Join our global team to help design, implement, improve, and operate our worldwide Internet Breakouts as well as the VPN Services for Bosch Users and partners. Ensure that the security infrastructure deployment and configurations align with industry standards, compliance requirements, and organizational security policies. Provide Level-2/Level-3 Support for our service portfolio, including shared on-call duty (remote). Collaborate closely with our Architects, Engineers, internal customers, partners, and stakeholders. Initiate, manage, and implement changes to our security infrastructure.

Responsibilities:

• Design, implement, and operate worldwide Internet Breakouts and VPN Services for Bosch Users and partners.
• Ensure security infrastructure deployments and configurations comply with industry standards, organizational policies, and compliance requirements.
• Provide Level-2 and Level-3 support for the service portfolio, including participation in shared on-call duty (remote).
• Work closely with Architects, Engineers, internal customers, partners, and stakeholders.
• Initiate, manage, and implement changes to the security infrastructure.

working days: 4 days work with 1 day off OR 3 days work with 1 day off

working hours: 12-hour permanent shifts

Salary range : $2540 - $3500

bonus provided

Job responsibilities:

- Incident response and managing security & safety systems

- Prevent unauthorized entry into premises

- Monitor CCTV - Patrolling and clocking

- Perform access control duties

Requirements:

- Incident response and managing security & safety systems

- Prevent unauthorized entry into premises - Monitor CCTV

- Patrolling and clocking

- Perform access control duties

*Able to start work within short notice will be highly advantageous.*

Please be notified that only shortlisted candidates will be notified

By submitting your personal data and/or resume, you give consent to the collection, use, and disclosure of your personal data and/or resume by the company (or its agent) for the purpose of the processing and administration by the company relating to this job application.

EA Personnel Name: YEO AHN AHN

EA Personnel No: R22109014

EA License No: 21C0845

Job Description

• Industry/ Organization Type: IT/Cybersecurity
• Position Title: Security Penetration Tester
• Working Location: Tai Seng
• Working Hours: 5 days (Monday to Friday 8 AM – 5 PM / 9 AM – 6 PM)
• Salary Package: Basic Salary up to $6,000 + AWS + Performance Bonus
• Duration: Permanent

Key Responsibilities

• Conduct thorough penetration testing on web and mobile applications, networks, and cloud infrastructure.
• Identify, exploit, and document vulnerabilities in various systems and applications.
• Provide detailed reports on findings, including risk assessment and impact analysis.
• Recommend effective remediation strategies and work with clients to implement security measures.
• Develop and maintain security testing scripts and tools.
• Stay updated with the latest security trends, vulnerabilities, and technology advancements.
• Collaborate with internal teams to design and implement robust security solutions.
• Educate and train clients on security best practices and threat mitigation techniques.
• Participate in incident response activities as needed.
• Ensure compliance with industry standards and regulatory requirements.
• Any other ad-hoc duties as assigned

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, Information Security, or a related field
• Has minimum 2 years of penetration testing experience or in a similar cybersecurity role
• Familiarity with programming and scripting languages is advantageous
• Proficiency in using penetration testing tools such as Metasploit, Burp Suite, Nessus, etc are an added advantage

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #69141 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Roles & Responsibilities

Providing security services at key installation areas

Key Requirements:

• Earn up to $20/hr per shift (min. 6-hr shift block)
• Must be able to commit to 10 days in-house training course
• Valid PLRD Security Licence
• Proficient to communicate in English
• Normal colour vision
• Able to take on assignments at various locations based on Company's discretion

Job Responsibilities:

• Design, implement and administer security infrastructure and measures to protect against potential threats
• Test and evaluate security products and solutions
• Monitor and investigate systems and infrastructure activities for signs of unauthorized access or malicious activities
• Lead or participate in internal and external security audits and risk assessments to identify vulnerabilities in existing systems, develop and implement remediation plan for closure
• Review the technical design and facilitate onboarding process for new systems to ensure security compliance
• Develop security policies and procedures and manage compliance
• Create incident response plans; lead and manage incident response
• Promote security awareness and conduct routine social engineering tests for end users

Job Requirements:

• Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related field.
• 4-7 years of experience in IT or cybersecurity roles.
• Fundamental knowledge on IP networking (e.g. TCP/IP, routing, etc.) and Firewalls (e.g. FortiGate).
• Strong analytical and problem-solving skills.
• EPP/EDR product certification such as Trellix ePO, Symantec Endpoint Protection is an advantage.
• Experience in implementing security products such as SIEM, NIPS, EDR System is an advantage.
• Security Certifications such as GISA, GSEC, CISSP, CISM is an advantage.
• Proficiency in network security and encryption technologies.
• Knowledge of security frameworks and industry best practices (ISO 27001, NIST Cybersecurity Framework, and PCI DSS).
• Experience with vulnerability assessment and penetration testing.
• Strong understanding of secure coding practices.
• Expertise in configuring and managing firewalls, intrusion detection systems, and other security devices.
• Effective communication and collaboration skills to work with cross-functional teams.

