As a Cyber Security Researcher, you will be conducting research and development work to deliver comprehensive security assessment on cyber security technologies (e.g. network-based and host-based threat detection and protection systems).

Specifically, successful applicants will:

• Evaluate the effectiveness of cyber security products in protecting cyber assets (i.e. against their stated capabilities).
• Research, reverse engineer and analyze cyber security products for potential weaknesses and propose mitigation and remediation solutions.
• Create proof of concept code to demonstrate the identified security issues.
• Develop and enhance processes and tools for the testing and evaluation of cyber security products.

Requirements:

• Bachelor's degree in a computer science or engineering field or equivalent practical experience.
• Have strong interest or relevant experience in the following:

o Analyzing system and network behavior and activities on common operating systems such as Windows.

o Monitoring and analyzing network traffic and packet captures.

o Reverse engineering of software applications or systems.

o Understanding of Operating System Kernels.

o Developing host-based or network-based cyber security products.

• Proficient in some programming or scripting language, e.g. C /C++, x86/x64 assembly, Java, Ruby, or Python.
• Familiarity with major Operating Systems (Microsoft Windows, Linux).
• Prior developing/reversing experience with Operating System’s Driver will be an advantage.

Preferred Skills /Qualities:

• Good analytical and technical skills

Responsibilities:

1. Provide timely and effective technical support to internal users when troubleshooting hardware and software issues.

2. Install, configure, and maintain internal computer systems, servers, software, and peripherals.

3. Assist with network and system administration tasks related to internal IT support.

4. Coordinator for Cybersecurity compliance policy between Group HQ and SEA entities.

5. Support and maintain various SaaS subscribed around end point management and data security.

6. Assist IT manager in developing the culture of cyber security governance and risk management across the organization, and ensure proper accountability in the management, tracking and reporting of cyber risks.

7. Assist in developing and maintaining IT policy documentation for compliance-related activities and procedures.

8. Support internal IT projects as assigned, not limited to POC, vendor sourcing, solution proposal.

9. Assist with IT process in staff onboarding and offboarding.

10. After office hours support for urgent issues related to internal IT processes.

Skills and Attributes:

1. Good technical knowledge in SaaS solutions like O365, MFA, Backup and Restore.

2. Strong ability to understand problem and identify resolution process within the support team

3. Good technical knowledge of how to configure, maintain and troubleshoot various internal IT supporting equipment like router, switch, access point, conference system, IP phones.

4. Command fluent English and Mandarin communication in verbal as well as written when interacting with internal users and HQ colleagues.

5. Strong understanding of IT compliance standards and cybersecurity practices.

6. Good organizational and time management skills when handling project and task

7. Good analytical skills and problem-solving ability and the ability to work under pressure.

Minimum Qualifications:

1. Degree or Diploma in Security related field.

2. System related certification from Microsoft Server, O365, Modern Work, Data policy

3. Cybersecurity related certification like CND, CIH and SSCP

Summary:

The Senior Security Officer oversees security operations, leads a team of security personnel, and ensures the safety of the organization’s premises, personnel, and assets.

Key Responsibilities:

• Supervise and mentor security staff.
• Monitor daily security operations (access control, patrols, surveillance).
• Conduct risk assessments and recommend improvements.
• Lead responses to security incidents.
• Develop and enforce security policies.
• Prepare reports on security activities.
• Collaborate with law enforcement and other departments.
• Create training programs for staff.

Qualifications:

• O Level, NITEC/Hgher NITEC.
• Minimum 2 years in security/law enforcement, with 2 years in a supervisory role.
• Strong leadership, communication, and decision-making skills.
• Familiarity with security technologies and regulations.

Certifications:

• Preferred: Security officer certification and First Aid/CPR.

Physical Requirements:

• Ability to stand/walk for long periods and lift [X lbs].

Work Environment:

• May require irregular hours, including nights and weekends.

Summary:Responsible for ensuring a safe environment by monitoring premises, responding to incidents, and enforcing security protocols.

Key Responsibilities:

• Patrol assigned areas and detect suspicious activities.
• Respond to alarms and emergencies.
• Control access to buildings and verify IDs.
• Prepare incident reports and maintain logs.
• Provide customer service and assist visitors.

Qualifications:

• N/O Level, NITEC; security training/certifications preferred.
• Previous security or law enforcement experience is a plus.
• Strong observational and communication skills.
• Ability to remain calm under pressure.

