Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary Package: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to [email protected]. Please indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Adelin Chong | EA Reg No.: R1875641

• Instrumentation of measurement and detection equipment for military and homeland security.
• Oversee post-sales delivery of equipment, conduct scheduled maintenance, and conduct diagnostic analyses for troubleshooting and repair tasks.

Requirements:

• Higher Nitec in Electrical & Electronics Engineering or equivalent.
• At least 2 years of working experience

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

We are seeking a skilled Regional Network Technical Lead to oversee the network infrastructure across Asia. This is a 12 months extendable contract role. There is a possibility for this role to convert to a permanent headcount based on the performance.

Job Description & Requirements:

You will play a pivotal role within our Global Team, focusing on designing, building, optimizing, and ensuring the security and reliability of our network systems. Collaboration with our group entities across the region is key to this role.

Responsibilities:

• Accountable for the design and evolution of APAC Shared Offices Network in alignment with Central strategy and policies.
• Architect and oversee the deployment of enterprise-level firewalls (Meraki MX, FortiGate, Palo Alto Networks), switches (Meraki, Cisco, Huawei), wireless access points (Meraki, Cisco, Huawei), and other network devices.
• Serve as the primary Network point of contact for Group entitities already part of Shared Offices or new entities joining.
• Proactively analyze network traffic and performance to identify and address bottlenecks or security risks.
• Develop and implement network security strategies in collaboration with security teams to safeguard critical assets.
• Manage Network Inventories and ensure readiness of critical equipment warranties and maintenance across the regional Network.
• Establish and maintain detailed network documentation, change management procedures, and disaster recovery plans.
• Oversee network troubleshooting efforts, mentor operations members and group entitities peers, and lead root cause analysis of complex issues.

Support Network Central:

• Act as the Regional Network expert supporting operations in the Singapore Telco Node and potentially other Asia and worldwide Telco Nodes.
• Manage on-site operations at the Singapore Telco Node on behalf of the Network Central team.
• Lead network-related projects for the Singapore Telco Node, including configuration preparation and collaboration with vendors and central teams for successful implementation.
• Ensure regional Group entitities adhere to Network Central standards and escalate any deviations.

Preferred Qualifications:

• 10+ years of extensive network administration experience, including leadership or mentorship roles.
• Expert-level knowledge of network protocols (TCP/IP, BGP, OSPF, etc.), network security concepts, and firewall technologies (Cisco/Huawei Routers, Switches, Meraki MX/MS, FortiGate, Palo Alto Networks).
• Exceptional troubleshooting and analytical skills, capable of quickly resolving complex network outages.
• Strong communication and collaboration abilities, effective in both technical and non-technical settings.
• Experience in multinational environments with complex organizations, collaborating across diverse teams.
• Customer-oriented mindset with a focus on problem-solving and continuous service improvement.
• Ability to manage multiple projects, prioritize tasks, and deliver results in a fast-paced environment.

Argyll Scott Consulting Pte Ltd

Key Responsibilities:

• Participate in rotational maintenance standby duty to provide 24x7 support, as pre-assigned by the team lead (Level 2).
• Ensure that Service Level Agreements (SLA) are met for every fault case.
• Escalate issues promptly when a fault case exceeds the knowledge or capabilities of Level 1 support.
• Handle daily call assignments during office hours when not on standby.
• Perform weekend or after-hours duties, even when not on standby, if required.
• Conduct preventive maintenance tasks, including but not limited to hardware inventory management.
• Manage cases from initiation to resolution, ensuring proper and timely updates to incident tickets.
• Obtain certifications required to support key customers effectively.
• Undertake new assignments as directed by the Operations Manager or TSM.

Required Skills:

• Basic knowledge of Cisco and Alcatel switches, routers, and wireless networks.
• Basic network troubleshooting skills at both Layer 2 and Layer 3.
• Foundational understanding of network security principles.
• Basic server administration knowledge.

To apply please click the Apply button or send us your updated profile to [email protected]

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is undergoing a growth phase and are on the lookout for talent. Applicants are encouraged to follow Percept Solutions on LinkedIn @ https://www.linkedin.com/company/percept-solutions/ to stay up to date on our upcoming roles and events.

Wise is a global technology company, building the best way to move and manage the world’s money.
Min fees. Max ease. Full speed.

Whether people and businesses are sending money to another country, spending abroad, or making and receiving international payments, Wise is on a mission to make their lives easier and save them money.

As part of our team, you will be helping us create an entirely new network for the world's money.
For everyone, everywhere.

More about our mission and what we offer.

Job Description

The primary objective of this role is to provide Health, Safety & Security (HSS) specialist services to our local offices and activities in APAC and to provide support to the global Head of Workplace Risk and Compliance.

The HSS Specialist will implement programs to manage HSS risk as well as meeting or exceeding local relevant regulatory requirements. They will provide technical expertise in multiple HSS disciplines and serve as an effective member of cross-functional project teams and office expansions by providing guidance on all HSS matters in design, risk assessment and incident investigation.

Your Mission:

• Ensuring HSS compliance in the Wise APAC locations and being a core member of the Wise HSS internal audit team.
• Serving as the technical resource for HSS by providing regulatory guidance, training, and operational consultation to internal partners and external stakeholders.
• Supporting the Wise Head of Workplace Risk and Compliance to implement policies, procedures and projects at a global level.
• Implementing proactive programs to reduce injuries and illnesses and being accountable for HSS risk assessments in the APAC region.
• Providing HSS support and guidance to regional managers.
• Supporting and assisting the wider Workplace Team in the accomplishment of plans, objectives and agreed targets.
• Monitoring HSS performance in the APAC region and providing reports at site and country level.
• Acting as a core member of the Workplace Incident management team and responding to crisis and emergency situations relating to colleagues’ physical safety or security.
• Assisting Workplace Business Continuity Management (BCM) teams to respond to emergencies by providing specialist advice and assistance on all aspects of HSS.
• Supporting the development of Wise sustainability reports and participating in the ESG committee where appropriate.

