Qualifications

• 5 - 7 years of IT Security experience in administration and management of IT Security technologies primarily Endpoint Protection, Email Security and DLP, Data Classification and other endpoint & data security solutions;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient overall security solutions like, Endpoint Protection, Email Security and Vulnerability Management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Deploy, Upgrade and troubleshoot on DAM Solutions like IMPERVA or Guardium
• Expertise knowledge in Email Security Solutions
• Hands-on to Expertise knowledge in MS Defender for endpoint and or Cloud.
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Professional Certifications:
• CISSP certified
• Symantec Certified Expert: Administration of Data Loss Prevention (any version)

Next Step

• Prepare your updated resume and expected package.
• Simply click on 'Apply here' or email to [email protected] to drop your resume
• All shortlisted candidates will be contacted.

Tamanna Bilandi

EA Licence No. 91C2918

Personnel Registration No. R2096241

About the role

The position is part of our Cyber Fusion Center’s SOC team and is responsible for real time security event monitoring and security incident investigation.

Job Responsibilities:

• Investigate and review computer intrusions focusing on initial infection vector determination, identification of new indicators of compromise (IOC), and tactics, techniques, and procedures in support of threat detection and remediation.
• Continuously monitor security alerts queue and perform initial triage to identify any false positives and initiate improvement as necessary.
• Monitors health of security sensors and managed security infrastructure, and provide necessary support, including root cause analysis, and prepare incident reports.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Collects data, evidence, and context necessary for Level 2 escalation.
• Works closely with Level 2 & Level 3 team towards the continuous improvement of the service.
• Ensure that daily operations and tasks are properly completed or followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Able to work in day and night rotational shift covering weekend/public holiday.
• Prepare scheduled and ad-hoc security summary report.

Job requirements:

• Diploma/Degree in Computer Science/Computer Engineering/Information Engineering/Cybersecurity or equivalent.
• At least 2 years of knowledge experience with security solutions and tools such as Firewall, Router, Proxy, EDR, PAM, IDS/IPS, SIEM.
• Basic understanding of common networking protocols and system infrastructure.
• Strong analytical, problem solving and interpersonal skills.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Java, Yara, Regular expression etc) will be a plus.
• Relevant certification e.g., Certified Ethical Hacker (CEH) or Security+ will be a plus.
• Ability to work independently, under the general guidance.
• Working experience and knowledge on system infrastructure with interest of exploring into security domain also welcome to apply.
• Fresh graduates are also welcomed to apply.

Job Summary:

The role is part of our Global SOC team, tasked to deliver Managed Security Services (MSS) and help customers achieve their business goals & objectives by re-imagining cybersecurity as one of its business enablers. The role reports to SOC vertical based in Singapore.

Job Responsibilities:

• Actively research and stay updated with latest and new cyberattacks, TTPs, threat attackers, vulnerabilities and based on it perform proactive threat hunting in customer environments.

• Understand customer environments to develop use cases based on industry, targeted attacks, vulnerabilities, attack vector, threat landscape, TTPs etc., for the scope of monitoring.

• Develop identification and documentation of Indicators of Compromise (IOCs).

• Ability to perform malware reverse engineering on the detected malware file to investigate and identify its potential entry points.

• Perform forensic analysis and investigations leveraging SOC solutions and provide evidence in case of breaches. • Handle security incidents tickets escalated by Level II team, and draft security incident report covering the root cause, forensic evidence, and recommended mitigation plans.

• Escalate complex incidents to higher-level teams, ensuring proper documentation and reporting.

• Strong understanding of MITRE ATT&CK framework, and ability to operationalize it for day-day SecOps activities, to develop tactics, techniques, procedures (TTPs) for security analysis and threat hunting. Collaborate with other security teams to enhance the detection and mitigation of emerging threats.

• Perform SIEM/EDR rule fine-tuning to minimize false positive alerts and enhance detection accuracy for MSS SOC.

• Review 3rd party threat intel feeds and integrate them into MSS platforms to provide value to our customers.

• Identify gaps in existing SOC process and work with team members or other departments to create, modify standard operating procedures, to automate any mundane daily operational activities, ensuring Ops are run efficiently.

• Provide guidance and mentoring to junior SOC analysts, supporting their growth and knowledge development. Enable regional security analysts to deliver seamless support locally by developing SOC playbooks, relevant and sufficient Knowledge base.

• Lead regional security analysts in handling incidents, customer escalations and requests, SLA (Service Level Agreement) requirements.

• Stay updated on the latest security trends, vulnerabilities, and attack techniques to improve incident response capabilities.

Required Qualifications:

• Candidate should have at least 8-10 years of working experience in SOC and MSS environments,

• Bachelor's degree in computer engineering, Computer Science, Cyber Security, Information Security, or other equivalents.

• Excellent hands-on experience in implementations, incident analysis of IBM QRadar, Azure Sentinel SIEM (Security Information and Event Management) & Devo technologies.

• Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if CrowdStrike, Microsoft Defender.

• Hands on experience on SOAR (Security Orchestration, Automation, and Response) technologies.

• Experience in malware analysis for Windows and Linux/Mac.

• Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.

• Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with proven Unix (Solaris, Linux, BSD (Bumi Serpong Damai)) experience.

