Lico Resources, the specialist executive search firm, is partnering with a leading financial institution in searching for an Information Technology Risk Management Professional. The institution is a key player in the finance sector and is dedicated to fostering a secure and technologically advanced environment for its clients. they are seeking a dynamic professional to join their existing team in Singapore.

This role involves collaborating with internal and external teams to assess risks, implement effective security measures, and ensure the overall robustness of the technology landscape.

Key Responsibilities:

• Conduct comprehensive risk assessments for the firm's IT systems, applications, and processes.
• Develop, implement, and enforce risk management policies, procedures, and controls to mitigate potential threats.
• Collaborate with cross-functional teams to identify and address emerging risks associated with technological advancements.
• Monitor and analyze security incidents, providing timely response and remediation strategies.
• Stay abreast of industry trends, emerging threats, and best practices to enhance the firm's risk management capabilities.
• Communicate effectively with stakeholders, including IT teams, senior management, and regulatory bodies.

Qualifications:

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum of 8 years of experience in information technology risk management.
• Strong understanding of information security frameworks, risk assessment methodologies, and regulatory requirements.
• Familiar with related regulations such as Technology Risk Management Guideline, CCoP2 Risk Management Practices, Guideline on Business Continuity Management, Guideline on Outsourcing and other relevant notices and guidelines
• Familiarity with industry frameworks and methodologies for technology risk management, such as NIST Cybersecurity Framework, ITIL, ISO 27001, and COBIT. Professional certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CRISC (Certified in Risk and Information Systems Control) are advantageous.
• Experience with risk assessment tools and technologies.
• Excellent communication skills, both written and verbal.

If you are interested in this role, please send us your updated resume today to [email protected] quoting reference number A08915. Please note that only shortlisted candidates will be notified.

“Data provided is for recruitment purposes only.”

Job Reference No: A07415 EA Licence No.: 13C6733 EA Registration No.: R1333454

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail, and supply chain.

We are currently looking to hire Network Security Engineer. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Job Type:One-year Renewable Contract

Only Singaporean

Job Overview:

We are in search of a highly skilled Network Security Engineer to manage and enhance our network infrastructure's security. The successful candidate will be responsible for the design, implementation, and maintenance of network security solutions, ensuring the stability, reliability, and security of our network environment.

Key Responsibilities:

· Configure, and manage Cisco Catalyst Switches (IOS), Cisco Nexus Switches (NXOS), and Alcatel Lucent Switches (AOS) to maintain a secure and efficient network infrastructure.

· Implement and maintain Palo Alto and Fortinet Fortigate Firewalls for network security and access control.

· Administer Alcatel Lucent Wireless Controllers to ensure a secure and robust wireless network environment.

· Utilize SolarWinds NPM (Network Performance Monitor) and NCM (Network Configuration Manager) for network monitoring and configuration management.

· Manage and maintain ClearPass Policy Manager for network access control and policy enforcement.

Qualifications:

· Bachelor’s degree in Computer Science, Information Technology, or related field.

· 3+ years of experience in network security engineering.

· Proficiency in Cisco Catalyst Switches (IOS), Cisco Nexus Switches (NXOS), and Alcatel Lucent Switches (AOS).

· Experience in configuring and managing Palo Alto and Fortinet Fortigate Firewalls.

· Hands-on experience with Alcatel Lucent Wireless Controllers.

· Familiarity with SolarWinds NPM / NCM for network monitoring and configuration management.

· Proficient in ClearPass Policy Manager for network access control and policy enforcement.

· Knowledge of network protocols, security architectures, and best practices.

· Strong analytical and problem-solving skills with attention to detail.

· Excellent communication and teamwork abilities.

· Additional Preferred Skills:

· Though not mandatory, the ideal candidate will also have exposure to the following technologies:

· Experience with other firewall solutions beyond Palo Alto and Fortinet, such as Check Point or Cisco ASA.

· Proficiency in network encryption protocols and VPN technologies.

· Understanding of network segmentation and micro-segmentation principles.

· Knowledge of intrusion detection/prevention systems (IDS/IPS).

· This role demands a proactive individual with a strong technical background in network security. If you possess these skills and are looking for a challenging opportunity in network security engineering, we encourage you to apply and become a valuable part of our dedicated team.

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected]. Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS

Consultant Name: Deepa Shivakoti

Reg No: R1765546

Avensys Consulting Pte Ltd
EA Licence 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.

We are seeking an experienced AWS Security Engineer to design, evaluate, and enhance the security of our cloud infrastructure. The ideal candidate will be well-versed in AWS services, with a focus on securing containerized architectures (ECS, EKS) and cloud-based services (EC2, S3, IAM).

