Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

Role Description:

• Lead customer project delivery engagements by providing design and solution consultancy for large scale solutions and complex issues, related to data centre networking & security
• Consult and work with customers to plan, design, install, configure, integrate and/or optimize the solution & services to accelerate business outcomes.
• Translate business requirements into data centre networking solution design. Drives customer technology transitions, influencing solution architectures and services.
• Participate in services presales activities which include helping create statement of work, scoping of efforts, propose right services & solutions, articulate the value and expertise of the Logicalis’ professional services as part of a comprehensive outcome-based solution.
• Conceptualize (Customer Requirements Document), plan (Implementation Strategy Plan), design (High & Low Level Design) and advise cross-functional teams across multiple technical, operational and enterprise architecture domains.
• Provides leadership capabilities and insight for creation and sharing of best practices to improve service quality and efficiency.
• Provides technical expertise and escalation support in resolving technical problems within the professional services team
• Mentor and develop junior network engineers
• Create and deliver training and/or mentorship programs for technical resources within the professional services organization.
• Partner with the presales team to improve the quality and accuracy of the Scope of Work and cost estimates

Requirements:

• Degree in Computing or Engineering discipline • CCIE (Routing & Switching) and/or CCIE (Data Centre) • At least 10 years’ experience in project deployment for complex network infrastructure for data centre/cloud and campus, including at least 3 years in a solution architect role
• Advanced knowledge of Software Delivered Data Centres in general and Software Delivered Networks in particular.
• Should have acumen for emerging technologies in the networking world.
• Advanced skills about data centre networks and protocols (Unicast, Multicast, Anycast).
• Advanced skills in network protocols: IP, TCP, UDP, and other common protocols.
• Advanced skills in network routing protocols: IGP and EGP like OSPF, IS-IS, BGP and others.
• Advanced skills in Ethernet fabric technologies: Fabric Path, Cisco ACI and EVPN VXLAN
• Advanced skills in software defined networks especially for Cisco ACI and/or VMware NSX-T/V
• Advanced skills on how to implement network protocols within a Cisco Nexus network.
• Advanced skills in analyze network problems via wireshark or any other tool set.
• Advanced skills in network services like IPAM, DNS, SMTP, NTP, Load Balancing and others.
• Advanced skills in how to integration various systems inside a data centre
• Advanced skills in designing, implementing & migrating data centre firewalls/IPS/IDS
• Intermediate skills in project management (waterfall & agile) and supplier management.
• Basic skills in physical cable management systems, optics, fibres and data centre facility.
• Basic skills in data centre facility architectures and setups
• Customer satisfaction is your focus and accordingly you have a strong service mentality
• Flexibility and willingness to learn new technologies, scale quickly and adapt situationally to different requirements
• Excellent analytical skills and problem solver mentality
• Creative thinking in designing and implementing service improvements
• Deep experience in customer handling and stakeholder management.
• Ability to handle escalations, be a trusted advisor for the customer and work closely with customers in defining solutions

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

We are currently looking for a Cyber Security Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and 2FA solutions.

Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies. And based out of our Singapore office, this role would be reporting to the Technical Manager (Cyber Security).

1.0 Job Responsibilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document

· Strong understanding with hands-on experience of multiple NAC solutions using Radius Protocol and device admin with Tacacs Protocol

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and tuning Firewall/IPS policies.

· Ability to deliver 2FA Solutions for specific use case requirements

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team

2.0 Required Qualifications:

Essential:

· Network Access Control (dot1x) experience of HPE ClearPass, Cisco ISE

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint

· Hands on experience Cisco FirePower NGIPS

· Basic understanding of Networking – Routing and Switching Protocols

· Ability to manage small scale project and ensure completion within the projected timeline

· Build Customer relationship to manage the projects in a congenial way

· Team Player highly spirited, sharing project experience with peers

· Able to learn and adopt new skills when projects warrant based on the relevant training provided

Desirable:

· Hands on experience RSA SecureID, Cisco DUO 2FA

· Hands on experience deploying in Cloud platform (i.e. AWS, Azure) is preferred

· Knowledge of CyberArk, WAF and Database Firewall is preferred

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document.

