This is an individual contributor role responsible for solving problems and taking a broad perspective to identify innovative solutions. This is at intermediate professional level and works independently with minimal guidance, and requires a high level proficiency in networking and security disciplines

Essential Functions:

• This position is responsible for day-to-day operational management  of network security appliances such as firewalls , proxy systems ,DDoS protections etc.

• Primary responsibilities includes, updating firewall rules/policies to meet customer requirements, validating that user requests do not allow unauthorized network access, firewall log analysis, troubleshooting network connectivity problem via use of packet captures using packet capture technologies.

• Having broad knowledge of information security , understanding application ,data , threats and mitigation , and security trends. 

• Troubleshooting firewall fault conditions and coordinating firewall rebuild efforts.

• Coordinates with the Security Operations Center to proactively defend against the known exploits and vulnerabilities.

• Configures internet proxy servers to restrict corporate internet access to support the company's acceptable use policy.

• Diagnoses and resolves network connectivity problems in short time frames.

• Applies security software patches, and assists in capacity expansions.

• Updates incident and change management records.

• Provides technical support for activities that improve the security posture of Visa's networks.

• Provides 24x7 on-call support whenever preformation the duty of on-call, which has roaster that is rotated.  

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Additional Description:

For this position, we are looking for an ICT Security Engineer proficient in Elastic Stack to assist one of our clients – a leading global investment bank.

 The team is looking for an ICT Security Engineering professional to increase its capability to improve the detection & reaction to Cyber Threats by:

• Deploying, maintaining and improving the new SIEM infrastructure

The new joiner will work in close collaboration with Production Infrastructure & Observability teams. Finally, the new joiner will fully be part of the Production CSIRT / SIEM Engg team with the opportunity to expand the scope of activities within the team.

Responsibilities:

• Install and administrate the servers of the SIEM Infrastructure
• Develop automation on the different tasks and self-service tool
• Participate to the integration of new technologies logs
• Support logs parsing using custom parser/GROK development
• Project management
• Be a full time member of the Production CSIRT / SIEM Engg team and participate to the various activities of the team
• Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System

• Production experience across the following technologies:
• Working knowledge of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics. (Mandatory)
• In-depth experience with Kafka
• Good working knowledge of Linux (RedHat/Ubuntu)
• Programming skills (Python or Bash) is appreciated.
• Experienced production support engineer
• Platform integration skills are a plus - Experience in installation, configuration, documentation and administration of multiple pre-production and production platforms in both virtual and physical environments.
• Experience & skills in automation tools (e.g. Ansible) & DevOps pipelines are appreciated.

Specific Requirements:

• Candidate must have a overall 7 or more years of experience with minimum 4-5 years on relevant scope ie. Expertise in handling ELK stack for large platform or architecture.

• Regular team buildings
• 18 leave days / year
• Insurance: Hospitalization, GP, Dental and Optical
• Annual bonus
• Working hours: from 9am to 6pm, Monday to Friday
• Training and certifications paths

Control Risks is seeking an Associate Director to play a key role in growing the crisis and security consulting practice across Southeast Asia (SEA). This position will focus on developing deep and profitable client relationships, driving the growth of the crisis and security consulting practice in SEA, and ensuring quality service delivery across our range of consulting engagements, including crisis management, crisis response, business continuity, and security risk management issues.

Building and maintaining successful relationships with existing Control Risks clients will be important for this role and identifying and pursuing new clients and business development opportunities to expand the crisis management, business continuity and security risk management opportunities in the region is crucial.

Role tasks and responsibilities:

• Cultivate, grow and deepen Control Risks’ relationships with security and risk buyers in our Client organisations, being seen as their “go to” person within Control Risks.
• Identify, nurture and help win new business development opportunities.
• Actively lead on business continuity and crisis management projects from first client enquiry to proposal development, task servicing, quality assurance and project closure
• Project manage and, utilising a regional team of consultants and experts, deliver the full range of security consulting and services engagements in Southeast Asia and across Asia broadly, when required.
• Deliver consultancy services to clients by developing innovative solutions to complex risks. You will be responsible for scoping and delivering across a broad range of business risk activities, including crisis management and business continuity workshops, audits, gap analyses and risk assessments
• Provide mentorship to junior staff, maximising use of resources. Ensure continuous skills transfer, coaching and planning is provided.
• Work collaboratively with country management, marketing teams and other practises to develop a consistent, credible and highly visible brand.
• Represent Control Risks as a thought leader through market engagement via channels such as social media, professional organizations and industry events.
• Seek innovative ways to improve services we offer to clients.
• Ensure that practices, polices, strategy and services represent the client best interest.

