Total 18 procurement engineer job vacancies in Legal / Public / Security category in Singapore

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the advertised position, please email us an updated copy of your resume.

We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy

Position Overview

Reporting to the Team Lead of the Security Operations Center, the candidate will be responsible for monitoring and responding to potential security-related risks targeting the Group. The candidate should possess the background and knowledge necessary to discuss incident response activities internally and support security incident investigations. This position requires 24/7 shift work, including graveyard shifts.

Principal Job Functions

1. Cybersecurity Event Monitoring: Monitor global cybersecurity events and escalate to the L2 team if relevant events are observed.
2. Security Tool Analysis: Perform monitoring, risk assessment, and analysis on security tools such as anomaly detection systems, firewalls, antivirus systems, and proxy devices.
3. Incident Response: Follow predefined actions to handle security alerts, including escalation to the L2 team and other support groups.
4. Ad-Hoc Task Execution: Complete daily ad-hoc tasks or lead small projects as necessary.
5. Documentation: Participate in daily and ad-hoc documentation-related tasks.
6. Operational Reporting: Create and maintain reports for Key Performance Indicators (KPIs), as well as weekly and monthly metrics.
7. Vulnerability & Threat Assessment: Perform the assessment phase of the Vulnerability & Threat Management process.
8. Threat Intelligence: Receive threat intelligence from subscribed feeds and update the Threat Intel knowledge base.
9. Incident Investigation: Support any security incident response investigation within the Group, regardless of location or environment.
10. Methodology Improvement: Work closely with the Team Lead to review, provide feedback, and implement improvements in Security Operations methodology.
11. Ticket Management: Ensure all logged tickets are closed correctly and in a timely manner.
12. Routine Reporting: Submit routine reports on threats, vulnerabilities, and incidents handled by the Security Operations Center.
13. Runbook Maintenance: Keep the Security Operations Center’s runbooks and procedures up-to-date.

Recommended Prerequisites

1. Experience: 3+ years in security operations, preferably with incident management experience.
2. Industry Knowledge: Experience in the banking industry is advantageous.
3. Technical Skills:Familiarity with security products and network devices.
   Extensive experience with network security practices, including intranet, extranet, and internet access.
   Technical experience with operating systems like UNIX, AIX, Linux, and Windows.
   Knowledge of TCP/IP, DNS, web, and wireless security architectures and enterprise-grade security solutions.
   Knowledge of encryption and authentication methods (e.g., 2FA, DES/AES/RSA, Digital Certificates, SSL/TLS, IPSec) and DMZ development.
   Understanding of intrusion detection (deep TCP/IP knowledge and cybersecurity), various operating systems, and web technologies.
   Ability to read and analyze packet-level data, manage Network/Host Security products (NIDS/NIPS, firewalls, HIPS, AV, scanners), and understand security events.
   Proficiency in vulnerability assessment and management, as well as application penetration testing or forensic analysis.
   
4. Certifications: Preferred certifications include those from EC-Council, GIAC, (ISC)² [e.g., CISSP, CEH, GCIA, CCNA].
5. People Skills:Performance-oriented, always aiming to exceed past achievements.
   Ability to work under pressure in critical situations.
   Collaborative attitude, capable of working effectively with peers.
   
6. Communication Skills:Able to communicate effectively with peers during discussions and meetings.
   

Interested candidates may apply through the application system. We regret to inform only Shortlisted candidates will be notified.

