responses to RFPs/RFIs/RFQs. Promote a culture of continuous learning and development within the cyber security practice.
• Perform in-depth assessments to identify and analyse cyber vulnerabilities and threats. Prioritize risks based on their potential impact.
• Craft cyber risk mitigation strategies, ensuring alignment with regulations (e.g., GDPR, ISO 27001, NIST/CIS Controls).
• Collaborate with clients to tailor cyber security solutions. Generate clear reports and presentations explaining risks and mitigation plans. Scope and propose solutions to clients.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 10 years of experience in cyber security with a risk assessment focus.

PREFERRED QUALIFICATIONS

• Master's degree in a relevant field.
• Professional certifications in cyber security (e.g., CISSP, CISM, CRISC)
• Consulting and/or project management experience, and experience leading cyber security assessments, including Table-Top Exercises (TTX).
• Knowledge of security frameworks (e.g., ISO 27000, NIST CSF).
• Ability to present complex security concepts to varied audiences (e.g., technical and executive).
• Excellent communication and problem solving skills.

Job Summary

Thales is seeking suitable candidate for the position of Engineer (System Security).

You will be looking after the governance of the infrastructure and systems for mission-critical Command and Control (C2) system that Thales Solutions Asia (TSA) have developed for government agency. You will be part of a team to manage the security of system, to ensure the system adhere to the security policies, and is well protected from any threats, risks or exploits.

Job Duties

Provide security expertise and management services to support Authority in activities such as:

• Internal / external audits (IM8, Cybersecurity, etc)
• Policies compliance (IM8, Cybersecurity, etc), work with vendor on:
• Disaster Recovery (DR) and Business Continuity Planning (BCP):
• ICT/Threat Risk Assessments (TRA)
• Monthly reviews of privileged accounts and non-privileged account, disable inactive accounts
• Seek security waivers (IM8, Cybersecurity Act, Circulars etc)
• Circulate security notifications/alerts to vendors and ensure status updates too all stakeholders including cybersecurity centre
• Security monitoring/tracking:

-     Monitor alerts from SOC

-     Update stakeholders regarding SOC alerts

-     Review compliance reports with vendors to ensure that system is compliant

-     Manage, track and update any security incidents/ issues to all stakeholders

-     Review Incident Report (if any)

• Patching:

-     Ensure patches are tested and verified before seeking approval for patching downtime

-     Communicate system downtime to all stakeholders

-     Ensure system availability after patching is completed

• Obsolescence management for software licenses, hardware, operating systems and certificates
• Security enhancement/ integration
• Support the submission of security clearance for related vendors
• Perform other related duties as assigned or requested

Job Requirements

• Working hours will be 0830 hrs to 1800 hrs (for Monday to Thursday) and 0830 hrs to 1730hrs (for Friday), excluding weekends and Public Holidays
• Outside of working hours, to provide online support via emails and group chats when required based on the priority and severity of issues related to the system
• Able to cope in a highly pressured fast-paced environment
• Prior working experience in cyber security and vulnerability management is preferred
• Strong knowledge of security principles, best practices, and industry standards, such as NIST, ISO 27001, and CIS Critical Security Controls
• Able to understand security posture of systems
• Prior working experience in Project Management is a plus point
• Able to understand the system and software architecture, and user operations environment
• Willingness to pick up any new technologies

Education

Diploma or Bachelor’s Degree in Cybersecurity/ InfoSec/ Information Technology / Information Systems / Business IT or its equivalent

Relevant professional certifications, such as CISSP, CISM, CEH, or other security certifications

Experience

Minimally 3-5 years of experience in cybersecurity and supporting mission critical systems with very stringent SLA e.g. 99.9%

Well-versed in cybersecurity best practices and establishing of its policies

Well-versed in IT Service Management (ITSM) standards, processes, guidelines and best practices

Job Description

We are looking to hire an in-house counsel to be based in our Singapore office.

Job Requirements

• The ideal candidate for this position should be a qualified lawyer and have at least 7 years of post-qualification experience in wealth management, either at a reputable law firm or in-house company.
• The candidate must enjoy working in a fast-paced high-intensity environment, show excellent legal and commercial judgment, be a good team player and be highly efficient and hardworking.

NAVIATAIRE AIRLINE IT LEGAL SUPPORT APAC AND META
Manage legal support for Navitaire Airline IT for entire APAC and META markets in order to enable sales teams achieving their financial, strategic and operational objectives by providing solution-oriented, responsive and commercially-practical legal advice, while containing legal risks and exposure to the maximum extent possible. Where negotiation of certain positions is required, properly identifying the risks involved and internal approvals required. Drafting, negotiating and interpreting a wide variety of commercial issues and technology contracts agreements with airline customers, varying in nature, complexity and value, and work on all phases of deals, ranging from the proposal/bid review stages, right through to final negotiation, escalation to senior leadership and dealing with any post signature issues, claims and litigation. 

