Position

Data Security Specialist- Data Security and Endpoint Security

Data Security Specialist is a technical Specialist role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Specialist on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Specialist has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Specialist of the team, he/she:

• act as the last level of escalation for the team members
• own Incident, Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Specialist of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

Qualifications and Profile

Functional

• 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Knowledge of different domains of IT Security;
• Working & hands-on experience in administering the IT Security Solutions;
• Must have experience in working in similar Production setup in Run (Operations) mode;
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the needs of Production Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;

Technical

• Hands-on experience on Symantec Data Loss Prevention (DLP);
• Highly proficient in data leakage prevention (DLP) technologies - troubleshooting and configuration management;
• Deployment, integration and administration experience of various components of Symantec DLP:

- Symantec Endpoint Protect

- Symantec Web Prevent

- Symantec Email Prevent

- Symantec Enforce

• Must have experience in defining, designing and configuring DLP Policies as per the business requirements;
• Deploy, upgrade and troubleshooting knowledge on Symantec DLP solution;
• Scripting knowledge (Phyton, Regular Expression, Powershell) is desirable;
• Ø Professional Certifications:

- CISSP certified is highly preferred

-Symantec Certified Specialist: Administration of Data Loss Prevention (any version) is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

Role Description:

• Lead customer project delivery engagements by providing design and solution consultancy for large scale solutions and complex issues, related to data centre networking & security
• Consult and work with customers to plan, design, install, configure, integrate and/or optimize the solution & services to accelerate business outcomes.
• Translate business requirements into data centre networking solution design. Drives customer technology transitions, influencing solution architectures and services.
• Participate in services presales activities which include helping create statement of work, scoping of efforts, propose right services & solutions, articulate the value and expertise of the Logicalis’ professional services as part of a comprehensive outcome-based solution.
• Conceptualize (Customer Requirements Document), plan (Implementation Strategy Plan), design (High & Low Level Design) and advise cross-functional teams across multiple technical, operational and enterprise architecture domains.
• Provides leadership capabilities and insight for creation and sharing of best practices to improve service quality and efficiency.
• Provides technical expertise and escalation support in resolving technical problems within the professional services team
• Mentor and develop junior network engineers
• Create and deliver training and/or mentorship programs for technical resources within the professional services organization.
• Partner with the presales team to improve the quality and accuracy of the Scope of Work and cost estimates

Requirements:

• Degree in Computing or Engineering discipline • CCIE (Routing & Switching) and/or CCIE (Data Centre) • At least 10 years’ experience in project deployment for complex network infrastructure for data centre/cloud and campus, including at least 3 years in a solution architect role
• Advanced knowledge of Software Delivered Data Centres in general and Software Delivered Networks in particular.
• Should have acumen for emerging technologies in the networking world.
• Advanced skills about data centre networks and protocols (Unicast, Multicast, Anycast).
• Advanced skills in network protocols: IP, TCP, UDP, and other common protocols.
• Advanced skills in network routing protocols: IGP and EGP like OSPF, IS-IS, BGP and others.
• Advanced skills in Ethernet fabric technologies: Fabric Path, Cisco ACI and EVPN VXLAN
• Advanced skills in software defined networks especially for Cisco ACI and/or VMware NSX-T/V
• Advanced skills on how to implement network protocols within a Cisco Nexus network.
• Advanced skills in analyze network problems via wireshark or any other tool set.
• Advanced skills in network services like IPAM, DNS, SMTP, NTP, Load Balancing and others.
• Advanced skills in how to integration various systems inside a data centre
• Advanced skills in designing, implementing & migrating data centre firewalls/IPS/IDS
• Intermediate skills in project management (waterfall & agile) and supplier management.
• Basic skills in physical cable management systems, optics, fibres and data centre facility.
• Basic skills in data centre facility architectures and setups
• Customer satisfaction is your focus and accordingly you have a strong service mentality
• Flexibility and willingness to learn new technologies, scale quickly and adapt situationally to different requirements
• Excellent analytical skills and problem solver mentality
• Creative thinking in designing and implementing service improvements
• Deep experience in customer handling and stakeholder management.
• Ability to handle escalations, be a trusted advisor for the customer and work closely with customers in defining solutions

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

We are currently looking for a Cyber Security Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and 2FA solutions.

Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies. And based out of our Singapore office, this role would be reporting to the Technical Manager (Cyber Security).

1.0 Job Responsibilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document

· Strong understanding with hands-on experience of multiple NAC solutions using Radius Protocol and device admin with Tacacs Protocol

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and tuning Firewall/IPS policies.

· Ability to deliver 2FA Solutions for specific use case requirements

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team

2.0 Required Qualifications:

Essential:

· Network Access Control (dot1x) experience of HPE ClearPass, Cisco ISE

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint

· Hands on experience Cisco FirePower NGIPS

· Basic understanding of Networking – Routing and Switching Protocols

· Ability to manage small scale project and ensure completion within the projected timeline

· Build Customer relationship to manage the projects in a congenial way

· Team Player highly spirited, sharing project experience with peers

· Able to learn and adopt new skills when projects warrant based on the relevant training provided

Desirable:

· Hands on experience RSA SecureID, Cisco DUO 2FA

· Hands on experience deploying in Cloud platform (i.e. AWS, Azure) is preferred

· Knowledge of CyberArk, WAF and Database Firewall is preferred

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document.