Work Conditions:

• Irregular hours, including nights and weekends.

Summary:

The Senior Security Officer oversees security protocols to ensure the safety of personnel and assets. This role includes leadership, incident response, risk assessment, and collaboration with law enforcement.

Key Responsibilities:

• Supervise and train security staff.
• Develop and implement security policies.
• Respond to and investigate security incidents.
• Conduct risk assessments and audits.
• Maintain security systems (CCTV, access control).
• Ensure compliance with regulations.
• Prepare reports on security activities.
• Create employee training programs.

Qualifications:

• NITEC and above.
• Minimum 2 years of security experience, with 2 years in a supervisory role.
• Strong leadership, communication, and problem-solving skills.

Working Conditions:

• May include evening or weekend shifts.
• Physical demands may involve extended periods of standing and responding to emergencies.

• Handle overall security operations and work with partner IT vendors and internal departments.
• Maintain infrastructure tools implemented in the company
• Monitor and assess the IT security aspects and impact
• Handle cyber incident response and perform vulnerability assessment on platform and implement countermeasure

Job Requirements

• Bachelor degree in computer science, information systems or equivalent
• Min 3 years of experience in cyber security and infrastructure fields
• Experience in security tool implementation and operational experience
• Certified Information Systems Security Professional Certifications (CISSP) will be preferred

For interested applicant, click 'apply'

EA Reg no: R1328476
EA License No: 16C8443
EA Personnel Name: Melody
EA Personnel No: R2095899

Job Description

• Perform day-to-day security operations in the Club.
• Remind and enforce security policies and procedures to members and employees.
• Maintain a safe and secure environment for our members and employees in the Club.
• Oversee car park operations and render assistance where necessary.
• Perform any other related duties as assigned by the management.

Requirements:

• Possess valid Security Officer Licence.
• Physically fit and healthy.
• Friendly and service-oriented personality.
• Positive work attitude, team player, good interpersonal skills and ability to multitask.

Other Information

• 44 hours work week.
• Work location: West Coast Ferry Road (Bus 175 and 176) beside West Coast Park.
• Company transport provided (Clementi MRT Station).
• Meals provided.

Implement security operations strategy

• Contribute to the definition of the overall security strategy

• Align security operations functions with the organisation’s overall business objectives

• Advise senior leaders on critical issues that may affect corporate security objectives

• Advise the design and implementation of security policy and controls

• Provide expertise on security technologies and innovative security concepts

• Provide technical and operational oversight for security tool deployment and implementation

Operate/Monitor security systems

• Develop plans for operating/monitoring security systems (e.g. endpoint security tools, firewalls, etc)

• Guide the identification and measurement of critical security operations metrics

• Develop detection and alerting rules

• Review/approve firewall rules

• Review/approve changes on AV systems

• Monitor levels of service of the security operations

• Present periodic status reports to management

Security planning, review & compliance

• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades

• Monitor compliance to security policies, regulations, rules and norms

• Participate in reviews/gap analysis of posture and compliance and follow-up with proposed treatment plan

• Authorised/Unauthorised software installation reviews

• Drive continuous improvement of security operations

Respond to security incidents

• Set internal guidelines for effective processing and escalation of incidents

• Review reports on incidents and breaches

• Develop contingency and disaster recovery plans for specific security incidents

• Coordinate prioritisation of alarms and resources for incident responses

• Oversee the development of emergency protocols

• Recommend systems and procedures for the prevention, detection, containment and correction of security breaches

• At least 15 years' of experience in IT Security

• Strong knowledge and experience in End User Computing, Server, Network and Security spaces

• Strong experience in supporting Windows, Linux, Vulnerability scanning tools, Firewalls and WAF

• Preferable experience in cloud-native security platforms and offerings from AWS or Azure

• Knowledge of patch management for OS and security products (Firewalls, Windows, Linux)

• Strong knowledge of endpoint security tools

• Preferred Knowledge of vulnerability assessment tools and techniques

• Preferred knowledge in conducting risk assessments

• Preferred Security/ITIL/Vendor certifications including but not limited to: (Fortinet NSE4, CISSP, CCSP, CEH, ITIL, CCNA-Security)

Responsibilities:

- Design and implement integration solutions for various physical security systems, including access control, video surveillance, intrusion detection, video analytics and alarm systems

