• Lead the development and execution of new business strategies and initiatives
• Identify and evaluate potential new business opportunities, including new projects, new brands, and expansion into new countries
• Conduct market research and analysis to assess the viability of new business opportunities
• Develop and manage relationships with key decision-makers at potential new partners and customers
• Negotiate and close deals for new business opportunities
• Manage and oversee the implementation of new business initiatives
• Track and measure the performance of new business initiatives
• Prepare and present reports to senior management on new business initiatives

*Connections with Building Managers, Managing Agents of Residential, Commercial and Industrial would be a bonus!

Role:APPLICATION SECURITY ENGINEER

JD:

RESPONSIBILITY

• Conduct white box and black box security scan, harden systems and application platform

• Develop scripts to automate systems hardening and security vulnerability assessment

• Maintain security test suite in QA build

• Optimize system performance and reliability to enhance user experience.

• Conduct code reviews to ensure code quality and securityWork with Software Quality Engineer on system integration testing

• Work with Software Quality Engineer to manage defect life cycle

• Work with Software Quality Engineer to improve testing processes and tools

• Take on secondary role as an Application Performance Engineer or Software Quality Engineer

• Collaborate with cross-functional teams to enhance security in the development pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 2 years of experience in application security vulnerability assessment, analysis and remediation

• Experience in agile development environment will be an added advantage

• Experience with continuous integration and continuous delivery, using Gitlab or other similar tools will be an added advantage

• Experience in public cloud providers such as GPC, GCC (i.e. AWS, Azure,Google Cloud) will be an added advantage

• Experience with OWASP ZAP, Burp Suite, SQL Map, Nessus, Nmap, Fortify WebInspect or equivalence will be an added advantage.

• Experience with Checkmarx or equivalence will be an added advantage

• Certified Secure Software Lifecycle Professional (CSSLP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP) or equivalence will be an added advantage

• Experience using Dynamic Application Security Testing (DAST) Tools such as ZAP, Burp Suite, Micro focus WebInspect or equivalence will be an added advantage.

• Experience using Static Application Security Testing (SAST) Tools such as Micro focus Fortify, Checkmarx or equivalence will be an added advantage.

• Security testing-specific certifications such as Offensive Security Certified Professional (OSCP), GIAC Certified Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), CREST Registered Penetration Tester (CRT) or equivalence will be an added advantage.

• Risk management-specific certifications such as Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Professional (CISSP) or equivalence will be an added advantage

• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Key Responsibilities:

Cybersecurity Risk Assessment & Mitigation:

• Cyber Risk Assessment: Conduct comprehensive cyber risk assessments in support of technology initiatives, identifying IT-related risks and recommending appropriate security controls to mitigate those risks.
• Risk Monitoring & Management: Continuously track and manage risk mitigations and exceptions, ensuring that risk reduction measures are implemented and that monitoring capabilities are integrated into the solutions to detect and respond to evolving threats.
• Compliance & Best Practices: Ensure that all security measures and controls are in compliance with internal policies, industry standards, and regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS).

Network Security Design & Implementation:

• Solution Design: Design High-Level (HLD) and Low-Level (LLD) network security solutions, tailoring the security architecture to meet specific business requirements and security needs.
• Firewall & UTM Solutions: Implement and manage firewall and Unified Threat Management (UTM) solutions, including but not limited to Checkpoint, Fortigate, Palo Alto firewalls, and AWS-based security configurations.
• Encryption & Authentication: Design and deploy robust encryption technologies (e.g., Symantec 12.1.4) and implement two-factor authentication solutions (e.g., RSA Secure ID) to ensure secure access to corporate resources.
• Cloud Security: Manage and secure cloud environments, including AWS firewalls, AWS Shield, and AWS WAF, to safeguard cloud-based assets and services.

Security Incident & Problem Management:

• Incident Management: Respond to and resolve security incidents, monitoring for any unauthorised access, vulnerabilities, or breaches in the network. Investigate the root cause and implement remediation strategies.
• Change Management: Oversee changes in the network security environment, including the installation, configuration, and maintenance of firewalls, load balancers (e.g., F5 LTM/ASM), and proxy servers (e.g., Bluecoat, ZIA, ZPA).
• Proxy & Web Security: Manage and secure proxy servers and web security gateways (WSGA, Websense), ensuring that all outbound and inbound traffic adheres to the organisation’s security policies.