Qualifications

Required Skills:

• Must have expert knowledge of HSS acquired through education, training and experience.
• Minimum of 5 years’ experience in a HSS role working across multiple locations.
• Working knowledge of local laws and regulations on HSS in APAC.
• Crisis and emergency management experience.
• Familiarity with security systems, technologies, and tools to protect assets and monitor threats.
• Experience with proactive travel risk management tools is desirable.
• Ability to undertake frequent international travel (short and long haul), sometimes at short notice and able to work occasionally during unusual times of the day when required.
• Ability to work using your own initiative and using a pro-active approach.
• Excellent communication skills and fluent English speaker.

Some Extra Skills that would be awesome:

• Professional qualifications in Occupational Safety, Health, Security, or other related disciplines.
• Relevant experience with an emphasis in HSS program management and employee training.
• Membership of professional HSS body (e.g. IOSH, ASIS, etc.) (desirable)
• First Aid certification

Additional Information

Please note that we are unable to sponsor visas for this role so you will be required to be a Singaporean Citizen/ Permanent Resident of Singapore.

For everyone, everywhere. We're people building money without borders — without judgement or prejudice, too. We believe teams are strongest when they are diverse, equitable and inclusive.

We're proud to have a truly international team, and we celebrate our differences.
Inclusive teams help us live our values and make sure every Wiser feels respected, empowered to contribute towards our mission and able to progress in their careers.

If you want to find out more about what it's like to work at Wise visit Wise.Jobs.

Keep up to date with life at Wise by following us on LinkedIn and Instagram.

Requirements

⦁ Relevant technical certifications (eg. CISSP, CISM, CompTia Sec+, CEH, etc) with at least 8 years experience within the industry,

⦁ Familiar with architecture within security domains. e.g. PAM, endpoint protection, data protection/governance, threat prevention, SASE, DLP, SIEM etc.

⦁ Strong understanding of security architectures, solutions, processes, frameworks, and components

⦁ Incident response including security monitoring, network and endpoint visibility, threat management, and forensics is a plus

⦁ Knowledge in information security technologies & cyber threat actors, cyber-crimes and fraudulent activity targeting the technology or various industries

⦁ Familiar with PDPA, GDPR regulatory requirements and compliance standards in the ASEAN region (i.e. SG, MY, etc)

⦁ Business acumen, able to communicate effectively with all level of stakeholders

⦁ Able to adapt to a dynamic and fast-pace environment

Overall Summary:

Plan, design, develop and review infrastructure architectural solutions for on-prem/hybrid Cloud, throughout infrastructure lifecycles.

Roles & Responsibilities:

• Architect and design scalable and secure IT infrastructure, primarily on-premise as well as leveraging on cloud technologies, that is resilient, highly available and secured.

• Develop infrastructure solutions to meet project requirements and establish roadmaps, patterns, principles, standards and guidelines for on-prem infrastructure, and document them in various formats, diagrams and templates

• Validate, review and verify infrastructure aspects of project solutions and technical specifications, based on alignment with mandated enterprise policies and standards

• Own and drive architectural deliverables, working in close collaboration with stakeholders including Project Managers, Subject Matter Experts (SMEs) and vendors to achieve project outcomes and timelines from design to implementation.

• Assess new infrastructure technologies and participate in proof of concept, to assist in defining technology direction, roadmap, framework and policies to meet strategic business initiatives.

• Present, articulate and communicate deliverables including architecture related design, solutions, concepts, ideas and proposals to various stakeholders.

• Keep abreast of emerging trends and identify opportunities for improvement

• Review technical documentation including Technical Design Specs and VM Provisioning Requests

• The infrastructure scope covers, but not limited to, all aspects of cloud, servers, hypervisors, containers, operating systems, databases, middleware, devops, security, support tools, network, SDN as well as related governance framework.

Requirements / Qualifications

• Degree in Computer Engineering / Electrical and Electronic Engineering or equivalent discipline

• At least 7 years’ proven experience in a similar role

• Strong and in-depth technical knowledge and experience in administering and maintaining infrastructure domain areas such as Operating Systems (e.g., VMware, Nutanix, Red Hat, Windows Server), Networking (e.g., SDN, Cisco), Security (e.g. Cisco, Palo Alto,CheckPoint, F5), Automation (e.g., Ansible, Chef, Terraform), Cloud, etc.

• Certifications in the above areas would be advantageous (e.g. CCIE, CISSP, VMware VCAP, Windows Certified Engineer, RedHat Certified Engineer, AWS Solution Architect, Azure Solution Architect, TOGAF)

• Possess good knowledge of networks and networking concepts

• Possess good knowledge of ITIL processes

• Possess good knowledge on private, hybrid and public cloud environment and technologies which includes VMware vRealize Cloud automation, AWS, Azure and OpenShift

• Possess good security, audit and compliance knowledge

• Able to analyse and understand complex technical systems built from many separate software and hardware components, specifically web application architectures

• Strong passion for innovation and desire to learn new technologies

• Possess initiative, with a proactive, result-oriented mindset and able to work independently

• Track record of on-time, on-budget and to-specification delivery with the ability to support end-to-end delivery of solutions.

• Experience in driving complex IT infrastructure design and projects while optimizing costs

• Able to prioritise assignments whilst working on multiple concurrent projects

• Is meticulous and attentive to details

• A team player with Excellent communication, interpersonal and collaboration skills, capable of effectively communicating complex technical concepts and influencing various internal and external stakeholders, both technical and non-technical alike.

• 2 years contract

Job Summary:

Design, implement, and manage cloud-based network infrastructure and services, ensuring security, scalability, and reliability.