Responsibilities:

• Develop and implement security strategies and best practices for AWS services, including ECS, EKS, and EC2.
• Configure and maintain IAM roles and policies with a principle of least privilege.
• Regularly audit and evaluate AWS account security, including S3 encryption, network access controls, and logging.
• Ensure the security of containers (Docker) and orchestration platforms (ECS, EKS).
• Implement container image scanning to identify and remediate vulnerabilities.
• Manage and optimize runtime security configurations for containerized environments.
• Configure and maintain AWS native security services such as GuardDuty, Inspector, and Security Hub.
• Design and implement real-time intrusion detection and incident response processes.
• Investigate and mitigate security incidents, providing post-incident analysis and recommendations.
• Design secure VPC architectures, including subnet isolation, security groups, and NACL configurations.
• Configure Web Application Firewalls (WAF) to protect against common attacks such as SQL injection and XSS.
• Optimize AWS Shield and other DDoS protection mechanisms.
• Conduct regular security audits and generate reports to assist with third-party assessments.
• Develop and maintain automation scripts (Python, Shell) to streamline security tasks.
• Integrate security checks into CI/CD pipelines.

Requirements:

• Degree in IT/Computer Science/Engineering or equivalent.
• Expertise in AWS cloud security, Proficiency in Docker and container orchestration security.
• Familiarity with vulnerability scanning, penetration testing, and compliance tools.

· Bachelor Degree or Advanced Diploma in Computer Science, Information Technology,

Cybersecurity from a recognized university or related field (or equivalent experience)

· At least 1-3 years in a cybersecurity role, with hands-on experience in SIEM content management, network security, threat monitoring, or incident response.

· Strong knowledge of cybersecurity principles, practices, and technologies.

· Expertise in SIEM tools and content management, including rule creation, alert tuning, and report customization.

· Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.

· Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a plus.

· Ability to analyze and interpret security data to identify vulnerabilities and potential threats.

· Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.

· Strong analytical skills and attention to detail.

· Experience in the application of threat modelling or other risk identification techniques.

· Detailed knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits

· Breadth of knowledge in information security space with emphasis on TCP/IP network security, operating system security, common attack patterns and exploitation techniques

· Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus

We are representing our client in the Security industry to hire for a Senior Engineer.

Responsibilities

• Operate and maintain measurement and detection equipment for defense and security purposes.
• Manage software installations and system configurations.
• Address sales inquiries, oversee post-sales equipment delivery, and perform regular maintenance.
• Diagnose and repair technical issues with equipment.
• Generate basic reports and maintain strong customer relationships through effective communication.

Qualifications

• Higher Nitec/Diploma in Electrical & Electronics Engineering.
• At least 5 years of relevant experience.
• Strong problem-solving skills, a proactive learning attitude, and good interpersonal abilities.

Interested candidates, please apply here.

EA Personnel (Koh Pei Wen)

EA Reg: R23115205

APBA TG Human Resources Pte Ltd

EA License: 14C7275

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernizing, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities

• We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on customer.
• The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team. 
• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges. 
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment. 
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.  Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities. 
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Cloud platform. 
• Stay connected with the latest security trends throughout various industry verticals
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities

Minimum Qualifications (MQs) 

• Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience. 
• Coding experience in one or more general purpose languages. 
• Experience managing customer projects to completion, working with engineering teams, sales and partners. 
• Experience architecting, developing, or maintaining secure cloud solutions. 
• Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications 

• At least 10+ Year work experience of security architecture and/or security engineering experience  Hands on and deep knowledge of security principles. 
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles. Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks. 
• Strong practical experience securing Kubernetes and containerized workloads.

We take great pride in delivering impeccable hospitality at the Hotel Miramar Singapore. Our well-equipped hotel is dedicated to providing modern, comfortable living and unparalleled friendly service. Our exceptional location is also one of the many reasons people choose to stay with us. We offer opportunities for career stability and advancement. We welcome you to join us!

The ideal candidate is a motivated, well-organized individual who possess strong leadership, analytical skills, problem-solving abilities, and collaboration skills.

Highlights:

• Attractive Salary Package with AWS and Performance Bonus
• Staff meals, dental and medical benefits, birthday voucher, F&B discounts, and complimentary season parking for staff.
• Career Progression
• Training Opportunity

Responsibilities:

• Manages Key Access Control
• Maintain the Log Book for contractors working in the hotel in accordance with company’s health and safety policies
• Operates, checks and performs security surveillance on the CCTV system
• Patrol the hotel building, premises and perimeter on a daily basis ensuring safety, and send reports.
• Member of the CERT team to provide assistance during the triggering of a fire alarm
• Regulate traffic control at the driveway
• Monitor suspicious packages and be aware of bomb and terror threat procedures
• Investigate and report all allegations of theft, criminal damage and other incidents
• Maintain the Security Log Book and send Incident Reports
• Manage undesirable behaviour in a professional manner, intervening and defusing potential altercations
• Handle Loss and Found items
• Liaise with Police in the absence of Security Supervisor
• Report any maintenance or hazard issues to the supervisor on duty
• Adhere to all Health and Safety Regulations
• Any other duties assigned by the Security Supervisor.

Requirements:

• 6 days’ work week.
• Possesses valid Security License issued by PLRD/SIRD.
• At least 1 year of experience in a similar capacity in the Hospitality industry.
• Positive attitude and able to take responsibility.
• Able to communicate clearly and work in a team.
• Able to work on rotating shifts, weekends and public holidays.
• Computer literate

HOW TO APPLY:

We want to hear from you! Interested candidates are invited to email your updated resume by 27 December 2024.