EA License No. 01C4394 • RCB No. 200007268E •Derrick Tiew Yong Han EA Registration No. R1877971

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Department: Regional Information Systems Division
Reports to: Regional IT General Manager
Functional Relationships with: Global Security Team, ASEAN Business Units, ASEAN local IT divisions

Successful candidate will: Be engaged and responsible for SecOps (security operations), security incident handling, SOC response, etc as a Senior Specialist, Information Security Incident Response Lead, responsible for CSIRT operations in cyber security

Key Duties & Responsibilities
• Be responsible for handling overall SecOps in cooperation with partner IT vendors and related internal departments as a member of the incident handling team within CSIRT
• Work with partner IT vendors that maintain information security infrastructure tools implemented in our company
• Monitor and continuously assess the IT security aspects and impact.
• Knowledge and strong understanding on CIS CSC to continuously improve IT security
• Reporting to Regional IT General Manager and the head of Global Security Team

Responsibilities:

• While increasing cyber security risks, we must strengthen its security measures to secure our business expansion.
• He/She will be able to keep updating our skill sets by touching on the latest technology trends as we continue introducing new services and technologies to achieve "Zero Trust” and “IT/OT cyber security”.
• In addition, he/she can obtain a global business perspective since there are many opportunities to discuss security countermeasures with overseas members by crossing the border

1. Cyber incident response

• He/She must enhance the process of incident handling and our ability to respond to incidents through the implementation of security solutions, training, and incident-handling experiences

2. Vulnerability Assessment on platform and application/implementation of countermeasures

• Based on the results of various diagnostics and tools, countermeasures against vulnerabilities will be promoted together with each application engineer. We will also work with the CCoE team and PSIRT to implement measures for cloud environments, promote pre-release diagnostics, and add tools to meet operational requirements in the production environment.

3. Implementation and Maintenance of security solutions

• Client is developing advanced solutions for emerging threats.
• He/she must be responsible for the selection of suitable security products to fit our maintenance and operation requirements and lead PoC and implementation with well-designed operations

Ability / Competency Required

• Bachelor or Master’s Degree in Computer Science, Information Systems, or equivalent experience.
• Minimum three years of experience in the Cyber Security and Infrastructure fields
• Security tool implementation and operational experience/application security technology experience
• CISSP - Certified Information Systems Security Professional Certifications

Interested candidates, please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - https://go.persolkelly.com/job/apply/7657

We regret to inform you that only shortlisted candidates will be notified.

Siow Ee Sheng | REG No : R23118145

PERSOLKELLY SINGAPORE PTE LTD | EA License No : 01C4394

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Job Summary:

Join our client as a dynamic team as a Senior Cyber Security Engineer, focusing on privileged access management within the banking sector. This role is essential for enhancing the security posture of our bank by providing innovative solutions and aligning with industry trends.

Responsibilities:

• Provides vision for privileged access management, enables innovation, and aligns with industry trends and continuous improvements that enhances the security posture of the bank with regards to privileged access.
• Responsible for budgeting, project management, deployment and operations support of new initiatives in the privileged access management space.
• Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.
• Responsible for the day-to-day support, monitoring, upgrades, patching, configuration, and management of privileged access infrastructure.
• Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements:

• Bachelor’s degree in computer science, Information Systems, or Engineering (or similar) OR combination of relevant professional experience and education, such as CyberArk certifications
• Requires 4 or more years of related technical experience in CyberArk, including deployment, configuration, management, and support of all CyberArk infrastructure components. This includes regional support and integration of CyberArk via APIs. CyberArk certifications are preferred.
• Able to write PowerShell scripts and SQL statements to develop management reports on the usage and operations management of privileged accounts.
• Experience with Tableau data visualization tool for dashboarding.
• Strong understanding of enterprise privileged access management, risk management, compliance, governance, and control.
• Strong understanding of key platform OS/databases e.g., Windows, Unix, MSSQL, MariaDB. Prior experience in administering such key platforms is preferred.
• Experience in working in banking environment is preferred.
• Hands-on, well organised, risk and compliance focused, and self-driven.
• Comfortable operating in a fast-paced and highly technical environment.
• Able to prioritize tasks, responsiveness, along with excellent verbal and written communication skills.

EA License No. 01C4394 • RCB No. 200007268E • Lim Jia Jie EA Registration No. R22108969

By sending us your personal data and CV, you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for account creation in GO and the purposes set out in the Privacy Policy https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with GO’s Terms of Use https://go.persolkelly.com/Tacand the Privacy Policy. If you wish to withdraw your consent, please email us at [email protected]. Please feel free to contact us if you have any queries.