· In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.

· Prepare UAT document and perform UAT as per document.

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.

· Ability to deliver MFA Solutions for specific use case requirements.

· Assist in reviewing Technical Design Specifications (TDS) document for security projects

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

· Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.

· Hands on experience Cisco FirePower NGIPS.

· Basic understanding of Networking – Routing and Switching Protocols.

· Ability to manage medium to large size project and ensure completion within the projected timeline.

· Build customer relationship to manage the projects in a congenial way.

· Team Player highly spirited, sharing project experience with peers.

· Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

Computer Security Incident Response Team Expert (CSIRT Expert)

CSIRT Expert is a technical expert role within the Asia Information System Security (ISS) Team, Singapore, functionally aligned to Group’s ISS CSIRT team in Head Office, France.

ASIA ISS team oversees and supervise the Information System Security related matters in the region, including cybersecurity monitoring (SOC), incident response (CSIRT) and responding to each country's regulation proactively.

The ASIA ISS CSIRT oversees detection, control and reporting of cyber incidents when it occurs and work closely with IT Operations team to recover and restore the systems that are affected by the security incident.

In this role, CSIRT Expert role will be responsible for respondingand managing end to end Security Incident Management Lifecycle: Incident Identification, Triage, Containment, Eradication, Recovery and Lesson Learnt. Person will be technical point of contact to respond and drive the security incidents response in the region.

Job Responsibilities

The Expert has a wide spectrum of responsibilities and will be responsible for following activities (but not limited to) in day-to-day work:

• Identifying and detecting Incidents and taking immediate action on security incidents including (and not limited to) DoS attacks, malware attacks, phishing attacks, web attacks;
• End to end ownership in driving and leading Security Incident Response and Resolution activities;
• Participate and support performing forensics investigations as required to respond to the Security Incidents;
• Responding to Security Threats and Intelligence alerts & notifications from Group CERT, Regional Regulators and authorized Threat Intelligence groups and ensuring appropriate preventive and detective actions are coordinated and deployed in liaison with IT Operations teams as per the defined approach and in timely manner;
• Owning end to end coordination, communications and deployment of action plans for Threat Advisories or lesson learnt from Security Incidents;
• Prepare detailed Incident Post-mortem report and Executive Summary to document the Security Incident chronology, root cause, remediation and lesson learnt;
• Creating and updating the incident response plan (IRP) and playbooks and ensuring periodical review of playbooks to ensure the relevancy of response actions in current context, including updated information of all stakeholders involved;
• Collaborate with other Geo’s CSIRT team members on security matters and act as a backup to manage security incident and other security activities in scope as needed;
• Periodic review of security measures of Networks (Switches. Routers, Firewall, IPS, etc.) and Systems (Win*,*NIX, etc.) in support of management of vulnerabilities;
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed;
• Complete all mandatory trainings as required to attain and maintain competence;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer, zone wide.
• Support and run annual “table-top incidents” exercise with management.
• Vulnerability management: Ensure vulnerability remediation process is known followed and at the expected level of performance
• In case of severe security incident (suspected or effective attack): Coordination of investigation, mitigation, and remediation operation in relation with IT operation and application teams. on exceptional basis as occurred.

Work Schedule

• Work Hours: 8.45a.m. to 6. 30p.m (Monday to Friday) with one-hour lunch break.
• CSIRT team globally follows ‘follow-the-sun’ model and work on Critical incidents from other geographies during Asia business hours;
• Additionally, candidate may need to be involved in Crisis level Critical Security Incidents observed outside of Singapore working hours on exceptional basis.

Qualification Requirements

• Bachelors graduate or equivalent technical degree in Information Technology or Computer Science;
• Must have minimum 10 years of experience in ITand 5-7 years of working experience in cyber security incident response role managing Security Incidents and performing log analysis and forensic analysis for an enterprise level environment;
• Working experience in financial organisation is preferred;
• Expertise in SIEM and SOC Processes;
• Strong functional knowledge of enterprise level Security Detection and Prevention technologies e.g. Firewalls, IPS/IDS, Network Packet Analysis and Endpoint log analysis, server log analysis, SIEMs, Vulnerability Scanning tools, Threat intel, Anti-Malware, Phishing Prevention and Endpoint Detection & Response (EDR); Scripting knowledge using Python, Perl, PowerShell;
• Must have strong understanding of different domains of IT Security cyber kill chain, IOCs, and attack frameworks
• Ability to apply risk based approach while working on assigned responsibilities;
• Excellent in analytical and problem-solving skills, communication and documentation skills;
• Ability to work independently andpriories work as well as a part of team with minimal supervision;
• Demonstrate Strong sense of responsibility and initiative with excellent communication and interpersonal skillstime management skills;
• Excellent written and oral English language skills;

Professional Certifications:

• Must have at least one of the certifications in regards to IR (Incident First Responder) e.g. GCIH, E | CIH

• Position :Service Technician(CCTV/Security System)
• Location : Islandswide- Office in Outram
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $4200 gross ($3500Basic +Transport allowance $400-$750) AWS + Overtime + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance + allowance
• Duration : Permanent
• Industry : Security system

Main Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.
• Knowledge in IT/Network/Server is an added advantage.
• Independent, self-motivated individual whom is able to work under minimum supervision.