Walk-In (Singaporean/Permanent Resident only) :

You can visit the HR Office at Hotel Miramar any time from Monday to Friday, between 10:00 AM and 4:00 PM. Find us at room #02-25.

*Ensure your resume provided to us does not contain your full NRIC number during your job application. Only short-listed candidates will be notified

Job Description

• Industry/ Organization Type: Security
• Position Title: Security Officer
• Working Location: Island Wide
• Working Hours: 6days (8.00am-8.00pm, off on weekdays)
• Salary Package: Basic Salary $2,870
• Duration: Permanent Role

Key Responsibilities

• Screen individuals, staff, and vehicles entering the premises, and conduct property checks to ensure safety.
• Patrol various areas to prevent theft and monitor for signs of fire, smoke, or leaks, ensuring all security systems and exits are functioning and secure.
• Control access by managing entry and exit points, conducting ID checks, and authorizing visitor and staff access.
• Respond quickly to alarms, fire incidents, and emergencies, including medical, criminal, and public order situations.
• Maintain detailed records of access and incidents, manage vehicle parking, and ensure all areas, including loading bays, are secured when not in use.

APPLY NOW!!!

• Valid PLRD license.
• Prior experience in security is preferrable.
• Strong observational and communication skills.
• Ability to handle emergencies and stressful situations calmly.
• Basic knowledge of security systems and protocols.
• Customer service oriented.
• Able to perform patrolling duties.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to [email protected]. Please indicate #71347 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Rachael Lee | EA Reg No.: R2093131

Responsibilities:

• Address customer inquiries and requests, ensuring their needs are met promptly and effectively.
• Build and maintain trusted advisor relationships with key accounts, customer stakeholders, and executive sponsors.
• Deliver exceptional day-to-day customer service to maintain high levels of customer satisfaction.
• Collaborate regularly with internal teams to discuss progress, identify business improvement opportunities, and fulfill customer needs.
• Generate and present progress reports for clients and internal management.
• Clearly communicate the progress of monthly and quarterly initiatives to stakeholders.
• Forecast and track key account metrics to ensure alignment with business goals.
• Identify opportunities for upselling, cross-selling, and renewals, and communicate these to management.
• Work with the Sales team and management to onboard new customers and develop relationships with existing customers.

Requirements:

• Hold a diploma or degree in a relevant field.
• Possess a minimum of 2 years of experience specifically in IT (SI) sales functions.
• Have extensive experience in IT cybersecurity, network, or infrastructure sales and marketing.
• Strong knowledge of network and cybersecurity in the enterprise and government sectors, as well as familiarity with the local IT market.
• Demonstrate exceptional networking and interpersonal skills.
• Self-motivated and able to thrive in a results-driven environment.

Interested candidates who wish to apply for the advertised position, please click on the apply button

EA License No: 96C4864

Reg. No.: R2094940

For candidate who applied for the advertised position is deemed to have consented to us that we may collect, use or disclose your personal information for purpose in connection with the services provided by us.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of the Security Engineering team, we are responsible for supporting the company's construction of security capabilities and platform services, combining other teams to create efficient and high-quality service docking capabilities, enhancing interactive experience, and lowering the user's barriers to understanding and using security services.

Responsibilities

We are looking for Security Software Engineers to join our Security Engineering team in building the next-generation of ByteDance's product security & privacy infrastructure that furthers our system security and user data privacy protection level, which will impact all ByteDance's products globally. In addition, you will also have opportunities to work closely with product teams across the world. Together we will identify opportunities, define innovative ways to build our users a safe and trustworthy environment, and help us shape the future of ByteDance.

- Research, design, develop, test, maintain and continuously improve ByteDance's product security & privacy Infrastructure and softwares.

- Analyse user needs and security & privacy objectives, develop software solutions, applying principles and techniques of computer science, engineering, and mathematical analysis.

- Update Software, enhances existing software capabilities. Develop and direct software testing and validation procedures to optimize reliability, availability and performance of globally distributed systems.

- Work with multiple cross-functional global teams to integrate hardware and software systems and develop specifications and performance requirements, to deliver high-quality work in rapid product development.

- Deploy, troubleshot and operate large distributed systems.

- Manage individual project priorities, deadlines and deliverables

Minimum Qualifications

- Bachelor's degree and or above in Computer Science, Computer Engineering or other relevant majors.

- Strong knowledge of data structures and algorithms

- Proficiency in at least one server library / framework like Express, Koa, Gin, Kite, Django, etc and at least one kind of database like MySQL, Redis, MongoDB, Hive, ClickHouse, ES, etc and at least one kind of message queue like Kafka, RocketMQ, etc

- Understanding of load-balance, container virtualization, familiarity with NGINX, Docker, K8s, Serverless, etc

- Proficiency in TypeScript, CSS and various layouts, at least one kind of general purpose programming language like Node.js etc

- Understanding of component-based development ideas, familiarity with React.js, Vue.js, or any other equivalent library / framework

- Excellent programming, debugging, and optimization skills in general purpose programming languages

- Ability to think critically and to formulate solutions to problems in a clear, concise and timely manner

Preferred Qualifications

- Experience in cloud-native security services and infrastructure such as Key Management System (KMS), or Public Key Infrastructure (PKI) to serve as a foundation for production infrastructure security. Experience in securing software supply chains to ensure source and build integrity at any stage of the software lifecycle.