· In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.

· Prepare UAT document and perform UAT as per document.

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.

· Ability to deliver MFA Solutions for specific use case requirements.

· Assist in reviewing Technical Design Specifications (TDS) document for security projects

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

· Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.

· Hands on experience Cisco FirePower NGIPS.

· Basic understanding of Networking – Routing and Switching Protocols.

· Ability to manage medium to large size project and ensure completion within the projected timeline.

· Build customer relationship to manage the projects in a congenial way.

· Team Player highly spirited, sharing project experience with peers.

· Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

Computer Security Incident Response Team Expert (CSIRT Expert)

CSIRT Expert is a technical expert role within the Asia Information System Security (ISS) Team, Singapore, functionally aligned to Group’s ISS CSIRT team in Head Office, France.

ASIA ISS team oversees and supervise the Information System Security related matters in the region, including cybersecurity monitoring (SOC), incident response (CSIRT) and responding to each country's regulation proactively.

The ASIA ISS CSIRT oversees detection, control and reporting of cyber incidents when it occurs and work closely with IT Operations team to recover and restore the systems that are affected by the security incident.

In this role, CSIRT Expert role will be responsible for respondingand managing end to end Security Incident Management Lifecycle: Incident Identification, Triage, Containment, Eradication, Recovery and Lesson Learnt. Person will be technical point of contact to respond and drive the security incidents response in the region.

Job Responsibilities

The Expert has a wide spectrum of responsibilities and will be responsible for following activities (but not limited to) in day-to-day work:

• Identifying and detecting Incidents and taking immediate action on security incidents including (and not limited to) DoS attacks, malware attacks, phishing attacks, web attacks;
• End to end ownership in driving and leading Security Incident Response and Resolution activities;
• Participate and support performing forensics investigations as required to respond to the Security Incidents;
• Responding to Security Threats and Intelligence alerts & notifications from Group CERT, Regional Regulators and authorized Threat Intelligence groups and ensuring appropriate preventive and detective actions are coordinated and deployed in liaison with IT Operations teams as per the defined approach and in timely manner;
• Owning end to end coordination, communications and deployment of action plans for Threat Advisories or lesson learnt from Security Incidents;
• Prepare detailed Incident Post-mortem report and Executive Summary to document the Security Incident chronology, root cause, remediation and lesson learnt;
• Creating and updating the incident response plan (IRP) and playbooks and ensuring periodical review of playbooks to ensure the relevancy of response actions in current context, including updated information of all stakeholders involved;
• Collaborate with other Geo’s CSIRT team members on security matters and act as a backup to manage security incident and other security activities in scope as needed;
• Periodic review of security measures of Networks (Switches. Routers, Firewall, IPS, etc.) and Systems (Win*,*NIX, etc.) in support of management of vulnerabilities;
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed;
• Complete all mandatory trainings as required to attain and maintain competence;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer, zone wide.
• Support and run annual “table-top incidents” exercise with management.
• Vulnerability management: Ensure vulnerability remediation process is known followed and at the expected level of performance
• In case of severe security incident (suspected or effective attack): Coordination of investigation, mitigation, and remediation operation in relation with IT operation and application teams. on exceptional basis as occurred.

Work Schedule

• Work Hours: 8.45a.m. to 6. 30p.m (Monday to Friday) with one-hour lunch break.
• CSIRT team globally follows ‘follow-the-sun’ model and work on Critical incidents from other geographies during Asia business hours;
• Additionally, candidate may need to be involved in Crisis level Critical Security Incidents observed outside of Singapore working hours on exceptional basis.

