Total 7 information security analyst job vacancies in Legal / Public / Security category in Singapore

• Apprised of the current state of computer security in place in the organization
• Technically proficient and up-to-date in basic computer security policies and practices
• Proactive in preventing Cyber-Security Incident

- To perform technical security assessment for IT & Network components - Vulnerability assessment, Penetration testing, Opportunistic Hacking, Web application security testing, Security source code review etc.

- To monitor and track the identified vulnerability, issues and fix detected vulnerabilities to maintain a high-security standard.

- Be familiar with browser, Web service, cloud security, mobile applications security, and operating system security concepts

- Understanding of leading vulnerability scoring standards and ability to translate vulnerability severity as security risk

• Assist in forensic investigation when required.

- Review security logs, security alerts and identify the root cause and resolve the SIEM security alerts

- Performed ad-hoc system related patching of Windows and Linux security patches

- Response to customer email/call ticket in a timely manner

- Performed ad-hoc activities as instructured by the team lead

- Good communication skills and writing skills.

• Plan and oversee the performance of security response via post-incident analysis of intrusion, attack, loss or breach and the identification of root causes.
• Provide guidance on the use of investigation methodology to capture evidence to produce legally defensible results and conclusions.
• Apply analysis across a variety of data sets to develop knowledge of internal and external information vulnerabilities and to uncover hidden insights, patterns and connections.
• Propose mitigation techniques and countermeasures as well as develops cyber security solutions to prevent future attacks.
• Think strategically and adopts a forward-looking perspective in anticipating threats and planning pre-or post-incident analysis.

Requirements

• Diploma/Degree in Computer Science, Information Technology, Computer Engineering or equivalent.
• Minimum 5 years experience in infrastructure & application security.
• Excellent communication skills and able to work independently.
• Candidate with Certification in Systems Security Certified Practitioner (SSCP) or Information System Security Profressional (CISSP) or Security related Certification will be an advantage.
• A team player.

• To conduct periodic cybersecurity vulnerability assessment for the respective sectors and liaising with Group IT and SOC for remediation;
• To own and conduct all Security Acceptance Test (SAT) for the group and sectors IT initiatives, and liaise with the business owners for remediation;
• To provide cybersecurity awareness training, technical advisory and consultancy to the group and sectors;
• To review the group and sectors security appliances’ rules i.e. Firewall, Intrusion Protection System, Proxy, Web Application Firewall (WAF), Network Access Control (NAC), Antivirus, Data Loss Prevention (DLP) and ensure relevancy;
• To be the group and/or sector’s interface for all cybersecurity queries, reviews and audits;

Requirements

• Degree in Computer Science, Information Technology, Computer Engineering or equivalent.
• Minimum 2/3 years experience in infrastructure & application security.
• Excellent communication skills and able to work independently.
• Candidate with Certification in Systems Security Certified Practitioner (SSCP) or Information System Security Professional (CISSP) or Ethical Hacker (CEH) will be an advantage.
• A team player.

Responsible for maintaining the overall security posture of the IT infra. ITSO will be the single point of contact for all security related tasks which includes reporting, managing security tools, assist in handling security incidents, Security Governance, Compliance and Auditing.

• Be the point of contact for HSA IT security matters for 24hrs x 7 days.
• Provide IT security consultancy and advisory to Agency.
• To assist agency to consolidate, track and report the status of security advisory received from GITSIR, CSA, NCSC etc.
• Follow up with respective Facilities Management Team on the implementation of the remediation against the security advisory received, IOC scanning and reporting, patching of the system and vulnerability for systems in HQ DC.
• Provide ad hoc, monthly report for Privilege Access Manager, Early Detection and Response solution, Database Activities Monitoring, log review, account review etc.
• Review of logs capture in the syslog server from all the systems in HSA HQ and GDC.
• Support HSA in the IT security audit, compliance audit, and security related matters.
• Work on quarterly Vulnerability scanning and remediation with ATFM and provide reporting and track the status.
• ITSO resources will be full time dedicated to HSA to support all related IT security requirement.
• ITSO shall work with IT security engineer to Conduct Quarterly or OnDemand VA Scan all system and follow up with IT Facility Management on the remediation to meet IM8 timeline.
• Share domain and technical expertise, providing technical mentorship and cross-training to other peers and team members.

Requirements

• 5+ years IT security experience required.
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyze logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams
• CISSP certification preferred, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus.

Responsible for maintaining the overall security posture of the IT infra. ITSO will be the single point of contact for all security related tasks which includes reporting, managing security tools, assist in handling security incidents, Security Governance, Compliance and Auditing.

