The incumbent will be part of the Amundi South Asia legal department and will generally assist the team in legal research and administration, as well as review and negotiation of documents applicable to AMUNDI’s operations in the South Asia region.

Responsibilities

He/She will support the team in:

· Conducting legal research on various matters of laws as well as administrative matters for the legal department.

· Drafting and reviewing all legal documents of Amundi South Asia in accordance with Amundi Legal Business Line Policy, including but not limited to:

• Investment Management Agreements
• Distribution/ Placement Agreements
• Other Corporate Agreements
• Other Initiatives

· Providing corporate secretarial support for Singapore offices, and overseeing corporate secretarial for other South Asia offices.

Requirements

· Diploma/Degree in Law.

. Detailed and possess a can-do attitude.

· Strong interpersonal skills and ability to communicate effectively at all levels both internally and externally.

· Strong verbal and writing skills

• Guide and oversee a team of technical professionals, including project and system engineers, to deliver project management, system commissioning, technical support, and pre-sales services. The aim is to meet customer requirements and fulfill the company's objectives.
• Set up clear communication within the team. Keep everyone informed about project updates, organizational changes, and other important information.
• Evaluate performance, establish goals, and offer feedback to team members to boost their performance and promote career development.

Requirements:

• Degree in Electronics Engineering or equivalent.
• At least 5 years of supervising a group of engineers experience in Security Industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Working closely but not limited to with our Gateway (Airport) team, SATS, Airport Police Department (APD), HSSE Committee & Facilities Department, the Security Manager will assist with supply chain policy (express distribution), project management, audit, and APD compliance, as well as ensuring proper support is provided to internal partners working on security related projects.

Work location: 80/20 reporting to Gateway (airport) and in HQ in Changi. However can be deployed in any of our SF warehouses and offices island wide as needed.

Responsibilities

• Assess and develop overall mitigation strategies across the company to minimize the impact of relevant incidents.
• Research industry best practices, emerging security technologies and relevant regulations, and perform industry benchmarking and gap analyses.
• Develop and implement internal security risk management programs (e.g. comprehensive audit loggings, insider threat detections, privileged access management & governance), procedures, and controls to prevent, detect, and respond to relevant incidents.
• Develop an effective Knowledge Management System so that security policies and standard operating procedures (SOP) are in place, review regularly to update compliance requirements.
• Develop and implement security strategies, security plans, security policies, security procedures, security measures, and security systems to protect the company assets, personnel and information.
• Oversee the day-to-day security operations, including physical security measures, the high availability state of security devices (ie, access control system, surveillance systems, APD-approved X-ray machine, APD-approved Explosive Trace Detector, APD-approved Walk-Through Meral Detector and APD-approved Handheld Metal Detector) and readiness of our own staff & ground security officers (in-house and contractual).
• Operate insider threat detection programs and manage business stakeholders to design programs based on business understanding and risk scenarios.
• Work with stakeholders & relevant departments to ensure that all aspects of internal security risk are addressed.
• Plan and lead in the investigation of critical equipment failure, security breaches, loss of cargo or company assets where criminal activities are suspected including reporting to management and rectification of lapses. Assist in incident investigation as needed, follow up and case closure.
• Plan, lead and perform security risk assessment; Identify and assess potential information security risks posed within the organization and the existing policies/procedures/controls mitigating such risks.
• Develop and maintain relationships with internal and external partners to stay current on industry best practices related to information security risk management, making recommendations for action for senior management.
• Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.
• Plan and lead in security audits, security test and security inspection and preparation of audit/test/inspection findings for management reporting, and to propose action plans.
• Oversee, plan and executes emergency response, crisis management/operations readiness plan relating to ensure the Security Posture of the organisation.
• Act as Liaison Officer between the company with the Airport Police, law enforcement and government agencies.
• Work with the Executive, Facilities & Procurement in ensuring all security equipment and devices are in good working condition and serviced punctually in accordance to the maintenance schedule.
• Work with Facilities & Procurement in the procurement of outsourced security personnel.
• Attend and participate in the monthly HSSE meeting and inspection
• Conduct Security training and toolbox meeting
• Consolidating the Security statistics together with HSSE committee
• Develop Security training material (PowerPoint slides or video)