Qualification Requirements

• Bachelors graduate or equivalent technical degree in Information Technology or Computer Science;
• Must have minimum 10 years of experience in ITand 5-7 years of working experience in cyber security incident response role managing Security Incidents and performing log analysis and forensic analysis for an enterprise level environment;
• Working experience in financial organisation is preferred;
• Expertise in SIEM and SOC Processes;
• Strong functional knowledge of enterprise level Security Detection and Prevention technologies e.g. Firewalls, IPS/IDS, Network Packet Analysis and Endpoint log analysis, server log analysis, SIEMs, Vulnerability Scanning tools, Threat intel, Anti-Malware, Phishing Prevention and Endpoint Detection & Response (EDR); Scripting knowledge using Python, Perl, PowerShell;
• Must have strong understanding of different domains of IT Security cyber kill chain, IOCs, and attack frameworks
• Ability to apply risk based approach while working on assigned responsibilities;
• Excellent in analytical and problem-solving skills, communication and documentation skills;
• Ability to work independently andpriories work as well as a part of team with minimal supervision;
• Demonstrate Strong sense of responsibility and initiative with excellent communication and interpersonal skillstime management skills;
• Excellent written and oral English language skills;

Professional Certifications:

• Must have at least one of the certifications in regards to IR (Incident First Responder) e.g. GCIH, E | CIH

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14625704/a714138f-b047-1edf-8286-5760531052b8

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Work with key stakeholders to ensure high cybersecurity posture of HDB applications through activities such as the following:

i. Develop and promote Secure Coding Practices.
ii. Collaborate with project teams to ensure compliance with Vulnerability Assessment & Penetration Testing requirements.
iii. Review security test reports and provide recommendations on remediation measures to application project teams, where necessary.
iv. Procure and maintain security testing tools to support Static Application Security, Dynamic Application Security Testing and Vulnerability Assessment & Penetration Testing.
v. Study and propose CI/CD pipeline to support DevSecOps.
vi. Perform Software Composition Analysis.

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Manage and promote IT security awareness and outreach programme.

You are also to:
• Keep abreast of the latest industry Software security practices and technologies to manage emerging threats and vulnerabilities.
• Recommend and implement appropriate measures to improve the HDB Applications security posture.
• Lead and/or participate in the research and adoption of new technological advances and best practices in software security to mitigate future security threats.

You will be a Great Fit if you:

• Possess a strong background in software development with popular web/mobile technologies such as HTML, Javascript, Node.js, Angular, Java, ASP.NET, C#, PHP, Ruby, etc with knowledge on ICT Security, Information Security and Secure Coding.

• Have at least 2 year of relevant ICT security work experience.

• Possess one or more appropriate IT security certifications, such as CSSLP, CISSP, CRISC, CISM, CISA, CEH, OSCP, CREST etc.

• Have strong knowledge and experience in Information and Cybersecurity Risks, Vulnerability Assessment & Penetration Testing, Cloud Security, Container Security, Mobile Security, DevSecOps, Cryptography and other industry IT/cyber security best-practices.

Good to Have:

• Able to drive new initiatives for Cloud Security.
• Possess good interpersonal and communication skills.
• Proactive to troubleshoot with excellent problem-solving skills.
• Fluent in written and spoken English.
• Meticulous attention to details
• Work beyond business hours including weekend when necessary.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14625709/a714138f-b047-1edf-8286-63d52ecd92b8

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

· ICT Security Governance:
Develop and implement enterprise-wide ICT security programmes as follows:
i. Establish the cybersecurity governance structure for HDB to ensure that the security posture is robust, resilient, and pragmatic
ii. Enhance and update the IT security policy, standards, procedures so that they are always current against the evolving cyber security landscape
iii. Manage the compliance with the GovTech ICT/SS Security Policies, Initiatives, Measures and the relevant Government Instruction Manual to further strengthen the WOG and HDB ICT security posture.
iv. Establish the governance and administer the Third-Party Management Policy and Procedure