STRATEGIC IMPLEMENTATION AND ACCOUNT MANAGEMENT

• Work closely as a strategic and trusted business partner with and as part of the Navitaire business units' leadership team in APAC and META, and with Amadeus Airline IT leadership in China, identifying, analyzing and taking action to implement commercial strategies while managing legal and risk-related issues which may impact the performance and the reputation of the business lines.

•  Identify legal and compliance risks and advise on the implementation of risk-management strategies using strong thought leadership and support the business in managing them.

• Manage efficient and constructive legal support for customer negotiations and BAU service mode, act as escalation point and where necessary ensure informed and relevant escalation to Senior Management

• Oversee and manage any potential litigations in relation to any Airline IT accounts

POLICY IMPLEMENTATION

• Serve as primary point of contact to Navitaire BU on a global basis for data privacy matters. Engage and collaborate with LEG data privacy SME colleagues as appropriate.

• Implement and monitor compliance with global contracting policies, procedures, contract management tools and training on a variety of legal and contract matters, including to support risk management.

• Contribute to the preparation of contract templates for Airline IT unit that reflect latest policies, legal developments and best practices.

• Implement appropriate training for legal team members as well as commercial representatives (including Regional Heads).

• Contribute to the business strategy using specialist knowledge and experience, helping to define and shape how strategic, complex and business critical contracts are structured. 

DEPARTMENT MANAGEMENT

• Assess resourcing requirements in the APAC and META regions, including China, in close cooperation with the ACU BUs, ensuring level of support is appropriate and planned.

• Understand and continuously improve business performance through the integration of people, departments and processes.

• Identify and organise training to ensure that team members are empowered and engaged.

About ideal candidate:

• University Degree in Law (eg. JD, LLB, LLM) and Legal Qualification to practice as a lawyer (preferably in a common law jurisdiction).

• Senior professional with at least 8 years of post-qualification experience in private practice and/or in-house position in a multinational corporation.

• Experience in: solid experience in IT/SaaS/outsourcing agreements, as well as knowledge of data privacy issues. 

• High quality training in a common-law jurisdiction strongly preferred.

• Experience working within China or familiarity with Chinese law highly desirable.

• We require a seasoned (lead) negotiator (preferably on the IT vendor side) who knows how to balance between commercial and legal stakes. 

• Strong commercial outlook and great client care skills 

• Must have a strategic as well as legal approach to the law and like working in a fast paced, innovative environment.

#LIAPAC24

Diversity & Inclusion

We are an Equal Opportunity Employer and seek to hire the best candidate regardless of age, beliefs, disability, ethnicity, gender or sexual orientation.

Who Are We?

At HoYoverse, we are committed to creating immersive virtual world experiences for players around the world. In addition to game products such as Genshin Impact, Honkai Impact 3rd, Tears of Themis, and Honkai: Star Rail, HoYoverse also launched the dynamic desktop software N0va Desktop, the community product HoYoLAB, and created a variety of products such as animations, comics, music, novels, and merchandise around our original creative concept.

Adhering to our mission of Tech Otakus Save the World, we have always been committed to technology research and development, exploring cutting-edge technologies, and have accumulated leading technical capabilities in cartoon rendering, artificial intelligence, cloud gaming technology, and other fields.

HoYoverse is actively engaged in globalization, with offices in Singapore, Montreal, Los Angeles, Tokyo, Seoul, and other areas.

When you apply to a position with HoYoverse, we will process your personal data. To learn more about how we process your data, we encourage you to review our comprehensive Global Applicant and Candidate Privacy Policy. This policy provides detailed insights into how your information is collected, used, and protected throughout the application process.

What You Will Do:

• Improve existing security monitoring, intrusion detection capabilities.
• Conduct incident response for security incidents, including forensic investigation and mitigation.

What We Are Looking For:

• Understanding of the principles and nature of common vulnerabilities, with strong analytical and adversarial thinking skills.
• Experience in independently discovering general vulnerabilities in web applications/frameworks or systems.
• Participation in forensic investigations of intrusion/0-day emergency response incidents.
• Familiarity with security strategies in the fields of web applications, network protocols, and operating system.
• Knowledge of the principles and strategies of industry-standard security defense capabilities such as HIDS, WAF, and RASP.
• Proficiency in common programming languages such as Java, C, Python, or Go, with the ability to quickly develop simple tools.

We are an equal opportunity employer that believes diverse backgrounds are key to bringing our concepts to life. If you're looking to play a key role in creating the best immersive virtual world experience for our users, we invite you to join our team.

As Cloud Security Engineer Intern, you will take part of designing, building and deploying security-focused infrastructure. If you love challenges, in a constant evolution of Cloud services, you have a high motivation, you want to innovate and you have an obsession with security, you will find your place in the Thales DIS Cloud Security Team.

Responsibilities:

• Evaluating, architecting and implementing security-focused tools and services.
• Supporting the company-defined cloud strategy.
• Ensuring that responses are appropriate (and automated) according to policies and procedures.
• Evangelizing and advocating cloud security practices.
• Driving engineering teams across all security practices.
• Making sure about continuous Thales DIS Cloud improvements.
• Identifying, raising and mitigating security weaknesses on Thales DIS Cloud infrastructure.

