ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence and public security segments.

Join our Cybersecurity team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructures, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance.

Collaboration is key to our success. We prioritize open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Job Description

• We are looking for a hands-on and meticulous individual who possess knowledge on programming skills and algorithm development.
• Work closely with all the relevant stakeholders to translate the operational requirements into effective and efficient solutions.
• Work as a product development team to collectively manage the product development lifecycle from system design, development testing, and production.

Requirements

• Familiar to at least one of the programming language: .Net, Java, C or C++, C#
• Soft skills – Problem Solving, Communication and Teamwork Skills
• We welcome candidates with no experience but possess strong logical thinking to apply - product-specific and on-job trainings will be provided.
• Work Location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

We are seeking a Business Information Security Manager who will be tasked with facilitating and maintaining comprehensive security measures, risk assessments, and incident response protocols to safeguard AA’s assets and data within the APAC region.

This position will see you become part of a highly specialised cyber security team, who consistently push the boundaries of digital, technology, and automation innovation to drive a smarter, safer, and more sustainable enterprise.

Core Responsibilities (amongst others): 

• Manage and monitor cybersecurity initiatives and controls in the APAC region.
• Collaborate with regional IT and security teams to implement security measures and protocols.
• Conduct security assessments and risk analyses for regional assets and systems
• Facilitate security awareness training for regional employees.
• Respond to and investigate security incidents in the region.
• Stay updated with regional cybersecurity regulations and compliance requirements.

The Job

• Execute enterprise-wide cybersecurity programs for both IT and OT.
• Enhancing, reviewing and formulating of Information Security related procedures.
• Work with Security Operations Center to verify and close SOC alerts, including blocking of blacklisted IP and investigate anomalous activities.
• Lead and perform POC/testings of Cybersecurity IT/OT products and services.
• Lead and organize vulnerability assessment and penetration testing with both internal and external teams and follow up with remediations and closures.
• Lead the team to administer various security systems such as EDR, WAF, vulnerability scanner, IPS, Privileged Access Management, secure internet access platform, including onboarding of new systems and accounts.
• Participate in cybersecurity drills and exercises.
• Attend to threat intel notifications and regulators' requests and lead the team to fulfil the recommendations.
• Lead cybersecurity team in Incident Response.
• Provide cybersecurity guidance such as Security by Design to project teams.
• Any other Cybersecurity & Compliance related functions that may be assigned.

The Requirements

• Minimum 6 years of related working experience in Information Security & compliance.
• Possess Security related certifications such as CISA, OSCP, CEH, CISM, CISSP would be an advantage.
• Good understanding on Security Architectures.
• Good understanding in OT Security.
• Experienced in Secure-by-Design Principal and secure coding.
• Hands-on experience in networking, system administration, application project development.
• Willingness to hands-on as part of mentoring the team to meet its objective in a collective manner.
• Highly resourceful individual who possess strong analytical skills.
• Well verse in security related products such as firewall, Intrusion Protection System, etc.
• Well verse in Security Standards such ISO27001, IEC62443, NIST & CyberSecurity Act. etc.
• Well verse in MITRE ATT&CK framework.
• Good understanding of various regulation/laws related to cybersecurity.
• Able to explain technical ideas to non-technical audience such as Senior Management and other Internal Stakeholders.