• Knowledge of any shell scripting language and applying it to automate mundane operations tasks

• Knowledge of current cyber threats, attack vectors, vulnerabilities, and threat intelligence feeds.

• Ability to work effectively in a team environment, collaborate cross-functionally, and mentor junior analysts

• Candidate should have at least one SANS certification. Preferred if that is GCIH

• Good understanding of basic network concepts and advantages of exposure to cloud technologies.

• Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL (Information Technology Infrastructure Library) standards

• Excellent English communication skills (verbal and written) combined with professional telephone manner.

• Lead team of security analysts, develop SOC standard operating procedures and develop Threat Intel feeds such as MISP.

Good To Have:

• Advantage if have hands on experience in performing vulnerability assessments and presenting to customer business teams

• Familiarity with threat hunting techniques and proactive security measures.

• Expertise in network security technologies such as firewalls, IDS/IPS, and VPNs.

• Strong understanding of cyberattack tactics, techniques, and procedures (TTPs), including familiarity with frameworks like MITRE ATT&CK.

• Experience with cloud security platforms (e.g., AWS, Azure, Google Cloud).

• Knowledge of compliance standards and frameworks (e.g., GDPR, NIST, PCI-DSS).

• Strong troubleshooting skills with the ability to analyze and resolve complex security incidents.

• Experience in Forensics and Incident Response, penetration testing and report drafting

• Advanced knowledge of SIEM tools (e.g., QRadar, Splunk) and threat intelligence platforms.

• Familiarity with scripting languages (e.g., Python, PowerShell) for automation and incident response.

• Multilingual proficiency (e.g., Mandarin, Cantonese, Bahasa Malayu) for effective communication in global environments.

Job Description:

As the Expert of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence

Qualifications:

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient overall security solutions like, Endpoint Protection, Email Security and Vulnerability Management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Good to have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Deploy, Upgrade and troubleshoot on DAM Solutions like IMPERVA or Guardium
• Expertise knowledge in Email Security Solutions
• Hands-on to Expertise knowledge in MS Defender for endpoint and or Cloud.
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;

Next Step

• Prepare your updated resume and expected package.
• Simply click on 'Apply here' or email to [email protected] to drop your resume
• All shortlisted candidates will be contacted.

Tamanna Bilandi

EA Licence No. 91C2918

Personnel Registration No. R2096241

At least 1-3 years in a cybersecurity role, with hands-on experience in SIEM content
management, network security, threat monitoring, or incident response.
• Strong knowledge of cybersecurity principles, practices, and technologies.
• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report
customization.
• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.
• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a
plus.
• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.
• Excellent communication skills, with the ability to explain complex security concepts to nontechnical stakeholders.
• Strong analytical skills and attention to detail.
• Ability to work on-call or off-hours as needed to respond to security incidents.
• May require occasional travel for training or workshop.
• Experience in the application of threat modelling or other risk identification techniques.
• Detailed knowledge of system security vulnerabilities and remediation techniques, including
penetration testing and the development of exploits
• Breadth of knowledge in information security space with emphasis on TCP/IP network security,
operating system security, common attack patterns and exploitation techniques
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security
Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus
• Effective leadership skills and a team player.
• Strong sense of ownership and drive

Roles and Responsibilities:

• Monitoring & Management of Network Security Solutions (8*5 on weekdays)
• Implement hardware, install patches and perform periodical upgrades
• Configure, maintain and manage IPSec and SSL Virtual Private Networks environments
• Support Tufin tool for incident management and reporting
• Implement Approved Policy Changes
• Create Certificates, Check the Partition and Issues New certificates
• Troubleshoot NAC Related Issues & Operations Support
• Add / Modify / Delete – Switch / Router / Wireless device to respective Plugin’s
• Continuity & Incident Mgmt. Coordination
• Implement Approved Plugins & upgrades.

Must Have:

• Palo alto Firewall
• Checkpoint Firewall
• Device installation & Upgrade

Good to Have:

• Firewall policy management and troubleshooting
• VPN troubleshooting
• Network & Incident management

The suitable candidate will join a team of engineers and operations specialists in the support of enterprise privileged access management infrastructure and operations. He/She will be responsible for the end to end design, deployment, operations and development of the bank’s privileged access management framework, infrastructure and processes.

Key responsibilities

Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.

Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements

5+ Years of CyberArk Experience:

Demonstrated expertise in the deployment, configuration, management, and support of CyberArk infrastructure components. Proven ability to provide regional support and integrate CyberArk solutions via APIs. CyberArk certifications are preferred to validate knowledge and skills.

Scripting and Reporting:

Proficient in writing PowerShell scripts and SQL statements to develop comprehensive management reports focused on the usage and operational management of privileged accounts. This includes automating reporting processes and ensuring accurate data presentation for stakeholders.

Data Visualization: Experienced with Grafana for creating data visualizations and dashboards, enabling real-time insights into access management and security posture. Skilled at translating complex data sets into understandable visual formats for better decision-making.

Privileged Access Management: Strong understanding of enterprise privileged access management principles, encompassing risk management, compliance, governance, and control. Ability to develop and enforce policies that mitigate risks associated with privileged access.