Cyber Security Engineer

Cyber Security Engineer is responsible for maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

Requirements

• Degree in engineering, science or information technology, or equivalent education.
• At least 3 years of related work experience in cybersecurity management and security governance.
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening,
  IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:
  a. Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)
  b. SASE (Zscaler, Netskope, Skyhigh)
  c. Tenable Security Center Continuous View
  d. Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)
  e. Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)
  f. Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)
  g. SIEM (e.g., Splunk, QRadar)
  h. CyberArk PAM and IAM

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

About the client

Our client is a prominent global trading platform, established in Australia, and serving millions of users worldwide. They specialize in delivering an integrated digital service platform designed for investors. Their offerings include market data, news, analysis, and comprehensive trading services, all within a user-centric fintech ecosystem.

About the role

The role involves planning, creating frameworks, roadmaps, processes, and controls, as well as coordinating across business and technical stakeholders to monitor and detect security threats and respond to security incidents.

• Develop and implement the company’s cyber/info-security efforts to ensure compliance with information security requirements stipulated by financial services regulators. Plan and construct the company's cybersecurity and protection systems, continuously enhancing cybersecurity management and environment to ensure network system security and availability.
• Manage the company’s response to and relationship with info-security-related audits/compliance matters and inquiries from regulators or appointed auditors. This includes overseeing security compliance activities such as PCI/GDPR audits and IT security compliance related to financial regulations.
• Conduct daily security checks, analyze and detect potential security threats and vulnerabilities in the company's business systems and internal office environment. Conduct security audits and provide employee security awareness training.
• Oversee safety inspections in the company's R&D process and optimize related processes.
• Manage internal and external network attacks, phishing attacks, virus infections, intrusion defense, and other security incidents. Provide monitoring, early warning, response, and emergency response.

Skills and Experience requirements

• 5 years or more of experience in information security/cybersecurity.
• Familiarity with OWASP Top 10 and DDoS attack principles and protection.
• Proficiency in information security/cybersecurity skills such as offensive and defensive tactics, penetration testing, and vulnerability assessment.
• Familiarity with commonly used security tools and products.
• Experience with one or more public cloud security products.
• Understanding of TCP/IP principles.

Interested candidates who wish to apply for the advertised position, please click on "Apply Now". We regret that only shortlisted candidates will be notified.

Job Code: ANNH

EA License: 01C4394, R1872517 (Ho Hsien Ni)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates to collect, use and disclose your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services, complying with Government’s health advisories and such other purposes stated in our privacy policy. Our full privacy policy is available at https://www.persolkelly.com.sg/policies . If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Job Summary:

Join our client as a dynamic team as a Senior Cyber Security Engineer, focusing on privileged access management within the banking sector. This role is essential for enhancing the security posture of our bank by providing innovative solutions and aligning with industry trends.

Responsibilities:

• Provides vision for privileged access management, enables innovation, and aligns with industry trends and continuous improvements that enhances the security posture of the bank with regards to privileged access.
• Responsible for budgeting, project management, deployment and operations support of new initiatives in the privileged access management space.
• Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.
• Responsible for the day-to-day support, monitoring, upgrades, patching, configuration, and management of privileged access infrastructure.
• Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements:

• Bachelor’s degree in computer science, Information Systems, or Engineering (or similar) OR combination of relevant professional experience and education, such as CyberArk certifications
• Requires 4 or more years of related technical experience in CyberArk, including deployment, configuration, management, and support of all CyberArk infrastructure components. This includes regional support and integration of CyberArk via APIs. CyberArk certifications are preferred.
• Able to write PowerShell scripts and SQL statements to develop management reports on the usage and operations management of privileged accounts.
• Experience with Tableau data visualization tool for dashboarding.
• Strong understanding of enterprise privileged access management, risk management, compliance, governance, and control.
• Strong understanding of key platform OS/databases e.g., Windows, Unix, MSSQL, MariaDB. Prior experience in administering such key platforms is preferred.
• Experience in working in banking environment is preferred.
• Hands-on, well organised, risk and compliance focused, and self-driven.
• Comfortable operating in a fast-paced and highly technical environment.
• Able to prioritize tasks, responsiveness, along with excellent verbal and written communication skills.