· Cybersecurity Awareness Outreach
Manage and implement Cybersecurity Awareness Framework to promote IT security awareness and outreach programme as follows:
i. Raise HDB management and staff’s security awareness and appreciation of ICT Security to ensure HDB’s information assets are protected.
ii. Create good staff cyber security hygiene through regular ICT Security outreach programme such as annual ICT Security Awareness Talk, security advisories, conduct of Phishing exercise, road show.
iii. Keep abreast of key technology and skillset in the industry to maintain ICT Security personnel skills development.
iv. Identify various channels for the conduct of the security program such as cyber range exercises, technical certification, gamification.

· Identity & Access Management
To establish procedures and standards for the Identity and Access management in HDB as follows:
i. To administer and manage the user accounts and privileged access, so as to safeguard the confidentiality of ICT assets and systems in HDB.
j. To maintain and manage the access controls to applications on premises and on Cloud.
k. Digital Certificate Management

· Quality Audit and Security Reviews
a. To serve as an independent party to perform quality auditing and report to Management on the observations and recommendations.
b. To conduct regular security reviews on application systems and infrastructure to ensure the HDB’s systems and infrastructure are secured and reliable.
You are also to:
· keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.
· lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks

You will be a Great Fit if you:

You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Engineering (Computing/Telecommunication), Cybersecurity and/or Digital Forensic or equivalent.
At least 1 years of direct and relevant full-time ICT security work experience
Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc
Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

Added advantage for candidates with knowledge in any of the following:
· Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security
· Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)
· Good understanding of the current IT/Cyber Security landscape

Candidate also need to:
· to work beyond business hours including weekend when necessary
· possess good interpersonal and communication skills
· demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail
· have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14625706/a714138f-b047-1edf-8286-5e09c172d2b8

Job Description:

• Participate in implementing Secure Software Development Life Cycle (SDLC), produce security solutions and security test reports, provide advice in patching vulnerabilities, and follow up with risk mitigation
• Evaluate the risk points of common application frameworks and develop security solutions to provide security support for each business line
• Embed security principles into the design of system architectures to mitigate the risks posed by new technologies and business practices
• Design artifacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture
• Perform routine activities related to the periodic review and audit activities of infrastructure security systems

Requirements:

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, or other related fields
• Minimum 3 years of work experience in cybersecurity-related positions
• Familiar with OWASP TOP 10 vulnerabilities, and have a deep understanding of the principle, utilization, patching and reinforcement of various vulnerabilities
• Familiar with the enterprise's SDLC process implementation, building secure SDLC for IT companies, and have been in-charge of secure SDLC for a large dev team
• Familiar with black box testing methods and paths, and able to independently complete source code auditing work
• Hands-on experience in security design checklist
• Familiar with at least one programming language such as Java, Python, PHP, Go, C, etc, and proficient in reading design documents and related codes

Preferred Experience

• Having been credited to high-risk CVEs for well-known projects
• Having contributed to the development of open-source projects. Experience working in team collaborative development and familiar with development tools
• Fluent English communication skills for effective collaboration with multinational teams

Who Are We?

At HoYoverse, we are committed to creating immersive virtual world experiences for players around the world. In addition to game products such as Genshin Impact, Honkai Impact 3rd, Tears of Themis, and Honkai: Star Rail, HoYoverse also launched the dynamic desktop software N0va Desktop, the community product HoYoLAB, and created a variety of products such as animations, comics, music, novels, and merchandise around our original creative concept.

Adhering to our mission of Tech Otakus Save the World, we have always been committed to technology research and development, exploring cutting-edge technologies, and have accumulated leading technical capabilities in cartoon rendering, artificial intelligence, cloud gaming technology, and other fields.

HoYoverse is actively engaged in globalization, with offices in Singapore, Montreal, Los Angeles, Tokyo, Seoul, and other areas.