Essential:

• Experience in a corporate/consulting environment working with multinational companies in Singapore specifically, and across SEA generally
• Strong commercial expertise, analytical (financial management, legal and contractual skills), leadership
• Ability to build relationships with senior-level clients and other consultants globally
• Experience in a multi-cultural environment and demonstrated cross-cultural awareness
• In depth knowledge of commercial/operational conditions across South Asia

Preferred:

• Experience in one or more of the following: business continuity, crisis management, risk assessment following recognized international standards, security planning and framework development
• Experience working in multi-disciplinary teams
• Experience managing crises and/or complex problems
• Demonstrable experience in applying risk management methodology such as (ISO 22301, ISO31000, SOC 2, ISO 27001, etc.)

Qualifications and specialist skills:

• Educated Bachelor’s degree or equivalent
• Strong commercial expertise, analytical (financial management, legal and contractual skills), leadership
• Good client (internal and external) management and consulting skills
• Effective decision making and judgement
• Excellent planning and organizational skills
• Assertiveness and drive with strong influencing skills
• Strong interpersonal skills-building trust and rapport
• Excellent communication skills – written and oral (informal and presentation)
• IT literacy – MS office packages, advanced Excel
• Strong management and communication skills (including concise and accurate written skills)
• Project management skills

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

The role will work as a member of the Global Cybersecurity organisation - Security Architecture team, which is focused on improving technology and architecture decision-making through collaboration with management, staff and customers on technology strategy, enterprise architecture, and investments in strategic security technology.

The individual, with a broad cybersecurity plus systems and network architecture knowledge and experience, will deliver security assessments while supporting our direction, lifecycle management and leadership for security architecture and technology. The individual will perform a key role in Security assessments while supporting various critical initiatives through the identification, analysis, evaluation, lifecycle management and adoption of security architectures and technologies. The Security Architect will work closely with other security functions and will provide guidance to ensure that there is coordination with their activities in technology choices. In addition, the Security Architect will be involved with education and mentorship, supporting the delivery framework, development of technical architecture and associated documentation, as well as advanced topics of research.

Essential Functions:

• Be a product security champion by driving Security Architecture and Design, implementation and optimization for Web, API and Mobile backend applications across Visa.

• Applying security design principles to develop security solutions architectures

• Engage in the initial requirements definition including analysis of threats and risks and alignment with Visa security, Engineering, IT and Architecture standards.

• Conduct and facilitate security reviews, threat modelling including deep design reviews throughout the development lifecycle.

• Facilitate 'table-top'/red-team/scenario analysis exercises in conjunction with other SMEs. Plan the resolution of any identified vulnerabilities/issues.

• You’ll be working on enabling/building security controls which protect the applications from attacks on various platforms and technologies, like:

  • Linux, Windows, VMWare, Openstack, SDN, Public cloud like AWS, Google

  • Cybersecurity tools like IDS, SIEM, Tripwire, Tanium, Netwitness, Netflow, WAF

  • HSMs, Tokenization systems, data encryption solutions from Safenet, Vormetric etc

  • Web technologies like HTTP, SOAP, REST services, AJAX

  • Databases like Oracle, MS SQL, Redis, Cassandra

  • Programming languages like Java, C, C++, .Net, Javascript, GoLang, ErLang, etc

  • Caching services like Hazelcast, Coherence, and messaging systems like Kafka, MQ

  • Web Access Management solutions like Forgerock, Siteminder, Custom/in-house Security Frameworks

• Help business and product team to achieve various compliance certifications like PCI, FFIEC  etc.

• Identify and analyse system and application level vulnerabilities to provide recommended counter measures or mitigating controls that reduce risk to an acceptable and manageable level.

• Driving security technologies evaluations, proof-of-concepts, and production pilots

• Building strong cross-organisational relationship through integration with the teams, in order to effectively influencing staff across the IT organisation and product groups

• Managing the lifecycle of security technologies

• Staying current with security technologies, as well as development techniques and methodologies in order to make recommendations for use based on business value

• Maintaining oversight of the design and implementation of IT systems to ensure appropriate and effective security controls are included.

• Contribute to the definition of overall IT architecture from a cybersecurity lens.

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

 Responsibilities:

Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.

Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.

Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.

Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.

Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.

Stay connected with the latest security trends throughout various industry verticals.

Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Preferred Qualifications (PQs):

• At Least 7 years of security architecture and/or security engineering experience
• Hands on and deep knowledge of security principles.
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
• Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
• Strong practical experience securing Kubernetes and containerised workloads.

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a video tour of our global network of 24/7 Security Operations Centers (SOCs).

 Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs).

 We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis.

 Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches.

 While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.

 Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within.

 SUMMARY

We are seeking an energetic Security Engineer II to serve as a technical resource and leader. This position has two components and supports both our team that Onboards new customers and our MSS team that manages security devices for our customers. 

Onboarding, 60% of this role:  this part of the position centers on security and availability of customer data as it is brought into the Proficio SIEM. The Security Engineer II will assist in working with new clients as they transition to our ProSOC service. This includes ensuring timely deployment of services, developing a personalized on-boarding strategy for each customer and auditing of systems reporting from the client to our Security Operation Center. 

MSS device configuration/maintenance, 40% of this role:  this part of the position will help ensure delivery of our Elastic Stack Managed Security Services to meet or exceed the defined service levels of our clients. The Security Engineer II will respond to customer requests and act as a trusted technical resource for our clients while striving to maintain high reliability and performance within our customer’s environments. This position also includes managing and optimizing overall IT infrastructure and systems used in the delivery of our Managed Security Services.

 Responsibilities

• Assist in the onboarding and implementation of ProSOC service and Managed Security Services solutions for Proficio clients across industries and geographic locations. 
• Act as a technical liaison between Proficio and its customers during the onboarding process.
• Review technical security posture (network, application, and database) for existing and newly acquired businesses or services.
• Perform security reviews and monitoring of the production environment. 
• Perform the installation and configuration of security monitoring tools in support of our ProSOC service.
• Use out of the box thinking as well as industry standard troubleshooting tools, such as, Wireshark, TCPDUMP, and other tools, to facilitate on-boarding of customer data sources.
• Work with senior staff to evaluate client security devices and make recommendations based on industry standards for security configurations.
• Assist Proficio engineering team with tasks related to the review and development of Managed Security Services related processes and procedures.
• Assist senior staff when they provide Subject Matter Expert (SME) services, engaging directly with clients to perform necessary research, answering questions and making recommendations based on industry standards and best practices.
• Participate in engineering team on-call rotation.

• A Bachelor’s degree in Information Systems, Business, Engineering, or a related field from an accredited institution OR equivalent experience
• 4-5+ years’ experience as a Network Engineer or Security Engineer working with a broad range of technologies
• Minimum 2+ years’ experience in Information Technology IT Security in a SOC or NOC environment working with a broad range of technologies highly preferred.
• Security certification required, such as, Security+ and Network+. Security certification such as SANS/GIAC, CISSP, CISA, CISM are a plus
• Basic Unix or Linux systems administration and command-line experience (Redhat/Linux, FreeBSD, Ubuntu, etc.).
• Experience with Windows Server security logs.
• Experience in the configuration and troubleshooting of IPSec VPN tunnels.
• Knowledge of network analysis tools, such as, Wireshark and TCPDump and SCP.

• Knowledge of UNIX and Windows environments as may pertain to Network and Security tasks including syslog, DNS, load balancers and BIND, BigIP command line on BSD, Windows Event Log.
• Hands-on experience installing, configuring and administering network and security devices, applications and systems
• General understanding of SIEM operations experience with Elasticsearch is a strong plus
• Managed Services experience preferred with a customer focused mindset that is willing to go above and beyond to satisfy a customer requirement absolutely required
• Experience performing vulnerability assessment and remediation using products such as Qualys, Nexpose or Nessus is a plus
• Proficient with Linux (scripting in Bash or Perl is required and Python is a plus)
• Vendor certifications from Palo Alto, Cisco, Juniper etc. are a plus
• Effective time task management skills.
• Strong communications skills, both written and oral
• Ability to participate in on-call rotation for after hours and weekend escalations

 At least 1 years’ experience configuring and/or using the following:

•  Security Management Systems (i.e. Tipping Point SMS, CheckPoint Security Management Server, Cisco Sourcefire Management Console, or JunosSpace)
• Firewalls (Cisco, Palo Alto, Checkpoint, Fortinet, Juniper SRX, or IPTables)
• IDS/IPS (Cisco AIP or Sourcefire, McAffee, Juniper or Tipping Point)
• Linux command line or similar operating system
• Experience with Vulnerability Management Tools
• Wireshark or other similar industry standard application
• Data Encryption using SSH, IPSEC VPN or TLS/HTTPS

• Opportunity to work in a progressive organization with structured training and roadmap for success

• Lunches and fun employee activities!
• Experience in one of the hottest IT industries today

Proficio is an EOE employer.

Summary

This position is responsible in ensuring a safe environment for the hotel employees and guests, and safeguards the assets of the hotel. The Security Manager assists the Management, employees and guests in every way that is consistent with the protection and prevention objectives.