Audit Experience:

Extensive experience in responding to audit queries and preparing detailed reports related to access management. Skilled in analyzing audit findings and implementing corrective actions to address compliance gaps. Proven ability to collaborate with internal and external auditors to ensure all necessary documentation is accurate and readily available.

Remediation Expertise:

Extensive experience in remediating CyberArk failed objects to ensure that auto-managed objects comply with security policies and standards. This includes troubleshooting and resolving issues to maintain operational integrity and compliance.

Technical Platform Knowledge:

In-depth knowledge of key operating systems and databases, including Windows, Unix, MSSQL, and MariaDB. Previous experience in administering these platforms enhances ability to manage and secure privileged accounts effectively.

Banking Environment Experience:

Familiarity with working in a banking or financial services environment, understanding the unique regulatory and security requirements involved. This background supports effective implementation of access management solutions tailored to industry standards.

On your day to day:

Support Information Security Risk Assessments

• Registration of application assets in Risk Assessment Inventory
• Information Technology Risk Classification
• Coordination of discussions, reviews and approvals from Technology and Business stakeholders

Management of risks related to Third party Mgmt

• Support business partners in due diligence of new and existing third party vendors
• Review gaps identified during assessments
• Facilitate risk reduction discussions and assessment of residual risk for further documentation of corrective action plans and risk acceptances
• Periodic review of External data transfers and their compliance with Citi standards
• Documentation of non-compliances in the Issue Management tools --

1. Data gathering from Tech, Business and IS partners
2. Raising control issues for Non compliances with Citi policy/standards
3. Facilitating discussions for residual risk rating, Reviews with control functions & Approvals as per approval matrix
4. Facilitate periodic review and renewal of Risk Exceptions.

• Follow-up on Regional Security Incidents with involved parties for timely closure. Support periodic Data gathering and Root Cause analysis of security incidents. Monitor improvements based on measures taken.
• Support time-sensitive global IS risk reduction initiatives by partnering with regional and country business partners
• Prepare Management reports, presentations, dashboards for key risk indicators
• Support appropriate data classification for application and infrastructure assets
• Occasional Audit support

Tool familiarity, soft skills and other qualifications:

• Essential: Intermediate to advanced knowledge of Information Security; Project Mgmt skills; Strong communication skills; MS Office - Access, Excel, Visio, Powerpoint

• Desirable: Experience with migration projects; Any InfoSec related certification; MS Project

Key Responsibilities

The Security Operations Analyst will be part of the team that deliver the following key responsibilities:

1. Security Event MonitoringReview security logs, alerts, and system events to detect anomalies or signs of unauthorised access.
   Analyse logs from firewalls, intrusion detection/prevention systems, and other security tools to identify patterns or security behaviour.
   Prioritise and investigate security incidents based on severity and impact.
   Adjust alert thresholds to reduce false positives and improve detection accuracy.
   Monitor user activity for deviations from normal behaviour.
   
2. Malware Analysis and Email SecurityAssess and respond to malware incidents.
   Ensure that malware has been thoroughly eradicated from end-points and no lateral movement has occurred.
   Investigate suspicious emails and phishing attempts.
   
3. Threat Detection and AnalysisAnalyse logs, network traffic, and security data to detect and respond to cyber threats.
   Search for indicators of compromise or signs of advanced persistent threats.
   Collaborate with incident response teams to mitigate risks promptly.
   
4. Security Tools OperationsConfigure, monitor and maintain various security tools to ensure up-to-date protection
   Conduct regular vulnerability scans
   Manage Identify Access Management systems
   Assist in providing complete and thorough responses to external and internal audit RFIs.
   
5. Incident Response and MitigationExecute incident response procedures during security incidents.
   Coordinate with cross-functional teams to contain and remediate threats.
   Produce post-incident reviews and identify areas for improvements.
   
6. Cyber Threat IntelligenceStay informed about emerging threats and vulnerabilities.
   Leverage threat intelligence sources to enhance our security posture.
   
7. Operational ReadinessParticipate in cyber exercises and simulations to improve readiness.
   Advocate for security
   

Requirements

• Diploma or degree in Computer Science, Computer Engineering or Information Security related fields.
• At least 3 years’ of working experience in IT Security Operations and Security Operations Centre.
• Relevant certifications such as CISSP, CISM, GSOM, SSCP, CASP+, GCIH will be a significant advantage.

Step into the role of Security Operations Analyst and contribute to maintaining a robust, secure digital environment through proactive monitoring and response.

As a Security Operations Analyst in the Cybersecurity and Tech Controls, SIEM Operations team, you play a role in safeguarding the firm's digital assets and infrastructure by monitoring, detecting, assessing, and responding to security incidents in real-time. You will apply your general knowledge of cybersecurity principles and practices to identify vulnerabilities, implement security measures, and proactively mitigate potential risks. You will generate influence within your team and contribute to the effectiveness of your team's cybersecurity efforts. Collaborating with cross-functional teams, you will contribute to the development of a coordinated approach to security and help educate employees on best practices, policies, and procedures for maintaining a secure digital environment.