Requirements:

• To succeed at this job, you must have a good knowledge of hardening, network protocols, application security and strong skills on coding in multiple common languages (shell, PowerShell and Python).
• You must be fluent in English (written and verbal).
• We would like someone to join our team who has a strong experience of delivering home-grown and commercial security solutions.
• You must have a Degree in Information Technology or a related field.
• We are looking for someone with a proven record of effective security services implementation in Cloud, teamwork and collaboration capabilities.
• AWS Certified Developer – Associate or AWS Certified Security - Specialty would also be considered positively.

REACHFIELD Security, (Grade "A" Agency) located in Singapore, specializes in supplying security manpower to Schools, Factories, Shopping Centres, Office Buildings, libraries, etc.

Job Description

Senior Security Supervisor, Security Supervisor, Senior Security Officers, Security Officers.

If you have a valid PLRD security license and are keen, please Whatsapp (65) 8379 4701 .  For Supervisor post, please attach a copy of your resume.

BNB Chain is looking for a dynamic Public Relations and Communications Manager to join our team. This is a full-time remote APAC-based position reporting to the Global Marketing function. This individual who fills the position will be pivotal in increasing public awareness of BNB Chain, enhancing our company image, and managing communications effectively during crises. The ideal candidate will have a proven track record in public relations, media relations, and communications within the technology or blockchain sector, specifically within the APAC region and mainland China.

Role purpose

We are looking for an SDM to take responsibility for overseeing the successful delivery of services for a large regional APAC client. This role involves managing a team, coordinating resources, collaborating with various stakeholders to ensure seamless service delivery and to ensure all service level KPIs are met or exceeded.

Role tasks and responsibilities

1. Client Relationship Management:

• Build and nurture strong relationships with clients.
• Conduct regular meetings to understand client needs and expectations.
• Act as the primary point of contact for addressing client concerns and inquiries.

2. Service Delivery Oversight:

• Develop, implement, and optimize service delivery processes and procedures.
• Monitor service performance against established SLAs (Service Level Agreements) and KPIs (Key Performance Indicators).
• Identify opportunities for process improvement and efficiency.

3. Team Management:

• Lead and manage a team of service delivery professionals.
• Provide coaching, mentoring, and performance feedback to team members.
• Collaborate with HR for recruitment, onboarding, and training of new team members.

4. Resource Allocation:

• Allocate resources effectively to meet service delivery objectives.
• Work with resource managers and other departments to ensure adequate staffing levels.
• Manage workload distribution among team members.

5. Quality Assurance:

• Implement and oversee quality control measures to ensure service excellence.
• Conduct regular reviews and audits of service delivery processes.
• Develop and maintain quality standards and guidelines.

6. Problem Resolution:

• Address and resolve issues or escalations in a timely manner.
• Collaborate with technical teams and other stakeholders to identify and implement solutions.
• Develop and implement preventive measures to minimize recurring issues.

7. Reporting and Analysis:

• Generate regular reports on service performance, trends, and key metrics.
• Analyze data to identify areas for improvement and provide insights.
• Prepare and present reports to senior management and clients.

8. Continuous Improvement:

• Proactively identify opportunities for process improvement and optimization.
• Implement best practices to enhance service delivery efficiency.
• Foster a culture of continuous improvement within the service delivery team.

9. Contract Management:

• Collaborate with the sales and legal teams to ensure service delivery aligns with contractual obligations.
• Participate in contract negotiations and provide input on service-related terms.
• Monitor contract renewals and changes.

Required:

• A Bachelor's degree in a Business-related field
• At least 4 - 6 years of relevant work experience
• Experience in customer service, leadership or business development
• Advanced computer skills and the ability to learn technology quickly
• Resource planning and budget management experience
• Experience in a Client facing role
• Strong teamwork skills
• Attention to detail

Preferred:

• PMP certification
• Experience in corporate security

Control Risks is committed to a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age or veteran status.

With a high degree of autonomy, you will be supporting the legal function within the Wise group to help take the business to the next level, including: 

• Working closely and building relationships with multiple business units across the Company and across our APAC markets (Singapore, Hong Kong, Australia, New Zealand, Malaysia, Thailand, Indonesia and Japan and other regions in APAC) and Gulf markets to advise on a wide range of legal matters and ad hoc problems, including licensing, market entry and partnerships
• Structuring, drafting, and negotiating commercial agreements with banking/payments partners, outsourced service providers and suppliers
• Understanding the real risks to the business and providing practical advice to Product and Expansion teams. Supporting Product and Expansion teams on changes to our customer agreement for new services or new market entry
• Supporting initiatives relating to governance within the group with close support from Group Co Sec
• Liaising with external counsel where required
• Advising on the legal rights and duties of subsidiary companies and their directors in the APAC region
• Working with the Legal team (based in Singapore, London, New York and Estonia) to support the wider needs of the company
• Staying up to date on legal developments in APAC and advising on future-looking initiatives
• Mentoring and upskilling relevant directors, officers and teams, making life simple and easy

This role will give you the opportunity to:

• Define your path to success - you’ll have the freedom and responsibility to help shape what is needed and then make it happen
• Build something for the future - we are continuing to grow rapidly and your work will be crucial in growing and maturing one of the companies of our time
• Inspire with your ideas, knowledge and self-starting attitude

What we offer in return: 

This is a full-time position reporting to the Head of Legal based in our Singapore office. Find out more about our benefits here.   