Job Responsibilities

• Prepare monthly staffing schedules, monitoring staff attendance and assist in planning work schedules.
• Maintain a Hotel logbook on incidents, complaints etc. and refer them, if required to the appropriate department for follow up action.
• Handle and resolve all guest queries and complaints in an efficient manner and to establish an amicable relationship with all clients, and guests of the Hotel.
• Be proactive in guests’ requests and anticipate Safety needs according to Singapore’s events.
• Maintain a high level of controlling details within the guest areas.
• Conform to and enforce Security policies, procedures, rules, and regulations as laid down by ACCOR and the hotel in order to achieve the highest levels of uniformity and guest service.
• Prepare the annual capital and operating budgets for the Department.
• Ensure that all potential and real Hazards are reported immediately and rectified.
• Be fully familiar of the Emergency Procedures, Policies and Standard Operating Procedures as established by the Hotel.
• Assist in safety and emergency training for all employees.
• Ensure that all emergency procedures are rehearsed, implemented and enforced to provide for the security and safety of guests and employees.
• Ensure the safety of the persons and the property of all within the premises by fairly applying Hotel Regulations by strict adherence to existing laws, statutes etc.
• Ensure all staff within the department work in a manner which is safe and unlikely to give risk of harm or injury to selves or others.
• Use safe manual handling techniques and practise safe work habits following Accor Health, Safety and Environment policies, maintain procedures to minimise our impact on the environment and prevent pollution.
• Perform other duties as directed by the General Manager.

Role Purpose

Working with our multi-disciplinary Southeast Asia and regional team, we are seeking a resilience professional who can flexibly work across multiple consulting projects, including crisis management, business continuity, organisational resilience and security risk management to help our clients build secure and resilient organisations. You will understand corporate risk management culture, crisis management / business continuity industry best practices and standards and be comfortable advising and engaging at all levels.

Role tasks and responsibilities

• Conduct physical and technical security reviews and security risk assessments in line with industry good practice and standards (including ISO 31000:2018 and HB 167:2006).
• Help clients enhance organisational resilience through the development and delivery of crisis management and business continuity plans and training workshops.
• Provide technical expertise and logistical support to cross-functional teams engaged in solving complex client problems, including security strategy, governance and resilience projects.
• Engage in client meetings, interviews and facilitate training workshops and be the trusted adviser for security and crisis management related projects.
• Prepare detailed, high-quality reports and presentations and develop concise proposals tailored to meet and exceed client expectations.
• Lead local projects and support the crisis and security consulting team in the delivery of a range of regional and varying projects.

Experience

Essential

• Experience in a corporate/consulting environment working with multinational companies in Southeast Asia / Asia.
• Experience in resilience, crisis management, business continuity and/or security risk management.
• Strong verbal and written presentation and communication skills.
• Ability to build relationships with clients and other consultants globally.
• Experience in a multi-cultural environment and demonstrated cross-cultural awareness.
• In depth knowledge of operational conditions in Southeast Asia / Asia.

Preferred

• Project management skills and certification
• Basic knowledge of information security/cyber security
• Experience working in multi-disciplinary teams

Qualifications and Specialist Skills

Essential

• Significant professional experience in a related field (crisis management, business continuity, security, etc.).
• Completed a university degree in a relevant field, including, but not limited to, strategic and security studies, international relations OR currently undertaking related studies.

Preferred

• Project management experience and/or certification
• Business continuity management and crisis management specialist skills
• Qualifications in standards specific to business continuity management, and or security management (e.g., BCI/CBCP certifications etc.)

• Conform to and enforce policies, procedures & rules, and regulations as laid down by Accor and the Hotel to achieve the highest levels of uniformity and guest service
• Directly report to the Assistant Safety and Security Manager / Safety & Security Manager
• Responsible for maintaining the highest level of security within the Hotel at all times whilst on duty
• Protect all guests’ patrons and employees of their belongings
• Ensure the Hotel’s property is well protected
• Take charge of the Hotel Security during duty hours
• Responsible for securing all hotel properties, staff, and clientele following the procedures as stipulated in the security manual
• Enforce the Hotel’s Rules and Regulations
• Strive to implement the Accor Vision and demonstrate active use of the Accor Values
• Record details of significant incidents and activities in the logbook during his shifts
• Ensure all Lost and Found properties are recorded in the Security Management System, hand them over (non-valuables) to the Housekeeping Department as soon as possible, and keep the Duty Manager informed
• Maintain a Hotel Logbook on incidents, complaints, etc., and refer them, if required to the appropriate department for follow-up action

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are looking for a SOC Engineer (Shift) to join us in our mission to enhance Singapore’s competitiveness as a trusted ICT hub for citizens and businesses. This role will be a 2-year rolling contract employment.