Job responsibilities

• Conduct security research and stay up to date with industry trends, emerging threats, and best practices to enhance the organization's security posture

• Perform log analysis, threat hunting, incident response, and vulnerability impact activities to proactively identify and mitigate potential risks to the firm's digital assets

• Collect evidence from devices, systems, and data, extract relevant information and document initial findings, contributing to recommendations for further investigation or remediation

• Collaborate with cross-functional teams to implement coordinated security measures, policies, and procedures that align with the firm's objectives

Required qualifications, capabilities, and skills

• Bachelor's degree in Computer Science or equivalent

• Formal training or certification on software engineering concepts and at least 1 year of applied experience in cybersecurity operations, network security, or a related field

• Baseline knowledge of cybersecurity operations, security monitoring, incident response, or vulnerability assessment

• Emerging proficiency in scripting for automating tasks and enhancing efficiency

• Foundational understanding of network protocols, security architecture, design principles, and common vulnerability and exposures (CVE) to effectively safeguard digital assets

Preferred qualifications, capabilities, and skills

• Experience with crafting regular expressions (regex)

• Experience reviewing vulnerabilities and the effectiveness of the mitigatory measures

• Possess a basic understanding of cloud architecture and an understanding of how attackers leverage these platforms

• Knowledge of scripting languages like Python, PowerShell, and JavaScript and understanding how scripting languages are used in a cybersecurity context

• Possess the ability to manage fluctuating workloads and conflicting priorities

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=a8d900382723717a35b7dc509cd16017

The Emerging Threat Analyst role is an intermediate level position responsible for driving efforts to detect, monitor, and prevent emerging cyber threats with the potential to lead to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

As an Emerging Threat Analyst, your role is to monitor, identify, and analyze new and evolving threats to Citi's information systems, networks, and data. You'll stay at the forefront of emerging technologies, vulnerabilities, threat actors, and attack vectors leveraging this knowledge to anticipate and mitigate future potential risks. Collaborating with cross-function teams, you'll develop proactive strategies and countermeasures to protect against these emerging cyber threats (or near-term threats), ensuring resilient and strong controls and/or mitigations. You will help create actionable dashboards to identify these threats. You'll author expert reports and provide recommendations for enhancing defensive capabilities. This role also requires the ability to assess and analyze large data sets to identify potential threats and trends. Strong analytical skills, a deep understanding of cyber principles, big data experience, creativity, and a proactive mindset are essential for success in this dynamic and critical role.

Responsibilities:

• Develop corrective action language for Information Security (IS) gaps and ensure risk closure meets Citi requirements or industry best practices.
• Facilitate the implementation of approved IS tools and identify/recommend new or improved security solutions or emerging technologies.
• Mitigate risk by analyzing the root cause of issues, impacts to business, and required corrective actions and develop security solutions.
• Ensure IS compliance and seek opportunities to enhance the efficiency of IS policies and procedures.
• Identify significant IS threats and vulnerabilities, and define appropriate controls for discovered threats, documenting the business response.
• Analyze large data sets.
• Disseminate changes to IS regulations and standards to Business and Program owners.
• Provide Information Security advice and counsel as needed.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
• Serve as a conduit between technology and business teams and provide support on a wide range of threat intelligence projects, including the ability to identify, collect, and analyze multiple data sources
• Support incident response function in Singapore.

Qualifications:

• 5-10 years of relevant experience.
• Additional technical certifications are preferred.
• Demonstrated ability to research and apply current information regarding the IS field.
• Consistently demonstrates clear and concise written and verbal communication.
• Proven influencing and relationship management skills.
• Proven analytical skills.
• Intelligence and investigations experience with detailed knowledge in data analytics, cyber security protocols, cyber threat intelligence, and cyber-fraud investigations.
• Experience supporting client matters while meeting tight deadlines and customer requirements.
• Experience in one or more cybersecurity functions such as Cyber Threat Intelligence, Threat Hunting, System Administration, Intrusion Detection / Prevention, Monitoring, Incident Response, or Digital Forensics.
• Familiarity with the NIST Cybersecurity Framework, Center for Internet Security Critical Security Controls.

Education:

• Bachelor's degree in IT, Computer Science, Intelligence, or equivalent experience.
• Master’s degree preferred.

Responsibilities:

• Serve as SME for security technologies, supporting business projects and delivering solutions quickly.
• Investigate security incidents, provide insights, and recommend remediation actions.
• Develop and implement security policies and standards for cloud platforms (Azure, AWS, Docker, Kubernetes).
• Integrate cloud security products (Firewall ( WAF) , Web Security Proxy) and stay updated on emerging threats.
• Collaborate with teams to address security requirements, communicate risks, and provide recommendations.
• Manage customer integration projects, identifying and mitigating security vulnerabilities to enhance security posture.

Requirements:

• 5+ years in Information Security or engineering and 2+ years of experience with AWS or Azure and their security features.
• Strong understanding of security technologies, processes, and certifications (OSCP, CISSP, CISA, CEH, AWS Security).
• Proficient with SIEM tools (Securonix, MS Sentinel, Splunk) for configuration, tuning, and L3 support.
• Familiar with IDS/IPS, SIEM, and anti-virus log systems and Skilled in identifying and addressing cloud risks.
• Knowledge of networking protocols (TCP/IP, HTTP, SSL, DNS, OWASP Top 10).
• Experience with web security tools (WAF, proxies).
• Familiar with AWS services (Code Pipeline, Code Build, Lambda) and tools like Jenkins, DefectDojo.
• Self-driven, results-oriented, and adaptable with work hours.