- Experience with two or more general purpose programming languages including but not limited to: Go, Node.js, Java, or Python. Preferred familiarity in Rust.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Description Summary

We are seeking an experienced Senior Information Security Engineer SME with specialization in anti-malware/anti-virus solutions, Endpoint Detect and Response and Network Intrusion Detection Systems, with log analysis using SIEM tools such as Splunk. The ideal candidate should also have strong experience with standing up solutions selected by the business while providing operational guidance, architecture design, integrations including SSO, SIEM, monitoring and other platform integrations, cyber security expertise, incident response collaboration experience, proficiency in vulnerability detection solutions, File Integrity Monitoring (FIM) control and policy configuration experience, operational acumen, and a solid understanding of TCP/IP networking. This role involves architecting, implementing, and maintaining security solutions to protect our infrastructure and end user computing environments, leveraging platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint, Skyhigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems. The ideal candidate should also have extensive experience in configuring policy, integrations and providing platform support for multiple SaaS based security tools to act as the internal L3 escalation point for tool users and as a liaison between the users and vendor contacts for tools such as Cisco Umbrella, ThreatConnect and Palo Alto Cortex Xpanse.

Key Responsibilities:

Security Solutions Implementation and Management:

• Anti-malware/Anti-virus/Endpoint Detect and Response: Deploy, configure, and manage endpoint protection solutions to defend users and endpoints from malicious content.
• AV/EDR Policy Configuration: Implement and maintain platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint to protect against common threats. Configure policies to provide a balance between security and user/endpoint operational impact.

Log Analysis and Monitoring:

• SIEM Utilization: Analyze logs using Security Information and Event Management (SIEM) tools such as Splunk and Datadog to identify and respond to security incidents. Implement and manage log aggregation and monitoring solutions.
• Incident Response: Lead incident response efforts, providing root cause analysis, forensics, and remediation.

Deployment and Onboarding:

• Software Package Deployment: Manage the creation of endpoint security software packages for deployment via software distribution tools such as SCCM, JAMF, Puppet to ensure coverage to all endpoints in the environment.

Vulnerability Detection:

• Endpoint Vulnerability Detection: Manage and operationalize the vulnerability detection capabilities of endpoint security software tools for distribution and ingestion via aggregation platforms for consumption by the vulnerability management teams via platform integrations.

Cyber Security:

• Threat Analysis: Conduct thorough cyber security threat analysis and implement mitigation strategies to protect the organization’s assets.
• Policy Development: Develop and enforce cyber security policies, standards, and best practices to ensure a secure operating environment.
• Risk Management: Perform regular cyber security risk assessments and develop comprehensive risk management strategies.

Cloud Security:

• Cloud Platforms: Leverage cloud security best practices to protect services hosted on AWS, Azure, and GCP. Ensure secure configurations, access controls, and monitoring are in place.
• IAM: Manage identity and access management (IAM) policies to enforce least privilege and secure access to cloud resources.

Networking Expertise:

• TCP/IP Networking: Apply a solid understanding of TCP/IP networking principles to design, implement, and troubleshoot secure network configurations and protocols.

Collaboration and Compliance:

• Team Collaboration: Work closely with development, operations, network, and security teams to ensure cohesive and comprehensive security measures.
• Communication Channels: Utilize various communication channels effectively, including meetings, emails, Slack, and MS Teams, to collaborate efficiently with team members and other stakeholders.
• Compliance: Ensure alignment with industry standards and regulatory requirements such as GDPR, SOX, and PCI-DSS. Participate in compliance audits and risk assessments.

Training and Mentorship:

• Education: Provide guidance and training to junior team members and other stakeholders on best practices for edge and cloud security, including the use and management of WAF, DDoS protection, and bot management products.

Preferred Qualifications:

• Experience: 8+ years of experience in a Information Security Engineer role with a strong focus on endpoint AV/EDR, infrastructure based anti-malware solutions and network IDS products (Crowdstrike Falcon, Microsoft Defender for Endpoint, SkyHigh Web Gateway, Trellix Endpoint Security for Storage, and Cisco Firepower Intrusion Detection Systems.)
• Technical Skills:Strong experience with performing solution stand-up including architectural design and implementation.
  Strong experience with modern antimalware and endpoint detect and response solutions (CrowdStrike Falcon and Microsoft Defender for Endpoint)
  Experience with infrastructure focused antimalware solutions providing secure ICAP server services (Skyhigh Web Gateway)
  Experience with infrastructure focused antimalware solutions providing enterprise storage (NetApp) Antivirus services. (Trellix Endpoint Security for Storage)
  Experience in providing integrations with platforms such as SSO and SIEM tools.
  Expertise in log analysis and monitoring using SIEM tools like Splunk.
  Solid understanding of TCP/IP networking, network security principles, firewalls, IDS/IPS, and secure communication protocols
  Familiarity with cloud security best practices and secure configurations on AWS, Azure, and GCP.
  Knowledge of software deployment solutions and providing packages for deployment tools (SCCM, JAMF, Puppet)
  