- Ability to understand and address customer requirements and translate them into technical solutions

- Collaborate with product teams to address specific customer needs and feedback

- Design and propose security technology solutions tailored to different verticals

- Collaborate with cross-functional teams to gather requirements and define project scope

- Conduct site surveys and assessments to determine integration needs and best practices

- Conduct POC, demo, testing and setup of security system and video analytics

- Manage and execute projects with strong project management skills

- Develop documentation, including system specifications, integration plans, and user manuals

- Stay updated on industry trends, technologies, and best practices related to physical security

Requirements:

- Bachelor’s degree in Computer Science, Engineering, or a related subject

- Programming skills in Python, C++ and/or Javascript

- Fullstack experience is strongly preferred

- Strong understanding of networking, database management, and software integration

- Familiarity with industry standards and protocols (e.g., ONVIF, BACnet, etc.)

Nice to have:

- Professional experience working with VMS systems and integrating 3rd party solutions

- B2B (Business-to-Business) experience in physical security

- Technical security system certifications (I.e., Gallagher, Genetec, BICSI, Milestone) and/or related IT (i.e., CCNA) certifications preferred

- Possess market knowledge in physical security industry for verticals ie. transportation, commercial building, hospitality, etc.

Only Singaporean needs to apply.

Reporting to the Ops Lead, responsible for overseeing all aspects of identity and security management, ensuring robust protection of systems and data while maintaining compliance with security standards and regulations.

Job Scope:

Identity and Access Management (IAM):

Expertise in IAM systems and tools, including AWS IAM, SSO (e.g., AWS IAM Identity Center), and federated identity management. Experience in managing user roles, permissions, and access controls across various environments.

Security Management:

In-depth knowledge of security frameworks, risk management, and compliance requirements (e.g., NIST, CIS). Proficiency in security tools and platforms like AWS Security Hub, AWS GuardDuty, and AWS Macie.

Endpoint Protection:

Experience with endpoint protection solutions and managing endpoint security across diverse environments.

Skillset Requirements:

• AWS administration proficiency (IAM, AWS Identity Center)
• Endpoint Protection Administration
• Encryption and data protection knowledge
• Incident management proficiency
• Min 2 Years Exp

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Team Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 5-6 years of experience in IT Incident Management, DLP Operations or SOC
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

Responsibilities

• Provide L3 Network and Security support.
• Support L2 Engineer to streamline incident calls and ensure service level agreements are met.
• Perform Support to L3 escalations of all network security across Fortinet,F5 Load Balancer,McAfee Proxies,Checkpoint.
• Assist with the documentation of standard operating procedures relating to installations and fixes.
• Act as coach and mentor to more junior Implementation Engineers and Technicians.
• Assume responsibility for the co-ordination of the activities of the Engineers, in line with performance targets.
• Included in higher complexity design work, with input to the design expected.
• Expected to take ownership of relevant technologies according to domain or specialization.

Requirements

• Good understanding and appreciation of technical design and business principles
• Demonstrates project management and administration ability
• Good project skills which are demonstrated in the execution of installations and other assignments
• Demonstrate customer engagement skills
• Demonstrate relevant domain specialist knowledge
• Good verbal communication skills
• Client focused and display a proactive approach to solving problems
• Ability to work under pressure
• Ability to coach, mentor and provide guidance to team members
• Good understanding of project management principles.

Responsibilities:

1. Personal Protection: Safeguard the client from potential physical threats, such as attacks, harassment, or kidnapping. This involves being vigilant and ready to react swiftly in dangerous situations.
2. Risk Assessment: Constantly assess environments for potential dangers, including venues, travel routes, and public spaces, ensuring all security risks are minimized before the client arrives.
3. Surveillance and Monitoring: Maintain close observation of surroundings and crowds, using specialized equipment if necessary to detect any suspicious activities or individuals.
4. Planning and Coordination: Develop detailed security plans, including exit strategies and emergency protocols. Coordinate with local authorities, security staff, or other team members to ensure seamless protection.
5. Travel and Escort: Accompany clients during travel, whether it's by car, airplane, or public transport, ensuring the client’s safety from departure to arrival.
6. Confidentiality and Discretion: Maintain confidentiality about the client’s personal and professional affairs. A high level of professionalism and discretion is crucial.
7. Crisis Management: Be trained in first aid and emergency response procedures, able to manage unexpected incidents and provide immediate assistance in emergencies.
8. Physical Defense: Be skilled in hand-to-hand combat, firearms, or other self-defense techniques, prepared to neutralize threats if necessary.

