Total 11 legal public security job vacancies in Engineering category in george town

Profile Summary:

The Senior Systems Engineer supports security systems and operations administration, monitoring and maintenance. Monitors security alerts and events. Collects and documents contextual information based on established practices and supports the preparation and publishing of security advisories. Assists with the analysis of security-related information and events, escalation of incidents for validation and remediation.

Able to be alert and vigilant in performing monitoring activities, and is able to analyze and resolve security-related issues critically. He/She communicates clearly in his/her interactions with others and coordinates effectively with his/her team to perform security operations.

Roles & Responsibilities:

Monitor security systems

• Perform non-routine security monitoring activities

• Perform prioritization and allocation of security incidents

• Track security monitoring rules and alerts

• Compile regular reports on the performance of security operations

Maintain security operations

• Assist with the implementation of agreed security system changes and maintenance routines

• Assist with implementation of new security programs

• Support vulnerability, penetration testing and assessments

• Support the development of reports on security penetration testing results

• Recommend security products, services and/or procedures

• Support the alignment of security systems with established service agreement standards

• Support the implementation of new enterprise security architecture, technologies and enhancements

Respond to queries

• Support live response to security issues

• Support investigation of security breaches such as forensic threat investigation

• Support the resolution of security related issues

• Support the simulation of user problems to identify security system drawbacks

• Recommend security system modifications to reduce user problems

Facilitate compliance

• Assist with the implementation security policies, procedures and programs

• Educate users on the security standards and practices

• Identify improvement areas to existing security policies and procedures

• Deliver user training

Optimize security system performance

• Support piloting of new tools, technologies, and processes as well as installation of hardware and software

• Support security system testing and ongoing optimization or changes such as scheduled upgrades and updates

• Maintain documentation of all optimization activities

• Suggest improvements to operational processes, procedure manuals, and documentation

Requirements/ Qualifications:

• Minimum Bachelor in Computer Science or equivalent
• 2-3 years of relevant experience
• Experience in firewall, network scanning or asoc
• Possessed Risk assessment experience
• Required to be on standby with on-call availability with varied shifts including nights, weekends and holidays.
• Experience in AD/ID administration as per best security practices
• Exposure in IM8 or equivalent

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Plan, deploy and implement Data Loss Prevention on security projects and initiatives
• Responsible for management, advanced configuration, monitoring and fine tuning of Data Loss Prevention solution
• Configure, develop and maintain DLP tools & platform, SIEM and threat detection tools
• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 8 years of experience in IT Incident Management, DLP Operations or SOC
• Experience in multiple channels of DLP implementation and operations
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

• Work closely with internal and external stakeholders to manage the technical risk, security operation and SOC.
• Act as IT security expert for department in the areas of cyber security assessments, PAM, Database, WAF, Firewall and EPP/EDR.
• Perform risk assessment and identify mitigation controls for the risk area identified.
• Enhance and build cyber threat detection user cases and assist in analyzing and reducing false positive.
• Identify infection/compromise in the company utilizing threat intelligence and indicators of compromise (IOCs) from different threat Intel sources and regulators.
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Track, monitor and valid security-related and risk issues, provide an action plan to rectify the issues and prevent recurrence.
• Generate security reports and metrics as required.
• Provide timely and periodic update to managements on its security matters.
• Stay current on the latest Cyber threats, Attacks and vulnerabilities etc.
• Good diploma or degree in Computer Science, Digital Forensic or Engineering preferred.
• Preferred minimum of 6 years of relevant work experience in IT security auditing or security operation role.
• Strong knowledge in internet infrastructure, networking technology and security (i.e. DNS, DHCP, Firewall, WAF, IDS, IPS, VPN, APT and TCP/IP protocols)
• Working experience with major SIEM will be advantage
• Strong practical experience in Cyber security: Cyber kill chain, TTP, threat intelligence, malware triages.
• Demonstrated ability to multitask and is detail-oriented with inquisitive mind during case investigation.
• Good team player with strong communication skills with project teams, stakeholders, senior management, and contractors including both technical and non-technical personnel.
• Professional security related qualification (e.g. CEH, ECIH/GCIH, and ITIL) will be favorable although not mandatory technical skills