Requirements

• Bachelor's degree in a relevant field, such as security, risk management; work-related experience is also welcomed, highly advantageous if from Logistics / Supply Chain / Express Distribution / Warehouse experience.
• At least 3 years of experience in a similar role, with a proven track record of managing internal security risk and consultancy experience is preferred.
• Experience developing and implementing internal security risk management policies, procedures, and controls. Knowledge of risk assessment methodologies and tools.
• Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.
• Team builder, strong written/verbal communication, and excellent teamwork skills with the ability to interact effectively with stakeholders at all levels of the organization, strong analytical and problem-solving skills.
• Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.
• Detail-oriented, Organized with strong compliance sense.
• Able to multi-task, able to work with minimal supervision (proactive, self-starter)
• Good interpersonal and communication skills.
• Good command in written and spoken English and Chinese as to communicate effectively with our China counterpart and Chinese-speaking customer.
• Good presentation skills and can lead & manage meetings.
• Proficiency in MS office: Word, PowerPoint; Especially in Excel and Visio including Chinese word processing.

Sales manager/Sr. Sales manager (Public Sector)

Location – Singapore

Permanent role

The company is growing exponentially and is looking to hire a sales professional to sell ICT solutions to Government clients.

Responsibilities:

• A hunter role, able to identify opportunities and work out a market strategy
• Own a client portfolio and manage the sales process end to end.
• Develop an Account Plan for each account, then drive the execution of that plan to success
• Conducts account planning and proactively seeks to bring innovative ideas and approaches to the account strategy for quarterly review
• Identifying and mapping business strengths and customer needs
• Prospecting, building the pipeline and selling NTT DATA solution to enterprise clients
• Engage with C-level prospects to position NTTDATA enterprise value proposition and key player in deal to closure
• Provide pro-active, trusted thought leadership to target accounts
• Orchestrate internal teams to collaboratively build Joint Vision Roadmaps outlining the value that NTTDATA will deliver and the investments the client will need to make
• Generate new sales opportunities, and work with the technical solutions experts to create innovative and compelling proposals.
• You will be responsible to qualify, participate and take lead in Government tenders.
• Work together with internal and external stakeholders to achieve the objectives of the company as a whole
• Prospect, educate, qualify and develop opportunities in existing and new key accounts to identify profitable revenue streams.
• Handle objections by clarifying, emphasizing agreements and working through differences to a positive conclusion

Requirements:

• University degree/business/engineering school or similar tertiary qualification
• 5+ years of experience in ICT solutions to public / government clients with key strengths on IT solutions.
• Comfortable in contract negotiation, deal forecasting and articulating organisation's capabilities to customers
• Strong business acumen and work independently
• Positive mind-set, result-oriented, high level of initiative and integrity

Only shortlisted applicants will be contacted.

WongPartnership is a top-tier law firm headquartered in Singapore. We have a proven track record and reputation for providing exceptional client service and achieving results for our domestic and international clients.

The firm’s continued success in Singapore and across the region is underscored by support from its legal and professional support staff. We provide our staff with an interesting work environment, enriched with training and career development opportunities.

We are looking for a highly motivated individual to join a high-performing team with the ability to thrive in a fast paced and challenging professional services environment.

We have the following new role opening:

Legal Technology Manager

We are looking for a highly motivated individual with experience in contracts and project management who has an interest in building and developing relationships within the legal tech ecosystem to join our Legal Technology team. The team sits within our Knowledge, Innovation and Technology (KIT) department and works closely with lawyers to enhance the firm's process efficiencies and external offerings to clients with new legal technology services and solutions.

The Legal Technology Manager will take ownership of all aspects of a variety of different types of projects and be committed to increasing and championing tech adoption by lawyers across the firm and support the firm's innovation agenda.