Soft Skills:

• Problem-Solving: Excellent analytical and problem-solving skills.
• Communication: Strong communication and collaboration abilities.
• Leadership: Proven leadership and mentorship capabilities.
• Team Player: Strong ability to work effectively within a team environment and collaborate across various teams.
• Adaptability: Ability to work independently and handle multiple, complex priorities in a fast-paced environment.

Responsibilities:

• Design, Implement and Support security solutions that meet corporate security requirements
• Identifying security issues and risks, review & approve mitigation plans
• Detection, monitoring, analysis, and resolution of security incidents
• Influencing product teams to implement practices that maintain a high security bar
• Provide subject matter expertise on network & endpoint security, firewalls and industry best practices
• Analyze and proactively come up with creative solutions for operational needs that present security challenges
• Manage and maintain security systems by applying system patches and other periodic maintenance tasks.
• Create and maintain standard operating procedures and guides for new and/or existing security solution implementations
• Regularly communicate progress to company leadership and program stakeholders
• Attend weekly teleconferences, meetings, and participates in working groups, as related to constant changing security environment

Qualifications:

• 7-10 years of experience working in a security team
• Deep experience in deploying application-based firewalls (Palo Alto or similar) on premises or in cloud services (Prisma, Zscaler or similar), and SSL inspection techniques
• Proficiency in multiple security technologies, including; network security, NGFW, NAC, network segmentation, network security architecture
• Experience working with industry standard endpoint security products (Antivirus, DLP, Application control, EDR)
• Experience with common scanning tools, such as Tenable, Qualys or similar
• Solid knowledge and working experience with Layer 2-7 protocols and technologies
• Strong knowledge and troubleshooting experience with routing, security protocols, ACLs, Firewalls, WAF, and Intrusion Prevention Systems
• Experience with open source network scanning tools
• Excellent communication and interpersonal skills including the ability to build consensus and to present complex presentations
• Basic knowledge with one or more scripting languages.
• Certifications – PCNSA or similar, CISSP or similar, SANS GCIH or similar.

Position Summary:

Mainly supporting security aspect like firewall checkpoint, security appliances - configuration, troubleshooting, capacity planning. Supporting current operation and deployment of resiliency project.

Roles and Responsibilities:

• Directly reporting to Security Senior Manager
• Assist Architect team on new infrastructure design, implementation, and management of network solutions that form the core infrastructure, ensuring seamless integration across different platforms. This includes procurement of necessary equipment.
• To provide comprehensive product knowledge on the data technology required to deliver, support the networks infrastructure.
• Collaborate with the team to identify network and system needs, monitor performance metrics, troubleshoot, and resolve network-related issues, and implement improvements.
• Deliver project management for network activities encompassing upgrades, deployments, and migrations. Provide technical guidance and user support as required.
• Develop, maintain, and update documentation covering the network environment and operational procedures.
• Generate reports and detailed documentation outlining findings, implemented solutions, and recommendations for further enhancements.
• Oversee network environment to maximize performance, scalability, and minimize downtime.
• Closely coordinate and conform to Change Management policies, process, and procedures on any network changes.
• To implement approved changes, troubleshoot to identify root causes and implement effective solutions.
• Experience on Automating daily network tasks using scripting.
• Be available to provide on-call support as needed.

Qualification/ Requirements:

• Minimum Bachelor in Computer Engineering or equivalent
• Must equipped with CCNP or CCIE
• Network Infrastructure & Hardware: 5+ years experience managing large enterprise network with a strong focus on F5, Palo Alto, Cisco, and CheckPoint Technology.
• Network Devices: In-depth knowledge and proficiency with switches, firewalls, load balancers, routers, and ISE.
• Network Design & Troubleshooting: Expertise in designing, monitoring, and network & incident management (LAN, WAN, VPN).
• Experience with automation tools: Ansible, Python
• Experience with Deployment and automation, advantage to have experience building data center
• Proven track record of success in a fast-paced IT environment.
• Excellent communication and interpersonal skills, allowing you to effectively collaborate with both technical and non-technical stakeholders.
• Ability to work under pressure and delivery the project on time with minimum supervision.
• Certified and experienced with the mentioned technologies.
• 2 years contract

RESPONSIBILITIES:

• Strong knowledge of cryptographic concepts, Hardware Security Module's, and key management.
• Hands-on experience in implementing and operating Thales SafeNet HSMs.
• Hands-on experience in designing and implementing key management solutions for enterprises.
• Knowledge of networking and network security concepts.
• Experience working on PKI / key management solutions.
• Programming knowledge in C / C++ (preferred), Java, .NET.
• Experience integrating cryptographic libraries and HSMs with applications.
• Understanding of Information Security Architecture and ecosystem technologies and concepts required like firewalls, monitoring tools, encryption, web proxies, and identity & access management.