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Plan, deploy and implement Data Loss Prevention on security projects and initiatives
• Responsible for management, advanced configuration, monitoring and fine tuning of Data Loss Prevention solution
• Configure, develop and maintain DLP tools & platform, SIEM and threat detection tools
• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 8 years of experience in IT Incident Management, DLP Operations or SOC
• Experience in multiple channels of DLP implementation and operations
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Team Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Plan, deploy and implement Data Loss Prevention on security projects and initiatives
• Responsible for management, advanced configuration, monitoring and fine tuning of Data Loss Prevention solution
• Configure, develop and maintain DLP tools & platform, SIEM and threat detection tools
• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 5-6 years of experience in IT Incident Management, DLP Operations or SOC
• Experience in multiple channels of DLP implementation and operations
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Team Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 5-6 years of experience in IT Incident Management, DLP Operations or SOC
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

Job Description

• Design and develop the red team's customized secure system (remote control program), and ensure that the endpoint protection can be bypassed such as Crowdstrike, Windows Defender, 360 Safeguard
• Reverse analysis of common EDR and HIDS to identify methods for bypassing detection, and embed security principles into the design of system architectures to mitigate the risks
• Research the persistence solutions under common operating systems such as Windows, MacOS, and Linux
• Perform red team engagements related to the periodic review and audit activities of infrastructure security systems (IDC network, office environment, cloud native) and maintain documentation of security standards and procedures

Requirements

• Minimum 3 years of relevant work experience
• Extensive experience in RAT (Remote Access Tool) development, with the ability to customize attack frameworks like Cobalt Strike
• Extensive experience in anti-endpoint protection, providing solutions to bypass the detection of EDR such as CrowdStrike, Windows Defender, 360 Safeguard
• Experience in persistence solutions under common operating systems (Windows, MacOS, Linux)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Proficient in scripting/programming languages like C/C++, Go, PowerShell, Javascript, ASM, etc
• Strong reverse engineering skills with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, etc
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

Purpose

The principal role is to manage the security platform for the 3.5GHz C-Band RAN system so as to ensure the RAN network is adequately protected and secured against cybersecurity threats and incidents.

Duties and Responsibilities:

1. Oversee the overall operation and functions of the JVCo security platform.
2. Monitor Cyber Security Events for the JVCo 3.5 GHz C-Band Radio systems, including: Review event logs from the respective systems and ensure that there are no anomalies in the logs. Raise report on any security incidents to IMDA/SH/M1.
3. Coordinate with StarHub and M1 to administer cybersecurity measures to prevent, manage and respond to cybersecurity threats and incidents.
4. Coordinate with StarHub and M1 to assess and monitor the compliance of the JVCo with the JVCo/SH/M1 organization cybersecurity policy.
5. Work with Starhub and M1 to engage external vendor to perform Vulnerability Assessment in order to ensure compliance to IMDA 5G security requirement.
6. Collaborate with StarHub and M1 to engage external parties to perform external and internal Penetration Test for Network and Applications.
7. Ensure the security platform is up to date with tracking and identifying the latest security threat to the JVCo network and system.
8. Conduct regular scanning of JVCo RAN System to ensure the accuracy of the Asset Inventory and track any Vulnerabilities in the Asset.
9. Facilitate and work with StarHub and M1 in the preparation for any audit (e.g TCS, Mobile TIRA).
10. Administer all system and user management functions of the 5G security platform, which include: Assigning access right to users of StarHub, M1 and the equipment vendors, upgrading softwares and hardwares, and system/database maintenance.

Job Requirements

Qualifications:

1. Degree in Computer / Telecommunication Engineering or related qualification or possess at least three years of related working experience.

Technical Skills:

1. Experience in conducting Vulnerability Assessment and Penetration Test
2. Experience in conducting security audit and setting cyber security policy
3. Experience in managing Cyber Security Operation
4. Candidates with CISSP/CISA/GIAC or equivalent certification is an advantage

Interpersonal skills:

1. Able to work independently and is also a good team player.
2. Possess good communication skills.
3. Strong commitment to work and have good initiatives.

How to apply

Apply via myCareersFuture or send your CV directly to [email protected].

Antina is a company driven by ability and hardwork. We adopt fair employment practices and employment decisions will be based on merit, qualifications and abilities. Antina does not discriminate in employment opportunities or practices on the basis of race, colour, religion, sex, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Visit our company website at www.antina.com.sg for more information.