When you apply to a position with HoYoverse, we will process your personal data. To learn more about how we process your data, we encourage you to review our comprehensive Global Applicant and Candidate Privacy Policy. This policy provides detailed insights into how your information is collected, used, and protected throughout the application process.

What You Will Do:

• Responsible for the security operations of EDR, HIDS, email sandbox and other security devices in HoYoverse office, and participate in the operation of internal user portraits, internal risk identification and other operations.
• Participate in the construction of HoYoverse global security office network and the development of the office network's automated operation platform projects.

What We Are Looking For:

• Have certain experience in internal network security or penetration testing, and have a comprehensive knowledge of information security.
• Solid foundation in basic knowledge, familiar with security vulnerability principles, operating system principles, computer networks, data structures and other basic knowledge.
• Proficient in one programming language (Golang, Java, Python, C/C++), strong hands-on ability, and able to independently complete the development tasks of a module.
• Students with experience in security terminal confrontation, anti-virus bypass, driver development and system security research are preferred.

We are an equal opportunity employer that believes diverse backgrounds are key to bringing our concepts to life. If you're looking to play a key role in creating the best immersive virtual world experience for our users, we invite you to join our team.

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Perform deep research into selected applications to understand how they are designed and implemented.
• Reverse engineer or apply static and/or dynamic analysis techniques on closed source binaries to understand it’s inner workings.
• Identify weakness in systems or software that makes it possible for an attacker to abuse.
• Develop proof of concept to demonstrate the severity of the discovered vulnerability and propose mitigations.
• Develop cutting edge tools to improve and scale up the analysis process.
• Keep abreast of the latest research into application security research and reverse engineering techniques.

Minimum Qualifications:

• Diploma/bachelor’s in a computing related field or relevant practical experience
• Software development experience in a general-purpose programming language for instance, Python
• Proficiency in C/C++, assembly (x86/64)

For a more senior role, we're looking for candidates who have:

• Competency in debugging, binary reverse engineering, bypassing of anti-RE and anti-debugging techniques.
• Experience in recognizing common algorithms and patterns (in line hashing function, obfuscator) in decompiled code and ability to perform type recovery on simple to intermediate data structures.
• Ability to apply public research materials to recover file format or encoded binaries.
• Participation in public disclosure of vulnerabilities, bug bounty programs or capture the flag (CTF) competitions.

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

Job Summary:

We are currently looking for a Cyber Security Lead Engineer who will support the School by managing and maintaining the Cyber Security, Azure Infrastructure and Microsoft 365. The appointee works with the Director of Technology & Senior Cyber Security Manager to ensure the IT requirements of the end user are met.

The role reports to the Senior Cyber Security Manager.

Requirements:

· Minimum Degree in Computer Science, Engineering or equivalent

· Minimum relevant experience of 3 years and above

· Excellent knowledge of Cyber Security, Azure and Microsoft 365

· Experience in Microsoft Intune, Microsoft Defenders and Microsoft Sentinel

· Experience in managing Azure Identities and MDM

· Able to work independently as well as a good team player with good initiative

· A positive approach to working with people

· Will accept late hours and weekend work for maintenance and patching

The school is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. We will conduct thorough background checks on all successful applicants.

Please refer to “Careers” on our website at www.tts.edu.sg for a detailed job description.

5-day week – working hours are from 7.30 am to 4.30 pm (41.25 nett hours per week). Interested applicants, please submit an application letter and detailed resume, stating your current and expected salary, date of availability and contact number via the online system at https://careers.tts.edu.sg/careerportal/main.aspx. In your application, please provide the names and addresses of three people from whom confidential references may be obtained. Please indicate their professional relationship to you.