Apply, please kindly email your updated resume to [email protected].

Only shortlisted applicants will be notified.
APBA TG Human Resource Pte Ltd (14C7275) || Akshya R (R24122440)

Responsibilities

• Conduct secure code reviews and vulnerability assessments.

• Collaborate with development teams to implement secure coding practices.

• Use tools like SAST/DAST/IAST for automated security testing.

• Develop and enforce application security policies and standards.

• Integrate security practices into DevOps workflows and CI/CD pipelines.

• Automate security testing using tools like GitHub Dependabot or Snyk.

• Monitor container and infrastructure security.

• Perform manual and automated penetration tests on networks, applications, and systems.

• Simulate cyberattacks to identify security weaknesses.

• Develop detailed reports on findings and remediation recommendations.

• Stay updated with emerging threats and exploit techniques.

• Provide oversight of application security control metrics

• Communicate security risks and recommendations to senior management and other stakeholders.

• Conduct detailed threat modeling exercises for applications, systems, and architectures.

Skills/Requirement

• 4+ years’ experience in the domain of application security in web and mobile and development experience preferably in Java/python/.net

• Strong understanding of OWASP Top 10, secure SDLC, and common vulnerabilities.

• Hands-on experience with tools like Veracode, Checkmarx, or SonarQube.

• Collaborate with DevOps teams to secure CI/CD pipelines.

• Manage the lifecycle of vulnerabilities from detection to resolution.

• Knowledge of CVSS scoring and prioritizing vulnerabilities.

• Familiarity with patch management processes.

• Proficiency in tools like Jenkins, Docker, and Kubernetes.

• Strong scripting knowledge for automating tasks.

• Proven experience in application security, with a strong understanding of web application vulnerabilities (OWASP Top 10, etc.).

• Strong understanding of threat modeling methodologies like STRIDE, DREAD, or PASTA.

Interested applicants may submit your detailed resume to [email protected] .

We regret to inform that only shortlisted candidates will be contacted.

Join our team and play a crucial role in our continued growth and success!

At Pontiac Land, our Human Capital Vision is:

Each individual valued, respected and contributing.

Each team cohesive, learning and aligned.

Each leader serving, coaching and modelling excellence.

Exciting benefits and opportunities await talents who join us! We seek to offer the following:

• A nurturing and team-based culture, with structured training and career development opportunities
• Comprehensive medical coverage, health and wellness programmes and Flexible Benefits for customized suite of benefits
• Unique schemes and benefits and inclusive of employee rates at our hotels and retail mall, subsidized lunch, birthday leave, examination leave and volunteer leave.

Job Responsibilities

• Perform Patrolling duties for office towers/shopping malls/residential buildings
• Respond to emergencies which includes but not limit to lift traps, power failure, fire/security alarm activation
• Respond promptly to tenants and guests’ feedback and request
• Report of all security breaches and building defects
• Conduct routine checks to ensure workplace compliance to WSH and other legal requirements, Code of Practice and Singapore standards
• Provide high service standard to tenants and guests towards achieving customer delight

Job Requirements

• Minimum 1 year of related experience as a security officer (Candidates with relevant experience could be considered for a Senior role)
• Valid SIRD Security Licence is required
• Shift duty is required with overtime pay on an 8-hour rotating shift, 6 days a week

Job Summary
The Security Supervisor oversees daily security operations, ensuring safety and security at assigned premises. Responsibilities include supervising security officers, implementing security protocols, and maintaining a safe environment for staff, visitors, and assets.

Key Responsibilities

• Team Supervision
• Manage and schedule security officers.
• Ensure team compliance with company policies and security protocols.
• Conduct briefings and debriefings for security staff.
• Operations Management
• Oversee access control and patrol activities.
• Respond promptly to incidents and emergencies.
• Prepare incident and occurrence reports.
• Client & Stakeholder Coordination
• Act as the primary contact for clients regarding security matters.
• Liaise with authorities or emergency services when required.
• Training & Development
• Provide on-the-job training for security officers.
• Monitor team performance and suggest improvements.
• Compliance & Standards
• Ensure adherence to Singapore's PLRD (Police Licensing & Regulatory Department) requirements.
• Maintain accurate records and logs.

Requirements

• Valid Security Supervisor license from PLRD.
• Minimum 2–3 years of experience in a supervisory role.
• Strong leadership and communication skills.
• Ability to handle high-pressure situations and emergencies.
• Basic IT and reporting skills.

Work Schedule

• Rotating shifts (excluding night shifts), including weekends and public holidays.

Key Responsibilities:

• Manning of fire command center
• Patrolling duties of all areas in and surrounding Hotel
• Perform escort duties, traffic and crowd control management.
• Assisting guest with luggage during arrival and departure
• Performs other related tasks

Requirements:

• Minimum Secondary education.
• Must possess valid Private Security Identification Card and WSQ certification.
• Able to perform 3 rotating shifts.
• Good communication skills with pleasant personality.

Job Description:

• Guard and patrol properties

• Access and egress control

• Reduce crime inside and outside of properties

• Record all incoming and outgoing vehicles and visitors as well

• Maintain guard house environment to ensure tidiness and cleanliness.