Job Description

• Design and develop the red team's customized secure system (remote control program), and ensure that the endpoint protection can be bypassed such as Crowdstrike, Windows Defender, 360 Safeguard
• Reverse analysis of common EDR and HIDS to identify methods for bypassing detection, and embed security principles into the design of system architectures to mitigate the risks
• Research the persistence solutions under common operating systems such as Windows, MacOS, and Linux
• Perform red team engagements related to the periodic review and audit activities of infrastructure security systems (IDC network, office environment, cloud native) and maintain documentation of security standards and procedures

Requirements

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, Statistics, or other related fields
• Minimum 3 years of relevant work experience
• Extensive experience in RAT (Remote Access Tool) development, with the ability to customize attack frameworks like Cobalt Strike
• Extensive experience in anti-endpoint protection, providing solutions to bypass the detection of EDR such as CrowdStrike, Windows Defender, 360 Safeguard
• Experience in persistence solutions under common operating systems (Windows, MacOS, Linux)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Proficient in scripting/programming languages like C/C++, Go, PowerShell, Javascript, ASM, etc
• Strong reverse engineering skills with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, etc
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

Job Description

• Conduct cyber risk assessment (red team engagement) in support of technology initiatives to emulate the APT adversary scenarios, and help identify IT related risk and determine appropriate controls to mitigate risks
• Monitor, track, and manage unknown risk mitigations and exceptions, and ensure adequate monitoring capability is incorporated into solutions
• Research the undiscovered vulnerabilities (0-day) against different IT infrastructures, including operating systems (Windows/Linux), cloud native (Kubernetes/Docker), network devices (routers/switches/firewalls/VPNs), and endpoint management (VMware Workspace ONE/IPMI)
• Deliver the exploit code and plugins for identified vulnerabilities

Requirements

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, Statistics, or other related fields
• Minimum 3 years of relevant work experience
• Hands-on experience in writing standalone PoCs of infrastructure vulnerabilities, including writing exploit codes based on known PoCs of vulnerability descriptions
• Familiar with common vulnerability classes such as buffer overflows, command injection, insecure deserialization
• In-depth understanding of modern security mitigations and methods to bypass them (e.g. stack cookies, SafeSEH, DEP, ASLR, CFG, etc)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Experience in vulnerability analysis, fuzzing, reverse engineering, or advanced exploitation techniques, with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, Burp Suite, etc
• Proficient in programming languages like Python, Go, or Java
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

The successful candidate will join a team of Systems Engineer primarily responsible for maintaining on-premises and cloud applications, servers, storage, and network equipment. The position reports to the IT Delivery Manager/Lead and will be expected to plan, install, configure, and manage all aspects of IT infrastructure to ensure reliable, secure, and cost-effective delivery of services.

Staff level, for the successful candidate will be determined based on their experience level and the technologies they are skilled in.

[Primarily Duties]

· Improve and maintain the network infrastructure and network security setup and architecture.

· Design, configure, deploy, and maintain all network and security solutions, both on-premises and in the cloud.

· Proactively work to improve reliability, stability, and security of the cloud and on-premises environments.

· Perform troubleshooting, performance tuning and capacity planning.

· Create and update documentation.

· Work with developers to deploy and maintain applications, including hardening and vulnerability remediation.

· Research and evaluate new hardware and software solutions.

[Secondary Duties- common]

On top of the primary responsibility, he/she will be required to perform the following duties on a rotational basis

1. Daily operation task, e.g. backup, system maintenance, system performance monitoring, end user PC support.

2. After office hours standby duty to attend to system alerts and to provide 2nd level support to our helpdesk and software developer when they encounter problems

Requirements

· Degree/Diploma in Information Technology, Computer Science or equivalent.

· Preferably to have sound working experience in implementing, managing and perform disaster recovery for the following: -

a) Network Infrastructure and security architecture, i.e. Subnetting, Micro segmentation technologies, security zoning, air gapping, WAN optimization, zero trust networking, etc.

b) Kubernetes architecture on premise and Azure

c) Microsoft Azure architecture and security solution

d) Good understanding of networking and security solutions, e.g. Core switch, Cisco Routers, F5/Azure WAF, F5 load balancer/GTM, Allot, Fortigate, Palo Alto.

a) IPv4/v6 Networking

b) Security related certification, CISSP, CEH or equivalent will be desirable but not essential

· Additional experience/certification in the following is not mandatory but will be strongly advantageous:

a) Enterprise Storage

b) AWS experience

c) Worked in a system integrator environment before.

· Candidates must possess strong analytical and problem-solving skills, have good aptitude in learning new skills, be a team player, and can work in a fast pace environment with minimum supervision.