Key Responsibilities:

1. Cloud Network Architecture: Design and deploy cloud network architectures (AWS, Azure, Google Cloud).

2. Network Security: Implement and manage cloud security measures (firewalls, access controls, encryption).

3. Virtual Network Management: Configure and manage virtual networks, subnets, and routing.

4. Cloud Resource Management: Provision and manage cloud resources (instances, storage, databases).

5. Network Monitoring and Troubleshooting: Monitor cloud network performance, identify issues, and resolve problems.

6. Compliance and Governance: Ensure cloud network compliance with regulatory requirements.

7. Collaboration: Work with development teams to ensure seamless integration with cloud-based applications.

8. Disaster Recovery: Develop and implement cloud-based disaster recovery strategies.

Required Skills:

1. Cloud platforms (AWS, Azure, Google Cloud)

2. Network protocols (TCP/IP, DNS, DHCP)

3. Network security (firewalls, VPNs, access controls)

4. Virtualization (VMware, VirtualBox)

5. Scripting languages (Python, PowerShell)

6. Cloud security frameworks (NIST, HIPAA)

7. ITIL or ITSM knowledge

8. Strong problem-solving and analytical skills

Education and Certifications:

1. Bachelor's degree in Computer Science, Information Technology, or related field.

2. Cloud certifications (AWS Certified Solutions Architect, Azure Certified Network Engineer).

3. Networking certifications (CCNA, CCNP).

On your day to day:

Support Information Security Risk Assessments

• Registration of application assets in Risk Assessment Inventory
• Information Technology Risk Classification
• Coordination of discussions, reviews and approvals from Technology and Business stakeholders

Management of risks related to Third party Mgmt

• Support business partners in due diligence of new and existing third party vendors
• Review gaps identified during assessments
• Facilitate risk reduction discussions and assessment of residual risk for further documentation of corrective action plans and risk acceptances
• Periodic review of External data transfers and their compliance with Citi standards
• Documentation of non-compliances in the Issue Management tools --

1. Data gathering from Tech, Business and IS partners
2. Raising control issues for Non compliances with Citi policy/standards
3. Facilitating discussions for residual risk rating, Reviews with control functions & Approvals as per approval matrix
4. Facilitate periodic review and renewal of Risk Exceptions.

• Follow-up on Regional Security Incidents with involved parties for timely closure. Support periodic Data gathering and Root Cause analysis of security incidents. Monitor improvements based on measures taken.
• Support time-sensitive global IS risk reduction initiatives by partnering with regional and country business partners
• Prepare Management reports, presentations, dashboards for key risk indicators
• Support appropriate data classification for application and infrastructure assets
• Occasional Audit support

Tool familiarity, soft skills and other qualifications:

• Essential: Intermediate to advanced knowledge of Information Security; Project Mgmt skills; Strong communication skills; MS Office - Access, Excel, Visio, Powerpoint

• Desirable: Experience with migration projects; Any InfoSec related certification; MS Project

• Based in Singapore, the regional hub for Asia Pacific (AP) and top-ranked biopharmaceutical company on the Straits Times and Statista’s list of Best Employers in Singapore for two consecutive years (2020, 2021).
• Join the premier biopharmaceutical company that has been in Singapore for more than 25 years and in AP for over 60 years.

Job Purpose

Reporting to the Director, Global Security – Supply Chain Integrity, the Associate Director, Supply Chain Security is responsible for leading the China/Japan/Asia-PacificRegion implementation and execution of strategic and tactical operations intended to ensure the end-to-end efficient and secure movement of COMPANY products and materials, provide effective supply chain security risk management, and promote engagement and awareness of associated security matters.

The focus of this work is on protecting patient safety through securing the supply chain against illicit actions, product diversion, theft, terrorism, and unauthorized activities that threaten product integrity including compromises of confidential and proprietary supply chain information.

The position will be the primary regional liaison for internal and external interactions associated with supply chain security matters. The successful candidate must have a proven capability to excel in a collaborative, diverse, complex, resource-constrained environment and be able to drive decision-making processes that involve multiple constituencies and constraints.

Primary Responsibilities

Leading the Regional execution of COMPANY’s global Supply Chain Security Strategy, including tactical operations designed to protect COMPANY’s supply chain from threats and acts of theft, product diversion, tampering, terrorism, illicit activities, and unauthorized access via effective security measures, analysis, expert consultation, and investigations leading to meaningful root cause determinations, corrective actions, compliance, and law enforcement outcomes. Following are the areas of focus:

Security Risk Management

· Implement and manage regional execution of a proactive Supply Chain Security strategy focused on incident prevention through intelligence-based risk mitigation

· Manage regional execution of a security risk assessment regime to proactively and periodically monitor and measure internal operations and external business partner security performance against established criteria

· Manage regional execution of initiatives to identify and enhance protection of supply chain operations and products categorized as “high value”

· Measure and report supply chain security performance in collaboration with designated Regional Security leads

· Study and assess implementation of technology and innovative solutions to mitigate supply chain security risk

· Manage and/or support matrixed cross functional response to Supply Chain Security events

· Coordinate and/or support matrixed Regional Security personnel in investigations for supply chain security matters

· Manage and/or support matrixed supply chain risk intelligence gathering and monitor efforts of emerging threats to global supply chain security as well as related country/region specific regulations

· Manage the flow of communications related to Regional supply chain security and disseminate relevant information within Global Security and the Company

Policy and Standards

· Support the development and manage execution of supply chain security policies and minimum standards

· Manage regional execution and compliance with established government trade security programs such as CTPAT, AEO, PIP, and similar country-based initiatives in which COMPANY participates

· Develop and maintain regional proactive supply chain security guidance and subject matter material to communicate established policies, standards, and best practices

Engagement and Awareness

· Cultivate and maintain relationships that support internal and external engagement and awareness for supply chain security matters at COMPANY

· Serve as Regional point of contact for Global Security to the COMPANY Controlled Substance Compliance program, providing Security support to Compliance initiatives associated with the manufacturing and distribution of Scheduled Medicines and Controlled Substances.

· Foster and maintain internal cross-functional relationships in support of Procurement, Manufacturing, Distribution & Logistics, Transportation, Supply Chain Management, Finance, and Insurance & Risk, IT and other functions as needed

· Support the development and delivery of global Supply Chain Security training materials and proactive awareness information as needed

· Participate in and liaise with professional associations specializing in pharmaceutical crime, supply chain security, and security risk management

· Maintain a network of knowledgeable and influential persons in government, law enforcement, security, intelligence, and internal functions to serve as resources, collaborators and partners related to supply chain security matters

· Serve as the cross-functional single point of contact for matters related to Supply Chain Security within the Region and externally as needed

· Ensure communication and oversight of key milestones and deliverables to support supply chain security strategic efforts

People Management

· Develop and maintain oversight of contract business partner resources in support of the Supply Chain Security strategic and tactical needs

Financial Management

· Manage operational expenditures to align with Corporate and Regional business activities and requirements providing strong financial stewardship assuring spend is focused on supporting the mission and does not exceed approved authorized levels