Key Role:

The primary responsibilities of the Legal Technology Manager will be to look after the firm's legal technology initiatives to ensure successful execution and assist in the overall strategic direction of the technology roadmap as part of the larger KIT & Technology team strategy. This includes the following:

Legal Technology Contracts Management

• Draft and review legal technology vendor-related agreements at various project stages
• Negotiate and align contractual terms with vendors and their respective legal teams to meet the firm's agenda for fresh contracts and/or renewals
• Be the point of contact for all contractual matters relating to the legal technology agreements
• Keep contractual records and maintain all legal documentation, as well as monitor and report on costs and fees on an ongoing basis
• Exercise good judgement required to address legal issues and risks relating to contractual obligations and deadlines for escalation to management

Project Engagement

• Work with practice groups, in conjunction with the Technology Department, to scope, manage, and deliver specific legal technology projects
• Evaluate, test, train, implement, deploy, administer and support the rolling out of legal technology solutions
• Coordinate all relevant workstreams and manage multiple legal technology projects from start to finish of the technology life cycle
• Provide timely updates on potential risks/issues to the project team
• Co-ordinate and conduct legal technology product demonstrations to internal stakeholders at various stages of the project lifecycle as needed
• Encourage and monitor adoption and usage of the legal technology solutions

Knowledge and Event Management

• Organise and run technology related workshops and other events for the firm
• Conduct and/or facilitate annual and ad hoc training sessions for lawyers and staff with respect to each of the adopted legal technology solutions
• Facilitate and co-ordinate and product demonstrations and training sessions by vendors for the firm
• Create training materials and videos
• Plan and operate certain legal technology related signature events, both virtual and in-person including content, format, logistics, venues, speaker management etc.
• Plan and circulate product updates and marketing communications and related information surrounding legal technology projects for launch and at key points during the technology lifecycle.
• Ensure the relevant stakeholders are kept up to speed with legaltech news and developments
• Attend relevant seminars and legal technology events to keep up with legal technology trends and developments within the industry and build a network

Business partnering

• Develop and manage working relationships with new and existing legal technology vendors
• Engage senior stakeholders involved in innovation change across all business divisions and functions
• Develop and maintain successful internal and external business relationships in order to understand existing and emerging business needs and opportunities where legal technology is applicable
• Identify challenges which can be solved using legal technology and implement those solutions accordingly
• Communicate goals, requirements, and business needs with the development team and stakeholders
• Conduct and/or facilitate feedback sessions and surveys for users to align the firm's innovation and technology strategies with practical needs

Skills Required:

• LLB is ideal or undergraduate degree with 4-6 years of work experience in related sector, ideally in a law firm or technology services company
• Ability to manage multiple projects at a time
• Excellent presentation and communication skills, both written and oral
• Ability to work independently and willingness to work hands-on to achieve objectives
• Ability to cover a wide subject-matter range and difficulty level of tasks from thinking strategically to troubleshooting detail
• Highly developed interpersonal skills
• Sound commercial acumen
• Aptitude for and experience of creating, managing, motivating and developing teams and individuals in a project or other business setting
• Tech savvy with ability to pick up new skills quickly

Experience Desired:

• Experience in managing legal contracts
• Prior experience in using legal technology is highly advantageous
• Experience organising and facilitating workshops or similar events
• Experience training within a professional services environment
• Experience in project management roles
• Understanding of how a lawyer operates on a day-to-day basis
• Knowledge of key steps in an IT project process is highly advantageous
• Knowledge, and experience in compiling executive summaries and status reports for consumption internally and externally

We look forward to receiving your applications. Please note that only shortlisted applicants will be notified.

You may visit our website at www.wongpartnership.com for more information.

In submitting your application to our firm, you agree and consent to the collection, usage and disclosure of your personal data in accordance with our Personal Data Policy, which is available at www.wongpartnership.com. In addition, you consent to be considered for all suitable positions, including the position you're applying for, within WongPartnership LLP.

Please do not send us your personal information if you do not wish your personal information to be used in this way.

We are looking for Public Relations interns who relish being the champion of start-ups and small and medium enterprises.