Job Requirement:

• Must possess Security license

• Able to work night shift & Sun/PH

Key accountability (Main purpose of this job):

Reporting to the Security Executive and Security Supervisor, this role is responsible for ensuring the security and safety of all stakeholders (i.e. staff, students, parents, visitors and contractors etc) and property.

Responsibilities (Key areas of Responsibilities):

• Ensure strict adherence to all security SOPs and preventive measures at all times.
• Perform day to day operational duties including patrol, escort duties, traffic control and static duties such as security checks and visitor registration.
• Monitor security systems including the CCTV, Fire Alarm etc in the designated post.
• Observe and report any suspicious behavior of visitors, unauthorized removal of CIS property, criminal acts (e.g. theft or misconduct etc), safety or fire hazards, loss or accidents that could put CIS at risk.
• Enforce gate or school closure upon receiving instructions in the event of an evacuation or emergency.
• Undertake any other duties as assigned by the Senior Security Executive, Security Supervisor and/or Head of Facilities.

Requirements:

• Valid Security Officer licence under PLRD
• Minimum 2 years’ experience in a similar capacity
• Good communication and interpersonal skills
• Firm, tactful, observant, alert and maintains a pleasant disposition when handling visitors and/or stakeholders
• Physically and medically fit to handle security related duties
• Able to do shift work on a rotational basis: 7am to 7pm and 7pm to 7am

Responsibilities:

• Ensure that only authorized personnel are allowed entry into the company's premises
• Ensure compliance with all security protocols and policies
• Peacekeeping within the factory premises and the workers' dormitory
• Perform fire safety and security related duties during patrolling

Requirements:

• Positive work attitude
• Responsible and a good team player
• Able to communicate in English
• Must have security training/licence
• Relevant work experience is preferred

A Security Executive is responsible for overseeing the overall security operations of a company, organization, or specific site. This role typically involves the management of security personnel, ensuring the protection of assets, developing and enforcing security policies, and responding to security incidents. A Security Executive plays a strategic and managerial role in maintaining safety and security. Below is a detailed breakdown of the job scope:

1. Security Operations Management:

• Supervision of Security Personnel: Oversee the daily activities and performance of security officers and supervisors. Ensure that they are fulfilling their duties effectively and adhering to security protocols.
• Scheduling and Deployment: Plan and coordinate the deployment of security officers at various locations. Ensure adequate staffing levels for regular operations and special events.
• Incident Response: Lead the response to security incidents, ensuring that they are handled professionally and efficiently. Investigate incidents such as theft, breaches, or safety hazards.
• Patrol Oversight: Ensure that regular patrols of the premises are conducted to detect and prevent security breaches or hazards.

2. Policy Development and Enforcement:

• Create Security Policies: Develop and implement security policies and procedures to protect assets, personnel, and visitors. This includes emergency response plans, access control procedures, and protocols for handling security breaches.
• Enforce Compliance: Ensure that all security policies are followed by employees, contractors, and visitors. Conduct regular audits and inspections to ensure compliance with security regulations and company policies.
• Review and Update Policies: Regularly review and update security policies to reflect changes in organizational needs, legal requirements, and industry standards.

3. Risk Assessment and Security Planning:

• Risk Assessment: Conduct risk assessments to identify potential security vulnerabilities and threats to the organization or site. Recommend and implement measures to mitigate these risks.
• Security Plans: Develop comprehensive security plans for the organization, including contingency plans for emergencies such as natural disasters, fire, or active shooter situations.
• Site Inspections: Perform regular security inspections to ensure that security systems, access control points, and surveillance equipment are functioning properly.

4. Security Technology Management:

• Surveillance Systems: Oversee the installation, maintenance, and operation of surveillance systems (CCTV, alarm systems, and access control systems). Ensure they are properly monitored and that any suspicious activity is reported promptly.
• Access Control: Manage access control systems, ensuring that only authorized personnel have access to restricted areas. Review access control reports to detect any irregularities.
• Technology Integration: Work with IT teams to integrate advanced security technologies, such as biometric access, cybersecurity measures, and automated surveillance systems, into the company’s overall security strategy.

5. Incident and Emergency Management:

• Emergency Response: Lead the organization’s response to emergencies, including evacuations, medical emergencies, fires, or security breaches. Ensure that security officers are trained in emergency protocols and know their roles.
• Incident Reporting: Maintain detailed records of all security incidents. Ensure timely and accurate reporting of incidents to management and relevant authorities.
• Post-Incident Investigation: Conduct investigations into security incidents, theft, accidents, or breaches. Develop recommendations to prevent future occurrences and improve security measures.

6. Liaison and Communication:

• Internal Coordination: Serve as the primary point of contact for all security-related matters within the organization. Coordinate security activities with other departments, including HR, facilities, and IT.
• External Liaison: Establish relationships with external agencies, such as local law enforcement, emergency responders, and security service providers. Ensure timely communication and coordination in the event of a security incident.
• Client and Visitor Relations: Manage security concerns and expectations for clients, visitors, and VIPs. Ensure that security arrangements meet client expectations and industry standards.