If you are interested, kindly apply through mycareersfuture.

I regret to share that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R21100604

Data provided is for recruitment purposes only

Business Registration Number: 201735941W.

Licence Number: 18S9037

Position Summary:

The Security Engineer supports security systems and operations administration, monitoring and maintenance. He/She monitors security alerts and events.

He/She assists with the analysis of security-related information and events, escalation of incidents for validation and remediation.

He/She is required to be on standby with on-call availability with varied shifts including nights, weekends and holidays.

He/She is alert and vigilant in performing monitoring activities and is able to analyse and resolve security-related issues critically. He/She communicates clearly in his/her interactions with others and coordinates effectively with his/her team to perform security operations.

Role and Responsibilities:

• To Configure, implement and maintain all security platforms (E.g. Firewall, Intrusion Prevention, Web Application Firewalls, Web Proxies, DNSSEC)
• Perform assessment of Security Advisories and provide recommendations to the team
• Ensure that all security devices are configured in accordance network security best practices
• Perform periodic vulnerability testing and ensure the remediation of all findings
• Perform regular review of security logs to identify potential operational/security issues
• Perform regular patching of security devices to ensure that devices firmware are kept up to date
• Ensure that all incidents are resolved within the required SLA
• Ensure that all Service Requests are completed within the required SLA
• Ensure that Work Instructions are in place and kept up-to-date for the delivery of all operational tasks
• Continuously review and improve Operations Efficiency (E.g. improving operational efficiency through automation)
• Generates routine reports in the required format
• Secure users and servers internet access
• To support and implement new initiatives

Requirements / Qualifications:

• Possess a Bachelor Degree in Computer Engineering
• 5 years experience and knowledge in Enterprise IT infrastructure covering routing, switching, load balancers, data centre nexus/ACI and security devices
• Strong knowledge with Web proxy and CCNP is a must
• Experience working with automation tools (E.g. ansible), monitoring & observability and logging systems (E.g. ELK).
• Holding any of following professional certificate are preferable: CISSP, CISCO CCIE, PCNSE and ITILv4xtensive technical know-how of network security devices (E.g. Firewall, Intrusion Prevention, Web Application Firewalls, Web Proxies, DNSSEC)
• Hands-on experience in at least 2 of the security devices (E.g. Firewall, Intrusion Prevention, Web Application Firewalls, Web Proxies, DNSSEC)
• Strong problem-solving skills and be able to troubleshoot and resolve complex issues quickly.
• Strong technical skills in areas of systems engineering, systems administration, networking, and security.
• Proficient in at least one scripting languages (E.g. YAML, JSON, Bash)
• Excellent communication skills

Overall Summary:

Plan, design, develop and review infrastructure architectural solutions for on-prem/hybrid Cloud, throughout infrastructure lifecycles.

Roles & Responsibilities:

• Architect and design scalable and secure IT infrastructure, primarily on-premise as well as leveraging on cloud technologies, that is resilient, highly available and secured.

• Develop infrastructure solutions to meet project requirements and establish roadmaps, patterns, principles, standards and guidelines for on-prem infrastructure, and document them in various formats, diagrams and templates

• Validate, review and verify infrastructure aspects of project solutions and technical specifications, based on alignment with mandated enterprise policies and standards

• Own and drive architectural deliverables, working in close collaboration with stakeholders including Project Managers, Subject Matter Experts (SMEs) and vendors to achieve project outcomes and timelines from design to implementation.

• Assess new infrastructure technologies and participate in proof of concept, to assist in defining technology direction, roadmap, framework and policies to meet strategic business initiatives.

• Present, articulate and communicate deliverables including architecture related design, solutions, concepts, ideas and proposals to various stakeholders.

• Keep abreast of emerging trends and identify opportunities for improvement

• Review technical documentation including Technical Design Specs and VM Provisioning Requests

• The infrastructure scope covers, but not limited to, all aspects of cloud, servers, hypervisors, containers, operating systems, databases, middleware, devops, security, support tools, network, SDN as well as related governance framework.

