Total 4 job vacancies by Anext Bank Pte. Ltd.

We’re on a mission to make financial services accessible and effortless for SMEs. As one of Singapore’s latest digital wholesale banks fully regulated by MAS, we’re committed to continuous innovation to bring about simpler, safer and more rewarding financial services. #bringingaboutwhatsnext

We are looking for a passionate application security professional to be part of ANEXT Bank’s Cyber Security team, to protect our applications and infrastructure from the ever-evolving threats.

Qualified candidates are expected to:

• Perform application and infrastructure vulnerability assessments, source code reviews, and internal penetration tests on web and mobile applications to identify vulnerabilities and security risks
• Own and continuously enhance the bank’s application and infrastructure vulnerability management process, including end-to-end identification, tracking and remediation work
• Work with external pentest team to perform independent penetration tests on web and mobile applications, triage the security findings and manage the remediations required
• Participate in the system design and architecture security reviews of business projects to ensure security is incorporated into the early stages of the project development lifecycle
• Work with our dev and devops team to ensure security is integrated into the SDLC, provide expertise in advising dev team on the mitigation of identified vulnerabilities and application security risks
• Continuously enhance/improve the integration of security controls into CI/CD pipelines
• Conduct training to dev team on secure coding best practices and vulnerability remediation
• Ensure applications are designed and implemented following standard security principles such as layered defence, least privilege, etc
• Respond to and investigate security incidents related to application security
• Manage the bank’s application security systems
• Maintain and enhance application security policies, standards and operational procedures

Requirements:

• BS/MS in Computer Science / Computer Engineering / Cybersecurity with at least 5-year experience in cyber security and at least 2-year experience in penetration test/red teaming and vulnerability management
• Experience in conducting application and infrastructure security assessments
• Experience with application security and vulnerability assessment tools (e.g. Burp Suite, Kali Linux, Fortify, Nessus, NMAP)
• Strong analytical and communication skills in real time problem-solving
• Fast learner and keeps abreast with relevant vulnerability management and penetration test technology
• Relevant certifications such as OSCP and CISSP will be an added advantage

We’re on a mission to make financial services accessible and effortless for SMEs. As one of Singapore’s latest digital wholesale banks fully regulated by MAS, we’re committed to continuous innovation to bring about simpler, safer and more rewarding financial services. #bringingaboutwhatsnext

We are looking for a highly motivated Bank Security Engineer who will report directly to the Chief Information Security Officer (CISO). The ideal candidate will possess advanced proficiency in firewall and Web Application Firewall (WAF), Mobile Device Management (MDM), cloud desktop security, bastion host configuration, as well as Identity and Access Management (IAM) and Key Management Service (KMS) administration. In this pivotal role, you will collaborate closely with our Security Engineer Lead to design, deploy, and sustain the bank's security infrastructure. Your primary objective will be to fortify our defenses against cyber threats while ensuring adherence to regulatory mandates.

Job Description:

• Manage the end-to-end lifecycle of security solutions with Infra team.
• Implement and oversee the configuration of firewall and Web Application Firewall (WAF) systems to safeguard the bank's applications against external threats and malicious attacks.
• Collaborate closely with the infrastructure team to facilitate the monthly rollout of security patches across all cloud instances and data centre security systems.
• Administer Mobile Device Management (MDM) solutions to ensure secure access and management of mobile devices used by bank employees.
• Oversee the formulation and maintenance of cloud desktop security policies, including the coordination with the infrastructure team to apply security patches. This ensures the secure access to banking applications and data.
• Configure and manage bastion hosts to provide secure remote access to internal banking systems for authorized users, including employees and third-party partners.
• Administer Identity and Access Management (IAM) systems to control user access and permissions across the bank's internal applications and databases.
• Oversee Key Management Systems (KMS) and Hardware Security Modules (HSM) to facilitate the lifecycle management of digital certificates and cryptographic keys, including generation, distribution, rotation, and revocation of digital certificates and cryptographic keys.
• Implementation of various kernel hardening techniques in accordance with industry standards.
• Continuously evaluate and enhance overall security posture of cloud environments and maintain a good security score.
• Troubleshoot and resolve device outages with technology teams, engineers and vendors. Perform the incident and problems management for security systems.
• Ensure security systems are implemented and operated in compliance with regulatory requirements, the established security standards and control procedures.