Type of people we are looking for:

• Resilient Challenger: Having a burning desire to challenge the norm and be able to withstand or recover from push backs or setbacks respectively.
• Enthusiastic team player: Ability to work with cross-functional teams, inspiring and motivating others towards achieving shared goals.
• Bold Executor: Willingness to take risks, learn from failures and put ideas to practicality.
• Efficient Problem-Solver: Seamlessly resolves complex challenges amidst ambiguity and limited resources.
• Limitless Opportunist: Taking advantage of opportunities as and when they arise.

At Elliot & Co, we operate in a casual office environment but are very serious about producing high-quality work with unparalleled results. You will be expected to be able to hit the ground running managing our fast-growing clientele and will be expected to pitch in where needed across the board. You will be part of a growing team where our individual job titles mean little, and quality of work means everything.

If you’re keen to learn about the Public Relations industry and want to gain experience working with SMEs & start-ups, we welcome you to apply for the position. Interns who perform well will be considered for conversion to full-time.

Responsibilities

• Perform media monitoring and media reporting
• Development of media lists and facilitation of media opportunities
• Support consultants with day-to-day account execution, developing clients’ PR plans, strategies and written press releases/pitches
• When required, support client events for the campaign needs
• Assist with social media content creation and curation for the company's various social media channels (Instagram, Facebook, LinkedIn, TikTok, etc.)
• Assist with planning of creative strategies for the company’s digital marketing campaigns

Required:

• At least 3 months of internship availability

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Elliot & Co. is one of Singapore, Malaysia & Indonesia's fastest-growing communications agencies impacting many of the best disruptors and forerunners in Southeast Asia - startups & SMEs.

At Elliot & Co., we are confident that we do things a little differently (in a good way, of course!). We genuinely live and breathe constant innovation, and out-of-the-box thinking, all with a healthy dose of humour. You have the unique opportunity to be part of a young, vibrant, and growing team that is hell-bent on changing the Public Relations scene. You will be at the forefront of this incredible time for Elliot & Co., elevating Elliot's and our client's growth.

The type of people we are looking for

• Resilient Challenger: Having a burning desire to challenge the norm and be able to withstand or recover from push backs or setbacks respectively.
• Enthusiastic team player: Ability to work with cross-functional teams, inspiring and motivating others towards achieving shared goals.
• Bold Executor: Willingness to take risks, learn from failures and put ideas to practicality.
• Efficient Problem-Solver: Seamlessly resolves complex challenges amidst ambiguity and limited resources.
• Limitless Opportunist: Taking advantage of opportunities as and when they arise.

About The Role

Our Public Relations Consultant plans and consults client accounts, including strategic media writing to meet business objectives. They are responsible for driving and supporting business and creative workflows. This includes the formulation of PR plans, strategies, media pitching, and related projects for clients.

Consultants who perform well will be allowed to explore other business functions, in line with their career interests. Atop that, you can expect to work with a fun team and mentorship from experienced seniors.

Responsibilities

• Perform day-to-day accounts servicing and client consultancy tasks through close collaboration to achieve campaign objectives
• Liaison with the media and influencers via emails, calls and/or messages
• Work closely with team members from other departments
• Research, write and distribute media content pieces to relevant pools of media such as media pitches, opinion pieces and other written materials as required
• Support with media monitoring on various platforms, including newspapers, online publications, magazines, broadcasts and social media, for media coverage and opportunities for clients
• Prepare coverage tracker and media summary reports
• When required, support with media events, media drops, creation of social media assets and liaison with third-party partners for the campaign needs

What you need to be successful in this role

• Degree/Diploma in Mass Communications, Public Relations, Journalism or equivalent
• At least 1 years of relevant experience in public relations or communications
• Experienced in Technology (FinTech), Lifestyle, Consumer, Start-up environment and familiarity with social media will be an added advantage
• Excellent multi-tasking skills with a sense of urgency
• Possess strong interpersonal and communication skills, able to interact with employees from all levels
• Support consultants with day-to-day account execution, developing clients’ PR plans, strategies and written press releases/pitches
• When required, support client events for the campaign needs
• Assist with social media content creation and curation for the company's various social media channels (Instagram, Facebook, LinkedIn, TikTok, etc.)
• Assist with planning creative strategies for the company’s digital marketing campaigns