EA License No. 01C4394 • RCB No. 200007268E • Lim Jia Jie EA Registration No. R22108969

By sending us your personal data and CV, you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for account creation in GO and the purposes set out in the Privacy Policy https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with GO’s Terms of Use https://go.persolkelly.com/Tacand the Privacy Policy. If you wish to withdraw your consent, please email us at [email protected]. Please feel free to contact us if you have any queries.

Our client, a well-known MNC company is looking for candidates for the IT Security Engineer position.

Responsibilities: -

• Work as an IT Security coordinator and security operation centre analyst for ASEAN region.
• Align cyber security needs with the business direction.
• Initiate, develop, and maintain IT security policies, standards, and procedures.
• Facilitate a comprehensive Cyber Security training, awareness program and business continuity plans.
• Perform IT Security risk assessments, propose and track remediation tasks.
• Ensure IT compliance & governance measures are in place & followed.
• Conduct audits of internal IT services and 3rd party services, as well work with external auditors on external audits.
• Advise on appropriate cyber security solution & technology trends to be deployed.
• Perform in-depth investigation to determine the root cause of a security incident.
• Conduct analysis of logs from a wide range of systems, such as firewalls, EDR, SIEM, Anti-Virus, Vulnerability management to detect various types of IT-related threats.
• Monitors security event reports and actions; ensuring the appropriate response is performed and coordinated.

Requirements:

• Degree in Computer Science/ Information Technology or equivalent
• Minimum 1 year of working experience, information security related
• Strong interpersonal skills, analytical, with a flair for numbers
• Good communication and presentation skills
• Positive attitude in challenging work environment
• Excellent Team player with good people management and development skills
• Good interpersonal and communication skills
• Ability to work well in a team
• Ability to perform multi-tasking

PERSOLKELLY Singapore Pte Ltd | EA License No.: 01C4394 | UEN No. 200007268E
Registration No.: R23112488 (Julian Nerchan)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates collecting, using and disclosing my personal data for the purposes set out in the Privacy Policy which is available at www.persolkelly.com.sg I also acknowledge that I have read, understood, and agree to the said Privacy Policy.

Cyber Security Engineer

Cyber Security Engineer is responsible for maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

Requirements

• Degree in engineering, science or information technology, or equivalent education.
• At least 5 years of related work experience in cybersecurity management and security governance.
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening,
  IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:
  a. Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)
  b. SASE (Zscaler, Netskope, Skyhigh)
  c. Tenable Security Center Continuous View
  d. Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)
  e. Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)
  f. Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)
  g. SIEM (e.g., Splunk, QRadar)
  h. CyberArk PAM and IAM

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret to inform that only shortlisted candidates will be contacted.

Job Code: PRIT

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.**********************************

About the client:

Our client is one of the reputed Banks.

Responsibilities:

• Provide administration and operations end to end support to SIEM Security Analytics Platform and other security solutions related infrastructure deployed within the bank.
• Responsible for the delivery of vulnerability management services, day-to-day operations, and preparing management reports.
• Support the implementation across the organization.
• Support the development and maintain incident response plans specifically tailored to address external threats identified through program.
• Conduct regular drills and exercises to test the effectiveness of the incident response plans.
• Develop contextual data sets, reports, and dashboards to provide management, risk, and service insights.
• Collaborate with cross-functional teams and stakeholders to ensure comprehensive coverage of the external attack surface.

