Total 7,202 Information Technology job vacancies in tanah merah harbourfront and marina bay

Job Description & Requirements

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems. Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.

Hands on Responsibilities:

·Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline

·Develop the security acceptance test plan

·Provide expert technical support during the security testing activities

·Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools

·Perform manual or automated security testing using commercial security testing tools

· Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests

· Conduct Whitebox Testing and Secure Code Review

· Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing

· Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing

· Find and pinpoint the vulnerabilities of the assess target system / application

· Document and Report the vulnerabilities found in the system

· Provide professional recommendations / advice to mitigate and resolve the vulnerabilities

· Present the security testing results to the relevant stakeholders

·Provide weekly status reporting on the security testing activity progress

Requirements:

· Bachelor's degree, preferably in computer science or information systems, or equivalent work experience

· Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role

· Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing

· Required Certifications: Any of the followings

o CREST Registered Penetration Tester (CREST CRT)

o Offensive Security Certified Professional (OSCP)

· Knowledge in conducting security testing with the following guidelines and standards

o Open Web Application Security Project (OWASP Top 10 Frameworks)

o Common Vulnerability Scoring System (CVSS)

o Common Vulnerabilities and Exposures (CVE)

o Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors

· High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)

· Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)

· Strong oral and written communication skills, including a demonstrated ability to prepare quality documentation and presentations for technical and non-technical audiences

PURPOSE

The candidate is expected to have deep technical expertise in the use of Data Centre products and their use in the design of Converged Infrastructure through Network, Compute, Storage and Virtualization architecture. The role requires to understand the evolving infrastructure architecture to help the organisation transform to a robust cloud-based architecture, including the migration planning and execution.

KEY ACCOUNTAIBILITIES

• Provide technical guidance to support infrastructure systems and networks
• Proven capability in management of enterprise firewall, switches and other devices.
• Proven capability in architecture solutions in following areas; Server, Network, Database System administration and Data Centre and/or cloud infrastructure.
• Covers the full cycle of Enterprise IT Infrastructure from project management, planning, approval, solutioning, implementation to handover to the operations team on project completion.
• Manage all security programs including metrics to provide early and timely detection, reporting, escalation and remediation of security risks and outstanding issues.
• Leads availability, capacity and continuity management, through providing High Availability and Disaster Recovery of each service and their performance improvements and management.
• Maintain up to date systems documentation based on approved services and change requests.
• This role requires strong co-ordination and problem-solving skills with multiple departments across Group Office and Business Units in executing the infrastructure projects

QUALIFICATIONS / EXPERIENCE

• Degree holder in Computer Science / Information Technology or equivalent with more than 5 years of relevant experience in enterprise level
• At least 3-5 years of solid experience in IT Infrastructure Management and/or IT security

KNOWLEDGE, SKILLS & ABILITY

• CCNA & CISSP certification
• Good expertise in Server, Network Infrastructure, Storage, Virtualization, DR Management and IT Security
• Has relevant experience in at least 3 or 4 of the following:

1. Infrastructure management system, such as puppet, chef, terraform MS
2. Active Directory, MS Exchange, IIS, SharePoint
3. Cisco Network, Checkpoint Firewall, SSL, VPN
4. Virtualization Technology (VMware ESXi, VDI), SAN Storage Management
5. Mobile Devices, Antivirus / AntiSpam solution, Network security solution

• Strong problem solving, management and analytical skills
• Experience in Mobile Apps & Web system Architecture
• Strong team player and is passionate and committed to deliver excellent IT services to stakeholders