(Only shortlisted applicants will be notified)

CPE Registration No.: 196100114C | Period of Registration: 7 June 2023 to 6 June 2029

Key Responsibilities:

• Develop new custom parsers for parsing and field extraction of new log source types, including testing and finetuning
• Research, evaluate and identify the most appropriate mechanism for efficient parser development
• Modify and enhance existing parsers to adopt to log variants
• Document the newly created or modified parsers
• Work with engineering team to deploy and test the new or modified parsers
• Update development progress and issues to team lead
• Provide inputs to Delivery Managers on log format changes required to reuse existing parsers

Requirements:

• At least 3 years of relevant work experience in log management, log onboarding to SIEM, connector development, scripting and/or data engineering
• Certified as Splunk Core Power User or higher
• Experienced in Splunk Processing Language and Regex
• Good working knowledge of cloud environment (AWS and/or Azure)
• Please note that this role will be 8 months direct contract.

The professional will be joining a top team in delivering complex Cyber Security solutions to defend against cyber threats of the world. We are looking for a dedicated team player who wants to make a career in the Vulnerability Management (VM), Data Protection or Governance, Risk and Compliance (GRC) domain.

He/she will be responsible for his/her career by providing professional services to implement turnkey projects for our clients. A problem solver, he/she will treat each technical issue as a learning opportunity and challenge. No two days will be the same as opportunities are aplenty in deploying challenging solutions in various enterprise settings.

Roles & Responsibilities:

• Engage clients in identifying business and technical requirements relating to cyber security solutions for GRC, VMS, Data Protection (DLP)
• Deploy projects and provide consultation to clients as a Subject Matter Expert (SME) from Design to Implementation phase in System Development Lifecycle (SDLC)
• Create technical documentation for the solution deployment
• Empower clients through technical enablement
• Communicate and handover to support team (L1) after implementation
• Support as post-sales support services (L2) when necessary

The ideal candidate should possess:

• At least 2 to 5 years of IT or Cyber Security experience
• At least 1 to 2 years of implementation experience in one or more of Vulnerability Management (VM), Data Protection and Governance, Risk and Compliance (GRC) solutions
• Problem solver with strong analytical skills
• Dynamic individual and team player with positive working attitude
• Good communication and written skills
• Passionate about Cyber Security
• Relevant diploma or degree qualifications in Information Technology or Cyber Security

Candidates with more years of relevant experience may be considered for the role of a Senior Consultant.

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.

Responsibilities

• Engage clients to identify requirements relating to cyber security solutions for Data Protection
• Proposal, scope and size technical solutions for clients
• Deploy competency’s related projects and provide consultation to clients with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the solution deployment
• Empower clients through technical enablement
• Provide post-sales support services for corrective and preventive maintenance when necessary

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology
• At least 5 to 8 years of IT security experience
• Experience in leveraging and expanding the capabilities of existing analytical tools and technologies; recommend new technologies as appropriate
• Experience with web security, email security and Cloud Access Security Broker (CASB) and will be preferred
• Positive working attitude
• Good communication and written skills
• Passionate in information security
• Experience in programming and scripting is preferred

Job Overview

The role of a Cyber Account Managers is responsible for effectively articulating the value of Ensign Infosecurity Cyber Security offerings to commercial prospects and clients through strategic selling skills.

Duties and Responsibilities

· Involved in the direct sales process by managing new and existing accounts

· Develop and lead security account plans and strategies for each assigned account using all available resources (executive sponsors, marketing, product partners, services BU, etc)

· Drive sales revenue growth through new project identification, creation and cross-sell opportunities.