Technical Knowledge and Credentials: ·

Hands-on experience in Microsoft Defender for Cloud Apps (MDCA) · Design, Build, and Test MDCA docker infrastructure in production setup · Develop and document use cases · Operationalization of MDCA processes for BAU · MDCA Policies · Creation of Shadow-IT, Threat, DLP, and Cloud protection policies · Develop advanced use cases for deep visibility into SaaS apps · Tune alerts and document response actions. · Experience with Microsoft integrations: · Azure Active Directory · MS Defender (for Office365, for Endpoint, For Identity, MDCA) · Strong understanding of Microsoft Information Protection, and data loss prevention infrastructures and techniques · Broad understanding of Data Governance and Data Protection concepts. · Knowledge of Microsoft Purview, AIP · Understanding of the business, privacy, security, and compliance challenges surrounding Data Protection.

Preferred Certifications · MS-500: Microsoft 365 Certified Security Administrator Associate · SC-300: Microsoft Identity and Access Administrator · SC-900: Microsoft Security, Compliance, and Identity Fundamentals

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gwKjVuR6

• Autonomy to make key decisions
• Permanent role with an established company
• Normal working hours

About the company

Our client is an established multinational end user company. As part of their plan to invest in technology, they are now hiring a new Cyber Defense Incident Responder / Security Manager Incident response / SOC / SIEM to be part of their Cyber Security SOC team here in Singapore.

About the job

Working in a team of >3 headcounts within the Incident Response / SOC team, your role involves:

• Managing security operation to ensure implemented security technologies and controls are effective and adequate to protect the company
• Working closely with internal and external parties to manage the operation of SOC
• Conducting triage of cybersecurity incidents, investigation and incident response for Cyber security incidents
• Identifying root cause and remediating of cybersecurity incidents
• Providing advisory on security threats and vulnerabilities. This includes performing vulnerability scans and analyze results of scans
• Directing post-mortem activities following critical incidents
• Analysing and digesting the threat intelligence and presenting it to the relevant stakeholders in a report
• Overseeing the development and execution of corporate security awareness and training programs. This includes getting the buy-in of senior business stakeholders which includes securing funding for IT security programs
• Enhancing early detection capability - Driving lessons learned activities after incidence closure to identify potential gaps in security control

Skills and experience required
As a successful applicant, you will have at least 7 years of experience in IT Security / SOC / Incident response / SIEM / Splunk / Incident response.

Scripting experience will be of added advantage.

Whats on offer

This is an excellent opportunity to join an established company with ambitions to scale up their IT security capabilities. Security initiative will be well supported by top business management.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gwKjVuR6 (EA: 94C3609/ R1219669)

Exciting role in the Public Sector - in the Media/Technology industry!

Job Responsibilities:

• Execute partnership team’s day-to-day administrative work such as updating of masterlist, tracking reports, dashboard reporting, marketing clearances with partners, collation of partners’ content for internal stakeholders, Knowledge management e-filing etc.
• Work with marketing team to regularly collate partners content for marketing communications, manage the marketing calendar and artworks for the team etc.
• Coordinate and execute events/ programme requirements with partners and event organiser (EO).
• Coordinate and execute development of events logistics with EO, tracking of the progress and run on-the-day activities plus checks with EO.
• Manage the on-ground activities at events that includes partner and programme management, marketing assets creation etc.
• Manage and compile events’ post-reporting requirements and data tracking.

Looking for:

• Singaporeans only
• Min. Degree in Marketing, Business Management or any relevant field of study
• Experience in project and budget management, business administration
• MS Office suite (especially Excel)

Interested candidate may apply via email to [email protected]. All job applications will be processed with strict confidence and only shortlisted candidate will be contacted.

Chloe Chew (R1768631)

ScienTec Consulting (ScienTec Personnel) - 11C5781

Job Description

We are seeking a dedicated Legal Assistant to join our team, focusing on the management of equity grants to our employees worldwide. This role requires a keen understanding of legal frameworks, equity compensation plans, and international regulations.