Email me at [email protected]

Do visit www.searchpersonnel.com.sg for more job listings.

***We do not charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director

Reg no.: R2090601 | EA No: 13C6684

Job Description:

• Participate in implementing Secure Software Development Life Cycle (SDLC), produce security solutions and security test reports, provide advice in patching vulnerabilities, and follow up with risk mitigation
• Evaluate the risk points of common application frameworks and develop security solutions to provide security support for each business line
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices
• Design artifacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems

Requirements:

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, or other related fields
• Minimum 3 years of work experience in cybersecurity-related positions
• Familiar with OWASP TOP 10 vulnerabilities, and have a deep understanding of the principle, utilization, patching and reinforcement of various vulnerabilities
• Familiar with the enterprise's SDLC process implementation, building secure SDLC for IT companies, and have been in-charge of secure SDLC for a large dev team
• Familiar with black box testing methods and paths, and able to independently complete source code auditing work
• Hands-on experience in security design checklist
• Familiar with at least one programming language such as Java, Python, PHP, Go, C, etc, and proficient in reading design documents and related codes

Preferred Experience

• Having been credited to high-risk CVEs for well-known projects
• Having contributed to the development of open-source projects. Experience working in team collaborative development and familiar with development tools
• Fluent English communication skills for effective collaboration with multinational teams

Who Are We?

At HoYoverse, we are committed to creating immersive virtual world experiences for players around the world. In addition to game products such as Genshin Impact, Honkai Impact 3rd, Tears of Themis, and Honkai: Star Rail, HoYoverse also launched the dynamic desktop software N0va Desktop, the community product HoYoLAB, and created a variety of products such as animations, comics, music, novels, and merchandise around our original creative concept.

Adhering to our mission of Tech Otakus Save the World, we have always been committed to technology research and development, exploring cutting-edge technologies, and have accumulated leading technical capabilities in cartoon rendering, artificial intelligence, cloud gaming technology, and other fields.

HoYoverse is actively engaged in globalization, with offices in Singapore, Montreal, Los Angeles, Tokyo, Seoul, and other areas.

When you apply to a position with HoYoverse, we will process your personal data. To learn more about how we process your data, we encourage you to review our comprehensive Global Applicant and Candidate Privacy Policy. This policy provides detailed insights into how your information is collected, used, and protected throughout the application process.

What You Will Do:

• Responsible for the security operations of EDR, HIDS, email sandbox and other security devices in HoYoverse office, and participate in the operation of internal user portraits, internal risk identification and other operations.
• Participate in the construction of HoYoverse global security office network and the development of the office network's automated operation platform projects.

What We Are Looking For:

• Have certain experience in internal network security or penetration testing, and have a comprehensive knowledge of information security.
• Solid foundation in basic knowledge, familiar with security vulnerability principles, operating system principles, computer networks, data structures and other basic knowledge.
• Proficient in one programming language (Golang, Java, Python, C/C++), strong hands-on ability, and able to independently complete the development tasks of a module.
• Students with experience in security terminal confrontation, anti-virus bypass, driver development and system security research are preferred.

We are an equal opportunity employer that believes diverse backgrounds are key to bringing our concepts to life. If you're looking to play a key role in creating the best immersive virtual world experience for our users, we invite you to join our team.

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Perform deep research into selected applications to understand how they are designed and implemented.
• Reverse engineer or apply static and/or dynamic analysis techniques on closed source binaries to understand it’s inner workings.
• Identify weakness in systems or software that makes it possible for an attacker to abuse.
• Develop proof of concept to demonstrate the severity of the discovered vulnerability and propose mitigations.
• Develop cutting edge tools to improve and scale up the analysis process.
• Keep abreast of the latest research into application security research and reverse engineering techniques.

Minimum Qualifications:

• Diploma/bachelor’s in a computing related field or relevant practical experience
• Software development experience in a general-purpose programming language for instance, Python
• Proficiency in C/C++, assembly (x86/64)

For a more senior role, we're looking for candidates who have:

• Competency in debugging, binary reverse engineering, bypassing of anti-RE and anti-debugging techniques.
• Experience in recognizing common algorithms and patterns (in line hashing function, obfuscator) in decompiled code and ability to perform type recovery on simple to intermediate data structures.
• Ability to apply public research materials to recover file format or encoded binaries.
• Participation in public disclosure of vulnerabilities, bug bounty programs or capture the flag (CTF) competitions.

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

Job Summary:

We are currently looking for a Cyber Security Lead Engineer who will support the School by managing and maintaining the Cyber Security, Azure Infrastructure and Microsoft 365. The appointee works with the Director of Technology & Senior Cyber Security Manager to ensure the IT requirements of the end user are met.

The role reports to the Senior Cyber Security Manager.