A brief summary of your job responsibility:

• Act as Incident first responder, reviewing and verifying system alerts
• Perform security incident discovery, triage, and remediation plan coordination.
• Daily analysis of SIEM events to identify malicious events and define use-cases to alert the operations team on threat events.
• Identified and onboarded assets into SIEM with all necessary use cases, dashboards, and reports.
• Monitoring of security procedures and practices; recommend optimizations and improvements when gaps are identified
• Provide support on IDS, SIEM, vulnerability management systems (VMS) and advanced endpoint detection/prevention.
• Escalate security incidents using established policies and procedures
• Any other ad-hoc duties as assigned by the SOC Manager

To succeed in this role, you will ideally have:

• Experience with analysis of server, network and web security events.
• Working experience with SIEM and VMS support tools.
• Security certifications like SSCP and CISSP will be an added advantage
• ITILV4 foundation certified is preferred.
• Strong interpersonal communication skills, verbal and written.
• A team player and can also work on own initiative.
• Willing to work on 12-hour shift pattern.

Join us and discover a challenging and rewarding career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now"

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

• Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
• We promote a learning culture and encourage you to grow and learn.
• A competency framework is in place to help you grow your career with us.
• Contract Staff enjoys the same benefits as Permanent Employees.

We’re searching for a Senior Network & Security Engineer (L3 Support) to be part of our diverse team of talent here at NCS!

Overview

As a Network and Security Engineer (Level 3 Support), you will be responsible for providing advanced and in depth technical support and troubleshooting for network and security issues. You are required to have a very strong understanding of network infrastructure, security protocols, and the ability to work in a 24x7 environment.
 

What will you do?

• SME for Network and Security: Provide escalation support for Network (Cisco, Aruba, Alcatel, F5) and Security Products (Check Point, Palo Alto and Fortinet)
• Troubleshoot and Resolve Issues: Provide advanced to in-depth troubleshooting for network and security incidents, including routers, switches, firewalls, VPNs, and other network devices.
• Incident Response: Respond and resolve network and security incidents in a timely manner, ensuring minimal downtime and impact on operations and strict adherence to committed SLA. First responder to Priority 1 incidents and resolved incidents within OneCare contractual SLA
• Documentation: Maintain detailed documentation of network configurations, changes, and incidents. Create and update technical documentation and standard operating procedures.
• Collaboration: Work closely with Level 2 and Level 1 support teams, remote and field support network/security engineers to resolve complex issues and improve network performance.
• On-call Support: Provide 24x7 on-call support on a rotating basis, ensuring availability to address critical issues as they arise

 The ideal candidate should possess:

• Diploma / Degree in Computer Science / Computer Engineering / Information Technology related field, or IT equivalent
• Preferably 5 or more years of working experience with focus on network and security support roles
• In depth knowledge of network protocols (TCP/IP, DNS, DHCP), network devices (routers, switches, firewalls), and security technologies (VPN and IDS/IPS)
• Deep understanding of packet capture analysis and network physical and logical topologies
• Strong verbal and written communication skills, with the ability to explain technical concepts to non-technical users.
• Ability to express oneself to stakeholders
• Willingness to work in a 24x7 environment, including nights, weekends, and holidays as needed

This position is available from January 2025 onwards.

The Security Officer delivers the safety and security measures that meet the requirement of the Hotel Management.

Primary Responsibilities

Manages The Control Room

• Verifies all visitors, guests and contractors of their visit and issue pass to them after verifications.
• Records and issues departmental keys to the colleagues after verification. Acknowledges and records when the keys are returned.
• Reports and documents all incidents in the Security Management Occurrence log.
• Answers to all telephone enquiries in a calm and professionally manner.
• Records and takes pictures of all Loss and Found items surrender by colleagues or others in the “Case Property” form and thereafter to hand over to Housekeeping if there is no claimant.
• Responds to the fire alarm bell activation and activates the CERT members, Decam (Decentralized Alarm Monitoring Station), Hotel Telephone Operator and raised the Fire Alarm Bell Activation Report thereafter.
• Assists in the evacuation when the need arises.
• Assists in managing the Electronic Parking System for the Carpark, including printing the Daily Revenue Report and Settlement Report daily.
• Any other duties assigned by the Security Supervisors and Managers.
• Prepares to assume the role of a CERT member when the need arises.