If you think you’ve got what it takes, come help us build a beautiful future of money without borders!

Summary of the Position

He/She will be a technical RUN expert for all Network Security services in CA-CIB. As such, he/she will provide support and act as the last level of escalation point for all production support activities within the Network Security operations team in Singapore. He/She is accountable for the overall health and stability of the technical solutions within his scope. He/She has to effectively work with technical peers such as architects, peer experts and project teams on technology road maps and projects. He/She will have control over the scope of technical activities, develop best practices, manage knowledge and ensure the necessary trainings are imparted to the team wherever applicable.

The 20-member Network-Security team operates the RUN activities and delivers projects for its infrastructure scope.

An Expert has a wide spectrum of responsibilities and actions.

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on LEAN-CA-CIB best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into CACIB operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support CA-CIB technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN)
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• At least a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

We are looking for a Research Engineer who will be responsible working on a project on cyber security and privacy issues for IoT and cyber-physical systems.

Responsibilities:
• Design and develop techniques that detect attacks on IoT/CPS;
• Perform analysis and simulations to validate designs;
• Implementation and development of demos;
• Assists with the editing and preparation of manuscripts, reports and presentations;
• Participate in presentations and demos for exhibiting work at appropriate events;

Qualifications

• BEng/BSc/BTech in Electrical Engineering, Computer Science or a related field;
• Programming experience and knowledge of cyber security would be a plus;
• Possesses research background with ability to read and understand methodologies in research papers;
• A good team-player;
• Open to Fixed Term Contract

Job Highlights

• Job Stability. AWS + Variable Bonus + Flexible Staff Benefits
• Flexible Working Arrangements, Hybrid
• Positive working and learning culture

Job Description

We are seeking an experienced IT Analyst Specialist with a focus on Application Security to join our team. The ideal candidate will have a strong technical background and a passion for security.

The successful candidate will join the Team that is responsible in establishing and governing the software development and application support processes, ensuring compliant to the established policies and guidelines. The team must also consider areas of improvement in the IT Delivery Team.

JOB SCOPE

The successful candidate will have the opportunities to work on the follow function(s).

Primary Function:

(A) Responsible for Application Security, not limited to the following

· Conduct application security assessments to identify vulnerabilities and ensure that applications are secure

· Work with development teams to ensure that security requirements are incorporated into the development process

· Develop and enforce secure coding practices

· Develop and maintain security policies and procedures

· Work with infrastructure teams to ensure that security is integrated into the infrastructure design

· Develop and maintain security monitoring tools and systems

· Conduct penetration testing and vulnerability assessments with vendors

· Stay up-to-date with emerging trends and technologies in application security

Secondary Function:

The Team is also handling the following function and the successful candidate may be assign to assist these functions.

(B) Identify IT Delivery improvement opportunities and support request from other teams or departments who has identified process improvement opportunities.

(C) Support Audits

· This includes external compliance audit for area responsible by the IT Dept.; i.e. ISO22301, Finance Audit, ISO27001, etc.

(D) Internal System Support

· Support in the development, support and maintenance of the internal developed back office application solutions and governance enforcements system/tools. e.g. billing system, customer registration system, etc.

· Support back office system improvement initiatives.

TECHNICAL REQUIREMENTS:

§ Tertiary education with working experience/knowledge in the following area:

· Understanding of the SDLC and agile process

· Strong knowledge of web application security concepts such as OWASP Top 10, SAN25

· Knowledge with security assessment tools such as Burp Suite, Qualys, Nessus, etc.

· Knowledge of programming languages such as Java, C#, Python, or Ruby

· Knowledge of scripting languages such as Perl, Python, or Bash

· Excellent communication and collaboration skills

· Knowledge in Cloud technologies

· Knowledge with containerization tools and orchestration (Docker, Kubernetes, Helm)

OTHER REQUIREMENTS

§ Should have the following soft skills attributes

· Strong analytical and problem-solving skills

· Organised and able to handle multiple projects concurrently

· Collaboration with users, product owners and development teams to deliver solutions.

· Self-motivated to pick up skills required to support the project requirement.

· Must have good command of English written, verbal and presentation skills

· Proactive, out of the box thinker, detail oriented with strong organizational, analytical and problem-solving skills.

· Self-starter, both a team player yet able to work independently and adjust to changing priorities, critical and strategic thinker, negotiator and consensus builder.

· Software engineer who has interest in Application Security can also apply.

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

We are looking for a Research Engineer who will be responsible working on a project on cyber security and privacy issues for IoT and cyber-physical systems.