Requirements:

· Minimum Degree in Computer Science, Engineering or equivalent

· Minimum relevant experience of 3 years and above

· Excellent knowledge of Cyber Security, Azure and Microsoft 365

· Experience in Microsoft Intune, Microsoft Defenders and Microsoft Sentinel

· Experience in managing Azure Identities and MDM

· Able to work independently as well as a good team player with good initiative

· A positive approach to working with people

· Will accept late hours and weekend work for maintenance and patching

The school is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. We will conduct thorough background checks on all successful applicants.

Please refer to “Careers” on our website at www.tts.edu.sg for a detailed job description.

5-day week – working hours are from 7.30 am to 4.30 pm (41.25 nett hours per week). Interested applicants, please submit an application letter and detailed resume, stating your current and expected salary, date of availability and contact number via the online system at https://careers.tts.edu.sg/careerportal/main.aspx. In your application, please provide the names and addresses of three people from whom confidential references may be obtained. Please indicate their professional relationship to you.

(Only shortlisted applicants will be notified)

CPE Registration No.: 196100114C | Period of Registration: 7 June 2023 to 6 June 2029

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Technical Leadership:

a. Recommend research directions, conceptualize new security tools, and mentor junior researchers.

b. Conduct internal training workshops on analysis techniques, vulnerabilities discovery, and mechanism.

• Research and Analysis:

a. Conduct in-depth research on applications, reverse engineer closed-source code, and identify exploitable weaknesses.

b. Continuously learn about the latest application security and reverse engineering techniques.

• Development:

a. Assess and verify security through design and execute tests against industry standards CIA triad: Confidentiality, Integrity, and Availability, plus Authorization and Non-repudiation).

b. Develop proof of concept (e.g. code, scripts) to demonstrate the severity of discovered vulnerabilities and propose mitigations.

c. Develop cutting-edge tools to streamline the analysis process and improve efficiency.

• Documentation and Reporting:

a. Document findings, methodologies, and recommendations for both technical staff and executive leadership.

b. Effectively communicate findings and strategy to stakeholders.

• Contribution:

a. Contribute to the Singapore cybersecurity community through publishing whitepapers, blog posts, or presenting findings at relevant conferences.

Minimum Qualifications

• Fluent in OOP such as C++, Windows or Linux APIs/syscalls and knowledge of common file formats, network protocols and encryption. - Demonstrated ability to:
• Reverse engineer C/C++ compiled binaries and recognize common algorithms and patterns in decompiled code.
• Perform type recovery on intermediate data structures and uncover logic and indirect calls within a module.
• Bypass common anti-RE and anti-debugging techniques and uncover original code obfuscated by a public obfuscator. - For a more senior role, we're looking for candidates who has the demonstrated ability to:
• Reverse engineer sophisticated software and other programs compiled in newer languages such as Golang, Rust, newer Pythons and non-C binaries.
• Recover complex code logic and indirect calls across multiple modules or files.
• Recover undocumented file format or encoded binaries through deep analysis of the program.
• Develop custom tools to recover the logic or emulate parts of the program.
• Uncover logic of heavily obfuscated or custom packed code.

Benefits

• Training & Development
• Performance Bonus
• Medical Benefits
• Hybrid Work Arrangements

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

• Position :Service Technician(CCTV/Security System)
• Location : Islandswide- Office in Outram
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $4200 gross ($3500Basic +Transport allowance $400-$750) AWS + Overtime + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance + allowance
• Duration : Permanent
• Industry : Security system

Main Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.
• Knowledge in IT/Network/Server is an added advantage.
• Independent, self-motivated individual whom is able to work under minimum supervision.

Email me at [email protected]

Do visit www.searchpersonnel.com.sg for more job listings.

***We do not charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director

Reg no.: R2090601 | EA No: 13C6684

Position

Service Manager, Data Security Services

The Service Manager for Data Security Services manages the RUN team and the related activities to data and endpoint security. He/She is the main point of contact for the service provider and the internal clients in the bank. He/She manages the budget for the scope. He/She is also responsible for the transition of the new services from other regions to Singapore and manages the project/transition. The role is a techno-managerial role and will have to be involved in DLP policy/rule modifications as well. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data and endpoint security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France, UK, and Russia) remotely from Singapore. France infrastructure represents approximately 90% of the worldwide production activities of CA-CIB.

Team works in Asia and Europe time zones and flexible rotational shift is based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect.
• Encryption Solutions: Disk Encryption, File and Folder encryption.
• Database Audit Monitoring solutions.
• Email and Web Phishing Prevention solutions.
• Vulnerability Management Services.
• Access Management.

Detailed Job Responsibilities

The Team Manager has a wide spectrum of responsibilities and actions.

As the manager of his/her team, he/she:

• Assigns the tasks and manages delegation.
• Sets and reviews the work organization according to activity’s requirements and people’s needs and validates the schedules.
• Animates the team to encourage collaboration and sharing of practices.
• Has a role in supporting people development.
• Participates to recruitment process for the team.
• Vendor relation management.