REQUIREMENTS:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Experience with Thales HSM or similar cryptographic solutions.
• Strong understanding of cryptographic algorithms and protocols.
• Familiarity with compliance standards (e.g., PCI-DSS, GDPR).
• Excellent problem-solving skills and attention to detail.

RESPONSIBILITIES:

• Post-sales activities of Cybersecurity or Network Performance Monitoring products
• Involve in Large-scale (Local & Regional) Project Implementation
• Provide on-site implementation services including testing, deployment & documentation
• Provide technical support in ensuring customer satisfaction
• Analyse and clarify customer queries though troubleshooting and researching existing
  knowledgebase articles/known issues
• Be on routine standby to support 24x7 maintenance support calls
• Requires the ability to communicate issues clearly and concisely

REQUIREMENTS:

• Bachelor's degree or Diploma in Cyber Security, Computer Science, Computer Engineering or related field
• At least 1-2 years relevant experience in IT industry providing network support and
  administration.
• Equip with knowledge & experience in networking such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Able to work independently as well as in a team environment.
• Willing to work hard and eager to learn about new technologies.
• Polite and able to communicate well to the clients.
• Analytical and possess good troubleshooting skills.
• Willing to work extended hours and on standby duty.
• Excellent interpersonal and communication skills.
• Independent and motivated.

Cyber Security Specialist (VAPT)

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Strong in VAPT management.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Degree/Certifications in CyberSecurity.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Job Description

• Industry/ Organization Type: Security
• Position Title: Senior Security Officer
• Working Location: Island Wide
• Working Hours: 6days (8.00am-8.00pm, off on weekdays)
• Salary Package: Basic Salary $3,170
• Duration: Permanent Role

Key Responsibilities

• Respond to and report on complex or large-scale safety and security incidents; assist in evacuations when needed.
• Manage security systems, including the Central Alarm Monitoring, fire control, lift control, and car park systems.
• Regulate traffic according to the Road Traffic Act, ensuring smooth and safe flow.
• Monitor CCTV and the centralized alarm system, maintaining CCTV storage and preserving evidence.
• Assist state or auxiliary police in law enforcement and issue summons as required.

APPLY NOW!!!

• Valid PLRD license.
• Minimum of 3-5 years of experience in a security role.
• Strong leadership and team management skills.
• Excellent communication and interpersonal skills.
• Ability to handle emergencies and stressful situations calmly and effectively.
• Strong observational and analytical skills.
• Proficient in using security systems and technology.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to [email protected]. Please indicate #71348 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

About Us

Green Link Digital Bank is Singapore's inaugural wholesale digital bank focusing on supply chain finance, mainly serving MSMEs and aiming to help MSMEs grow and improve digitization.

We are seeking a highly motivated and detail-oriented IT Security Intern to join our team. The successful candidate will work closely with our IT Security team to ensure the confidentiality, integrity, and availability of our information systems. The IT Security Intern will be responsible for assisting in the development, implementation, and maintenance of security policies, procedures, and standards. The intern will also assist in the identification, analysis, and resolution of security incidents.

Responsibilities

• Assist in the development, implementation, and maintenance of security policies, procedures, and standards.
• Assist in the identification, analysis, and resolution of security incidents.
• Assist in the development and delivery of security awareness training programs.
• Assist in the evaluation and testing of security technologies.
• Assist in the development and maintenance of security documentation.
• Assist in the monitoring and reporting of security metrics.

Requirements

• Currently pursuing a bachelor’s degree in Computer Science, Information Security, or a related field.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Knowledge of security technologies and concepts is a plus.
• Full-time interns preferred, but open to part-time interns of minimally 3 working days per week.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Cloud Security team owns security for all services offered by Volcano Engine & BytePlus which is a cloud service provider owned by ByteDance, including IaaS, PaaS and SaaS. Join our forward-thinking security team dedicated to securing our cloud infrastructure with cutting-edge technologies and best practices. You will have the opportunity to design and implement robust security solutions for our cloud environments, ensuring the protection of sensitive data and the resilience of our systems.

Job Responsibility

1. Design, implement, and oversee cloud security architecture, encompassing physical hardware, operating system, cloud-native application, data security and privacy protection, insider threats and generative AI.

2. Develop and enforce cloud security policies, standards, and procedures in alignment with industry regulations and best practices.

3. Conduct security risk assessments, security training, and vulnerability assessments to identify and address security gaps proactively.

4. Collaborate with cross-functional teams to integrate security controls into cloud products and underlying infrastructure.

5. Stay abreast of emerging cloud security trends, technologies, and threats, providing guidance on security strategies and solutions.

Minimum Qualifications

1. Familiar with the principles of common risks, attack and defense strategies; Understand how to systematically lead security architecture and risk governance.

2. Familiar with cloud-native and infrastructure technologies such as network access, LLM, big data, storage, cloud computing, microservices, zero trust, etc.

