Total 52 accounting analyst job vacancies in Legal / Public / Security category in d21 upper bukit timah clementi park ulu pandan

What you'll do:

As a Junior Cyber Security Analyst, your primary role will be to ensure the security and integrity of our client's digital assets. You will intake cybersecurity related requests from internal and external entities that require triage, remediation or escalation. Your excellent problem-solving skills will be put to use as you collaborate with your team members to resolve complex issues. Your commitment to accurate documentation will contribute significantly to record-keeping and analysis.

* Answer incoming calls to assist with information security inquiries or issues.
* Document all interactions accurately for record-keeping and analysis.
* Follow established processes and guidelines to handle common issues.
* Collaborate with team members to resolve more complex problems or escalate as necessary.
* Monitor your assigned queues and work cases in an efficient and effective manner.

What you bring:

The ideal candidate for the Junior Cyber Security Analyst role is someone who has a strong understanding of Cyber Security and Information Technology. Your effective typing skills will enable you to document all interactions accurately, while your strong problem-solving and critical thinking skills will be crucial in handling common issues. Your effective communication and interpersonal skills will allow you to collaborate effectively with team members.

* Effective typing skills
* Familiarity with Cyber Security and Information Technology
* Strong problem-solving and critical thinking skills
* Effective communication and interpersonal skills

What sets this company apart:

Our client is a leading global organisation that values collaboration, commitment, and growth. They offer an inclusive work environment where every employee is valued for their unique contributions. They believe in providing opportunities for learning and development, making it an ideal place for individuals who are eager to grow their careers.

What's next:

Ready to take the first step towards a rewarding career in cybersecurity? Don't hesitate!

Apply today by clicking on the link!

Do note that we will only be in touch if your application is shortlisted. Robert Walters (Singapore) Pte Ltd ROC No.: 199706961E | EA Licence No.: 03C5451 EA Registration No.: R24123088 Josue Hoyos Pardavell

About the company

CGS International Securities Pte. Ltd. (CGS International) is an award-winning and market leading integrated financial services provider, ranked among the top securities houses in Asia.

CGS International taps on our wealth of global and ASEAN insights to offer equities trading, leveraged products, wealth management, investment banking, equities research, Shariah-compliant financing, fixed income, currency and commodities, structured products and prime brokerage services in over 15 countries and regions.

Along with its parent organisation China Galaxy Securities, a leading securities house in China, CGS International is trusted by more than 15 million customers globally.

Job Description

1) Threat Detection:

- Use of tools to scan/ detect/ analyze/ correlate threats

- Manually review to detect/ analyze/ correlate threats

- Participate in design of infrastructure and process of threat detection

- Perform triage of security alerts to filter false positives, classify alerts and determine response type

2) Threat Hunting:

- Collect and analyze data to identify patterns and anomalies that indicate presence of a hidden threat

- Investigate potential threats to determine if they pose a real threat

3) Threat Intelligence:

- Keep up to date of threats reported by reliable internal and external sources

- Maintain samples, logs and records, compromised information that help understanding of attacks

4) Incident Response:

- Inform relevant members and departments of threats and advise of remediation and mitigation

- Coordinate and follow up with all relevant members and departments to collect data and evidences, to ensure completion of remediation and mitgation

- Document all security incidents with records of assessment, investigation, remediation and mitigation

- Maintain playbooks and guide other departments on contributing to them

- Lead and participate actively in security incident response effort

- Lead and participate actively in post-incident reviews to evaluate response effectiveness and recommend improvements

- Conduct, coordinate and debrief simulated exercises on security incident management across departments

5) Requirements Review:

- Insurance coverage of incident response management

- Third party agreement coverage of security monitoring and incident response management

Corporate policies, standards and procedures in security monitoring and incident response management

Job Requirements

• Strong knowledge of information security principles, incident response methodologies, network protocols, logging/detection/response tools (e.g. SIEM, EDR, XDR)
• Proficient in network communications, log analysis, scripting
• Good problem-solving, analytical and communication skills
• Preferably has experience working with cross-geographical teams
• 1-3 years of experience as a Security Operations Analyst or similar role
• Diploma or Bachelor degree in Computing or related field
• Preferably has relevant certifications (e.g. GCIH, GCIA)
• Proactive and independent
• Keen to learn
• Has an eye for detail
• Willing to share and collaborate as a team player

Details of the Division and Team:

Everyday DB observes thousands of cyber security intrusion attempts. Deutsche Bank’s COO Chief Security Office (CSO) integrates both Corporate Security (CS) and Information Security (CISO) as both teams are responsible for mitigating these risks.