Carries Out Static Duties

• Ensures a peaceful environment, greets guest coming/going out of the hotel, to report and take action if there is a disturbance.
• Ensures orderly traffic flow, advises drivers of unauthorised parking to park at designated car park and to report and take action if there is disturbance.
• Conducts checks on unauthorised parking, advise the driver to park in designated car parks, to report and take action if there is disturbance.
• Ensures only authorised contractors or supplier’s vehicles is allow to park in the loading bay.
• Ensures smooth traffic movements in the loading bay.
• Ensures the vehicles are parked in an assigned parking lot.
• Ensures no obstruction cause to other vehicles using the loading bay.
• Verifies the identities of all contractors/workers using the loading bay.
• Responds to any emergencies within 3 minutes or less.

Patrols The Hotel Grounds And Buildings

• Residence patrolling for crime prevention and to report of any incidents, disputes disturbances or found properties left unattended.
• Perimeter patrolling to ensure that the hotel’s exterior walls are not vandalised or damaged, ensures the street lamps are in working condition.
• Raffles Arcade Blocks patrolling for crime prevention, providing assistances or enquires from City guests or members of the public.
• Responds to any emergencies within 3 minutes or less.

Involvement As A Member Of The Security Team

• Provides security escorts for finance department to the bank.
• Witnessing for colleagues depositing sales proceeds at finance department.
• Crowd Control Duty during major events or VVIP visits.
• Prepare to assume the role of the CERT members and First Aider.

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Descriptions:

In this role, you will join a team of six members from Sopra Steria to support one of our government project. The scope of work includes:

1. Security Risk Assessment
2. Security Policies, Standards, Guidelines, And Procedures Review
3. Security Design
4. Application Security
5. Vulnerability assessment and
6. System Security Acceptance Testing

You will be an expert in the field of Cloud Security.

Responsibilities:

• Provide expertise in cloud security and be a trusted technical advisor and solve complex cloud security & compliance challenges.
• Design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment.
• Perform risk assessment for Cloud Computing Environment and Service
• Hands on and deep knowledge of security principles.
• Experience managing customer projects to completion, working with engineering teams, sales and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.

• Minimum of 3 years of experience in Cloud Security (AWS will be highly advantageous)
• Strong understanding of security frameworks
• Fluent in spoken and written English
• Ability to work closely with international team in a professional manner
• Excellent verbal and written communication skills, including ability to solve complex technical situation and explain it clearly
• Relevant certifications, such as AWS Certified Security – Specialty (SCS-C01), Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), are a plus.

• Regular team buildings
• 18 leave days / year
• HSBC Insurance, GP, Dental, Optical
• Annual bonus
• Working hours: from 9am to 6pm, Monday to Friday
• Training and certifications paths

We’re searching for a Senior/Manager, Client Information Security (Infra) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.
• Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. Eg. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes

Would you like to do the opening of our Mama Shelter Singapore?

THE MISSION? 

Mama likes everything to work perfectly, and you make this happen! ❤️ You ensure all the preventive and curative maintenance operations of the establishment

Control Risks is working with a global household-name company to identify and embed a Physical Security Specialist who will take responsibility for the day-to-day management of the client's security operations in South East Asia. Key duties of the role will include interacting with all corporate cross-functional partners and country leadership teams, vendor management and financial reporting, support for corporate events, and travel security.

This key role will require an individual who is passionate, self-motivated, proactive, quick-thinking, flexible, able to pivot when necessary, thorough and able to juggle multiple and diverse responsibilities with a strong emphasis on organization and unwavering attention to detail at all times. This is a demanding and fast-moving position that requires someone who is a proactive and positive thinker, and able to exercise good judgment and communication.

Responsibilities:

• Managing the day to day security operations at the client's corporate locations across South East Asia.
• Drive multiple security projects effectively including management of key performance indicators, vendor management and quality control. This will often include liaising with other members of the Enterprise Security or Environmental Health and Safety team to ensure alignment on new projects.
• Where necessary, contextualize and add regional specific vigor to global programs to further optimize overall program delivery.
• Develop key relationships with the client's corporate workplace teams, the landlord and third-party security vendors, ensuring cohesion across the site’s security and safety functions.
• Develop bespoke training packages in support of existing guard force and corporate security.
• Development and implementation of site incident management procedures.
• Support and liaise with the EHS team to ensure all standards are maintained across all facilities.
• Ensuring effective communication and reporting to the Regional Head of Security Operations and work towards the standards set by the wider security team.