Requirements / Qualifications

• Degree in Computer Engineering / Electrical and Electronic Engineering or equivalent discipline

• At least 7 years’ proven experience in a similar role

• Strong and in-depth technical knowledge and experience in administering and maintaining infrastructure domain areas such as Operating Systems (e.g., VMware, Nutanix, Red Hat, Windows Server), Networking (e.g., SDN, Cisco), Security (e.g. Cisco, Palo Alto,CheckPoint, F5), Automation (e.g., Ansible, Chef, Terraform), Cloud, etc.

• Certifications in the above areas would be advantageous (e.g. CCIE, CISSP, VMware VCAP, Windows Certified Engineer, RedHat Certified Engineer, AWS Solution Architect, Azure Solution Architect, TOGAF)

• Possess good knowledge of networks and networking concepts

• Possess good knowledge of ITIL processes

• Possess good knowledge on private, hybrid and public cloud environment and technologies which includes VMware vRealize Cloud automation, AWS, Azure and OpenShift

• Possess good security, audit and compliance knowledge

• Able to analyse and understand complex technical systems built from many separate software and hardware components, specifically web application architectures

• Strong passion for innovation and desire to learn new technologies

• Possess initiative, with a proactive, result-oriented mindset and able to work independently

• Track record of on-time, on-budget and to-specification delivery with the ability to support end-to-end delivery of solutions.

• Experience in driving complex IT infrastructure design and projects while optimizing costs

• Able to prioritise assignments whilst working on multiple concurrent projects

• Is meticulous and attentive to details

• A team player with Excellent communication, interpersonal and collaboration skills, capable of effectively communicating complex technical concepts and influencing various internal and external stakeholders, both technical and non-technical alike.

• 2 years contract

We are seeking an experienced Security Operations Engineer with a strong focus on infrastructure security. The candidate will be responsible for day-to-day support and deployment of security infrastructure. In addition, the candidate will be involved in pre-sales and deal pursuits, where required.

Responsibilities:

· Network security management (e.g. intrusion prevention system, virtual private network).

· Web security management (e.g. URL filtering, web application firewall).

· End point security management (e.g. anti-malware, device control, application control, data loss prevention, network access control).

· Messaging security management (e.g. anti-malware, anti-spam, content filtering).

· Security & vulnerability management (security information and event management, security device systems management, device and application vulnerability management).

· Automation of management of tasks.

· May be required to be on on-call standby duties.

· Other duties as assigned.

Requirements:

· Minimally a Diploma/Degree holder in Security, Computer Science/Engineering or IT.

· At least 5 to 8 years of related working experience.

· At least 3 years of experience that covers management of enterprise security solutions.

· Experience in implementation and integration of Cyber Security Platform.

· Knowledge across various information security technologies/areas in large enterprises including firewalls, intrusion detection, encryption, Linux O/S, Windows O/S, databases, antivirus, patch management, vulnerability scanning, backup, logging and monitoring. Remote access, application development, network security, application security, and change management.

· Certification in the following Security Vendors (Fortinet, Palo Alto, CheckPoint, etc) would be advantageous.

Nera is committed to offering our employees a safe, engaging and fulfilling workplace, with considerable opportunities for advancement.

Responsibilities:

• Security Infrastructure Management: Designing, implementing, and maintaining security systems such as firewalls, intrusion detection systems, and encryption protocols.
• System Monitoring and Analysis: Continuously monitor network traffic, system logs, and other data sources for signs of suspicious activity. Use tools and techniques to detect and analyse potential security threats.
• Vulnerability Assessment and Management: Conducting regular assessments to identify and address potential vulnerabilities in IT infrastructure.
• Risk Assessment: Conducting risk assessments to identify potential security risks and developing strategies to mitigate them.
• Incident Response: Developing and implementing incident response plans to address security breaches and minimise their impact. Conduct investigation to determine the source and impact of security issues and implement corrective actions.
• Security Policy Development: Creating and enforcing security policies and procedures to ensure compliance with industry standards and regulations. Regularly review and update security policies.
• Security Audits and Compliance: Performing regular security audits to ensure compliance with relevant regulations and standards.
• Security Research and Analysis: Staying updated on the latest security threats and trends and analysing their potential impact on the organisation's security posture.
• Security Incident Investigation: Investigating security incidents to determine the root cause and implementing measures to prevent similar incidents in the future.
• Collaboration with IT Teams: Working closely with other IT teams to integrate security measures into the organisation's overall IT infrastructure and operations and provide support for security-related issues, including troubleshooting and resolving security problems.