The CSO team enables the business of Deutsche Bank by providing agile security operational capabilities.

With their expertise in Threat Intelligence, Data Leakage Protection, Cyber Threat Analytics, Malware Response & Research, Security Monitoring, Incident Response, Forensics and Vulnerability Management, they provide global services from key locations in Frankfurt, Jacksonville and Singapore while leveraging offshore capabilities in Pune and Bucharest.

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 21 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

The Deutsche Bank Chief Security Office is looking for an experienced DLP Information Security Analyst.

Adhering to internal and external policies, the role is required to work in a global team to identify and assess technical and personnel security breaches within a heterogeneous business and technical landscape. This will include working with a variety of technologies and business groups to detect, assess and document the escalation of security alerts and consequence management.

Additionally, the role will require collaboration with control functions as well as businesses to identify information that needs to be protected and controls that are best suited to address these requirements.

The work will also involve utilizing vendor solutions, bespoke control applications and supporting the development of team tasks, such as the continual assessment of preventive and detective controls.

• Continuously monitor DLP systems for alerts and act as a subject matter expert for all data leakage investigations globally across all regions where the bank has a footprint.
• Manage DLP incidents, ensuring coordinated response and timely escalations.
• Document all incidents, actions taken, and outcomes. Prepare detailed reports for management and compliance purposes.
• The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution.
• Ensure DLP tools and technologies are maintained, optimized, and regularly evaluated through established cyber risk frameworks.
• Cooperate with control functions to understand regulatory requirements and applicable laws.
• Ability to methodically analyze complex data and requirements and provide accountable SME opinion.
• Design and implement new DLP monitoring use cases. Collaborate with business and control functions to identify sensitive information that needs to be protected.
• Propose ways to improve existing process to achieve better operational excellence via automation.

Your skills and experience:

• Minimum 3 years of working experience in either Data Loss Prevention (DLP) or Security Operations Center, with at least 1 year working in an enterprise-grade Operations Center.
• A Bachelor's degree in Information Technology, Computer Science, or a related field is required.
• Working experience with Data Loss related applications such as Symantec DLP, Digital Guardian; and SIEM tools such as Splunk, Sentinel.
• Working knowledge in IT Fundamentals such as networking, hardware/software.
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.
• Mentor new team members and provide guidance and directions when required.
• Ability to work in fast paced environment and within tight deadlines.
• Certifications such as Symantec DLP certified specialist, CompTIA Security+, CISSP, Microsoft Information Protection, Certified Data Protection Officer etc.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

· Act as Incident first responder for a 24/7 staffed SOC.

· Monitor security sensors and review logs to identify network anomalies or intrusions.

· Perform initial analysis of security alerts.

· Escalate security incidents using established policies and procedures in a timely manner.

· Work with customers to analysis potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s).

· Performing Response action based on standardize workflow and agreement with clients.

· Assist with the development of incident response plans, workflows, and SOPs.

· Provide threat and vulnerability analysis security advisory services.

· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management.

· Act as Incident first responder for a 24/7 staffed SOC.

· Monitor security sensors and review logs to identify network anomalies or intrusions.

· Perform initial analysis of security alerts.

· Escalate security incidents using established policies and procedures in a timely manner.

· Work with customers to analysis potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s).

· Performing Response action based on standardize workflow and agreement with clients.

· Assist with the development of incident response plans, workflows, and SOPs.

· Provide threat and vulnerability analysis security advisory services.

· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management.