Responsibilities:
• Design and develop techniques that detect attacks on IoT/CPS;
• Perform analysis and simulations to validate designs;
• Implementation and development of demos;
• Assists with the editing and preparation of manuscripts, reports and presentations;
• Participate in presentations and demos for exhibiting work at appropriate events;

Qualifications

• BEng/BSc/BTech in Electrical Engineering, Computer Science or a related field;
• Programming experience and knowledge of cyber security would be a plus;
• Possesses research background with ability to read and understand methodologies in research papers;
• A good team-player;
• Open to Fixed Term Contract

Role Summary:

• Support regional related queries or support needed within the Singapore, Malaysia, Thailand, Vietnam, India and Philippines, including but not limited to employment law, data privacy, compliance, litigation with/or potentially without the support of external counsels available in those regions.
• Work in negotiation and drafting of services and manufacturing and equipment related contracts within the semiconductors field.

Job Responsibility:

• support and advise the businesses on all commercial matters, such as drafting, negotiating and reviewing contracts concerning sales, purchase, distribution, manufacturing, logistics services, etc. arising from activities in or relating to Asia. The position will involve dealing with important key customers and suppliers in the region.
• advise and support businesses in all other relevant matters like in and outbound claims, formation of partnerships and cooperations etc.
• corporate housekeeping responsibility for all regions
• manage litigation, disputes and managing outside law firms
• assist in M&A and other HQ projects
• provide legal training

Examples of types of contracts:

• Foundry services agreements including risk wafer management contracts;
• Wafer and material supply agreements;
• Collaboration Agreements with suppliers;
• Equipment loan/evaluation agreements;
• General Purchase Agreements of materials and equipment related to the Assembly & Testing wafer fabs of NXP.

Job Qualification:

• Appropriate legal qualifications and solid experience in China legal environment and additionally a US / UK Master of Law and qualified in another major jurisdiction
• Min 10 years PQE in leading international law firms and/or as in-house legal counsel in MNC with broad regional exposure
• Strong commercial legal background with a pragmatic mindset to achieve business objectives
• Strong interpersonal and communication skills; excellent team player and relationship builder
• At ease in working in diverse / multi-cultural environments
• Mature and hands-on team player who is able to manage different stakeholders and communicates well at all levels of the organization.
• Excellent interpersonal skills and ability to work effectively as part of a worldwide legal team
• Relationship builder, front end worker (as opposed to back office lawyer)
• Positive, dynamic, enthusiastic
• Fluency in spoken and written English and Mandarin is a must

Project Overview

We are seeking at least one Postdoctoral Associate to join the "Mens, Manus and Machina—How AI Empowers People, Institutions and Cities in Singapore (M3S)" interdisciplinary group.

The M3S project is driven by the goal of investigating the nature of work, redefining our relationship with technology, and exploring how institutions can adapt to foster livability, sustainability, innovation, and social welfare.

Successful applicants will have the opportunity to work on cutting-edge projects that aim to develop state-of-the-art AI to create future smart cities. The Postdoctoral Associate is in the program level for the five-year M3S program in SMART. The SMART team seeks to advance the frontier of AI research, apply it to society and cities, and demonstrate the concrete social impacts of the AI algorithms with broad public acceptance in Singapore.

Specifically, the SMART-Program team seeks to develop ethical, accountable, and transparent AI for broad public acceptance and adoption in Singapore. The SMART-Program team will collaborate closely with the seven projects across the M3S program. It absorbs core AI technology from the projects and then enhances AI ethics with algorithmic approaches. It will develop surveys to analyze the public acceptance regarding AI technology and designs methods to enhance public acceptance/adoption for AI. It will also help the implementation of the AI techniques across the M3S projects and works closely with the government agencies, industrial partners, and academic collaborators to demonstrate the use values of AI in Singapore.

The SMART-Program team is led by distinguished scholars, including Professor Jinhua Zhao and Professor Daniela Rus from MIT, and Professor Archan Misra from Singapore Management University.

Job Description

• Collaborate with the project team and other researchers to design, implement, and evaluate research projects.
• Publish research results in top-tier conferences and journals, and disseminate research findings through presentations and other means.
• Participate in the mentorship and training of graduate and undergraduate students at MIT and in Singapore.
• Assist in grant writing, project management, and other administrative duties related to research activities.
• Perform other duties as needed.

Job Requirements

• Ph.D. in Computer Science, Artificial Intelligence, Transportation Engineering, Operation Research, Computational Social Science, Network Science, Civil Engineering, Economics, Statistics, Urban Planning, Industrial Engineering, or a related field by the start of the appointment.
• Experience in deep learning, reinforcement learning, statistical modeling, network analysis, and/or optimization.
• Experience in behavioral/economic models, urban mobility, and their integration with AI.
• Strong publication record in top-tier conferences and journals.
• Excellent communication and collaboration skills.

This role is primarily based in Singapore and appointment is on a two-year contract, with the possibility of extension.

If you want to find out more about the role, please contact Dr. Yunhan Zheng ([email protected]) or Professor Shenhao Wang ([email protected]).