Domestic and international travel is required

WHAT YOU MUST HAVE

• Minimum Bachelor’s degree
• Minimum 5 years’ professional security experience preferably within the pharmaceutical industry
• General understanding of pharmaceutical operations and related supply chains including regulatory security requirements and security plans
• Understanding of supply chain operations, logistics, warehousing, distribution, all modes of transportation, and freight forwarding
• Experienced leading and conducting investigations including supporting and generating case reports for criminal and civil enforcement actions
• Knowledge of physical security principles and security risk assessment methodologies
• Working understanding of industry best and recommended supply chain security practices
• Excellent verbal and written communication skills
• Proficient use of MS Office software and presentation tools
• Demonstrated experience interacting with and preparing briefing materials and reports for senior COMPANY management and government officials as necessary
• Must be innovative and work independently with an aggressive workload in a high performing environment
• Ability to work in a matrixed environment with exceptional levels of collaboration, clarity and honesty in dealing with peers, team members and all others in a flat and nimble organization
• Ability to champion new ideas or positions to meet key goals and initiatives
• Strong commitment to patient safety and compliance requirements
• Must possess and demonstrate strong leadership, communication and analytical skills.
• Understanding of risk intelligence and security risk management methodologies

Skills/Knowledge Preferred

• Professional security certification (i.e. CPP, CFE, etc.)

What we look for …

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace.

Job Description

• Drive information security and cybersecurity assurance program.
• Review information systems security controls against possible cyber threats and work with stakeholders on remediation.
• Conduct verification and validation to ensure risks are mitigated.
• Provide cybersecurity risk advisory to projects, including providing recommendation of risk mitigation options.
• Review cybersecurity measures against possible threats learnt from external incidents and intelligence sources and work with stakeholders on addressing potential gaps.
• Perform regular monitoring and reporting of cybersecurity risk landscape.
• Provide regular dissemination of cybersecurity risk advisories for staff.
• Drive regular cybersecurity risk metrics reporting and monitor key risk indicators.
• Manage cybersecurity incidents. Ensure timely management reporting and provide regular updates to senior management and relevant stakeholders.
• Conduct cybersecurity tabletop exercises improving organisational cyber resilience.
• Provide cybersecurity awareness training ensuring employees understand cyber risks, recognise threats and able to protect organisational assets.
• Plan and execute simulated phishing exercises to assess employee awareness.

Requirements

• Relevant degree in Information Security and/or Cybersecurity.
• CISSP, CISA, CRISC, CCSP and /or OSCP advantageousMore than 6 years of hands-on experience in information security and cybersecurity roles.
• Good knowledge and experience in computer security, network security and application security.
• Familiarity in medical device security advantageous.
• Experience in leading cybersecurity risk identification and analysis and recommending risk reduction measures using NIST CSF and MITRE ATT&CK.
• Good knowledge and experience with regulatory requirements pertaining to cybersecurity.
• Strong analytical skills for threat modelling and risk assessment.
• Good influencing skills with stakeholders, within department and across departments.
• Ability to contribute through others, collaborate well across seniority, cultures and locations.
• Good written and communication skills with ability to interact and engage with stakeholders and all levels of management.

Morgan McKinley Pte Ltd

Syairah Banu

EA Licence No: 11C5502

EA Registration No. R21100522

Job Description & Requirements

As a Systems Specialist, will be providing support in the following areas:

a) Develop and implement a threat hunting framework to provide a comprehensive structure for planning, executing, and managing threat hunting initiatives.

b) Develop and refine threat hunting methodologies and procedures to enhance the organization's ability to detect and respond to advanced threats.

c) Continuously enhance threat hunting techniques, processes, and tools to improve the organization's overall cybersecurity posture.

d) Stay updated with the latest vulnerabilities, security trends, and techniques in cyber threats and hacking methodologies.

e) Conduct research on emerging threats and vulnerabilities and provide recommendations for enhancing the organization's security posture.

f) Conduct proactive threat hunting exercises to identify and investigate potential security incidents and suspicious activities within the network.

g) Document all findings, analysis, recommendations and investigation results in a clear and concise manner and generate reports for management and stakeholders.

h) Develop and tune security monitoring rules, correlation logic, and detection signatures.

i) Be proficient in utilizing various security technologies, including SIEM (Security Information and Event Management) tools, network traffic analysis tools, endpoint detection and response (EDR) systems, vulnerability management system and threat intelligence platforms.

j) Work closely with other cybersecurity teams, such as for incident response, security operations, and threat intelligence, to share findings and collaborate on incident investigations.

k) Develop and implement a cyber intelligence framework to provide a systematic and organized framework for collecting, processing, and leveraging intelligence to enhance HDB's cybersecurity posture and decision-making capabilities.

l) Integrate the cyber intelligence framework with the HDB's Security Operations Center (SOC) and incident response team and ensure that the intelligence gathered is effectively used to detect, prevent, and respond to cyber threats.

m) Continuously monitor and collect information from multiple sources, including threat intelligence feeds, security vendors, dark web forums, social media, and other online platforms, to identify emerging cyber threats and attack trends.

n) Analyze the collected threat intelligence data to identify patterns, trends, and potential cybersecurity risks.

o) Prioritize and triage threats based on their relevance and potential impact to HDB.

p) Conduct in-depth analysis of threat actors, their motivations, capabilities, and tactics, and provide insights on potential risks and impacts to the organization's systems, networks, and data.

q) Produce regular and ad-hoc reports, briefings, and alerts on emerging threats, trends, and risk assessments to relevant stakeholders, including senior management, incident response teams, and other cybersecurity teams. The report shall also provide technical information in a clear and actionable format for various stakeholders.

r) Provide timely and accurate intelligence support during security incidents, assisting incident response teams in understanding the nature and scope of the threat, and providing guidance on containment, remediation and recovery strategies.

s) Support vulnerability management efforts by analyzing threat intelligence data to identify vulnerabilities, exploit trends, and potential targets, and prioritize patching and mitigation activities.

t) Collaborate with threat hunters and other cybersecurity teams to develop and refine threat hunting strategies based on threat intelligence insights and analysis.