As the manager of his/her scope of activity, he/she:

• Meets stakeholders on a regular basis to discuss improvement plans, action plans, evolving threats and changing risks, and provide feedback on policies, standards, procedures, guidelines. ISS leads security for GIT and is the main entry point for internal clients outside of GIT (Business Lines, BCP, LGL, and Compliance for security topics).
• The service includes, but is not limited to, incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management, but also global projects like End of Life, New Builds, migrations and upgrades etc., participation in global Infra events (like Power down and DR Tests).
• Ensures activity is performed in compliance with norms, standards, processes and procedures.
• Gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting.
• Reporting and auditing.
• Monitors operational KPI and ensure tickets are losed within SLA.
• Ensures documentation is up to date and relevant for use.
• Implements cross-functions activities including continuous improvement initiatives.
• Estimates the yearly budget, sets monthly forecasts and follows up BAU/Project monthly balance.

As an experienced professional in Security domain, he/she:

• Supports his/her team or experts’ diagnosis when technical issues raise in his/her scope of expertise.
• Is aware of the global IT structure so that he/she anticipates interrelationships within the organization.
• Manage L0/L1/L2/L3 activities which involve direct relationships with end users and L3 activities (architecture, design, project management, etc.).
• Provide oversight to all Data Security activities to ensure adequate performance, efficiency, and availability.
• Engage with technical peer, Service managers, Architect and project teams on technology roadmap and projects, especially with GIT architecture security team.
• Ensures the IT Production activities regarding his/her perimeter are performed correctly by the team, complying with defined norms, standards, processes and procedures.
• Has to make sure that the defined KPI is met on a day-to-day basis for Incident, request, problem, change management etc.
• Has to monitor and push for improvements in the team’s productivity.
• Be available and able to drive/manage any complex or high severity incidents that occur within the scope of their role.
• Engage in Projects and project deliveries.
• Drive and deliver root cause for any high severity issues.
• Has to be responsible for providing direction, proactive and reactive support services to maintain the availability and reliability of systems infrastructure in accordance to the SLA.
• Is involved in security incident diagnosis or investigations to help provide evidence or facts during diagnosis or investigation.
• Manage requests from stakeholders on data security tools to provide extracts, reports or information when required.

As the first point of contact for the Service Provider, he/she:

• Manages the daily relationship with the Service Provider and escalates when needed.
• Follows up Provider KPI and related actions.
• Coach and develop partner resources to meet the objectives.

As the first point of contact for internal Clients, he/she:

• Manages the daily relationship with internal Clients including planning, requests clarification, risks mitigation and service quality.
• Prepares client feedback for the monthly review.
• Serve as point of escalation on major incidents.
• Have to maintain a smooth relation with partners, vendors and global clients/teams.

As a member of ISAP/ITS, he/she:

• Facilitates collaboration and spread of information from and to the team.
• Participates to the department’s activities including brainstorming, team building and other team or transversal actions.
• Fosters innovation mindset.
• Contributes to ISAP/ITS global branding and communication.
• Manage budget (once a year) and forecast (monthly)
• Focus on automation and optimum use of the team to improve efficiency.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence.
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

v Work Timing is flexible and is scheduled to manage the operations within business hours of Asia and Emea timezone.

v Role may have to attend and lead any critical issues escalated outside of working hours, when operational needs.

Qualifications Requirements

Ø Minimum 12 years of IT Security experience and with 3-4 years of team management experience.

Ø Must be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science.

Ø Must have knowledge of different domains of IT Security.

Ø Must have managed a team size of 8 or more Security Specialists in an enterprise level environment;

Ø Must have prior hands-on experience in managing the IT Security Solutions.

Ø Must have experience in working in Production setup in Run (Operations) mode.

Ø Must have working experience in managing the endpoint and data security solutions for a Large enterprise level environment, working experience in financial organization is preferred.

Ø Ability to apply risk based approach while working on assigned responsibilities.

Ø Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions.

Ø Excellent in analytical, communication and documentation skills.

Ø Ability to organize work and be able to priories work as per the needs of Production Operation’s needs.

Ø Must have strong understanding of ITIL processes and comfortable working in process oriented environment.

Ø Ability to work independently and as well as a part of team and is able to work under minimal supervision.

Ø Should have time management skills and able to manage work in fast moving environment.

Ø Should have hands-on technical exposure on wide spectrum of endpoint and data security technologies e.g. Symantec Data Loss Prevention (DLP), Symantec Endpoint Protection, Phishing Prevention and other IT Security technologies.

Ø Must have experience in defining, designing and configuring DLP Policies as per the business requirements.

Ø Professional Certifications:

• CISSP, CISM certified is highly preferred.

Interested applicants, please email your resume to Shaun Quek Yew Meng.

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Purpose

The principal role is to manage the security platform for the 3.5GHz C-Band RAN system so as to ensure the RAN network is adequately protected and secured against cybersecurity threats and incidents.