Note: Proceeding to apply on this job post means you have read, understand and agreed to WPH DATA PROTECTION NOTICE FOR JOB APPLICANTS in the link below.

https://www.wphdigital.com/notices

Job Description

The Security Engineer is responsible for the implementation of IT security solutions. He reports to the Head of Deployment. The Security Engineer manages the project implementation activities according to the customer's sales cycle. The Security Engineer ensures that customer implementations are completed on time and on budget, meeting the company’s revenue and profitability targets while meeting customer expectations for successful implementation.

Responsibilities:

· Implementation and integration of network and security products

· Documentation of project requirements

· Provide customer service and technical support (24x7 SLA)

· Manage and track the project implementation lifecycle.

· Conduct user training and knowledge transfer

Requirements:

· Have the RIGHT ATTITUDE & APTITUDE

· Hands-on experience with Web Security, DNS, Firewall, SIEM, PAM solutions is highly advantageous.

· Strong analytical, problem solving, communication and interpersonal skills.

· Experience in cybersecurity system integrator environment is an added advantage.

· Higher Nitec, Polytechnics and above in the field of Network, Security System or Cybersecurity.

· Working knowledge of MS Visio and Gantt Chart

· Good knowledge and skill in networking: TCP/IP, firewall, switching, and routing.

· Good knowledge and skill in operating systems and virtualization.

· Willingness to work after office hours and standby during weekend due to support and project implementation requirements.

· Fluent in written and verbal communication skills

· A good knowledge or strong interest in IT Security.

· CISSP or CISA or equivalent certification would be beneficial.

Other Requirements:

· Singaporean – Due to nature of the projects which may need clearance.

· Able to work independently at customer’s premises.

· May be required to travel overseas as and when (Projects/Training).

· This is not a remote work job role due to the nature of project implementation at customer site.

· Fresh graduate with relevant IT education background are welcome to apply

· Associate Role will be given to the fresh graduate due to experience.

Remunerations:

· Basic Salary

· Annual Leave

· Birthday Leave

· Mobile Phone Claims

· Medical and Dental Claims

· Performance Indicators based on Incentives.

· All other company expenses would be based on claims.

· Taxi or Grab claims

Job Description

• Perform day-to-day security operations in the Club.
• Remind and enforce security policies and procedures to members and employees.
• Maintain a safe and secure environment for our members and employees in the Club.
• Oversee car park operations and render assistance where necessary.
• Perform any other related duties as assigned by the management.

Requirements:

• Possess valid Security Officer Licence.
• Physically fit and healthy.
• Friendly and service-oriented personality.
• Positive work attitude, team player, good interpersonal skills and ability to multitask.

Other Information

• 44 hours work week.
• Work location: West Coast Ferry Road (Bus 175 and 176) beside West Coast Park.
• Company transport provided (Clementi MRT Station).
• Meals provided.

Job Description:

• Responsible for day-to-day in-house security functions.

Requirements :

• Secondary education and above
• Have a valid Security Officer License issued by PLRD
• Minimum 1 year of security-related work experience
• Able to work rotating shifts

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to leo.tang(at)trustrecruit.com.sg

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Tang For Farn (Leo)

EA Personnel Reg No: R24121981

Job Description

• Design and develop the red team's customized secure system (remote control program), and ensure that the endpoint protection can be bypassed such as Crowdstrike, Windows Defender, 360 Safeguard
• Reverse analysis of common EDR and HIDS to identify methods for bypassing detection, and embed security principles into the design of system architectures to mitigate the risks
• Research the persistence solutions under common operating systems such as Windows, MacOS, and Linux
• Perform red team engagements related to the periodic review and audit activities of infrastructure security systems (IDC network, office environment, cloud native) and maintain documentation of security standards and procedures

Requirements

• Minimum 3 years of relevant work experience
• Extensive experience in RAT (Remote Access Tool) development, with the ability to customize attack frameworks like Cobalt Strike
• Extensive experience in anti-endpoint protection, providing solutions to bypass the detection of EDR such as CrowdStrike, Windows Defender, 360 Safeguard
• Experience in persistence solutions under common operating systems (Windows, MacOS, Linux)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Proficient in scripting/programming languages like C/C++, Go, PowerShell, Javascript, ASM, etc
• Strong reverse engineering skills with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, etc
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