7. Training and Development:

• Staff Training: Organize and conduct training programs for security officers, ensuring that they are well-versed in security procedures, emergency response, and the use of security technology.
• Awareness Programs: Conduct security awareness training for employees across the organization, educating them on basic security protocols, such as how to identify potential security risks and respond to emergencies.
• Continuous Improvement: Stay up-to-date with industry trends, new technologies, and best practices in security. Implement ongoing training and improvement programs to ensure that the security team is equipped to handle new threats.

8. Budget and Resource Management:

• Budgeting: Develop and manage the security department’s budget, ensuring that resources are allocated effectively for staffing, equipment, and technology.
• Cost Control: Identify cost-saving opportunities in security operations without compromising safety and effectiveness. Manage the procurement of security equipment, ensuring cost-effective solutions.
• Resource Allocation: Ensure optimal utilization of security personnel, equipment, and technology across the organization or site.

9. Regulatory Compliance and Legal:

• Ensure Legal Compliance: Ensure that the organization complies with local, state, and national security laws and regulations, including safety and data protection regulations.
• Health and Safety Regulations: Implement security policies that align with occupational health and safety standards. Ensure that security operations are designed to protect the health and well-being of employees and visitors.
• Incident Documentation: Maintain detailed and compliant records of security incidents, inspections, and audits as required by law.

10. Performance Monitoring and Reporting:

• Key Performance Indicators (KPIs): Develop and track KPIs for security operations, including response times, incident rates, and system effectiveness.
• Reporting to Management: Provide regular security updates and reports to senior management, including incident summaries, risk assessments, and recommendations for security improvements.
• Security Audits: Conduct internal audits of security procedures and practices to identify areas for improvement.

11. Corporate Security and Asset Protection:

• Asset Protection: Develop strategies to protect physical assets, intellectual property, and confidential information. Implement systems to safeguard high-value assets and critical data.
• Cybersecurity Integration: Collaborate with IT security teams to ensure physical security measures complement and enhance cybersecurity efforts.

12. Crisis Management and Business Continuity:

• Crisis Management Plans: Develop and implement crisis management plans to ensure the organization can continue operating during and after a security incident.
• Business Continuity Planning: Ensure that security measures support the organization’s broader business continuity and disaster recovery plans.

In summary, a Security Executive is responsible for developing, managing, and leading all security-related activities within an organization. This includes ensuring the protection of assets, managing security personnel, creating policies and procedures, overseeing technology systems, and responding to incidents. The role also requires strong leadership, risk management, and communication skills, as well as a deep understanding of security operations and industry best practices.

Work Experience:

• Security Experience: Typically, 5-10 years of experience in security roles is required, with at least some of that time in a managerial or leadership capacity. Experience in security-related industries is highly regarded. Security Supervisor and above with possession of own motobike.
• Supervisory Experience: Experience managing or supervising security teams is often essential. The Security Executive must have a track record of overseeing security personnel, including security officers, supervisors, and managers.
• Experience with Security Systems: Familiarity with physical security systems, such as CCTV, alarms, access control, and surveillance technologies, is important. Experience in evaluating and implementing security technology is often required.
• Crisis Management or Risk Assessment Experience: Experience in handling crisis situations, risk assessment, and creating security plans is highly valued.

Skills and Competencies:

• Leadership and Management Skills: Strong leadership skills are critical, as Security Executives are responsible for leading and managing security teams, coordinating with other departments, and liaising with external partners such as law enforcement or security vendors.
• Strategic Thinking: The ability to think strategically and develop long-term security plans is crucial. Security Executives need to anticipate potential threats and create proactive solutions.
• Risk Management: Experience in risk assessment and mitigation is essential, as Security Executives need to identify and address security vulnerabilities in the organization.
• Communication Skills: Excellent verbal and written communication skills are necessary to interact with senior management, security personnel, and external stakeholders. Reporting, policy creation, and incident response require clear and concise communication.
• Analytical Skills: Security Executives need strong analytical skills to assess risks, evaluate security trends, and implement effective measures. This includes the ability to analyze incident reports and security data.
• Technology Proficiency: Familiarity with security technologies, such as surveillance systems, access control, and security management software, is important. Some roles may also require knowledge of cybersecurity principles.
• Problem-Solving and Decision-Making: Security Executives must be adept at solving complex problems and making quick decisions, especially during emergencies or security incidents.
• Attention to Detail: Ensuring compliance with security policies, managing resources, and overseeing incident investigations requires a high level of detail orientation.

Knowledge of Legal and Regulatory Requirements:

• Legal Compliance: Security Executives must be knowledgeable about relevant local, state, and national laws related to security, safety, data protection, and employment. This includes regulations such as OSHA (Occupational Safety and Health Administration) standards.
• Health and Safety Regulations: Understanding occupational health and safety regulations is often required, particularly for security roles involving workplace safety and incident prevention.
• Data Protection and Privacy Laws: In organizations that handle sensitive information, Security Executives must understand data protection regulations, such as the General Data Protection Regulation (GDPR) or other local privacy laws.