⭐*AMC SECURITY*⭐

Recruiting Licensed Security Officers for ATM Machine Repairs

Job Requirements:

- Valid security license

- Willingness to travel to various locations (dependent on machine breakdown)

Job Benefits:

- One free notification

- Gross salary: $2870

- Afternoon shift: 11:30 AM - 10:30 PM (11-hour shifts)

Interested Candidates:

Contact

Hock Seng (8725 3269) or

ALI (8855 4693) for more information.

We are seeking an experienced AWS Security Engineer to design, evaluate, and enhance the security of our cloud infrastructure. The ideal candidate will be well-versed in AWS services, with a focus on securing containerized architectures (ECS, EKS) and cloud-based services (EC2, S3, IAM).

Responsibilities:

• Develop and implement security strategies and best practices for AWS services, including ECS, EKS, and EC2.
• Configure and maintain IAM roles and policies with a principle of least privilege.
• Regularly audit and evaluate AWS account security, including S3 encryption, network access controls, and logging.
• Ensure the security of containers (Docker) and orchestration platforms (ECS, EKS).
• Implement container image scanning to identify and remediate vulnerabilities.
• Manage and optimize runtime security configurations for containerized environments.
• Configure and maintain AWS native security services such as GuardDuty, Inspector, and Security Hub.
• Design and implement real-time intrusion detection and incident response processes.
• Investigate and mitigate security incidents, providing post-incident analysis and recommendations.
• Design secure VPC architectures, including subnet isolation, security groups, and NACL configurations.
• Configure Web Application Firewalls (WAF) to protect against common attacks such as SQL injection and XSS.
• Optimize AWS Shield and other DDoS protection mechanisms.
• Conduct regular security audits and generate reports to assist with third-party assessments.
• Develop and maintain automation scripts (Python, Shell) to streamline security tasks.
• Integrate security checks into CI/CD pipelines.

Requirements:

• Degree in IT/Computer Science/Engineering or equivalent.
• Expertise in AWS cloud security, Proficiency in Docker and container orchestration security.
• Familiarity with vulnerability scanning, penetration testing, and compliance tools.

Key Responsibilities

The Security Operations Analyst will be part of the team that deliver the following key responsibilities:

1. Security Event MonitoringReview security logs, alerts, and system events to detect anomalies or signs of unauthorised access.
   Analyse logs from firewalls, intrusion detection/prevention systems, and other security tools to identify patterns or security behaviour.
   Prioritise and investigate security incidents based on severity and impact.
   Adjust alert thresholds to reduce false positives and improve detection accuracy.
   Monitor user activity for deviations from normal behaviour.
   
2. Malware Analysis and Email SecurityAssess and respond to malware incidents.
   Ensure that malware has been thoroughly eradicated from end-points and no lateral movement has occurred.
   Investigate suspicious emails and phishing attempts.
   
3. Threat Detection and AnalysisAnalyse logs, network traffic, and security data to detect and respond to cyber threats.
   Search for indicators of compromise or signs of advanced persistent threats.
   Collaborate with incident response teams to mitigate risks promptly.
   
4. Security Tools OperationsConfigure, monitor and maintain various security tools to ensure up-to-date protection
   Conduct regular vulnerability scans
   Manage Identify Access Management systems
   Assist in providing complete and thorough responses to external and internal audit RFIs.
   
5. Incident Response and MitigationExecute incident response procedures during security incidents.
   Coordinate with cross-functional teams to contain and remediate threats.
   Produce post-incident reviews and identify areas for improvements.
   
6. Cyber Threat IntelligenceStay informed about emerging threats and vulnerabilities.
   Leverage threat intelligence sources to enhance our security posture.
   
7. Operational ReadinessParticipate in cyber exercises and simulations to improve readiness.
   Advocate for security
   

Requirements

• Diploma or degree in Computer Science, Computer Engineering or Information Security related fields.
• At least 3 years’ of working experience in IT Security Operations and Security Operations Centre.
• Relevant certifications such as CISSP, CISM, GSOM, SSCP, CASP+, GCIH will be a significant advantage.