Duties and Responsibilities:

1. Oversee the overall operation and functions of the JVCo security platform.
2. Monitor Cyber Security Events for the JVCo 3.5 GHz C-Band Radio systems, including: Review event logs from the respective systems and ensure that there are no anomalies in the logs. Raise report on any security incidents to IMDA/SH/M1.
3. Coordinate with StarHub and M1 to administer cybersecurity measures to prevent, manage and respond to cybersecurity threats and incidents.
4. Coordinate with StarHub and M1 to assess and monitor the compliance of the JVCo with the JVCo/SH/M1 organization cybersecurity policy.
5. Work with Starhub and M1 to engage external vendor to perform Vulnerability Assessment in order to ensure compliance to IMDA 5G security requirement.
6. Collaborate with StarHub and M1 to engage external parties to perform external and internal Penetration Test for Network and Applications.
7. Ensure the security platform is up to date with tracking and identifying the latest security threat to the JVCo network and system.
8. Conduct regular scanning of JVCo RAN System to ensure the accuracy of the Asset Inventory and track any Vulnerabilities in the Asset.
9. Facilitate and work with StarHub and M1 in the preparation for any audit (e.g TCS, Mobile TIRA).
10. Administer all system and user management functions of the 5G security platform, which include: Assigning access right to users of StarHub, M1 and the equipment vendors, upgrading softwares and hardwares, and system/database maintenance.

Job Requirements

Qualifications:

1. Degree in Computer / Telecommunication Engineering or related qualification or possess at least three years of related working experience.

Technical Skills:

1. Experience in conducting Vulnerability Assessment and Penetration Test
2. Experience in conducting security audit and setting cyber security policy
3. Experience in managing Cyber Security Operation
4. Candidates with CISSP/CISA/GIAC or equivalent certification is an advantage

Interpersonal skills:

1. Able to work independently and is also a good team player.
2. Possess good communication skills.
3. Strong commitment to work and have good initiatives.

How to apply

Apply via myCareersFuture or send your CV directly to [email protected].

Antina is a company driven by ability and hardwork. We adopt fair employment practices and employment decisions will be based on merit, qualifications and abilities. Antina does not discriminate in employment opportunities or practices on the basis of race, colour, religion, sex, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Visit our company website at www.antina.com.sg for more information.

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

Data Security Expert- Data Security and Endpoint Security

Data Security Expert is a technical expert role within the Data Security Services team and will be responsible for managing, administration and supporting the Data Security and Endpoint Security technologies for the bank.

Person will be the technical point of contact for the Run team and the related activities to data security and will be the last level of escalation for the Security specialists in the team. He/She is also responsible for the technical transition and validation of Security services from other regions to Singapore. He/She will be involved in projects and POC’s that may involve security services. He/She works with continuous improvement principles. He/She is equivalent to the Subject Matter Expert on the technologies within data security.

Data Security Services team in Singapore is responsible for day-to-day operational services on the infrastructure of Europe (mainly France and UK) and Asia remotely from Singapore. France infrastructure represents approximately 80% of the worldwide production activities of CA-CIB in Singapore.

Team works in Europe time zones and this role will be aligned primarily to Paris working hours. Flexible rotations are followed based on the nature of duties.

The operational support of the team covers the following technical scope:

• Endpoint Security technologies – Anti-virus management, Host Intrusion Prevention System etc.
• Data Leak Prevention systems. - Email Prevent, Web Prevent, Endpoint Protect,
• Encryption Solutions: Disk Encryption, File and Folder encryption,
• Database Audit Monitoring solutions
• Email and Web Phishing Prevention solutions.
• Vulnerability Management

Detailed Job Responsibilities

The Expert has a wide spectrum of responsibilities and actions. Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

As the Expert of the team, he/she:

• act as the last level of escalation for the team members
• own Incident,Problem and change management process for the team
• assigns technical tasks and manages delegation
• animates the team to encourage collaboration and sharing of practices
• participates to recruitment process for the team

As the Expert of his/her scope of activity, he/she:

• is actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user initiated problem calls/tickets) and request management
• Is the final technical approver for any changes into Data Security systems and is accountable for any technical changes in the environment from a RUN/BAU perspective
• Is involved in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Participates in global Infra events (like Power down and DR Tests)
• ensures activity is performed in compliance with norms, standards, processes and procedures
• gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• ensures documentation is up to date and relevant for use
• lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
• Complete all mandatory training as required to attain and maintain competence
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Work Schedule

• Work schedule is mainly focused to support Asia and EMEA (Paris) time zone; however, may have to support during non-offce hours for critical incidents or escalation as per the assigned on-call support requirements;
• Rotational Shift schedule is followed;
• Work Hours: 2 PM – 11 PM SGT (with 1 week of General shift 9 AM – 6 PM SGT).

PRODUCT AREA

Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.

JOB DESCRIPTION

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

With your technical expertise you will manage project priorities, deadlines, and deliverables. You will design, develop, test, deploy, maintain, and enhance software solutions.

Qualifications

JOB RESPONSIBILITIES

• Write and review backend infrastructure code.
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact on hardware, network, or service operations and quality.
• Perform technical security assessments, code audits and design reviews.
• Develop technical solutions to help mitigate security vulnerabilities.
• Advocate security and secure practices throughout Google Payments.

MINIMUM QUALIFICATIONS

• Bachelor’s degree in Computer Science, or a related technical field, or equivalent practical experience.
• 3 years of experience with software development in one or more programming languages, or 1 year of experience with an advanced degree in an industry setting.
• 3 years of experience in software or application security.

PREFERRED QUALIFICATIONS

• Master's degree or PhD in Computer Science or related technical field.
• Software development experience in C++ or Java.
• Knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.
• Effective communication skills.

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document.

· In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.

· Prepare UAT document and perform UAT as per document.