Position Overview

The IT Security Operations Analyst role’s is to safeguard the organization’s IT systems and data. This role requires the candidate's active participation in the implementation of security policies and procedures, the monitoring and analysis of security events and the maintenance of security tools. Other responsibilities are to identify, investigate and resolve any security threats, vulnerabilities and incidents. The candidate must keep up to date with the latest security trends, have excellent communication and problem-solving skills and have a deep understanding of security principles and technologies. The individual will have a functional role in mentoring other team members and share the off-hour support responsibilities.

Responsibilities

1. Monitor, maintain, and analyze network and computers for unusual activity or suspicious behavior by reviewing information security logs.
2. Manage and resolve security Level 2 support tickets per defined SLAs
3. Investigate and analyze security incidents to determine root cause and impact.
4. Report compliance failures to management for immediate remediation.
5. Responsible for the effective management of the organization’s Crowdstrike Falcon Admin Console.

• Deploy Crowdstrike Falcon EDR detection agent on all corporate devices.
• Ensure coverage of malware detection for all managed EDR Agent capable devices.
• Migrate existing server agents from alert-only mode to blocking mode.
• Provide EDR escalation support for agents already installed

1. Assist and collaborate with the Information Security Group and coordinate with IT Infrastructure on the following:

• IT Threats and Vulnerabilities Assessments, Protection, and Remediation
• IT security patch management follow-up and reporting
• Firewall rule documentation, review, and approval
• Promote within IT Infrastructure the proper Security controls aligned with the IT Security Program
• Validate and maintain operational security documentation.

1. Continuously assess the current Security Posture and provide recommendations for remediation and prevention of security incidents.
2. Collaborate with cross-functional teams to implement security solutions and technologies.
3. Stay up to date with industry trends and emerging security threats to proactively address potential risks.
4. Assist in the deployment of new security systems.
5. Participate in security audits and assessments to ensure compliance with regulations and standards.
6. Understand the dark and deep web ecosystem.
7. Manage and support the following applications:

• Palo Alto/Firewall
• Network security (Micro-segmentation)

1. Perform other duties as required

Qualifications and Experience

• Bachelor’s degree in Cybersecurity Engineering or Computer Sciences
• Strong professional experience in information security with a focus on security operations and technical support
• Strong Experience with Palo Alto and Crowdstrike platform
• Experience with VPN, SSL and other encryption technologies
• Good knowledge of server, workstation, and Active Directory technologies that impact security controls
• Deep understanding of TCP/IP, DNS and common network services
• Experience with security frameworks and compliance requirements such as GDPR, ISO 27001, NIST 800 and PCI DSS.

The Security Analyst is responsible for monitoring security systems, responding to alerts and incidents, and ensuring the organization’s security controls are effective. This role involves creating and tuning security device metrics, documenting processes, and identifying unusual activities by correlating events. Strong analytical skills, collaborative abilities, and an in-depth understanding of both current and emerging security technologies are essential to succeed in this position.

Key Responsibilities:

1. Security Monitoring & Advisory: Continuously monitor and provide guidance on security issues related to systems and workflows, ensuring that internal security controls are appropriate and functioning effectively.
2. Incident Response Coordination: Lead and coordinate responses to information security incidents, minimizing impact and supporting rapid resolution.
3. Policy Development: Create, update, and enforce information security policies, procedures, standards, and guidelines that align with best practices and compliance requirements.
4. Data Classification & Audits: Assist in data classification assessments, conduct security audits, and contribute to remediation plans as necessary.
5. Vulnerability Management: Collaborate with IT management to address security vulnerabilities and coordinate vulnerability assessment efforts.
6. Testing & Assessment: Conduct network penetration testing, vulnerability assessments, and comprehensive risk assessments to identify and mitigate security risks.
7. Server Hardening: Develop, coordinate, and review server hardening procedures for all platforms used within the organization’s environment.
8. Log Review & Analysis: Regularly review security logs from servers, networks, and other platforms to detect any security anomalies.
9. User Security Awareness: Design, conduct, and maintain user security awareness training to strengthen the organization's security culture.
10. Security Research: Stay informed of the latest security policies and conduct research to continually enhance the organization’s security posture.
11. Additional Security Duties: Undertake other security-related tasks as assigned to support organizational needs.