You will be a key member of the R&D Digital Translation team established under the Singapore Maritime Institute. The R&D Digital Translation team develops and operates digital and cyber products and translates R&D projects to real world implementations for the maritime industry.

You will provide application security consultancy and support to the application teams in areas such as security assessments, DevSecOps, security training and awareness to raise the application security level of competency and standards of our people and organisation.

Key Responsibilities

1. Plan the application security roadmap to improve the way application security is practiced in the organisation.

2. Develop secure application development practices, standards, guidelines, and solutions to raise the application security practices of our application teams.

3. Maintain various application security processes and automated source code scanning platform in the organisation.

4. Perform secure code quality reviews and conduct application penetration testing/vulnerability assessment.

5. Support various types of application testing and delivery (e.g. CI/CD) within the organisation.

6. Train and up-skill developers in the area of secure coding in various programming platforms such as Java, C#, PHP etc. and to write security acceptance criteria in user stories.

7. Train the applications team to write security unit tests and perform secure coding assessments

8. Work with DevOps team to improve security in the CI/CD pipeline

Requirements:

1. At least 3-5 years combined work experience in software development, application security and cloud computing (e.g. Azure, AWS)

2. Background in Computer Science or related field required

3. Experience in conducting manual secure source code review in at least one of the following programming platforms in both waterfall and Agile approach: Java, PHP, Javascript, C#, Android, iOS

4. Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks.

5. Experience working with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)

6. Demonstrate knowledge in industry security best practices such as OWASP Top 10, OWASP application security verification standard

7. Experience on using SAST code scanning tools such as Checkmarx, Sonarqube, etc.

8. Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Git, Gitlab, Github, Jenkins, Anslbe etc) and how automated security testing can be incorporated into CI/CI pipelines

9. Collaborate extensively with various teams (application, networking, infrastructure) to maintain, establish and deliver application security services for the organisation

10. Good verbal/written communications skills and experience interacting with various stakeholders

11. Strong interest and passion for the field of application security.

12. Strong problem-solving and troubleshooting skills.

13. Self-reliant with an analytical and creative mind.

Additional Preferences

1. Experience working with industry APIs such as Apigee or equivalent.

2. Certification in CISSP (Certified Information Systems Security Professional)

3. DevOps related certifications e.g. Azure DevOps Engineer Expert or AWS DevOps Engineer

4. Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OWSE)

5. Experience in working with Government Commercial Cloud (GCC)

Job Description

• Industry/ Organization Type: IT/Cybersecurity
• Position Title: Security Penetration Tester
• Working Location: Tai Seng
• Working Hours: 5 days (Monday to Friday 8 AM – 5 PM / 9 AM – 6 PM)
• Salary Package: Basic Salary up to $6,000 + AWS + Performance Bonus
• Duration: Permanent

Key Responsibilities

• Conduct thorough penetration testing on web and mobile applications, networks, and cloud infrastructure.
• Identify, exploit, and document vulnerabilities in various systems and applications.
• Provide detailed reports on findings, including risk assessment and impact analysis.
• Recommend effective remediation strategies and work with clients to implement security measures.
• Develop and maintain security testing scripts and tools.
• Stay updated with the latest security trends, vulnerabilities, and technology advancements.
• Collaborate with internal teams to design and implement robust security solutions.
• Educate and train clients on security best practices and threat mitigation techniques.
• Participate in incident response activities as needed.
• Ensure compliance with industry standards and regulatory requirements.
• Any other ad-hoc duties as assigned

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, Information Security, or a related field
• Has minimum 2 years of penetration testing experience or in a similar cybersecurity role
• Familiarity with programming and scripting languages is advantageous
• Proficiency in using penetration testing tools such as Metasploit, Burp Suite, Nessus, etc are an added advantage

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #69141 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Cyber Security Roles in Singapore
Job Posting by Belle Lim, Section Manager at Hays Singapore
[email protected]

Head, IoT Cyber Security (Solution Architect)

Cyber Security jobs in Singapore
ACTIVELY HIRING NOW

Hi Everyone,

An established leading client is looking for a Head of IoT Cyber Security. This candidate will be expected to take on a technical leadership as a Solution Architect Lead role while managing a team.

Your new role

· Cybersecurity Assessments: Conduct comprehensive cybersecurity assessments to identify vulnerabilities and risks.

· Threat Intelligence: Analyse threat intelligence to stay ahead of emerging cyber threats.

· Solution Design: Develop and implement customized cybersecurity solutions tailored to client needs.

· Client Engagement: Build strong relationships with clients and serve as their trusted cybersecurity partner.