Intern, Cyber Security

• Cybersecurity and Compliance: Assist in monitoring cybersecurity metrics, reporting, and ensuring compliance with IT standards and guidelines.
• Incident Response and Vulnerability Management: Act as first responders to security events and work towards resolving vulnerabilities with stakeholders.
• Process Documentation and Cybersecurity Awareness: Document technology processes, draft workflow diagrams, and educate IT users on security practices, such as identifying phishing emails.
• Audit and Stakeholder Support: Support the audit process and interact with various stakeholders to address security-related queries and assist in operational implementation.
• Project Execution: Participate in projects, contributing to the implementation of security measures and guidelines across different operations.

Requirement:

• Foundational Cybersecurity Knowledge: A basic understanding of information security principles, cyber security, and data privacy is essential.
• Technical Awareness: Familiarity with the architecture, processes, and technology in IT and Industrial Cyber Security, as well as an awareness of Cloud, Web application, and Network Security.
• Learning and Documentation: Good written communication skills with a willingness to learn and document technical processes.
• Proactive Engagement: An energetic and proactive approach to work, with the ability to take initiative and tackle new challenges under minimal supervision.

Test Engineering Services (TES) at Synapxe is embarking on a journey to constantly transform its services by exploiting state-of-the-art technologies and tools to enhance TES’ ability to offer specialized testing services to its stakeholders. TES is passionate about making an impact with lasting change and we aim to provide our stakeholders with automated and optimized testing solutions to not only help them speed-up testing but produce accurate, reliable, and repeatable results.

TES is planning to implement and roll out a Dynamic/Interactive Application Security Testing (D/IAST) solution. This will act as a control measure proposed for implementation in response to Secured-by-Design Framework v1.0 as recommended by CSA’s Cybersecurity Code of Practice (CCoP).

As an Application Security Testing Specialist, you will be responsible for:
• Leading the request for proposal from a technical perspective to procure a D/IAST solution.
• Defining and documenting technical product requirements and specifications for a D/IAST solutions, evaluating the solution proposals to perform fit/gap analysis, determining the detailed evaluation criteria and producing recommendations to prevent, detect and analyse security threats and weaknesses in the running application.
• Leading the implementation and roll out of the identified D/IAST solution; work with the senior manager and product vendor to plan, set-up, on-board, test and deploy the D/IAST solution.
• Automated application security using the D/IAST tool to perform application security testing, gather and understand reports, assess potential security vulnerabilities, work closely with the application developers/vendors to resolve any vulnerabilities, and present the risks to the business for acceptance or mitigation.
• Removing false positives from the reports and working closely with the development/test teams to automate test and embed security testing in the CI/CD pipe line.
• Developing comprehensive and accurate reports and presentations for both technical and management audiences and effectively communicating the findings and remediation strategies.
• Recognising and safely utilising attacker tools, tactics, and procedures
• Maintaining and performing routine maintenance on D/IAST monitoring servers, reports repository, agents, etc.

• 8 years of experience with SAST/DAST/IAST/RASP methodologies and technologies to catch security flaws in the software?
• Hands-on experience with a wide-range of security tools such as MF Fortify, WebInspect, Contrast Security Assess and Protect, IBM AppScan, Checkmarx, MS Threat Modeling, BurpSuite, etc.
• Eager to collectively learn, share and solve problems within the area of application security testing in the area of healthcare domain?
• Consistent attention to details and work under pressure to achieve agreed targets/goals
• Work with intra-teams, and building rapport with the stakeholders and be able to manage difficult people
• Think out of the box and carries the courage to try and implement unconventional approach to deliver solutions

Overall Summary:

Plan, design, develop and review infrastructure architectural solutions for on-prem/hybrid Cloud, throughout infrastructure lifecycles.

Roles & Responsibilities:

• Architect and design scalable and secure IT infrastructure, primarily on-premise as well as leveraging on cloud technologies, that is resilient, highly available and secured.

• Develop infrastructure solutions to meet project requirements and establish roadmaps, patterns, principles, standards and guidelines for on-prem infrastructure, and document them in various formats, diagrams and templates

• Validate, review and verify infrastructure aspects of project solutions and technical specifications, based on alignment with mandated enterprise policies and standards

• Own and drive architectural deliverables, working in close collaboration with stakeholders including Project Managers, Subject Matter Experts (SMEs) and vendors to achieve project outcomes and timelines from design to implementation.