· Forecast and report activity accurately in line with the sales target allocation

· Identify major projects within the accounts and running activities to build a strong client relationship

· Serves as a key point of contact between the client and the organization

· Informs clients of new integrated solutions offerings and recommends integrated solutions that suit clients’ business needs

· Craft high-level relationships within assigned accounts to win incremental product and services business

· Responsible for preparation and submission of bids documents and proposals

· Work with technical resources to present a competitive analysis, proposals and solutions to response to client requirement

Requirements

· Experience selling integrated cyber security solutions (that bring together both hardware and software products) in large or complex deal in commercial sector ($500K+) to achieve revenue/sales targets

· Validated track record of over-achievement

· Able to build and execute on an account plan with a security approach

· Adept at communicating with a largely technical audience

· Able to conduct product demonstrations

· Experience in applying solution-selling methodologies to improve corporate revenue growth

· Track record of closing both tactical and strategic opportunities

Preferred Skills /Qualities

· Good all round knowledge of Security Market in commercial sector

· Direct touch sales combined with experience working in a matrixed organisation

· Good interpersonal, communication and presentation skills

· Self starter

· High level of attention to detail

· Relevant security diploma, certifications or security vendor certifications is preferred

Duties & Responsibilities:

• Carry out pre-sales engagement for projects relating to AA
• Deploy AA related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Develop SIEM correlation rules for security monitoring and detection of new threats
• Develop SIEM and Threat Intelligence report templates that are useful for analysis by the customers
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement

Requirements:

• Good Diploma or Bachelor’s Degree in Information Technology
• Knowledge in information security technologies such as SIEM, Threat Intelligence and Vulnerability Management is preferred
• At least 2 to 5 years of IT security experience
• Good communication and written skills
• Positive working attitude
• Passionate in information security

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Duties & Responsibilities

• Engage clients to identify requirements relating to cyber security solutions such as Database Security, Application and Cloud Native Security
• Conduct Solutions Presentations and Perform Proof of Concept (POC) / Proof of Value (POV) for clients to ensure the solution meets their requirements
• Respond to RFP, ITQ, RFQ, generate proposals, scope, and size technical solutions for clients
• Conduct project deployments and provide consultation to clients as a Subject Matter Expert (SME)
• Create technical documentation for the solution deployment
• Perform knowledge transfers / trainings to clients through technical enablement
• Provide post-project support services for corrective and preventive maintenance when necessary

Requirements

• Good diploma or bachelor’s degree in Information Technology
• Experience with Cloud Computing Platforms, Database Security and Application Security will be preferred
• Experience in leveraging and expanding the capabilities of existing analytical tools and technologies
• Experience with DevOps and Cloud Native Security is advantageous
• Knowledge in information security technologies & cyber threat actors, cyber-crimes and fraudulent activity targeting the technology or various industries
• Positive working attitude
• Good communication and written skills
• Passionate in information security
• Experience in programming and scripting is preferred

Key Responsibilities

• Perform implementation, maintenance, support and operation of the project's security monitoring use cases
• Maintain understanding of the architecture and work with security team to understand the use cases to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Adhere to established change management process and other service management process in day-to-day tasks
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Review, propose and generate dashboards and reports to automate monitoring of systems and log and threat intelligence feed ingestion, and reduce low value event escalations
• Build rules and intelligence to detect threats in all monitored assets
• Implement and devise detection method of such threats in our security operations through SIEM use cases etc
• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Review and update data enrichment, including use of threat intelligence to enhance fidelity of detection
• Review and maintain UEBA data sources and use cases

Requirements

• 1- 2 years of experience in security operations in a SOC environment
• 1- 2 years of experience in creating, finetuning and maintaining correlation rules and SIEM dashboards
• Working experience in Regex and/or scripting
• Strong critical thinking / contextual analysis abilities
• Strong investigative and analytical problem solving skills
• Stakeholder management
• Meticulous with an eye for details
• Product certification such as Splunk Enterprise Certified Administrator or equivalent
• Professional certification such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage
• Good understanding of whole of government environment would be an advantage

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

Duties & Responsibilities:

• Managing and leading a team of engineers for presales and project deliveries
• Supporting pre-sales engagement for projects relating to Advanced Analytics
• Responsible for ensuring projects are delivered in a timely manner
• Responsible for supporting presales activities in relation to developing solution design, bill of materials and scope of work
• Deploy Advanced Analytics solution related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement to sales team and/or junior members of the team
• Perform consultancy activities such as conducting technical presentations and engagement to prospective customers, preparing scope of work, bill of materials and technical proposal for submission for tender bids
• Identity, evaluate and recommend new technologies that would be relevant to Adaptive Defence
• Provide mentorship and guidance to junior staff