Skills/Requirement:

• Diploma/Degree in Engineering/Computer Science/IT/Cyber Security from a recognized education institution
• Minimum 3 years of experience in Vulnerability Management / SIEM.
• Strong knowledge of network protocols, architecture, and security measures.
• Proficiency in configuring and managing firewalls, intrusion detection/ prevention systems, and other network security devices.
• Experience with vulnerability scanning tools and methodologies.
• Familiarity with using SIEM solutions to collect, analyze, and correlate security events.
• Expereince in Splunk, Arcsight.
• Ability to analyze large datasets for patterns and anomalies indicative of security threats.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret that only shortlisted candidates will be contacted.

EA License No. 01C4394

EA Personnel Reg.No. R1104824 (Samsudeen Mohamed Basith)

“By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an emailto let us know. Please feel free to contact us if you have any queries.“

Responsibilities:

Security Configuration and Threat Response:

• Deploy, configure, and fine-tune security policies and configurations.
• Perform threat hunting to proactively respond to potential cyber threats, utilizing tools like Microsoft Azure Sentinel, Microsoft Defender for Cloud, and 365 Defender.

Incident Response Workflow:

• Configure security incident response workflows using Microsoft Azure Sentinel.

Cloud Security Management:

• Manage cloud resources adhering to the security posture defined by the Microsoft Cloud Security benchmark.
• Ensure hands-on experience in handling cloud security issues and vulnerabilities.

IT Security Protection System:

• Operate and manage the IT Security Protection System.
• Liaise with Maintenance Contractor to address technical, security issues, and perform Health Checks.

Events of Interests and Vulnerability Management:

• Investigate Events of Interests and security vulnerabilities.
• Identify early indicators and collaborate with the respective teams to address them.

Cyber Security Incident Management:

• Facilitate and support internal and external parties in Cyber Security Incident management and response.

Security Policy Enforcement:

• Enforce IT Security Policy compliance.
• Assess the security posture of the organization's IT assets and recommend appropriate measures to mitigate security threats.

Internal & External IT Audits:

• Assist in all internal and external IT audits.
• Follow up with the respective Risk Owners to remediate audit findings.

Policy Enhancement:

• Review and enhance IT security policies, procedures, and documentation in alignment with industry standards and best practices.

Cyber Security Awareness:

• Facilitate, plan, and conduct Cyber Security Awareness Training, including Cyber Security Exercises.

On-Call Support:

• Be on standby for any critical security alerts and incident management after office hours.

Requirements:

• Minimum 3 years of working experience in Cyber Security.
• Good Knowledge in Cyber Security Management, IT Compliance, and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Familiarity with ISO27001 and/or PCI Data Security Standards.
• Proficient in Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender for Cloud, etc.) and other Enterprise Security Appliances.
• Familiarity with modernized A.I and SecOps tools.
• Good project management and report writing skills.
• Security Screening will be required for potential candidates.

Soft Skills:

• Degree in Information Technology or Information Security or a related discipline.
• Excellent analytical, communication, and written skills.
• Ability to work under pressure and meet tight timelines.
• Team player with the capability to work independently.

Interested candidate who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

Job Code: PEIF

EA License No. 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and it’s overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

Position: Cloud Security Engineer

Summary:

The Cloud Security Engineer plays a pivotal role in ensuring the secure operation of cloud security architectures, with a primary focus on safeguarding Personally Identifiable Information (PII) and Protected Health Information (PHI) data across various cloud systems. This position directly contributes to the secure operation of the Edison cloud platform where the security of sensitive data and regulatory compliance, such as HIPAA and GDPK are paramount. The Cloud Security Engineer collaborates closely with vendors, program teams, and the Information Security and Infrastructure organization to maintain the security, integrity,, and compliance of the Edison cloud environment.