Qualifications & Requirements:

• Education: Bachelor’s degree in Computer Science, Information Technology, or equivalent.
• Experience: Minimum of 3 years in IT, with a background in security monitoring and response.
• Technical Skills:
  • Familiarity with IT network infrastructure, server platforms (Unix, Windows), and desktop systems (OS X, Windows XP and above).
  • Proficiency with security tools such as Security Endpoint solutions, HP ArcSight, QRadar, Rapid7 Nexpose, and Tenable Nessus.
• Certifications: One or more of the following certifications are required: QISP, CISSP, Cybersecurity Nexus, CompTIA Security.

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

Team Introduction

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk.

We are seeking a Digital Forensics Analyst to join our Forensics & Litigation Support team. The analyst will partner with internal stakeholders, such as Legal, HR, Ethics, Investigations, and Insider Threat, to support investigations and provide technical expertise. The role will perform forensic preservation of relevant devices and data, respond to incidents, and perform detailed analysis of systems and data. The role will require an individual able to apply forensics concepts and industry best-practice in the preservation and analysis of newly developed technologies engineered internally at the company.

Responsibilities

- Preserve network and host-based digital evidence in an industry accepted and forensically sound manner that would be admissible in court proceedings.

- Coordinate digital forensics analysis on large scale matters.

- Communicate technical events and analysis to both technical and non-technical audiences.

- Perform Apple macOS host-based forensics, including the analysis of user events, the APFS/HFS+ file system, internal services, default applications, and relevant logs.

- Perform Microsoft Windows host-based analysis using both Windows and Linux based forensic tools.

- Perform analysis of Linux servers, including user events, daemons, security logs, and cron jobs.

- Perform acquisitions and analysis of Apple iOS and Android mobile devices.

- Perform acquisitions and analysis of cloud platforms, such as Microsoft Azure, Amazon Web Services, Google Cloud Computing and/or others.

- Write detailed forensic reports for investigations.

Minimum Qualifications

- A bachelor’s degree in a computing field.

- 3-5 years in digital forensics analysis experience.

- Holds an industry accepted certification validating digital forensics capiblities: GCIH, GCFA, GCFE, CFCE, GREM, X-PERT, EnCE, CCE, etc.

- In-depth understanding of computer forensic principles, including digital and mobile forensics, log analysis, cloud-based systems, database structures, querying languages and common digital forensics tools.

- Knowledge and experience of Windows, Unix and Mac host-based forensics, Mobile OS’s and command line.

- Working knowledge of hardware configuration and network/data communications, software development and scripting, database technology and database exploitation/forensics.

- Experience with seizure of evidence, chain of custody and conducting analysis.

- Knowledge of data loss prevention systems and how they detect potential host and network-based data loss technologies or other insider threat risks.

Preferred Qualifications

- Completed the SANS course FOR518: Mac and iOS Forensic Analysis and Incident Response

- Experience in writing affidavits, depositions and serving as an expert witness in court proceedings.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

The Senior Information Security Analyst is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

Responsibilities:

• Identify potential information security (IS) risks and make recommendations for enhancement
• Collect and analyze security risk evidence and coordinate with internal and external compliance and auditing agencies / officials
• Execute meetings and communicate complex security topics and safe IS practices with all levels of the organization
• Ensure that controls are utilized daily and that non-compliance remediation is addressed
• Provide IS consulting services, including interpreting and/or clarifying information security policy, procedures, standards or concepts
• Assist with defining and implementing IS standards to align procedures and practices in compliance with Citi standards
• Educate and advise on safe information security practices and current, changing, and/or recommended information security requirements
• Validate compliance with IS policies, practices, and procedures, and resolve a variety of IS related issues in coordination with the business
• Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members
• Has the ability to operate with a limited level of direct supervision.
• Can exercise independence of judgement and autonomy.
• Acts as SME to senior stakeholders and /or other team members.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• 5-8 years of relevant experience
• Applicable Certifications or willingness to earn within 12 months of joining
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

About the role

The position is part of our SOC team, and is responsible for real time security event monitoring and security incident investigation.