• 5+ years experience in corporate security, and operational management.
• Bachelor’s degree required (or higher), relevant certifications (ex. CPP) a plus
• General understanding of security systems (cameras, card readers, radios, etc.)
• General understanding of incident response and crisis management
• A team player with an ability to supervise several projects in a fast-paced environment.
• Access to high-quality vendors, production support staff contacts.
• Ability to respond after hours to important, timely or urgent manners.
• Ability to be discreet and handle confidential information.
• Proficiency in Google Docs, Sheets, Gmail, Gdrive, MS Word, Excel.
• Understanding of how to prioritize and respond accordingly.
• Willingness to continue learning to ensure understanding of Netflix enterprise security approach.
• Strong written and verbal communication skills.
• Willingness to take educated risks and think out of the box.

Responsibilities

• Perform Blast Effect Analysis on buildings, facilities, structures, facades etc. in accordance with codes/standards such as UFC 3-340-02 & ASCE 59-22.     
• Collaborate with Security Consultants in performing Threat, Vulnerability and Risk Assessments for projects
• Work closely with building and security consultants to understand the design intent and risk-based security strategies of each project, and develop protective designs to achieve the desired protection outcome
• Prepare detailed reports for Blast Effect Analysis, Structural Resilience Studies, and any other reports as required by the projects
• Prepare and deliver detailed specifications and drawings of protective measures for tender/ construction
• Collaborate and coordinate with in-house and external specialist consultants in delivering the best project results

Our Client is a telecommunications service provider in Singapore. With the expansion of the team, they are looking for a L1 Security Analyst to join the team.

Responsibilities: -

·       24 x 7 triage, short-turn analysis of real-time security alerts & generate tickets, or escalation to L2 Security Analysts that are not in the Automation Runbook.

·       24 x 7 escalation to resolver upon receiving automated generated incident tickets on the health of SOCaS infrastructure, IT/OT managed security devices, or from the website defacement restorer activation alert.

·       24 x 7 manage problems till closure which include:

o   Ensure that Service Level Agreements are met.

o   Liaising with customers with regards to information security incidents

o   Provision and performance of remedial actions to enhance customers' network security posture

·       Min 1 year working experience in IT Infrastructure Operation and/or Support.

·       Willing to work with 24/7 shift pattern that includes weekend work.

·       Sound fundamental knowledge on Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10 and web servers (e.g. Apache, IIS, Nginx, etc.).

·       Understanding of firewalls, endpoint detection and response (EDR), IDS/IPS, WAF, etc.

Desired qualifications:

·       Bachelor’s degree / Polytechnic Diploma in Computer Science, Information Technology or Information System.

·       Experience in scripting (e.g. shell scripting, Macro, PHP, Perl, Java, etc.) and/or Regular Expression.

·       Experience with TCP/IP packet analysis / network debugging with tcp dump or similar.

·       Experience with web security concepts and technologies such as web application firewall, proxy.

·       Experience general security technologies, processes, and concepts.

·       Industry recognized security certifications (GCIA/GCIH, CISSP, CISA, CEH, etc.).

·       Experience writing/decoding exploit, vulnerability, and attack detection signatures.

·       Experience working with a SOC team is an advantage.

- Monthly allowances and end-of-contract bonus

• Western Digital’s Global Physical Security Organization is seeking a highly talented and motivated individual to join the team. Our business unit is a 24/7 model where you may be required to work outside of normal business hours to address critical operational and technology issues. You must be able to drive complex technical solutions that provide scalability, efficiency, and effectiveness. This position is primarily responsible for the APAC regions physical security systems program, but the role will also provide guidance and support for our locations globally. 

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Agile in addressing troubleshooting issues and service requests
• Responsible for knowing status, locations of, quantities of, vendor, model, make and technical specifications of each system component, including connectivity requirements.
• Monitor performance of the system, highlight any issues, follow up on solution to resolution:
  • Initiate purchase order, service call, work order, etc., as necessary.
  • Verify that work was completed as requested.
• Provide training and guidance on security systems; create and maintain operator instructions, procedures, security system drawing, and related documentation as appropriate.
• Partner and drive physical security operations and systems technology with internal business units like IT, Real Estate, Legal, EH&S, Finance, Procurement when required
• Strategically improve system end users experience on a variety of applications
• Define physical security systems and technology roadmaps that drive overall program success
• Skilled in presenting solutions at a high level to internal key stakeholders
• Integrate and perform case studies, conduct research into product requirements to improve security systems and technology
• Familiar with internal tools, tracking and reviewing requests such as ServiceNow, Smartsheet, etc.
• Assist in deployment of enterprise level access control systems, video management systems, visitor management systems, etc.
• Work with multiple third-party vendors and SOCs to help maintain the global standard in security systems and technology
• Familiar with Windows, Linux and SQL, Networking, and IoT devices
• You will work to integrate a variety of security devices into existing network infrastructure including but not limited to: PSIM, C-Cure, Lenel, AMAG, Milestone, AXIS, ISOS, SWN, etc.
• Participate, oversee and drive project meetings and execute end-to-end, ensuring on-time delivery
• Configuring and maintaining APAC Security Systems, including hardware, system software, and security applications.
• Diagnosing and resolving hardware, software, networking, and system issues when they arise.
• Monitoring system performance to ensure everything runs smoothly and securely.
• Researching and recommending new approaches or system to improve the security system infrastructure. Enhance the current security model.
• Providing technical support when requested or be available at the site for further assistance.
• Works with users to identify system requirements; develops processing procedures and systems modifications to meet these specifications.
• Deploy, maintain, and troubleshoot core business applications, including application servers, associated hardware, endpoints, and databases.
• Document any processes, which employees need to follow in order to successfully work within our security systems