Key Responsibilities:

• Edison Cloud Security Operations: Oversee and manage security operations for the Edison Cloud, ensuring the highest levels of security for all cloud deployments. Implement robust security measures, protocols, and tools to protect sensitive data.
• Collaborative Focal Point Act as the key liaison between Engineering teams. Product Security, and Security Operations for Edison Cloud, facilitating effective communication, collaboration, and security awareness.
• Vendor Security Leadership: Lead and manage the Vendor Security Operations team, ensuring vendors align with security standards and practices. Conduct security assessments and audits as necessary.
• Security Advisory: Provide expert guidance to Engineering teams on security architectures and best practices, ensuring secure development and deployment of cloud-based solutions. Promote a security-first mindset and culture.
• Ownership of Key Processes: Take ownership of critical processes, including Edison Cloud Vulnerability Management, Non-Conformance Management, Cyber Incident Management, and Access Management. Implement these processes effectively to enhance security and compliance.

Desired Qualifications:

• Cloud Security Expertise: Possess a strong understanding of security architectures for cloud and hybrid systems, with experience in operating multiple cloud environments securely. Demonstrate expertise in data protection and regulatory compliance.
• Security Collaboration: Capable of providing valuable input and feedback on product security architectures and requirements, contributing to the development of secure solutions.
• AWS Proficiency: Have a solid understanding of Amazon Web Services (AWS), including its offerings and capabilities, and preferably hold an AWS Certified Security certificate. Proficiency in other cloud platforms is a plus.
• Security Management: Familiarity with vulnerability management, cyber incident management and the ability to effectively address security incidents and vulnerabilities.
• Cloud Architecture: Represent Security Operations in the development and implementation of the overall cloud architecture, ensuring security is integrated seamlessly.
• Security Framework Knowledge: Experience with any security framework (e.g., ISO 27001, HITRUST CSF, NIST) is a plus. Provide examples of how these frameworks are relevant to the role.

Qualifications:

• Educational Background: Hold a college degree or equivalent and have a minimum of 5 years of related work experience.
• Security Experience: Possess 2-4 years of experience in Security Architecture and/or Engineering roles, including incident response and mitigation.
• AWS Expertise:: Have 2-3 years of experience with AWS, preferably holding an AWS Certified Security certificate. Demonstrate proficiency in various AWS services, including but not limited to VPC Networking, IAM, KMS, Cloud Formation, EC2, API Gateway, Kubernetes, SQS, SNS, Kinesis, RDS, DynamoDB, and Lambdas or equivalent.
• Scripting Skills: Proficiency in scripting programming languages such as Python, JSON, Ruby, Powershell, and YAML.
• Cloud Security Tools: Experience working with cloud security and governance tools to enhance security measures.
• Technical Communication: Ability to represent technical viewpoints effectively to diverse audiences and make informed technical risk decisions.
• Interpersonal Skills: Strong interpersonal and communication skills, with the ability to collaborate effectively in a team environment.
• Self-Motivated: Ability to work independently with minimal direction, displaying a proactive and self-starting attitude.

Interested candidates may apply through the application system. We regret to inform only Shortlisted candidates will be notified.

EA License No. 01C4394 • RCB No. 200007268E •Derrick Tiew Yong Han EA Registration No. R1877971

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Cyber Security Engineer

Cyber Security Engineer is responsible for maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

Requirements

• Degree in engineering, science or information technology, or equivalent education.
• At least 5 years of related work experience in cybersecurity management and security governance.
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening,
  IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:
  a. Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)
  b. SASE (Zscaler, Netskope, Skyhigh)
  c. Tenable Security Center Continuous View
  d. Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)
  e. Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)
  f. Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)
  g. SIEM (e.g., Splunk, QRadar)
  h. CyberArk PAM and IAM

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret to inform that only shortlisted candidates will be contacted.

Job Code: PRIT

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.**********************************

Job Description

1. Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
2. Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
3. Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
4. Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
5. Enforce IT Security Policy compliance which includes assessment of security posture of the organisation’s IT assets as well as recommending appropriate measures and controls to mitigate security threats within the organisation.
6. Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
7. Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
8. Facilitate, plan and conduct Cyber Security Awareness Training, including Cyber Security Exercises.
9. Be on standby for any critical security alerts and incident management after office hours.

Requirements

• Minimum 3 years of working experience in Cyber Security field.

• Good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.

• Hands-on experience with Windows or Linux OS.