Qualifications

a) Possess fundamental application security knowledge like interpretation of HTTP response status codes and WAF violations.

b) Display understanding of network security best practices.

c) Display understanding of techniques in cyber threats and hacking methodologies.

d) Strong problem-solving skills and ability to work under pressure. Willingness to learn.

e) Fundamental skills on Microsoft Office products like Word and Excel.

f) Additional certifications like CCNA, CCNP, CISSP or related certifications are a plus.

g) Must be able to work beyond business hours including weekend when necessary

Overall Summary:

Mainly supporting security aspect like firewall checkpoint, security appliances - configuration, troubleshooting, capacity planning. Supporting current operation and deployment of resiliency project. This is a 2-year direct contract position.

Roles and Responsibilities:

• Directly reporting to Security Senior Manager
• Assist Architect team on new infrastructure design, implementation, and management of network solutions that form the core infrastructure, ensuring seamless integration across different platforms. This includes procurement of necessary equipment.
• To provide comprehensive product knowledge on the data technology required to deliver, support the networks infrastructure.
• Collaborate with the team to identify network and system needs, monitor performance metrics, troubleshoot, and resolve network-related issues, and implement improvements.
• Deliver project management for network activities encompassing upgrades, deployments, and migrations. Provide technical guidance and user support as required.
• Develop, maintain, and update documentation covering the network environment and operational procedures.
• Generate reports and detailed documentation outlining findings, implemented solutions, and recommendations for further enhancements.
• Oversee network environment to maximize performance, scalability, and minimize downtime.
• Closely coordinate and conform to Change Management policies, process, and procedures on any network changes.
• To implement approved changes, troubleshoot to identify root causes and implement effective solutions.
• Experience on Automating daily network tasks using scripting.
• Be available to provide on-call support as needed.

Qualifications/ Requirements:

• Minimum Bachelor in Computer Engineering or equivalent
• Must equipped with CCNP or CCIE
• Network Infrastructure & Hardware: 5+ years experience managing large enterprise network with a strong focus on F5, Palo Alto, Cisco, and CheckPoint Technology.
• Network Devices: In-depth knowledge and proficiency with switches, firewalls, load balancers, routers, and ISE.
• Network Design & Troubleshooting: Expertise in designing, monitoring, and network & incident management (LAN, WAN, VPN).
• Strong experience with automation tools: Ansible, Python - Automate in operation / project work before
• Experience with Deployment and automation, advantage to have experience building data center
• Proven track record of success in a fast-paced IT environment.
• Excellent communication and interpersonal skills, allowing you to effectively collaborate with both technical and non-technical stakeholders.
• Ability to work under pressure and delivery the project on time with minimum supervision.
• Certified and experienced with the mentioned technologies.

Security Officers – Powered by Technology!

Our client is looking for dynamic and tech-savvy Security Officers to join their team and redefine the future of security. If you’re ready to combine your passion for safety with cutting-edge technology, this is the opportunity for you!

What Sets Us Apart?

• Cutting-Edge Technology: Say goodbye to manual tasks—our advanced systems streamline security operations.
• Real-Time Data Insights: Stay informed and proactive with instant access to critical data.
• Smart Collaboration: Experience seamless synergy between humans and technology for optimal efficiency.

What You’ll Do

• Monitor advanced tech-driven security systems.
• Respond swiftly to alerts and emergencies using real-time data.
• Collaborate with technology platforms to ensure a safe environment.
• Handle situations with professionalism and precision.

Why Join Us?

✅ Tech-Driven Efficiency: Focus on impactful work with fewer repetitive tasks.
✅ Training in Advanced Tools: Master the latest security technologies with our support.
✅ Career Growth: Thrive in a future-focused environment with growth opportunities.
✅ Supportive Team Culture: Work with a team that values innovation and excellence.

Who We’re Looking For

• Passionate about security and technology.
• Proactive, detail-oriented, and adaptable to innovative solutions.
• PLRD License: Candidates must possess a valid Police Licensing & Regulatory Department (PLRD) license to qualify.
• Strong communication skills and a collaborative mindset.
• Previous security experience is a plus, but not required—we’ll train motivated individuals!

Apply Now

Send your resume and take the first step toward joining a team that’s revolutionizing security.

Note: Only shortlisted candidates will be contacted.

Redefining Security Through Innovation.

ILS Hospitality

[email protected]

EA Reg: 23C1776

Reg No: R23117498

WA: 89500081

• To petrol the building and check on security issue according to Supervisor plan.
• To perform 3 rotating shift work
• To maintain Building safety and guests safety

Requirements

• Candidate must holding a valid security officer certificate
• With 2-3 years of security officer work experience in Shopping centre or Hotel Industry
• Able to perform shift work
• Working location at Orchard Area

DUTIES & RESPONSIBILITIES

· Provide high level support to partners and fee earners as a Legal secretary

· Working collaboratively with rest of the team (hub service) to deliver and provide seamless secretarial and administration support to assigned practice group fee earners

· Provide administrative support to fee earners with conflict searches and audit requests

· Responsible for practice group specific tasks, e.g. super-user on specific tools, global billing, client reporting, knowledge management support

· Handle external or internal telephone calls and queries in a professional manner and take clear and concise messages as required

· Coordinating internal and external client meetings effectively

· Assisting fee earners with the organisation of meetings including preparation of agendas and collating meeting papers in a timely manner

· Organising and assisting with client functions, entertainment and seminars, as required

· Organising complex travel arrangements including booking and confirmation of reservations, flights, hotels, taxis, rental cars, after flight transfers; liaising with third party provider to obtain visas and producing detailed itineraries

· Managing group and fee earner contacts and maintaining up to date client record in Outlook and Interaction (CRM tool)

· Ensuring accurate and timely use of the finance management system to facilitate matter opening, maintenance, closure and archiving

· Generating accurate billing reports, letters, drafting bills and issue all finalise bills in a timely manner

· Managing invoices, expenses and disbursements

· Recording time for fee earners when required (including non-billable productive time) on a daily basis

· Completing financial reports where required, from internal systems highlighting outstanding monies to be billed and updating particular client financial schedules where necessary

· Utilising document production for the creation of all first draft documents, i.e., produce and amend documents with speed and accuracy; format, paginate, number and present documents in house-style;

· Assist on ad-hoc projects as and when required, for example managing bundles, assisting during team events, indexing documents, etc.