3. Familiarity with container security technologies (e.g., Docker, Kubernetes) and serverless security best practices.

4. Proficient in at least one language in Golang, Python, Java, or NodeJS, capable of doing code auditing/reviews and development.

5. Knowledge of security frameworks and standards (e.g., CIS Benchmarks, GDPR, HIPAA).

6. Strong communication and excellent teamwork skills. With professional working ethics, and have a keen risk awareness. Results orientated, aiming for long-term growth in this field.

Preferred Qualifications

1. Experience of discovering major impactful vulnerabilities domestically or internationally / winning large-scale security competitions is a plus.

2. Priority given to those who have led or participated in large-scale governance, architecture, and design projects.

3. Strong understanding of cloud computing platforms (e.g., AWS, Azure, Google Cloud) and cloud security best practices.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

The role is responsible for delivering and managing cloud security and endpoint security services, assessing policies and rules, safeguarding SaaS applications, data and endpoints. You’ll collaborate with colleagues supporting network and architecture assessment, threat modeling, vulnerability assessment, and security operations. This position supports the Enterprise Security Transformation practice and is focused on engineering secure methods of utilizing cloud infrastructure services and software to improve the overall security posture. Cloud security engineers may instruct other teams on proper coding methods. They may also investigate, create, and recommend innovative technologies or other methods that will enhance the security of cloud-based environments.

Responsibilities:

• Protects system by defining access privileges, control structures, and resources.
• Safeguards information system assets by identifying and solving potential and actual security problems.
• Recognizes problems by identifying abnormalities; reporting violations.
• Determines security violations and inefficiencies by conducting periodic audits.
• Consolidate root cause analysis of past pentest results.
• Upgrades system by implementing and maintaining security controls.
• Require periodic after-hours/weekend support.
• Any other duties assigned by the Team Lead/Solution Architect.

Skills and Requirement:

• 3 years experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector, etc.
• Strong understanding of SSDLC and security frameworks.
• Knowledge in OWASP Security Standards.
• In-depth knowledge of architecture, engineering, and operations of at least one enterprise IDS/IPS/SIEM platform.
• Hands on experience with vulnerability scanning and pentesting tools.
• Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations.
• Experience with identity and access management architectures and solutions including AD, RBAC, SSO, identity lifecycle management.
• Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security
• Experience with Linux administration, shell scripting, and open-source security tools.
• Knowledge of security best practices in hardening and protecting cloud environments, networks, servers, endpoints, applications, and databases.
• Certifications in OSCP / CISSP / SANS / Other relevant security certifications.
• Excellent interpersonal skills, team player and independent worker.
• Ability to operate in a fast-paced work environment and deliver under pressure.

Responsible to ensure accurate and rapid response to security events. • Analyze security logs, SIEM alerts, and incident reports to identify and mitigate risks. • Respond to and investigate security incidents, including breaches, malware outbreaks, and phishing attacks. Monitor networks and systems for security breaches, alerts, and anomalous activity. • Conduct root-cause analysis to prevent future incidents and develop incident response procedures. • Provide analysis and trending of security log data from various security devices • Configure and maintain SIEM tools to align with the organization’s security objectives and threat landscape. • Create custom SIEM dashboards and reports for different stakeholders to visualize critical security metrics and incident data. • Develop and optimize SIEM content, including rules, alerts, and correlation logic, to improve threat detection and response. • Regularly review and tune SIEM rules to reduce false positives, enhance event correlation, and maintain relevance to evolving threats. • Document and update SIEM processes and configurations, ensuring a high level of data accuracy and availability. • Perform regular vulnerability scans and assist in patch management processes. Work with IT teams to prioritize and remediate them. • Recommend solutions to mitigate risks in any activity that may potentially impact security of existing IT and information management • Ensure compliance with industry regulations (e.g. GDPR, ISO 27001) and company policies. • Assist in the development, implementation, and maintenance of security policies, standards, and guidelines. • Assist in training staff on security best practices, including phishing awareness and data protection. • Help develop educational materials and conduct periodic security awareness training.

Requirements:

Bachelor Degree or Advanced Diploma in Computer Science, Information Technology,
• Cybersecurity from a recognized university or related field (or equivalent experience)
• At least 1-3 years in a cybersecurity role, with hands-on experience in SIEM content
management, network security, threat monitoring, or incident response.
• Strong knowledge of cybersecurity principles, practices, and technologies.
• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report
customization.
• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.
• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a
plus.
• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.
• Excellent communication skills, with the ability to explain complex security concepts to nontechnical stakeholders.
• Strong analytical skills and attention to detail.
• Ability to work on-call or off-hours as needed to respond to security incidents.
• May require occasional travel for training or workshop.
• Experience in the application of threat modelling or other risk identification techniques.
• Detailed knowledge of system security vulnerabilities and remediation techniques, including
penetration testing and the development of exploits
• Breadth of knowledge in information security space with emphasis on TCP/IP network security,
operating system security, common attack patterns and exploitation techniques
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security
Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus
• Effective leadership skills and a team player.
• Strong sense of ownership and driv

Role Summary

The role is responsible for delivering and managing cloud security and endpoint security services, assessing policies and rules, safeguarding SaaS applications, data and endpoints. You’ll collaborate with colleagues supporting network and architecture assessment, threat modeling, vulnerability assessment, and security operations. This position supports the Enterprise Security Transformation practice and is focused on engineering secure methods of utilizing cloud infrastructure services and software to improve the overall security posture. Cloud security engineers may instruct other teams on proper coding methods. They may also investigate, create, and recommend innovative technologies or other methods that will enhance the security of cloud-based environments.