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.

· Ability to deliver MFA Solutions for specific use case requirements.

· Assist in reviewing Technical Design Specifications (TDS) document for security projects

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

· Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.

· Hands on experience Cisco FirePower NGIPS.

· Basic understanding of Networking – Routing and Switching Protocols.

· Ability to manage medium to large size project and ensure completion within the projected timeline.

· Build customer relationship to manage the projects in a congenial way.

· Team Player highly spirited, sharing project experience with peers.

· Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Only for Singaporeans/PR's

PRODUCT AREA

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.

ADDITIONAL JOB DESCRIPTION

As a Strategic Services Function Manager, you will blend risk assessment, strategic planning, and client collaboration. You will manage a team of cyber security consultants. You'll conduct in-depth cyber maturity assessments, develop forward-thinking strategies, and lead realistic simulations that help clients prepare for and respond to cyber threats.

In this role, you will identify vulnerabilities and develop actionable mitigation plans. You'll empower clients with data-driven insights, enhancing their security posture.

Qualifications

JOB RESPONSIBILITIES

• Manage and inspire a highly skilled team towards surpassing our goals by driving performance and outcomes, while managing workload, scheduling resources, and ensuring the quality of their output.
• Foster expansion in the APAC region for our Strategic Services Practice through the identification and advancement of opportunities, aiding in the creation and development of Statements of Work, and participating in responses to RFPs/RFIs/RFQs. Promote a culture of continuous learning and development within the cyber security practice.
• Perform in-depth assessments to identify and analyse cyber vulnerabilities and threats. Prioritize risks based on their potential impact.
• Craft cyber risk mitigation strategies, ensuring alignment with regulations (e.g., GDPR, ISO 27001, NIST/CIS Controls).
• Collaborate with clients to tailor cyber security solutions. Generate clear reports and presentations explaining risks and mitigation plans. Scope and propose solutions to clients.

MINIMUM QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• 10 years of experience in cyber security with a risk assessment focus.

PREFERRED QUALIFICATIONS

• Master's degree in a relevant field.
• Professional certifications in cyber security (e.g., CISSP, CISM, CRISC)
• Consulting and/or project management experience, and experience leading cyber security assessments, including Table-Top Exercises (TTX).
• Knowledge of security frameworks (e.g., ISO 27000, NIST CSF).
• Ability to present complex security concepts to varied audiences (e.g., technical and executive).
• Excellent communication and problem solving skills.

• Position :Service Technician(CCTV/Security System)
• Location : Islandswide- Office in Outram
• Working hours : 5 days work week;(8.30am, -6.00pm)
• Salary (commensurate with experience) : Up to $4200 gross ($3500Basic +Transport allowance $400-$750) AWS + Overtime + Performance Bonus + $60 Mobile reimbursement + Birthday leave + Health insurance + allowance
• Duration : Permanent
• Industry : Security system

Main Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.
• Knowledge in IT/Network/Server is an added advantage.
• Independent, self-motivated individual whom is able to work under minimum supervision.

Email me at [email protected]

Do visit www.searchpersonnel.com.sg for more job listings.

***We do not charge our candidates any referral fee nor bind them with any contract.***

Joie Chang

Deputy Consulting Director

Reg no.: R2090601 | EA No: 13C6684

Who Are We?

At HoYoverse, we are committed to creating immersive virtual world experiences for players around the world. In addition to game products such as Genshin Impact, Honkai Impact 3rd, Tears of Themis, and Honkai: Star Rail, HoYoverse also launched the dynamic desktop software N0va Desktop, the community product HoYoLAB, and created a variety of products such as animations, comics, music, novels, and merchandise around our original creative concept.

Adhering to our mission of Tech Otakus Save the World, we have always been committed to technology research and development, exploring cutting-edge technologies, and have accumulated leading technical capabilities in cartoon rendering, artificial intelligence, cloud gaming technology, and other fields.

HoYoverse is actively engaged in globalization, with offices in Singapore, Montreal, Los Angeles, Tokyo, Seoul, and other areas.

When you apply to a position with HoYoverse, we will process your personal data. To learn more about how we process your data, we encourage you to review our comprehensive Global Applicant and Candidate Privacy Policy. This policy provides detailed insights into how your information is collected, used, and protected throughout the application process.

What You Will Do:

• Improve existing security monitoring, intrusion detection capabilities.
• Conduct incident response for security incidents, including forensic investigation and mitigation.

What We Are Looking For:

• Understanding of the principles and nature of common vulnerabilities, with strong analytical and adversarial thinking skills.
• Experience in independently discovering general vulnerabilities in web applications/frameworks or systems.
• Participation in forensic investigations of intrusion/0-day emergency response incidents.
• Familiarity with security strategies in the fields of web applications, network protocols, and operating system.
• Knowledge of the principles and strategies of industry-standard security defense capabilities such as HIDS, WAF, and RASP.
• Proficiency in common programming languages such as Java, C, Python, or Go, with the ability to quickly develop simple tools.

We are an equal opportunity employer that believes diverse backgrounds are key to bringing our concepts to life. If you're looking to play a key role in creating the best immersive virtual world experience for our users, we invite you to join our team.