Personal Traits:

• Integrity and Ethical Standards: Security Executives must have a strong sense of ethics and maintain high levels of integrity, as they are responsible for protecting people, property, and information.
• Calm Under Pressure: Security Executives need to remain composed and effective during high-stress situations, such as crises or emergencies.
• Proactive and Vigilant: A proactive mindset and the ability to identify risks before they become problems are critical in this role.
• Reliability and Accountability: The ability to be dependable and take ownership of security operations is essential for maintaining trust and ensuring the smooth functioning of security procedures.

Job description:

• Conform to and enforce policies, procedures & rules, and regulations as laid down by Accor and the Hotel to achieve the highest levels of uniformity and guest service.
• Directly report to the Assistant Safety and Security Manager / Safety & Security Manager.
• Responsible for maintaining the highest level of security within the Hotel at all times whilst on duty.
• Protect all guests’ patrons and employees of their belongings.
• Ensure the Hotel’s property is well protected.
• Take charge of the Hotel Security during duty hours.
• Responsible for securing all hotel properties, staff, and clientele in accordance with the procedures as stipulated in the security manual.
• Enforce the Hotel’s Rules and Regulations.
• Strive to implement the Accor Vision and demonstrate active use of the Accor Values.
• Record details of significant incidents and activities in the logbook during his shifts.
• Ensure all Lost and Found properties are recorded in the Security Management System, hand them over (non-valuables) to the Housekeeping Department as soon as possible, and keep the Duty Manager informed.
• Maintain a Hotel Logbook on incidents, complaints, etc., and refer them, if required to the appropriate department for follow-up action.

Qualifications:

• Proven 1-2 years experience as security officer
• Knowledge of legal guidelines for area security and public safety
• Familiarity with report writing
• Excellent surveillance and observation skills
• Tech-savvy with experience in surveillance systems
• Trained in First Aid/BLS and self-defense
• Possess SSO certificate

Job Functions & Summary:

Managing a team of outsourced security personnel, delegating tasks and conducting daily briefings. Respond to incidents, monitor CCTV and security systems, and perform regular patrols to identify potential breaches.

Job Roles & Responsibilities:

• Assist the Security Manager to lead the security team in the overall daily departmental operations.
• Train outsourced security officers in daily tasks assignments by identifying operational shortfalls and improving them.
• Ensuring outsourced security team is adhering to security procedures and processes by conducting regular quality checks.
• Handling security system such as CCTV, access control, fire alarm panel, PA system, lift supervisory panel and other related equipment in FCC.
• Responding to emergency situations, such as fire alarm, fire evacuation, medical emergency, accidents within the premises, fallen tree etc. Liaise with the relevant authority such as the Police, SCDF, Npark etc.
• Work closely with other departments for any security related requirement.
• Liaise with outsource security agency on all security officer force issue, manning, attendance, performance etc.
• In charge of emergency equipment such as First Aid and AED by doing periodic checks to ensure validity.
• Ensure sufficient First Aid supplies. Put up order for replenishment.

Employee Benefits:

• AWS & Variable Bonus

• Lunar New Year Hong Bao

• Annual Leave, Family Care Leave & Birthday Leave

• Flexible, Dental Benefits & Duty Meals

• Employee Referral Fees

• Employee Privilege Discount at F&B and retail outlets/Birthday gifts vouchers

• Training and development opportunities

• Usage of Club's sports & recreational facilities

The primary role of a Security Officer is to protect life and property against theft, vandalism, misappropriation, fire, flood or similar disaster on assigned shift in compliance with government, corporate and management directives.

Primary Responsibilities:

• Answer telephone calls to take messages, answer questions, and provide information during non-business hours or when switchboard is closed.
• Changing of Visitor and Contractor Passes to Authorize personnel.
• Answer to Alarm according to regulations set by the Singapore Civil Defense Force regulations and investigate any disturbances.
• Monitoring of the Closed-circuit television (CCTV), also known as video surveillance in and outside the Premises
• Issue keys to authorize personnel and record of the key movements.
• Call police or fire departments in cases of emergency, such as fire or presence of unauthorized persons.
• Monitor and authorize entrance and departure of employees, visitors, and other persons to guard against theft and maintain security of premises.
• Write reports of daily activities and irregularities, such as equipment or property damage, theft, presence of unauthorized persons, or unusual occurrences.
• Inspect and adjust security systems, equipment, and machinery to ensure operational use.
• Lookout for possible Danger and Hazards that may cause harm or injury to Guest / Associates
• Ensure that Guest and Company property are well protected from any forms of sabotaging or theft.
• Making sure that Guests/Associates are following the house rules and regulation.
• Respond to Lockset or Safe box issues upon request.
• Deny entry to any trespasser/intruder that may cause loss of Company image/businesses or nuisance to guests/Associates.
• Deny unauthorized parking at the reserved lot and politely direct to the designated parking.

In our growing company, we are looking for experienced Security Executive who will be able to handle and manage manpower. We give flexibility and in return, we expect good working attitude and responsibility.

The chosen candidate should be able to carry out the following:

• Able to carry out immediate response and cover the manpower shortfall at sites
• Able to carry out OJT training for newly recruited and conduct refresher on SOP
• Able to cover the security officers who are on leave, off or absent in a short notice.
• Able to handle security related issues at deployment sites
• Submission of weekly roster
• Preparation of operational report
• Assist the Operations Manager and or Operations Executive in any security related

*Only shortlisted candidates will be contacted