• Assess new infrastructure technologies and participate in proof of concept, to assist in defining technology direction, roadmap, framework and policies to meet strategic business initiatives.

• Present, articulate and communicate deliverables including architecture related design, solutions, concepts, ideas and proposals to various stakeholders.

• Keep abreast of emerging trends and identify opportunities for improvement

• Review technical documentation including Technical Design Specs and VM Provisioning Requests

• The infrastructure scope covers, but not limited to, all aspects of cloud, servers, hypervisors, containers, operating systems, databases, middleware, devops, security, support tools, network, SDN as well as related governance framework.

Requirements / Qualifications

• Degree in Computer Engineering / Electrical and Electronic Engineering or equivalent discipline

• At least 7 years’ proven experience in a similar role

• Strong and in-depth technical knowledge and experience in administering and maintaining infrastructure domain areas such as Operating Systems (e.g., VMware, Nutanix, Red Hat, Windows Server), Networking (e.g., SDN, Cisco), Security (e.g. Cisco, Palo Alto,CheckPoint, F5), Automation (e.g., Ansible, Chef, Terraform), Cloud, etc.

• Certifications in the above areas would be advantageous (e.g. CCIE, CISSP, VMware VCAP, Windows Certified Engineer, RedHat Certified Engineer, AWS Solution Architect, Azure Solution Architect, TOGAF)

• Possess good knowledge of networks and networking concepts

• Possess good knowledge of ITIL processes

• Possess good knowledge on private, hybrid and public cloud environment and technologies which includes VMware vRealize Cloud automation, AWS, Azure and OpenShift

• Possess good security, audit and compliance knowledge

• Able to analyse and understand complex technical systems built from many separate software and hardware components, specifically web application architectures

• Strong passion for innovation and desire to learn new technologies

• Possess initiative, with a proactive, result-oriented mindset and able to work independently

• Track record of on-time, on-budget and to-specification delivery with the ability to support end-to-end delivery of solutions.

• Experience in driving complex IT infrastructure design and projects while optimizing costs

• Able to prioritise assignments whilst working on multiple concurrent projects

• Is meticulous and attentive to details

• A team player with Excellent communication, interpersonal and collaboration skills, capable of effectively communicating complex technical concepts and influencing various internal and external stakeholders, both technical and non-technical alike.

• 2 years contract

Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant't cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Additional job description

As the Head of Public Sector for Google Cloud Security Product, you will be in charge of Cloud Security product sales across APAC public sectors. You will generate and create an effective pipeline of Google Cloud products. You will be responsible for hiring an expanded team of Field Sales Representatives, building account strategies and opportunity plans and managing the execution of complex engagements. You will work with cross-functional teams to accelerate opportunities.

Qualifications

Job responsibilities

• Lead Cloud Security product's go-to-market propositions in Public Sector (Government, Education, Healthcare, EdTech) across APAC, bringing marketing, demand management, solutions, product, and engineering teams together to produce a focused proposition to prospects and customers.
• Understand APAC Public Sector customer’s current security technology footprint and customer requirements on both business and technical level. Develop and provide custom presentations on Google Cloud Security products to solve their business problems.
• Work with wider Google Account teams to develop and drive pipeline, provide guidance, and collaborate with Google Cloud Partners, to develop campaigns. Build a pipeline of customers within Public Sector verticals.
• Set long-term strategic direction in public sector security sales. Build and maintain relationships with public sector customers to influence cloud security technology adoption.
• Manage and motivate the team in public sector security sales to meet business goals.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 12 years of experience in technology sales.
• Experience with security solutions or security software products.
• Experience in sales leadership, managing a sales team.
• Ability to communicate in English fluently in order to engage public sector customers.

Preferred qualifications

• Experience in Security Operations (SecOps) (i.e., Security Information Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR)).
• Experience selling solutions to public sector customers.
• Knowledge of security solutions domain.
• Understanding of how various cloud technologies work together to drive technology adoption within the existing large account base.
• Ability to build a high performing sales team and build an excellent team culture.
• Ability to grow/scale businesses, and develop long-term strategic relationships with accounts.