• Be the point of contact for HSA IT security matters for 24hrs x 7 days.
• Provide IT security consultancy and advisory to Agency.
• To assist agency to consolidate, track and report the status of security advisory received from GITSIR, CSA, NCSC etc.
• Follow up with respective Facilities Management Team on the implementation of the remediation against the security advisory received, IOC scanning and reporting, patching of the system and vulnerability for systems in HQ DC.
• Provide ad hoc, monthly report for Privilege Access Manager, Early Detection and Response solution, Database Activities Monitoring, log review, account review etc.
• Review of logs capture in the syslog server from all the systems in HSA HQ and GDC.
• Support HSA in the IT security audit, compliance audit, and security related matters.
• Work on quarterly Vulnerability scanning and remediation with ATFM and provide reporting and track the status.
• ITSO resources will be full time dedicated to HSA to support all related IT security requirement.
• ITSO shall work with IT security engineer to Conduct Quarterly or OnDemand VA Scan all system and follow up with IT Facility Management on the remediation to meet IM8 timeline.
• Share domain and technical expertise, providing technical mentorship and cross-training to other peers and team members.

Requirements

• 5+ years IT security experience required.
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyze logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams
• CISSP certification preferred, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus.

IT Security Officer (ITSO) – you will be responsible for maintaining the overall security posture of the IT infra. ITSO will be the single point of contact for all security related tasks which includes reporting, managing security tools, assist in handling security incidents, Security Governance, Compliance and Auditing.

• Be the point of contact for HSA IT security matters for 24hrs x 7 days.
• Provide IT security consultancy and advisory to Agency.
• To assist agency to consolidate, track and report the status of security advisory received from GITSIR, CSA, NCSC etc.
• Follow up with respective Facilities Management Team on the implementation of the remediation against the security advisory received, IOC scanning and reporting, patching of the system and vulnerability for systems in HQ DC.
• Provide ad hoc, monthly report for Privilege Access Manager, Early Detection and Response solution, Database Activities Monitoring, log review, account review etc.
• Review of logs capture in the syslog server from all the systems in HSA HQ and GDC.
• Support HSA in the IT security audit, compliance audit, and security related matters.
• Work on quarterly Vulnerability scanning and remediation with ATFM and provide reporting and track the status.
• ITSO resources will be full time dedicated to HSA to support all related IT security requirement.
• ITSO shall work with IT security engineer to Conduct Quarterly or OnDemand VA Scan all system and follow up with IT Facility Management on the remediation to meet IM8 timeline.
• Share domain and technical expertise, providing technical mentorship and cross-training to other peers and team members.

Requirements

• 5+ years IT security experience required.
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyse logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams
• CISSP certification is a Must, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus.

Technical Specifications:

• Good in providing solution by investigating and post-mortem analysis to resolve security violations.
• Experience in Information Security
• CISSP or Global Information Assurance Certification (GIAC) or equivalent.
• Performed asset and network discovery activities to ensure full coverage of vulnerability discovery.
• Good Experience in system and application vulnerability testing for Web servers, DB servers, Network devices Etc. using Nessus or Nexpose or other vulnerability Manager Tools.
• Good in monitoring security vulnerability information from vendors and third parties applications.
• Good in implementing policy audit for servers and workstations
• Prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets.
• Research threats and vulnerabilities and, where appropriate, take action to mitigate threats and remediate vulnerabilities.
• In-depth knowledge of security systems and applications and a strong foundation in core area of security (e.g. OS hardening, Active Directory, DLP, network and perimeter).
• Good experience in configuring hardening guidelines and helped in maintaining baseline standards.
• Good experience in configuring CIS benchmarks on (Servers, Desktop & Network Devices)
• Configuring and monitoring of operational security infrastructure
• Good exposure to industry standards such as ISO 27001, PCI-DSS, with Audit experience in large enterprise/Service provider environment.
• Have good knowledge in web application security testing.
• Have a very good understanding about life cycle of Information Security Audit / VA
• Recommend, scheduled the security patches and other measures required in the event of a security breach.
• Monitor system logs, SIEM tools and network traffic for unusual or suspicious activity. Interpret such activity and make recommendations for resolution.
• Experienced in investigate and resolve security violations by providing post-mortem analysis to illuminate the issues and possible solutions.
• Good knowledge of Application exploitations and configuring alerts on SIEM
• Worked on installation, configuration management of security systems and applications, includes policy assessment, compliance tools, network security appliances and host-based security systems.
• ·Worked on monthly management reports, dashboards, documentation for security systems and procedures.
• Good in reporting unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
• Good in training, mentoring and guiding for team members to use of security tools and resolve issues.
• Good in evaluating, implementing information security solutions to protect against potential threats for security violations
• Worked on incident response and architecture review processes.
• Managed and supported Endpoint Security/ ePolicy Orchestrator, Virus scan Enterprise, Data Loss Prevention, Host Intrusion Prevention and Endpoint Encryption.
• Have good knowledge on Data loss prevention and Endpoint Encryption tools.