Key Responsibilities

• Equity Plan Administration: Manage and administer global equity plans, including stock options, restricted stock units (RSUs), and other employee equity incentives.
• Legal Compliance: Ensure compliance with international, federal, state, and local legal requirements by staying updated on existing and new legislation. Advise management on needed actions.
• Document Management: Prepare and maintain legal documents related to equity distribution, such as grant agreements, plan documents, and employee communications.
• Employee Assistance: Serve as the primary point of contact for employees regarding equity plan participation, including enrollment, vesting, and exercising options.
• Collaboration with Stakeholders: Work closely with the legal, HR, and finance teams to coordinate and streamline the equity grant process.
• Reporting and Record-Keeping: Maintain accurate records of equity transactions and prepare reports for internal and external audits.
• Policy Development: Assist in developing and updating policies and procedures related to global equity management.
• Support: Provide support to HR and other departments on equity-related matters.

Qualifications

• Bachelor’s degree in Law, Business Administration, Finance, or a related field.
• Proven experience as a Legal Assistant, Paralegal, or in a similar role with a focus on equity management.
• Familiarity with global equity plans and international legal compliance.
• Strong organizational and project management skills.
• Excellent communication and interpersonal abilities.
• Proficient in legal research and understanding of legal terminology.
• Ability to handle confidential information with discretion.
• Knowledge of tax implications related to equity compensation in various jurisdictions is a plus.

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB

• Normal working hours
• Exposure to latest technology

About the company

Our client is an established multinational end user company. As part of their plan to invest in technology, they are now hiring a new SOC Engineer / Analyst (Cyber Defence)- Incident Response to be part of their Cyber Security team here in Singapore.

About the job

• Reporting directly to Head of Cyber Security, SOC, your role involves:
• Ensuring incident Responses towards IT security threats are well managed. Ensuring timely triage of cybersecurity incidents, investigation and incident response for Cyber security incidents
• Managing security operation to ensure implemented security technologies and controls are effective and adequate to protect the company
• Conducting Identifying root cause and remediating of cybersecurity incidents
• Providing advisory on security threats and vulnerabilities. This includes performing vulnerability scans and analyze results of scans
• Directing post-mortem activities following critical incidents
• Overseeing the development and execution of corporate security awareness and training programs. This includes getting the buy-in of senior business stakeholders which includes securing funding for IT security programs
• Enhancing early detection capability - Driving lessons learned activities after incidence closure to identify potential gaps in security control

Skills and experience required
As a successful applicant, you will have at least 3 years of experience in IT Security / SOC / Incident response / SIEM / Splunk / Incident response.

Whats on offer

This is an excellent opportunity to join an established company with ambitions to scale up their IT security capabilities.

To apply online please use the 'apply' function, alternatively you may contact Hoon Teck TAN at https://www.linkedin.com/in/hoonteck-nologyrecruitment/ (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB (EA: 94C3609/ R1219669)

Job Description & Requirements

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems. Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.

Hands on Responsibilities:

·Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline

·Develop the security acceptance test plan

·Provide expert technical support during the security testing activities

·Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools

·Perform manual or automated security testing using commercial security testing tools

· Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests

· Conduct Whitebox Testing and Secure Code Review

· Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing

· Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing

· Find and pinpoint the vulnerabilities of the assess target system / application

· Document and Report the vulnerabilities found in the system

· Provide professional recommendations / advice to mitigate and resolve the vulnerabilities

· Present the security testing results to the relevant stakeholders

·Provide weekly status reporting on the security testing activity progress

Requirements:

· Bachelor's degree, preferably in computer science or information systems, or equivalent work experience

· Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role

· Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing

· Required Certifications: Any of the followings

o CREST Registered Penetration Tester (CREST CRT)

o Offensive Security Certified Professional (OSCP)

· Knowledge in conducting security testing with the following guidelines and standards

o Open Web Application Security Project (OWASP Top 10 Frameworks)

o Common Vulnerability Scoring System (CVSS)

o Common Vulnerabilities and Exposures (CVE)

o Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors

· High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)

· Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)

· Strong oral and written communication skills, including a demonstrated ability to prepare quality documentation and presentations for technical and non-technical audiences