This position will be a member of Visa AP Legal team responsible for providing advice and counsel to Visa’s People Team and company managers in all areas of AP employment law, policy, development and training. The attorney functions as a key strategic advisor to the AP People Team and the business functions. This position may also assist with providing legal support to the Inclusive Impact & Sustainability function, including partnering with stakeholders to develop and implement strategies, policies, and procedures to align with emerging legal and regulatory requirements. It also involves working closely within the wider Global Legal function and other Legal colleagues responsible for supporting the global People and Impact & Sustainability functions.

This position requires a curious, practical, highly collaborative attorney with strong people skills who can work with minimal supervision in a dynamic environment. Occasional travel will be required.

Key responsibilities

• Be lead counsel on AP employment law issues including hiring, performance management, discipline, terminations, leave and accommodations, local law compliance, restrictive covenants, pay and benefits.
• Review and provide guidance on drafting and development of People Team policies and procedures domestically and internationally.
• Provide dedicated legal support and act as key strategic advisor to the People Team, management and supervisors on handling employee relations matters, including employee counseling, discipline and benefits issues. 
• Lead and provide advice and support on internal investigations. Recommend and help implement appropriate actions.
• Manage all employment-related claims and disputes, including leading outside counsel in litigation, responding to administrative claims and settlement demands, and negotiating resolution of claims.
• Take charge of developing, implementing, improving and reviewing legal compliance projects and training.
• Prepare, direct and conduct training programs on employee relations matters, for example, employment law updates, managing within the law, and conducting investigations.
• Review and provide input on policies, procedures and specific matters impacted by legislation such as worker’s compensation and employment discrimination laws.
• Assist with matters related to Inclusive Impact and Sustainability.
• Support People-related aspects of proposed investments and other Mergers and Acquisitions transactions, including diligence, input on transaction related-documents, and integration issues.

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

Role Description:

• Lead customer project delivery engagements by providing design and solution consultancy for large scale solutions and complex issues, related to data centre networking & security
• Consult and work with customers to plan, design, install, configure, integrate and/or optimize the solution & services to accelerate business outcomes.
• Translate business requirements into data centre networking solution design. Drives customer technology transitions, influencing solution architectures and services.
• Participate in services presales activities which include helping create statement of work, scoping of efforts, propose right services & solutions, articulate the value and expertise of the Logicalis’ professional services as part of a comprehensive outcome-based solution.
• Conceptualize (Customer Requirements Document), plan (Implementation Strategy Plan), design (High & Low Level Design) and advise cross-functional teams across multiple technical, operational and enterprise architecture domains.
• Provides leadership capabilities and insight for creation and sharing of best practices to improve service quality and efficiency.
• Provides technical expertise and escalation support in resolving technical problems within the professional services team
• Mentor and develop junior network engineers
• Create and deliver training and/or mentorship programs for technical resources within the professional services organization.
• Partner with the presales team to improve the quality and accuracy of the Scope of Work and cost estimates

Requirements:

• Degree in Computing or Engineering discipline • CCIE (Routing & Switching) and/or CCIE (Data Centre) • At least 10 years’ experience in project deployment for complex network infrastructure for data centre/cloud and campus, including at least 3 years in a solution architect role
• Advanced knowledge of Software Delivered Data Centres in general and Software Delivered Networks in particular.
• Should have acumen for emerging technologies in the networking world.
• Advanced skills about data centre networks and protocols (Unicast, Multicast, Anycast).
• Advanced skills in network protocols: IP, TCP, UDP, and other common protocols.
• Advanced skills in network routing protocols: IGP and EGP like OSPF, IS-IS, BGP and others.
• Advanced skills in Ethernet fabric technologies: Fabric Path, Cisco ACI and EVPN VXLAN
• Advanced skills in software defined networks especially for Cisco ACI and/or VMware NSX-T/V
• Advanced skills on how to implement network protocols within a Cisco Nexus network.
• Advanced skills in analyze network problems via wireshark or any other tool set.
• Advanced skills in network services like IPAM, DNS, SMTP, NTP, Load Balancing and others.
• Advanced skills in how to integration various systems inside a data centre
• Advanced skills in designing, implementing & migrating data centre firewalls/IPS/IDS
• Intermediate skills in project management (waterfall & agile) and supplier management.
• Basic skills in physical cable management systems, optics, fibres and data centre facility.
• Basic skills in data centre facility architectures and setups
• Customer satisfaction is your focus and accordingly you have a strong service mentality
• Flexibility and willingness to learn new technologies, scale quickly and adapt situationally to different requirements
• Excellent analytical skills and problem solver mentality
• Creative thinking in designing and implementing service improvements
• Deep experience in customer handling and stakeholder management.
• Ability to handle escalations, be a trusted advisor for the customer and work closely with customers in defining solutions

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Purpose

The role will be supporting the Public Affairs team and responsible for social media content creation, managing media relations, public engagement and stakeholder reporting.

Job Description

The Executive will be responsible in social media content creation, managing media relations, public engagement and stakeholder reporting.