Requirement:

• BS/MS in Computer Science / Cybersecurity with 5 years and above relevant experience in cyber security, with a focus on network security, endpoints security and identity access management domains
• Experience implementing, operating cloud-based security systems and services
• Experience solutioning and incorporating technical security controls align with industrial framework and regulatory requirements such as NIST CSF framework, MAS TRMG, MAS Cloud Advisory
• Hands-on experience deploying, operating, automating security systems
• Strong working knowledge of cloud computing, OS, networking (TCP/IP, DNS, proxy, etc) and its security aspects
• Keeps abreast with relevant vulnerabilities, response and mitigating technical controls
• Strong analytical skills and a problem-solver
• Relevant certifications in CISSP, CISA, GSEC, CEH will be an added advantage

We’re on a mission to make financial services accessible and effortless for SMEs. As one of Singapore’s latest digital wholesale banks fully regulated by MAS, we’re committed to continuous innovation to bring about simpler, safer and more rewarding financial services. #bringingaboutwhatsnext

Key Responsibilities:

• Design, develop, and maintain payment processing modules within our core banking system.
• Collaborate with various stakeholders to ensure high-quality deliverables.
• Participate in code reviews, offering constructive feedback to team members to enhance code quality.
• Analyze and document technical specifications and requirements for payment functionalities.
• Troubleshoot and resolve issues related to payment transactions and system integrations.
• Ensure compliance with regulatory requirements and industry standards related to payment processing.
• Conduct unit testing and support integration testing to ensure system reliability.
• Work with project managers to provide timely project updates and meet deadlines.
• Work on various modules of our core banking system.

Job Requirements:

• Bachelor’s degree in Computer Science, Information Technology, or a related field, with at least 5 years of experience in Java development.
• Proficiency in Java frameworks (e.g., Spring, JUnit) and RESTful web services.
• Strong understanding of database technologies (e.g., MySQL, Oracle) and SQL.
• Excellent problem-solving skills and attention to detail.
• Demonstrated ability to work effectively in a team environment with strong interpersonal skills.

Preferred Skills:

• Knowledge of microservices architecture and cloud technologies.
• Familiarity with API integration and third-party payment solutions.
• Familiarity with payment gateways, transaction processing, and financial regulations.

We’re on a mission to make financial services accessible and effortless for SMEs. As one of Singapore’s latest digital wholesale banks fully regulated by MAS, we’re committed to continuous innovation to bring about simpler, safer and more rewarding financial services. #bringingaboutwhatsnext

Responsibilities

• Collaborate with product owner and cross-functional teams to understand business requirements and design scalable technical solutions for Open Banking initiatives
• Develop microservices using Springboot and build APIs to integrate with external partners and platforms
• Drive technical walkthroughs with external partners, ensuring effective communication on the technical specifications and alignment on the integration processes
• Ensure the reliability, performance, and security of the implementation, troubleshooting and resolving issues as they arise
• Involve in the full software development life cycle, from requirements gathering to development, testing, deployment and support
• Participate in other enhancement projects to implement features in the core banking system

Requirements

• BS/MS degree in Computer Science/Engineering or a related subject with at least 5 years of work experience;
• Proven hands-on software development experience in Java; Able to write well-designed, testable, efficient code; Good knowledge of relational & non-relational databases, SQL, and ORM technologies;
• Excellent understanding of the basic principles of distributed system and microservice architecture； Proficiency in developing microservices using Springboot/Kafka/Redis/MQ/RPC and other open source frameworks;
• Strong understanding of RESTful API design principle and experience with OAuth for secure and authentication;
• Solid troubleshooting skills and the ability to analyze and resolve complex integration issues
• Experience with public cloud/cloud native/Kubernetes is an advantage;
• Good communication and collaboration skills, with the ability to work efficiently with multiple cross functional teams including business, product, development, security and QA;