· Any other secretarial or administrative duties as required.

Requirements

· Minimum 2+ years’ experience as a legal secretary within the professional services industry

· Experience working with Office 365 ProPlus, document management tool, billing system and collaboration tools (MS Teams, Zoom and Skype for Business)

· Excellent communicator in English, both spoken and written

· Excellent diary management

· Strong organisational skills and an ability to prioritise and complete simultaneous projects when numerous and diverse demands are involved

· Ability to accurately prepare and maintain records, files, and reports

· Detailed understanding and experience of billing

· Flexible approach to working practices in order to meet business needs

· Conscientious and armed with a can-do attitude, proactive, friendly and professional demeanour

· Adding value by taking a proactive approach to tasks and anticipating potential problems before they arise

· Ability to process and handle confidential information with discretion

· Ability to build rapport and develop profession relationships internally and externally

· Ability to work successfully as both a member of a team and independently with minimal supervision

Interested candidates are invited to write-in and email with a detailed resume stating qualifications, experiences, current/expected salary to [email protected].

We regret that only shortlisted candidates will be notified.

Basic: Up to $4200

Benefits: VB + Company Transport

Working Hours: Mon - Fri, 8.30am - 6pm

Location: Penjuru (Transport provided at Jurong East, Bishan, CCK, Serangoon)

Responsibilties:

• Contribute to the business development team for the growth of cyber-security businesses in Singapore and the APAC region.
• Spot opportunities and execute tasks given quickly.
• Consultative sales either independently or by leveraging available and accessible technical resources to develop new businesses.

Requirements:

• Graduates from the relevant disciplines (Cybersecurity, Computer Science, Business Management, Business Administration, etc.,)
• Ability to adapt quickly and able to embrace potentially steep learning curve
• Possess an innovative and open mind-set, especially in the creation of viable partnerships and new markets with radically differentiated propositions
• A well-natured, result-oriented, self-motivating, self-driven team player
• Sensitive to numbers and good with various tools like Microsoft Excel, Word and PowerPoint
• Ability to work independently and execute the tasks given efficiently.

Applicants who possess relevant experience for the above responsibilities are most welcome to apply. If you do not possess the above experience, your application will still be considered on individual merits and you may be contacted for other opportunities.

Please submit your updated resume in MS Words format by using the APPLY NOW BUTTON.

By submitting your personal data and/or resume, you give consent to collection, use and disclosure of your personal data and/or resume by the company (or its agent) for the purpose of the processing and administration by the company relating to this job application.

Hui Yew Cheong

Registration Number: R24124511

EA License No: 06C2859 (MCI Career Services Pte Ltd)

This international household name corporate is looking for a corporate/commercial counsel to join their legal team in Singapore.

You will enjoy varied work supporting multiple businesses in the APAC region, including transactional commercial contract work, compliance, data privacy and company secretarial responsibilities.

Ideally you have in-house experience supporting sales and have handled government tenders and contracts. Candidates from private practice with general contract management experience and legal executives with strong in-house experience in the areas listed above are welcome to apply.

Please contact Benedict Joseph at JLegal in Singapore on +65 6632 3636 or submit your resume to [email protected] quoting Ref no: JGB – IS – 1887.

JLegal Pte Ltd Employment Agency Licence No: 16S8076

Benedict Joseph, EA Registration No: R1324716

Only shortlisted candidates will be responded to, therefore if you do not receive a response within 14 days, please accept this as notification that you have not been shortlisted.

A provider of comprehensive security solutions in Singapore, is seeking a dynamic and results-driven Business Development Manager to join our team. With a strong reputation for delivering top-tier security services, we are dedicated to protecting our clients' assets and ensuring peace of mind.

In this role, you will be responsible for expanding our customer base and driving revenue growth by identifying new business opportunities, developing and implementing effective sales strategies, and building and maintaining strong relationships with clients. If you're passionate about the security industry and thrive in a fast-paced, growth-oriented environment, we want to hear from you.

Responsibilities

• Identify new business opportunities by researching and analyzing market trends and customer needs in the security industry.
• Build and maintain strong relationships with new and existing clients to meet sales targets and drive revenue growth.
• Conduct market research to understand potential clients and the competitive landscape.
• Create and deliver compelling sales proposals that showcase the value of our security services.
• Develop and implement pricing strategies to optimize profitability, including competitive analysis and pricing optimization.
• Collaborate with the operations team to ensure service delivery aligns with client needs and expectations.
• Strategize business expansion, balancing financial goals with customer satisfaction.
• Attend industry events and networking sessions to promote company services and build business relationships.
• Prepare regular reports on sales performance, market trends, and competitor activity.
• Work closely with senior leadership to support the company’s strategic goals and vision.

Requirements

• 3-5 years proven experience in the security industry, with a strong understanding of market trends, services, and client needs.
• Established network of business contacts within the security sector, with the ability to leverage these relationships to drive business growth.
• Track record of success in sales, business development, or account management, particularly in achieving revenue targets.
• Strong negotiation and presentation skills, with the ability to create compelling proposals and close deals.
• Ability to conduct market research and competitive analysis to identify new business opportunities.
• Excellent communication and relationship-building skills to maintain strong client relationships and foster new connections.
• Strategic thinking with experience in developing and implementing pricing strategies and business expansion plans.
• Self-motivated and results-oriented, with the ability to work independently and as part of a team.

Benefits:

• Salary negotiable based on experience and industry expertise.
• Performance-based incentives to reward high achievers and drive growth.
• A dynamic and growth-focused work environment, with opportunities to influence strategic direction and business expansion.
• Collaboration with senior leadership, providing exposure to high-level decision-making.
• Flexibility and autonomy in managing client relationships and business development initiatives.

Please submit resumes to [email protected]

- Position applying for

- Current remuneration

- Expected remuneration

- Notice period

John Goh Meng Chye

EA License No : 06C4642

EA Reg No : R1102621

We regret that only shortlisted candidates will be notified.

We take great pride in delivering impeccable hospitality at the Hotel Miramar Singapore. Our well-equipped hotel is dedicated to providing modern, comfortable living and unparalleled friendly service. Our exceptional location is also one of the many reasons people choose to stay with us. We offer opportunities for career stability and advancement. We welcome you to join us!