Qualifications

• Possess a good Bachelor Degree, preferably in Mass Communication/Marketing
• Possess at least 1 year of relevant working experience in corporate communication, marketing or media/public relations
• Strong interest in public policy and current affairs
• Possess writing and copyediting ability
• Working knowledge of image editing and video editing for social media platforms
• Possess knowledge of social media platforms, ad buys and analytics
• Possess an editorial mindset and understand social media audience

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

We are currently looking for a Cyber Security Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and 2FA solutions.

Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies. And based out of our Singapore office, this role would be reporting to the Technical Manager (Cyber Security).

1.0 Job Responsibilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document

· Strong understanding with hands-on experience of multiple NAC solutions using Radius Protocol and device admin with Tacacs Protocol

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and tuning Firewall/IPS policies.

· Ability to deliver 2FA Solutions for specific use case requirements

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team

2.0 Required Qualifications:

Essential:

· Network Access Control (dot1x) experience of HPE ClearPass, Cisco ISE

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint

· Hands on experience Cisco FirePower NGIPS

· Basic understanding of Networking – Routing and Switching Protocols

· Ability to manage small scale project and ensure completion within the projected timeline

· Build Customer relationship to manage the projects in a congenial way

· Team Player highly spirited, sharing project experience with peers

· Able to learn and adopt new skills when projects warrant based on the relevant training provided

Desirable:

· Hands on experience RSA SecureID, Cisco DUO 2FA

· Hands on experience deploying in Cloud platform (i.e. AWS, Azure) is preferred

· Knowledge of CyberArk, WAF and Database Firewall is preferred

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Technical Specifications:

• Good in providing solution by investigating and post-mortem analysis to resolve security violations.
• Experience in Information Security
• CISSP or Global Information Assurance Certification (GIAC) or equivalent.
• Performed asset and network discovery activities to ensure full coverage of vulnerability discovery.
• Good Experience in system and application vulnerability testing for Web servers, DB servers, Network devices Etc. using Nessus or Nexpose or other vulnerability Manager Tools.
• Good in monitoring security vulnerability information from vendors and third parties applications.
• Good in implementing policy audit for servers and workstations
• Prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets.
• Research threats and vulnerabilities and, where appropriate, take action to mitigate threats and remediate vulnerabilities.
• In-depth knowledge of security systems and applications and a strong foundation in core area of security (e.g. OS hardening, Active Directory, DLP, network and perimeter).
• Good experience in configuring hardening guidelines and helped in maintaining baseline standards.
• Good experience in configuring CIS benchmarks on (Servers, Desktop & Network Devices)
• Configuring and monitoring of operational security infrastructure
• Good exposure to industry standards such as ISO 27001, PCI-DSS, with Audit experience in large enterprise/Service provider environment.
• Have good knowledge in web application security testing.
• Have a very good understanding about life cycle of Information Security Audit / VA
• Recommend, scheduled the security patches and other measures required in the event of a security breach.
• Monitor system logs, SIEM tools and network traffic for unusual or suspicious activity. Interpret such activity and make recommendations for resolution.
• Experienced in investigate and resolve security violations by providing post-mortem analysis to illuminate the issues and possible solutions.
• Good knowledge of Application exploitations and configuring alerts on SIEM
• Worked on installation, configuration management of security systems and applications, includes policy assessment, compliance tools, network security appliances and host-based security systems.
• ·Worked on monthly management reports, dashboards, documentation for security systems and procedures.
• Good in reporting unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
• Good in training, mentoring and guiding for team members to use of security tools and resolve issues.
• Good in evaluating, implementing information security solutions to protect against potential threats for security violations
• Worked on incident response and architecture review processes.
• Managed and supported Endpoint Security/ ePolicy Orchestrator, Virus scan Enterprise, Data Loss Prevention, Host Intrusion Prevention and Endpoint Encryption.
• Have good knowledge on Data loss prevention and Endpoint Encryption tools.

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

The Role:

The role is part of our Global SOC team, tasked to deliver Managed Security Services (MSS) and help customers achieve its business goals & objectives by re-imagining cybersecurity as one of its business enabler. The role reports to SOC vertical based in Singapore.

It is great opportunity to put your past experiences in building a world class SOC and address cybersecurity challenges of organizations in the region. It provides exposure to wide variety of security technologies, and provides opportunity for the candidate to pioneer in developing SOC and build new MSS offerings.

Accountabilities:

· Work in 24x7 shift environment to handle security incidents and provide level two (L2) support during analysis & investigations to identify the root cause.

· Provide detailed remediation recommendation to customers for the incidents within agreed SLAs, and if required assist them during remediation implementation.

· Execute SOC playbooks, knowledge base to minimize the security incident impact and perform detailed investigation on the infected assets.

· Escalate critical incidents to 3rd level support team, for further analysis & investigations, and demonstrate excellent collaboration skills for timely resolution to minimize impact to customers.

· Review 3rd party threat intel feeds and integrate them into MSS platforms to provide value to our customers.

· Prepare SOC monthly reports, which includes customization based on business requirements and present them to customers during monthly meetings, highlighting risks and mitigation plans.

· Enable regional L1 Security Analysts to deliver seamless L1 support by developing SOC playbooks, relevant and sufficient knowledge base.