Summary of the Position

He/She will be a technical RUN expert for all Network Security services in CA-CIB. As such, he/she will provide support and act as the last level of escalation point for all production support activities within the Network Security operations team in Singapore. He/She is accountable for the overall health and stability of the technical solutions within his scope. He/She has to effectively work with technical peers such as architects, peer experts and project teams on technology road maps and projects. He/She will have control over the scope of technical activities, develop best practices, manage knowledge and ensure the necessary trainings are imparted to the team wherever applicable.

The 20-member Network-Security team operates the RUN activities and delivers projects for its infrastructure scope.

An Expert has a wide spectrum of responsibilities and actions.

Main Duties

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on LEAN-CA-CIB best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into CACIB operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support CA-CIB technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Qualifications and Profile

• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN)
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• At least a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Interested applicants, please email your resume to Shaun Quek Yew Meng

Email: [email protected]

CEI Reg No: R1660732

EA Licence No: 99C4599

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

We are looking for a Research Engineer who will be responsible working on a project on cyber security and privacy issues for IoT and cyber-physical systems.

Responsibilities:
• Design and develop techniques that detect attacks on IoT/CPS;
• Perform analysis and simulations to validate designs;
• Implementation and development of demos;
• Assists with the editing and preparation of manuscripts, reports and presentations;
• Participate in presentations and demos for exhibiting work at appropriate events;

Qualifications

• BEng/BSc/BTech in Electrical Engineering, Computer Science or a related field;
• Programming experience and knowledge of cyber security would be a plus;
• Possesses research background with ability to read and understand methodologies in research papers;
• A good team-player;
• Open to Fixed Term Contract

Job Highlights

• Job Stability. AWS + Variable Bonus + Flexible Staff Benefits
• Flexible Working Arrangements, Hybrid
• Positive working and learning culture

Job Description

We are seeking an experienced IT Analyst Specialist with a focus on Application Security to join our team. The ideal candidate will have a strong technical background and a passion for security.

The successful candidate will join the Team that is responsible in establishing and governing the software development and application support processes, ensuring compliant to the established policies and guidelines. The team must also consider areas of improvement in the IT Delivery Team.

JOB SCOPE

The successful candidate will have the opportunities to work on the follow function(s).

Primary Function:

(A) Responsible for Application Security, not limited to the following

· Conduct application security assessments to identify vulnerabilities and ensure that applications are secure

· Work with development teams to ensure that security requirements are incorporated into the development process

· Develop and enforce secure coding practices

· Develop and maintain security policies and procedures

· Work with infrastructure teams to ensure that security is integrated into the infrastructure design

· Develop and maintain security monitoring tools and systems

· Conduct penetration testing and vulnerability assessments with vendors

· Stay up-to-date with emerging trends and technologies in application security

Secondary Function:

The Team is also handling the following function and the successful candidate may be assign to assist these functions.

(B) Identify IT Delivery improvement opportunities and support request from other teams or departments who has identified process improvement opportunities.

(C) Support Audits

· This includes external compliance audit for area responsible by the IT Dept.; i.e. ISO22301, Finance Audit, ISO27001, etc.

(D) Internal System Support

· Support in the development, support and maintenance of the internal developed back office application solutions and governance enforcements system/tools. e.g. billing system, customer registration system, etc.

· Support back office system improvement initiatives.

TECHNICAL REQUIREMENTS:

§ Tertiary education with working experience/knowledge in the following area:

· Understanding of the SDLC and agile process

· Strong knowledge of web application security concepts such as OWASP Top 10, SAN25

· Knowledge with security assessment tools such as Burp Suite, Qualys, Nessus, etc.

· Knowledge of programming languages such as Java, C#, Python, or Ruby

· Knowledge of scripting languages such as Perl, Python, or Bash

· Excellent communication and collaboration skills

· Knowledge in Cloud technologies

· Knowledge with containerization tools and orchestration (Docker, Kubernetes, Helm)

OTHER REQUIREMENTS

§ Should have the following soft skills attributes

· Strong analytical and problem-solving skills

· Organised and able to handle multiple projects concurrently

· Collaboration with users, product owners and development teams to deliver solutions.

· Self-motivated to pick up skills required to support the project requirement.

· Must have good command of English written, verbal and presentation skills

· Proactive, out of the box thinker, detail oriented with strong organizational, analytical and problem-solving skills.

· Self-starter, both a team player yet able to work independently and adjust to changing priorities, critical and strategic thinker, negotiator and consensus builder.

· Software engineer who has interest in Application Security can also apply.

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

We are looking for a Research Engineer who will be responsible working on a project on cyber security and privacy issues for IoT and cyber-physical systems.

Responsibilities:
• Design and develop techniques that detect attacks on IoT/CPS;
• Perform analysis and simulations to validate designs;
• Implementation and development of demos;
• Assists with the editing and preparation of manuscripts, reports and presentations;
• Participate in presentations and demos for exhibiting work at appropriate events;

Qualifications

• BEng/BSc/BTech in Electrical Engineering, Computer Science or a related field;
• Programming experience and knowledge of cyber security would be a plus;
• Possesses research background with ability to read and understand methodologies in research papers;
• A good team-player;
• Open to Fixed Term Contract