• Familiar with ISO27001 and/or PCI Data Security Standards.

• Hands-on experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret to inform that only shortlisted candidates will be contacted.

Job Code: PRIT

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.**********************************

Job Summary:

The Engineer/Senior Engineer (Information Security) ensures the integrity of information systems by conducting security analyses, developing and maintaining corporate security policies, collaborating on vulnerability assessments, executing awareness training programs, investigating incidents, and working towards international accreditations, demonstrating expertise in information security, risk management, and strong analytical, communication, and interpersonal skills.

Job Description:

• Analyze IT activities to ensure proper security measures are in place and enforced.
• Develop and maintain corporate security policies, remediate identified risks, and implement security measures to safeguard information systems.
• Collaborate with the in-house vulnerability assessment team to identify weaknesses, risks, and protection requirements.
• Execute information security and risk management awareness training programs.
• Investigate corporate incidents related to information security, identify threats and impact, and plan remediation.
• Collaborate with relevant units to achieve/maintain international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, and SOC2.

Job Requirements:

• Bachelor’s Degree in Information Security/Cyber Security/Computer Science or equivalent.
• Minimum 3 years of relevant working experience.
• CISA/CISM/CISSP or similar certifications are advantageous.
• Solid understanding of enterprise information security and information risk management.
• Excellent analytical skills for risk identification and recommending treatments.
• Strong written and verbal communication skills.
• Good interpersonal skills and a collaborative team player.

Interested candidate who wish to apply for the advertised position, please click on “Apply Now”. We regret that only shortlisted candidates will be notified.

Job Code: PEIF
EA License No. 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and it’s overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

About the Client

Reputed MNC

Responsibilities

· Manage and drive z/OS Unix (Mainframe Access Management operations and audits).

· Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.

· Automate manual processes through scripting or via zSecure.

· Possess strong knowledge of designing and reviewing RACF access groupings.

Skills/Requirement

· Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution

· Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF

· Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).

· Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeManagement

· Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA

· Support backup/recovery and disaster/recovery planning and testing

· Experience with zLinux and zVM will be advantageous

· Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]
We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd EA License No. 01C4394 EA Reg No: R23118975 (ABDUL RAHMAN ANSARI RAJA)

**********************************

The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an emailto let us know. Please feel free to contact us if you have any queries.

All parties involved in any form of workforce engagement are to strictly adhere to prevailing regulations and laws that govern local fair employment practices, and to invest reasonable efforts in building a strong Singaporean core workforce, recruit and select candidates based on merit and prohibit discrimination based on age, race, gender, religion, marital status and family responsibility or disability. For more information, please refer to MOM and TAFEP websites.

**********************************

About the Client

Leading MNC

Responsibilities

· Responsible for protecting an organization's computer systems, networks, and data from security breaches and cyber threats.

· High level job description includes understanding: security assessment, security solutions, incident response, security policies, monitoring and detection, security awareness, ensuring organizations complies with relevant security best practices, staying up to date with the latest cyber trends, security.

Skills/Requirement

· Bachelor of Science in Computer Science or a related field.

· Five or more years’ work experience as a System Security Engineer or related position.

· Proven experience developing, operating and maintaining security systems.

· Extensive knowledge of operating system and database security

· Proficiency in networking technologies, network security and network monitoring solutions

· Knowledge of security systems including anti-virus applications, content filtering, firewalls, authentication systems and intrusion detection and notification systems

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd EA License No. 01C4394 EA Reg No: R23118975 (ABDUL RAHMAN ANSARI RAJA)

**********************************

The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an emailto let us know. Please feel free to contact us if you have any queries.

All parties involved in any form of workforce engagement are to strictly adhere to prevailing regulations and laws that govern local fair employment practices, and to invest reasonable efforts in building a strong Singaporean core workforce, recruit and select candidates based on merit and prohibit discrimination based on age, race, gender, religion, marital status and family responsibility or disability. For more information, please refer to MOM and TAFEP websites.

**********************************