Requirements:

• Bachelor’s Degree in Information Technology or Cyber Security
• Professional certificates such as SANS or ISC2 would be advantageous
• At least 7 years of IT security experience and experienced in a wide range of cyber-security technologies
• Technical knowledge in the following information security technologies & solutions is preferred: SOAR Platform / Threat Intel Platform / Threat Intel Feeds
• Experience in IT Network / System Administration will be a strong advantage
• Experience as a technical lead in large-scale projects involving multiple technologies as part of a turn-key solution
• Strong troubleshooting and analytical skills that can resolve issues as the final point of escalation
• Strong presentation, communication and written skills
• Basic project management skills
• Positive working attitude
• Passionate in information security

Job Description

The incumbent is responsible for delivering information security projects that are related to Advanced Analytics (AA), such as Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence Management and Vulnerability Management, including the execution of all project implementation activities.

Responsibilities

• Carry out pre-sales engagement for projects relating to AA

• Deploy AA related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)

• Develop SIEM correlation rules for security monitoring and detection of new threats

• Develop SIEM and Threat Intelligence report templates that are useful for analysis by the customers

• Develop playbooks for automated incident management

• Create technical documentation for the AA deployment

• Provide post-sales support services for corrective and preventive maintenance

• Carry out technical enablement

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology

• Knowledge and experience in information security technologies such as SIEM, Threat Intelligence and Vulnerability Management is preferred

• At least 3 to 5 years of IT security experience

• Good communication and written skills

• Positive working attitude

• Passionate in information security

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Technical Leadership:

a. Recommend research directions, conceptualize new security tools, and mentor junior researchers.

b. Conduct internal training workshops on analysis techniques, vulnerabilities discovery, and mechanism.

• Research and Analysis:

a. Conduct in-depth research on applications, reverse engineer closed-source code, and identify exploitable weaknesses.

b. Continuously learn about the latest application security and reverse engineering techniques.

• Development:

a. Assess and verify security through design and execute tests against industry standards CIA triad: Confidentiality, Integrity, and Availability, plus Authorization and Non-repudiation).

b. Develop proof of concept (e.g. code, scripts) to demonstrate the severity of discovered vulnerabilities and propose mitigations.

c. Develop cutting-edge tools to streamline the analysis process and improve efficiency.

• Documentation and Reporting:

a. Document findings, methodologies, and recommendations for both technical staff and executive leadership.

b. Effectively communicate findings and strategy to stakeholders.

• Contribution:

a. Contribute to the Singapore cybersecurity community through publishing whitepapers, blog posts, or presenting findings at relevant conferences.

Minimum Qualifications

• Fluent in OOP such as C++, Windows or Linux APIs/syscalls and knowledge of common file formats, network protocols and encryption. - Demonstrated ability to:
• Reverse engineer C/C++ compiled binaries and recognize common algorithms and patterns in decompiled code.
• Perform type recovery on intermediate data structures and uncover logic and indirect calls within a module.
• Bypass common anti-RE and anti-debugging techniques and uncover original code obfuscated by a public obfuscator. - For a more senior role, we're looking for candidates who has the demonstrated ability to:
• Reverse engineer sophisticated software and other programs compiled in newer languages such as Golang, Rust, newer Pythons and non-C binaries.
• Recover complex code logic and indirect calls across multiple modules or files.
• Recover undocumented file format or encoded binaries through deep analysis of the program.
• Develop custom tools to recover the logic or emulate parts of the program.
• Uncover logic of heavily obfuscated or custom packed code.

Benefits

• Training & Development
• Performance Bonus
• Medical Benefits
• Hybrid Work Arrangements

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.