Roles and Responsibilities

• Protects system by defining access privileges, control structures, and resources.
• Safeguards information system assets by identifying and solving potential and actual security problems.
• Recognizes problems by identifying abnormalities; reporting violations.
• Determines security violations and inefficiencies by conducting periodic audits.
• Consolidate root cause analysis of past pentest results.
• Upgrades system by implementing and maintaining security controls.
• Require periodic after-hours/weekend support.
• Any other duties assigned by the Team Lead/Solution Architect.

Job Requirements

• 3 years experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector, etc.
• Strong understanding of SSDLC and security frameworks.
• Knowledge in OWASP Security Standards.
• In-depth knowledge of architecture, engineering, and operations of at least one enterprise IDS/IPS/SIEM platform.
• Hands on experience with vulnerability scanning and pentesting tools.
• Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations.
• Experience with identity and access management architectures and solutions including AD, RBAC, SSO, identity lifecycle management.
• Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security
• Experience with Linux administration, shell scripting, and open-source security tools.
• Knowledge of security best practices in hardening and protecting cloud environments, networks, servers, endpoints, applications, and databases.
• Certifications in OSCP / CISSP / SANS / Other relevant security certifications.
• Excellent interpersonal skills, team player and independent worker.
• Ability to operate in a fast-paced work environment and deliver under pressure.
• AWS certification will be an added advantage.

IT SECURITY engineer

We are a leading Regional IT and Cyber Security system integrator headquartered in Singapore with a presence in Malaysia & the Philippines. We are hiring talented individuals with a positive attitude to join us. We run SOC, a cybersecurity consultancy, and other professional services to local and regional customers.

Primary Functions:

· Responsible for providing technical assistance and support related to computer systems, hardware, or software

· Responds to queries, run diagnostic programs, isolate the problem, and determines and implements a solution

· To ensure that clients get prompt and quality service

· To document troubleshooting and problem-resolution steps

· To participate and provide knowledge transfer to customers when necessary

· Professional services implementation including but not limited to Linux, Wintel Server, Networking, CyberSecurity project implementation

· Create training manuals, documentation, and knowledge transfer documents

· Install and modify computer & Infrastructure based on in-house best practices

· To implement security control on the system and network devices

· Follow up with customers to ensure the issue has been resolved

· Provide technical assistance and support for queries and issues related to computer systems, Local area network (LAN), Wide area network (WAN), and other hardware/software via phone, email, and/or onsite according to stipulated SLA

Requirements and Skills:

· Diploma holder in IT and other IT Security certifications will be a plus

· Minimum 1-year experience in IT

· Fresh graduates are welcome as we will provide relevant training

· A good understanding of IT network, data storage, network, Wintel Server

· Resourceful, creative, independent, and able to work well in a team

· Required to work on-site when necessary

· Taking ownership of technical issues and working with customers and partners to resolve more advanced issues when necessary.

· Good written and verbal skills; excellent phone and email manners.

· Understanding of TCP/IP, OSI Layer, network security, Internet, DNS, network routing, switching, SMTP email, Linux, and Microsoft Windows

Other Information:

· Office Location: 67 Ayer Rajah Crescent #02-10 S139950

· Working hours: Mon-Friday, 9 am-6 pm

· Depending on the season and customer request may require to work outside working hours

· Monthly basic salary commensurate with qualifications and experiences

· Other benefits such as annual leave, medical, insurance, training opportunities, regional exposures, etc

· Additional performance bonus based on individual contribution towards company strategy and its financial performance

Contact: [email protected]

· Over 5 years of experience in Information Security

• At least 2 years of direct experience in one of the Public Cloud platforms, such as AWS or Azure with strong knowledge of their security features.

• Ability to identify and drive remediation of public and hybrid cloud risks

• Experience in general security technologies, processes, and concepts.

• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).

• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel

• Working experience with common security operations systems, Intrusion Detection Systems (IDS/IPS), Security Incident Event Management systems (SIEM), anti-virus log collection systems, etc

• Strong analytical and problem-solving skills, with the ability to identify and address security risks and vulnerabilities

• Working knowledge of security systems and programs

• Ability to analyze and develop innovative recommendations and solutions.

• Sound fundamental knowledge of Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10, and web servers (e.g. Apache, IIS, Nginx, etc.).

• Experience with web security concepts and technologies such as web application firewalls, and proxy.

• Familiarity with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, and Open-source tools like Jenkins, Def