The Individual and their Experience:

· Candidate should have at least 3 years of experience working in SOC and MSS environments, with a Bachelor’s degree in Computer Science/IT/Information security.

· Excellent hands-on experience on incident analysis using SIEM platforms such as Microsoft Sentinel, IBM QRadar.

· Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if Microsoft Defender, CrowdStrike.

· Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.

· Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with a proven Unix (Solaris, Linux, BSD) experience.

· Knowledge on any shell scripting language, and to apply them to automate mundane operations tasks.

· Candidate should have at least one cybersecurity industry certification such as CEH, CHFI.

· Good understanding of basic network concepts and advantage if exposure to cloud technologies.

· Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL standards.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a video tour of our global network of 24/7 Security Operations Centers (SOCs).

Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs).

We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis.

Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches.

While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.

Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within.

Summary:

The Offsite Security Analysts are a key component of our SOC-as-a-Service operations.  They are on the front line receiving and triaging alerts from our clients who require dedicated support.  Our Security Analysts have strong network and security knowledge, are strong problem solvers, and work under time pressure to quickly analyze and report security threats in our client’s networks.

The Offsite Security Analyst will be reporting to the Offsite Lead, he/she will be working closely with the client’s cybersecurity threat operation management team.

•  Perform the security tasks for PCIDSS Compliance and other Aspire Lifestyles-related compliance required for internal and external audits (ISO27001, SOC2 Type II, etc.) and ensure successful completion.
• Provide technical consultation and support on the resolution of the findings on the security tests done.
• Assist compliance officers/managers in preparing and timely submission of security evidence for audits (remote and onsite) and ensure timely and successful closure of assessments.
• Provide security support for client assurance (evidence, questionnaire and audits).
• Perform or coordinate PCI DSS scans and penetration tests including tracking of findings remediation, required for PCI DSS Compliance on Aspire in scope components and coordinate with systems, network, local IT, applications and relevant departments on timely resolution of findings.

• Application vulnerability scans – Perform or coordinate dynamic security scan of internal and external web applications. The tests to be of the following types:
    a. Dynamic Web Application Scans
    b. Patch Management - Coordinate and maintain patch tracking for servers/devices in scope for PCI DSS and ISO27001
    c. Vulnerability tracking - Track and follow-up with Stakeholders to fix the reported vulnerabilities and share Dashboard with Compliance team on monthly basis
    e. Highlight and report deviations on the activities or high-risk audit areas.
• Perform or coordinate internal vulnerability assessments required to manage PCIDSS compliance on networks, systems and security related systems. The tests to be of the following types:
    a. Configuration Scan,
    b. Patch Scan, and
    c. Vulnerability Scan
• Operate an effective Log Management, Host Based Intrusion Detection System across geographies and support the incident management and change management work and maintain PCIDSS compliance, SOC 2 Type II Compliance and ISO 27001 Compliance.
• Maintain compliance tracks and ensure HIPS system, compliance system, etc. are maintained up to date for certifications (PCIDSS, SOC 2 Type II, ISO/IEC 27001 Certification audits).
• Perform troubleshooting on SIEM, FIM and HIPS products and seek support from AV support team by creating and following up on tickets.
• Ensure the SIEM, HIPS, FIM, MSS and other technologies implemented for PCIDSS compliance runs optimally with no negative impact on systems.
• Prepare reports from the technical (SIEM, MSS, HIPS, FIM) and non-technical systems (excel reports) the support the client audit requests, PCIDSS audits, ISO27001 audits, SOC 2 Type II etc. and maintain the dashboards.
• Firewall Review - Perform Firewall review using automated tools and maintain PCI DSS requirement.
• Access review - Perform periodic access reviews of security solutions.
• Configuration review of Security devices - Periodic review of security devices as per MSS guidelines
• Segmentation testing - Perform or coordinate segmentation test for the PCI in scope systems.
• Any other delegated tasks reasonably considered to be within the scope of the post and as agreed with managers.

• At least 2+ years of working experience in a cybersecurity function such as Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence or Vulnerability Management.  Work with SIEM technologies receiving and triaging alerts from various log sources preferred.
• Network security or IT certifications are advantageous.
• Knowledge of network concepts, network protocols, and network security methodologies.
• Knowledge of network technologies in one or more areas such as perimeter firewalls, demilitarized network zones (DMZ), encryption, encoding, network virtualization or wireless networks.
• Knowledge of enterprise IT networks, cybersecurity threats and vulnerabilities at the network layer.
• Knowledge of network traffic analysis methods such as packet analysis and analyzing network flow data.
• Continuous learner who has a passion for defensive cybersecurity; ability to utilize resources at your disposal in an efficient manner; advanced problem-solving skills when encountering emerging security attack scenarios
• Demonstrated communication skills including written documentation of troubleshooting and required responses
• Proven ability to work in a fast-paced environment with strict SLAs for response time

• Opportunity to work in a progressive organization with structured training and roadmap for success

• Lunches and fun employee activities!
• Experience in one of the hottest IT industries today

Proficio is an EOE employer.