What you’ll need to succeed

· More than 10-15 years of experience in Technical Cyber Security role, experienced in Solution Designing.

· Deep knowledge of IT and internet of things (IoT) environments.

· Experience with various networking and cybersecurity tools and technologies (e.g., firewalls, intrusion detection systems, vulnerability scanners).

· Professional certifications such as CISSP, CISM, C|CISO, or CISA are highly desirable.

What you’ll get in return

· Attractive Career Development / Growth

· Attractive Remuneration Package

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to [email protected]. If this job isn't quite right for you but you are looking for a new position, please contact me for a confidential discussion on your career.

Apply now or refer a friend (Get rewarded with $200 CapitaStar Gift voucher upon a successful friend referral!)

At Hays, we value diversity and are passionate about placing people in a role where they can flourish and succeed. We actively encourage people from diverse backgrounds to apply.

EA License Number: 07C3924 l Registration Number: R21100438 l Company Registration ID No.: 200609504D

The security analyst is responsible for analysing cybersecurity events, improving threat detection capabilities and procedures. If an event results in a security incident, the analyst will work with the relevant stakeholders to respond and contain the incident.

Key Responsibilities:

- Improving threat detection capabilities, driving lessons learn from incidents and identifying potential gaps in security controls.

- Responsible for maintaining detection capabilities for the SOC.

- Analyse large dataset and correlate information from various sources to identify the root cause to an incident.

- Enhance and drive improvements for SOC detection and response playbooks.

- Take the lead in incident response to minimize the impact of a security incident to our organization.

- Work cooperatively with various IT infrastructure team, applications and business units for the effective operations of the security.

Qualifications:

- 3 years or more relevant working experience in information security technologies.

- Understanding of the tactics, techniques and procedures of cyber advesaries.

- Insurance / Financial industry experience.

- Industry certifications CISSP, CEH, or GIAC preferred.

- Experience in Splunk preferred.

- Comfortable with analysing and processing large datasets.

- Good interpersonal and communication skills.

- Willing to learn and able to work well in a team.

Summary: As a Senior / Security Engineer, you will manage security incidents, conduct threat hunting with SIEM/SOAR tools, and support IT audits. You will oversee vulnerability assessments, security training, and IT security for vessels. You will also lead security projects, provide advisory for projects, and engage with external parties on cyber threats.

Reports to: Senior Security Manager

Role and Responsibilities:

Security Incidents

• Perform investigations of Security incidents.
• Perform threat hunting using SIEM and SOAR tools.
• SIEM/SOAR Tools: Hands-on experience with security monitoring tools like Microsoft Sentinel or other relevant SIEM and SOAR platforms.

Audit and Governance

• Participate in internal and external IT audits.
• Maintain Incident Response Plans and IT policies.
• Perform Vulnerability Assessment and Penetration Testing.
• Conduct Security awareness training for the organization.
• Conduct phishing campaigns.
• Design and review IT/Cyber security architectures.
• Works with external parties (eg; CSA, MPA) on the latest cyber threats and trends.
• Assist in vessel IT security setup, review, audit and remedial actions.

Projects

• Manages Security related projects.
• Acts as Security Advisory for all projects.
• Participate in Request for Proposal and Request for Quote process.

Requirements:

• Degree in Information Security, Computer Science or related disciplines with at least 3 years of relevant experience.
• Knowledgeable in IT Security, Cloud Security, and security standards such as NIST, ISO 27000 and IMO.
• Azure Cloud Security: Strong expertise in Azure Security Center, Microsoft Defender for Cloud, and Azure Policy for real-time cloud threat management and compliance.
• IT Security Management experience of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc will be an advantage.
• Knowledge managing network security devices (NextGen Firewalls, IDS, IPS, UTM, NAC, AV, etc.), Windows, Linux, and networking services will be an advantage.
• Preferred Certifications: CCSP (Certified Cloud Security Professional) and Azure Security Engineer Associate are highly preferred, in addition to other certifications such as CISSP, CISM, or CEH.
• Strong hands-on knowledge and experience with security architecture and implementation of Azure Cloud Computing (IaaS, Containers, AKS, DevOps, CI/CD) is mandatory.
• Proficiency in automating security workflows within CI/CD pipelines, focusing on Azure DevOps integration.
• Ideally completed 2 or more of the following certifications: SC-200, SC-300, AZ-500, MS-500 and SC-100.
• Knowledge of Vessel IT will be an advantage.
• Maritime Cybersecurity: Familiarity with maritime cybersecurity standards such as IMO guidelines and TMSA (Tanker Management and Self-Assessment) is a strong advantage for vessel IT security.