Global Client Support & Collaboration:

• Client Communication: Act as a liaison for global clients, understanding their security requirements and proposing tailored solutions that address their unique needs.
• Client Support: Provide ongoing support for security infrastructure deployed across various client locations, including resolving incidents, handling requests, and managing vulnerabilities.

Security Monitoring & Reporting:

• Network Monitoring: Utilise network monitoring tools (e.g., SolarWinds, CA Spectrum, and E-Health) to proactively identify potential threats and vulnerabilities in the network.
• Reporting & Documentation: Maintain detailed records of risk assessments, security incidents, mitigations, and system configurations. Prepare reports for management and stakeholders on security posture and risk mitigation progress.

Training & Awareness:

• Security Awareness: Educate internal teams and clients on best security practices, risk management strategies, and incident response protocols.
• Continuous Improvement: Stay updated with the latest trends, tools, and technologies in network security, ensuring the company’s security measures remain current and effective.

Job Requirements:

Qualifications:

• Experience: 10+ years of experience in network security, systems security, and risk management, with a proven track record in implementing network security solutions and managing complex security infrastructures.
• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
• Certifications:
  • ITIL Foundation (V3 or higher)
  • VMware 6.x or similar (preferred)
  • Relevant certifications in network security such as CISSP, CISM, or CompTIA Security+.

Technical Skills:

• Network Security: Expertise in designing and implementing network security solutions, including firewalls (Checkpoint, Fortigate, Palo Alto), VPN solutions, and UTM.
• Cloud Security: Proficient in securing cloud environments such as AWS, including AWS WAF, AWS Shield, and AWS Firewall management.
• Proxy & Web Security: Experience with proxy servers and web security gateways such as Bluecoat, ZIA, ZPA, WSGA, and Websense.
• Network Monitoring: Hands-on experience with network monitoring tools like SolarWinds, CA Spectrum, and E-Health to ensure security and performance.
• Authentication & Encryption: Strong knowledge of authentication mechanisms (e.g., RSA Secure ID Two-Factor Authentication) and encryption solutions (e.g., Symantec 12.1.4).
• Incident Management & Troubleshooting: Experience in handling security incidents, conducting root cause analysis, and troubleshooting security issues.
• Firewalls & Load Balancers: Expertise in managing firewalls, load balancers (e.g., F5 LTM/ASM), and network configurations to ensure a secure and efficient IT infrastructure.

Soft Skills:

• Analytical & Problem-Solving: Strong analytical skills with the ability to assess complex security risks, identify vulnerabilities, and recommend effective solutions.
• Communication Skills: Excellent written and verbal communication skills to liaise with clients, teams, and management. Ability to explain complex security issues to non-technical stakeholders.
• Collaboration & Teamwork: Able to collaborate with multiple teams, both internal and external, to implement solutions and drive security initiatives.
• Client-Focused: Strong client management skills with the ability to understand and address specific security needs for global clients.

Cyber Security Support

Network Security Support - knowledge

Network Solutions - Symantec

KEY ROLES AND RESPONSIBILITIES

• Perform Network Security operations.

• Responsible for installation/configuration/upgrade of security infrastructure (Firewalls).

• Prepare documentation for security technical standards, standard operational procedures, and hardening standards.

• Coordinate and implement appropriate technical security systems.

• Monitor, analyse, respond and resolve security incidents, conduct investigative procedures and implement corrective measures.

QUALIFICATIONS & EXPERIENCE

• Degree in Computer Science / Engineering or its equivalent.

• Knowledgeable in Network Security, Cyber Security in the operational environment.

• Expertise across a variety of security products including firewalls

• Must have experience in Firewalls management and migrations of Firewalls.

• Must have experience in network operational support.