The ideal candidate is a motivated, well-organized individual who possess strong leadership, analytical skills, problem-solving abilities, and collaboration skills.

Highlights:

• Attractive Salary Package with AWS and Performance Bonus
• Staff meals, dental and medical benefits, birthday voucher, F&B discounts, and complimentary season parking for staff.
• Career Progression
• Training Opportunity

Responsibilities:

• Manages Key Access Control
• Maintain the Log Book for contractors working in the hotel in accordance with company’s health and safety policies
• Operates, checks and performs security surveillance on the CCTV system
• Patrol the hotel building, premises and perimeter on a daily basis ensuring safety, and send reports.
• Member of the CERT team to provide assistance during the triggering of a fire alarm
• Regulate traffic control at the driveway
• Monitor suspicious packages and be aware of bomb and terror threat procedures
• Investigate and report all allegations of theft, criminal damage and other incidents
• Maintain the Security Log Book and send Incident Reports
• Manage undesirable behaviour in a professional manner, intervening and defusing potential altercations
• Handle Loss and Found items
• Liaise with Police in the absence of Security Supervisor
• Report any maintenance or hazard issues to the supervisor on duty
• Adhere to all Health and Safety Regulations
• Any other duties assigned by the Security Supervisor.

Requirements:

• 6 days’ work week.
• Possesses valid Security License issued by PLRD/SIRD.
• At least 1 year of experience in a similar capacity in the Hospitality industry.
• Positive attitude and able to take responsibility.
• Able to communicate clearly and work in a team.
• Able to work on rotating shifts, weekends and public holidays.
• Computer literate

HOW TO APPLY:

We want to hear from you! Interested candidates are invited to email your updated resume by 8 Feb 2025.

Walk-In (Singaporean/Permanent Resident only) :

You can visit the HR Office at Hotel Miramar any time from Monday to Friday, between 10:00 AM and 4:00 PM. Find us at room #02-25.

*Ensure your resume provided to us does not contain your full NRIC number during your job application. Only short-listed candidates will be notified

Our Client is an established company in Singapore, who is seeking to recruit a Network Security Engineer to join their Platform Engineering Team.

Network Security Engineer

The Network Security Engineer i is accountable for assisting with developing the design and for implementing a highly secure corporate data and voice network infrastructure in accordance with prescribed architecture and Infosecurity guidelines. The corporate network is an international network, bound by separate security domains based on the sensitivity of traffic and services. Network security is enforced at cross-domain boundaries and also at the points-of-interconnect to the Public Internet and third party service providers. The enforcement of network security at these points ensures the safety and security of all corporate information where only authorised access is possible on an ongoing basis

This role represents an expert technical level, as such demands the ability to operate without supervision for extended periods of time, and the exercising of judgement in consultation with other senior team members.

In addition this role may act as a technical adviser towards documenting security infrastructure housekeeping and related processes.

• Professional Degree or Diploma qualified in Networks Engineering, Telecommunications or related discipline.

· Strong skills in Checkpoint firewalls

· Advanced knowledge of LAN, WAN and Data Centre network architectures and enterprise design.

· Extensive experience and specialist skills in the design and configuration of networking/communications infrastructure, including the ability to support a variety of technologies..

· Intermediate project management skills and an ability to prioritise multiple tasks – ability to meet tight schedules and cost targets without compromising customer requirements.

· Ability to control project design and planning activities associated with small to large sized network infrastructure development projects.

· Ability to effectively control and manage issues, risks, dependencies and changes in scope associated with network infrastructure projects.

· Excellent written and oral communication skills coupled with a customer service orientation.

· Excellent presentation skills and an ability to convey ideas at all levels to both technical and non-technical audiences

· Experience and ability to build and maintain strong technology vendor partnerships.

· Excellent analytical and reasoning skills in solving complex problems

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to [email protected] stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

Job Description

• Industry/ Organization Type: Manufacturing/Electronic Components and Boards
• Position Title: IT Security Manager (Regional)
• Working Location: Bedok (Company pick-up provided at Bedok MRT)
• Working Hours: 5 Days, Mon – Fri (8:15 am – 5:15 pm)
• Salary Package: Basic up to $12,000 + Variable Bonus
• Duration: Permanent

Key Responsibilities

• Analyze and prioritize vulnerabilities based on severity, potential impact, and business risk, and collaborate with relevant teams to implement effective mitigation strategies.
• Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.
• Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.
• Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.
• Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention, and other network component policies.
• Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.
• Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.
• Developing and implementing security policies and procedures that ensure the organization’s data and systems are protected against cyber threats.
• Conduct regular vulnerability assessments and penetration testing to identify potential security weaknesses and risks to make improvements in the organization’s security.
• Report all security incidents to the home office and work with corporate IT on response and resolution strategy.
• Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.
• Stay up to date with the latest cybersecurity threats, attack techniques, and incident response strategies.

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, IT, or equivalent experience.
• Has 5+ years of experience in a cyber or information security management role.
• Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).
• Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.
• Professional information security certification preferred (e.g. CompTIA Security+, CISSP, CISA, CISM).

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to [email protected]. Please indicate #67372 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Adelin Chong | EA Reg No.: R1875641

Founded in 1973, DCS Card Centre (formerly Diners Club Singapore) is a financial institution licensed to issue credit and charge cards, governed by the Monetary Authority of Singapore (MAS) under the Banking Act.

We deliver digital-first, customer-centric payment products and solutions for consumers, merchants and corporates. Leveraging on our deep heritage, we aspire to be an innovative fintech leader driving integrated payment and financial services.