As a Cyber / Network Security Maintenance Associate Engineer, you are required to provide maintenance support to clients. You will play a key part in Technology Services Delivery team to ensure security solution maintained at the highest quality and standard.

What will you do?

• Perform research on latest vulnerabilities
• Provide technical consulting and advise 
• Provide post-installation troubleshooting and technical support by phone or remotely
• Keeping up-to-date with the latest news and threats in the security industry 

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within Identity and Access Management & PKI track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building within Identity and Access Management & PKI technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in Identity and Access Management & PKI cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within specialization track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

▪ Assist with security incident management and response activities
▪ General day-to-day support on managing and responding to security alerts from systems and end users
▪ Perform daily, weekly, and monthly security checks, reconciliation and compliance checks and investigate exceptions
▪ Completing client security requirement questionnaires and support the bidding process
▪ Identify and raise awareness of security risks
▪ Develop and enhance security policies, processes, procedures, and technical controls to strengthen Turner & Townsend’s security capabilities and resilience to cyber threats
▪ Take a proactive role in identifying security risks, mitigations, and opportunities to strengthen Turner & Townsend’s resilience to cyber-attacks and security incidents
▪ Participate in the design and implementation of systems and applications
▪ Develop user and technical training guides
▪ Maintain and manage the IT Risk register
▪ Test DR plans and capabilities to ensure they work as designed, identifying gaps and lessons learnt and work with the business to drive continual development and enhancement

We are looking for a competent and experienced security professional to join our expanding Crisis and Security Consulting practice in Singapore.

The role will involve working on various security-led projects across the South-east Asia region by providing support to Control Risks’ design team with the design deliverables.

Role tasks and responsibilities:

• Attend weekly meetings with the project stakeholders, be very attentive to details and minutes all actions that are related to our discipline.
• Deliver security design consultancy assignments ranging from simple to complex tasks.
• Drafting design stage documents such as technical specification documents, power loads calculation, tender evaluation reports, etc.
• Keep abreast with advances in security technology.
• Complete assigned tasks within the given time frames.
• Attend onsite inspections and testing & commissioning.

• Minimum of five (5) years’ experience as a security professional, or in a related field
• Capable of working with CAD 2D to a level that can deliver design layouts that match our internal standards
• A sound understanding of the design engineering elements
• Proven track record of successful security design consultancy projects, preferably within Asia or similar environment.
• A good understanding of all project design stages referred to as RIBA design stages, such as Conceptual Design, Developed Design, Technical Design, etc.
• Good knowledge and experience in design and implementation of integrated electronic security systems and physical security measures such as:

1. Video surveillance systems.
2. Access control systems.
3. Intruder detection systems.
4. Intercommunications systems.
5. Security fences, gates, barriers, locking systems, secure rooms.

• Working knowledge in the design of local security equipment rooms, main security equipment rooms and control room
• A good understanding on how to build a dedicated secure security network with considerations on network bandwidth and cybersecurity requirements
• Good knowledge and understanding of the well-known security management systems (i.e., Genetec, Gallagher and the likes)

Qualifications & Specialist Skills:

• An Engineering degree in electronics and electrical engineering /communications is preferred
• Strong communication skills – written and oral (informal and presentation to board level)
• Good skills in working with project management tools (i.e. Microsoft project or Primavera).

What we seek to accomplish together:

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• Conduct security risk management exercise
• Conduct table-top exercises
• Conduct vulnerability assessment, coordinate penetration tests activities
• Conduct information security awareness training
• Responsible for the development and management of customer’s security incident response plan.
• Lead and support customer in the matters of security incident resolution and response.
• Be the point-of-contact/customer liaison to assist and advise customer for ICT security related matters
• Project managed the activities and deliverables during the implementation phase.