APPLICATION SECURITY ENGINEER RESPONSIBILITY :

• Conduct white box and black box security scan, harden systems and application platform • Develop scripts to automate systems hardening and security vulnerability assessment

• Maintain security test suite in QA build

• Optimize system performance and reliability to enhance user experience.

• Conduct code reviews to ensure code quality and securityWork with Software Quality Engineer on system integration testing

• Work with Software Quality Engineer to manage defect life cycle

• Work with Software Quality Engineer to improve testing processes and tools

• Take on secondary role as an Application Performance Engineer or Software Quality Engineer

• Collaborate with cross-functional teams to enhance security in the development pipeline

EXPERIENCE AND SKILLS NEEDED :

• Min 2 years of experience in application security vulnerability assessment, analysis and remediation

• Experience in agile development environment will be an added advantage

• Experience with continuous integration and continuous delivery, using Gitlab or other similar tools will be an added advantage

• Experience in public cloud providers such as GPC, GCC (i.e. AWS, Azure, Google Cloud) will be an added advantage

• Experience with OWASP ZAP, Burp Suite, SQL Map, Nessus, Nmap, Fortify WebInspect or equivalence will be an added advantage.

• Experience with Checkmarx or equivalence will be an added advantage

• Certified Secure Software Lifecycle Professional (CSSLP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP) or equivalence will be an added advantage

• Experience using Dynamic Application Security Testing (DAST) Tools such as ZAP, Burp Suite, Micro focus WebInspect or equivalence will be an added advantage.

• Experience using Static Application Security Testing (SAST) Tools such as Micro focus Fortify, Checkmarx or equivalence will be an added advantage.

• Security testing-specific certifications such as Offensive Security Certified Professional (OSCP), GIAC Certified Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), CREST Registered Penetration Tester (CRT) or equivalence will be an added advantage.

• Risk management-specific certifications such as Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Professional (CISSP) or equivalence will be an added advantage

• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

We take great pride in delivering impeccable hospitality at the Hotel Miramar Singapore. Our well-equipped hotel is dedicated to providing modern, comfortable living and unparalleled friendly service. Our exceptional location is also one of the many reasons people choose to stay with us. We offer opportunities for career stability and advancement. We welcome you to join us!

The ideal candidate is a motivated, well-organized individual who possess strong leadership, analytical skills, problem-solving abilities, and collaboration skills.

Highlights:

• Attractive Salary Package with AWS and Performance Bonus
• Staff meals, dental and medical benefits, birthday voucher, F&B discounts, and complimentary season parking for staff.
• Career Progression
• Training Opportunity

Responsibilities:

• Manages Key Access Control
• Maintain the Log Book for contractors working in the hotel in accordance with company’s health and safety policies
• Operates, checks and performs security surveillance on the CCTV system
• Patrol the hotel building, premises and perimeter on a daily basis ensuring safety, and send reports.
• Member of the CERT team to provide assistance during the triggering of a fire alarm
• Regulate traffic control at the driveway
• Monitor suspicious packages and be aware of bomb and terror threat procedures
• Investigate and report all allegations of theft, criminal damage and other incidents
• Maintain the Security Log Book and send Incident Reports
• Manage undesirable behaviour in a professional manner, intervening and defusing potential altercations
• Handle Loss and Found items
• Liaise with Police in the absence of Security Supervisor
• Report any maintenance or hazard issues to the supervisor on duty
• Adhere to all Health and Safety Regulations
• Any other duties assigned by the Security Supervisor.

Requirements:

• 6 days’ work week.
• Possesses valid Security License issued by PLRD/SIRD.
• At least 1 year of experience in a similar capacity in the Hospitality industry.
• Positive attitude and able to take responsibility.
• Able to communicate clearly and work in a team.
• Able to work on rotating shifts, weekends and public holidays.
• Computer literate

HOW TO APPLY:

We want to hear from you! Interested candidates are invited to email your updated resume by 18 Jan 2025.

Walk-In (Singaporean/Permanent Resident only) :

You can visit the HR Office at Hotel Miramar any time from Monday to Friday, between 10:00 AM and 4:00 PM. Find us at room #02-25.

*Ensure your resume provided to us does not contain your full NRIC number during your job application. Only short-listed candidates will be notified