For more information: https://dcscc.com/about-us

Job Responsibilities:

• Planning, implementing, managing, monitoring and upgrading security measures for the protection of DCS's data, systems and networks.
• Participate in compliance audit activities
• Formulation, review, and update of information security-related company policies
• Vulnerability testing, monitoring and reporting systems.
• Responding to all security and data breach incidents.
• Ensuring that all the organisation's data and infrastructure are protected by enabling the appropriate security controls.
• Testing and identifying network and system vulnerabilities.
• Working, liaising, and collaborating with security vendors.
• Performs other duties as assigned related to information security/compliance

Job Requirements:

• Bachelor's Degree in Computer Science, Information Technology, Information Systems Management, or a related field.
• Have a good understanding of Risk Management, Disaster Recovery, Business Continuity and IT Regulatory Compliance.
• Professional certifications such as CISSP, CISM, CCISO, or relevant are highly desirable
• Knowledge of MAS TRM & PCI DSS is advantageous.
• Possesses strong written and verbal communication skills in English and is proficient in Mandarin.
• Excellent interpersonal and communication skills.
• A minimum of 4 years of relevant experience in Information Security.
• Experience in Security Awareness Trainings, VA, DLP, MDM, AD, Office 365 Security, Endpoint & Application Security.
• Ambitious but humble, striving for the best, and taking feedback from teammates and users into consideration.

Job Description

As a Cyber Security Architect, you are responsible to architect, design, review and implement cyber security resilient in our product and projects. You are familiar to cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment. You govern and initiate the security implementation and design in product. You monitor, research, and analyze security risks to mitigate threats and security attacks that may occur to or within the cloud and network. You will implement customized application security assessments for client-based asset risk, corporate policy compliance as well as conduct vulnerability assessment. You should have an advanced understanding of cloud, networking, data traffic flow, system administration, cloud architecture, OSI model, anti-malware, anti-virus, defense-in-depth and common security elements.

Your focus is not only limited to assessing whether vulnerabilities exist but also how those risks could be mitigated but also engage any security noncompliance from initial design stage in solution and cloud architecture level.

Responsibilities

• Develop and build cloud security architectures and solutions
• Product security governance in architecture, database, key management, certification management, cryptography, account management, etc.
• Solution design for product to help reduce attacks on cloud service data storage, create preventative features, and implement corrective controls when breaches do occur
• Monitor, research, and analyze security risks to mitigate threats and security attacks
• Security check and scanning on DevOps of product development
• Regular security and risk assessment for system solutions
• Support on audit trial for security related implementations
• Consultancy on software and tools for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation on product development and release procedure.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar to IM8 requirements and CIS, NIST security benchmark.
• Familiar to cyber security tools to perform preliminary scanning.
• Familiar to public cloud infrastructure such as Azure, AWS, GCP and Huawei.

Skills Required

• Strong IT skills and knowledge including cloud, network, hardware, and software
• DevOps procedure and process
• A forensic approach to challenges
• Good coordinator and team worker
• A deep understanding of how hackers work and ability to keep up with the fast pace of change in the criminal cyber-underworld
• Ability to seek out vulnerabilities in IT infrastructures
• Meticulous attention to detail

Our mission and where you fit in

At Employment Hero, we’re an ambitious bunch on a mission to make employment easier and more valuable for everyone.

Since our inception in 2014 we've had some pretty impressive growth (100% YoY), now serving 300,000 businesses globally, with 2 million+ users on the platform, reaching unicorn status in 2022 - and we have no plans to slow down.

There’s never been a more exciting time to join one of the fastest-growing SaaS unicorns, so let’s see if we could be a match!

What your days might look like

The Security Penetration Tester at Employment Hero is essential in safeguarding sensitive data and ensuring the security of the company’s systems. This role involves proactively identifying, testing, and mitigating security vulnerabilities across applications and infrastructure and is crucial to the success of our mission. By feeding insights back into the development lifecycle, the Security Penetration Tester will help strengthen Employment Hero's defences and plays a pivotal role in supporting the continuous improvement of the Employment Hero’s security strategy.

This role can be based remotely in Australia, Singapore or Taiwan. Candidates should have full working rights in that respective country.

As our Security Penetration Tester, you will:

• Conduct penetration testing on web applications, networks, mobile platforms, and cloud environments
• Simulate real-world cyberattacks, including vulnerability assessments, social engineering, and physical security evaluations
• Identify, analyse, and document security vulnerabilities and recommend mitigation strategies
• Work closely with IT teams, engineers, and management to implement security measures and close gaps
• Stay updated on the latest cybersecurity trends, attack techniques, and security tools
• Prepare detailed reports that clearly communicate findings, risks, and remediation plans to both technical and non-technical stakeholders
• Participate in red team exercises, security audits, and incident response simulations
• Identify gaps in people, processes, and technologies
• Vulnerability research on certain high-value applications or systems
• Develop proof-of-concept exploits to demonstrate how vulnerabilities can be exploited

You will bring:

• A minimum of 3 years’ experience in a penetration testing environment
• Possessing OSCP is a must, with other offensive security certificates highly favourable
• Strong communication and presentation skills
• In-depth knowledge of common offensive security tools (Burp Suite, Cobalt Strike, Metasploit)
• Strong consultative skills, enabling effective communication of complex concepts to both technical and non-technical audiences
• Meticulous attention to detail
• A strong desire to learn and expand knowledge in the field of information security

Experience is important, but for us the biggest measure of success is people who can live and breathe The EH Way of working. Show us what you can bring to the table, and we’ll empower you to let your talents shine.

The EH Way

The EH Way is how we describe our culture at Employment Hero and how we all operate. It is our DNA. You can read all about it on our careers page: https://employmenthero.com/careers/

In short, you’ll love working with us if:

• Revolutionising employment gets your heart racing.
• You thrive on the flexibility (and responsibility) of a remote-first business.
• Our values align, and shape how you show up every day.
• You love the dynamic pace of a startup, are driven by innovation, and enjoy working with other smart people.

Plus, you’ll get to enjoy a number of great perks, including:

• A generous budget for your home office.
• Cutting-edge tools and technology.
• Reward and recognition programs - because great work should be recognised and rewarded.
• Cashback offers and discounts on popular brands through our Swag app.
• Employee Share Option Program: be an owner of Employment Hero.
• Annual Global Gathering - so far we’ve been to Thailand, Vietnam, Bali and are excited to meet in Dubai in September 2025.

Are we a match?

Think we're the right match for you? Fantastic! Click 'Apply' and our talent team will reach out with the next steps.

At Employment Hero, we are committed to safeguarding the privacy of your application data. To understand how we do so, you can read our Applicant Privacy Policy here: https://employmenthero.com/legals/applicant-policy/

Employment Hero celebrates diverse perspectives and experiences, we invite people of all backgrounds and identities to apply for this position.