Responsibilities:

• Continuously monitor security alerts queue and perform initial triage to identify any false positives and initiate escalations as necessary.
• Monitors health of security sensors and managed infrastructure, and provide necessary support, including onsite troubleshooting, root cause analysis, incident reports.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Collects data, evidence, and context necessary for Level 2 escalation.
• Works closely with Level 2 & Level 3 team towards the continuous improvement of the service.
• Ensure that daily operations and tasks are properly completed or followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Support After-office hours activities and standby requirements as necessary.
• Prepare scheduled and ad-hoc report and documentation.

Candidate requirements:

• Diploma/Degree in Computer Science/Computer Engineering/Information Engineering/Cybersecurity or equivalent.
• At least 2 years hands-on experience with security solutions and tools such as Firewall, Proxy, EDR, PAM, IDS/IPS, SIEM, DLP, CASB etc.
• Basic understanding of common networking protocols and system infrastructure.
• Strong analytical, problem solving and interpersonal skills.
• Keen Interest in cyber security domain and developing skillsets in new technologies.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Shell, .Net or Java etc) will be a plus.
• Ability to work independently, under the general guidance.
• Support after office hour and during weekend/public holiday.
• Working experience and knowledge on system infrastructure with interest of exploring security product also welcome to apply.
• Leadership roles are available for engineers with relevant experience in cybersecurity domain.

• MNC at CBD
• Salary: $9,000 - $11,000 per month
• 2 years contract with bonus and good benefits (subject to renewal)

Responsibilities

• Perform or coordinate the core operational cyber-security functions such as incident handling, incident response, vulnerability management, penetration testing, application security, data leakage prevention and identity/access management.
• Participate in response planning and remediation actions.
• Review existing and proposed system configurations and designs to ensure compliance with security controls and baselines.
• Participate in or conduct cyber-security assessments, and evaluate proposed changes, and/or execute action plans to enhance cyber-security resilience and risk mitigation.
• Design, implement, operate and maintain security tools, advance detection solutions with minimal supervision and guidance.
• Enhance cyber-security operations functions through process enhancements and stakeholder engagement.
• Lead enhancement of cyber-security functions through vendor/supplier identification, scope of work development, justification, contract review, contract negotiation and procurement engagement.
• Execute and communicate enhancement strategy of cyber-security functions using measured goals, proper tracking and reporting.
• Establish, maintain and enforce procedures, guidelines and baselines related to security for the users and administration of IT systems.
• Collaborate with stake holders from other IT functions for cyber gaps remediations efforts and provide security review consultations if required.
• Assess cloud security and propose improvements or solutions
• Implement security and data protection solutions in the cloud
• Strong understanding of API management and application integration methodologies
• Perform other miscellaneous duties as directed

Requirement:

• Bachelor's degree in the IT field.
• 9 years’ experience in IT and/or cybersecurity field.
• At least 5 years work experience at information security service-company or cybersecurity department.
• Intermediate or Advanced GIAC certifications in any of Cyber Defense, Penetration Testing, and/or Digital Forensics & Incident Response domains preferred (examples: GPEN, GWAPT, GCIH).
• CISSP or equivalent professional certification is preferred.
• Strong knowledge with emerging technologies, such as intelligent automation, artificial intelligence (AI)/ machine learning (ML)
• Strong Knowledge of modern cloud technology components and deployment patterns
• Cloud security certification is preferred (CCSP, CCSE, AZ 500, GCSA, CompTIA Cloud+ etc)
• Experience developing software such as Python or scripting language
• Strong knowledge of REST APIs implementation
• Proficient in written and oral English.
• Proficient in SIEM and Log Management Solutions. – SOAR solutions recommended.
• Understanding and familiarity with securing cloud infrastructure.
• Proficient in both Windows and Unix/Linux operating system implementation and administration.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to [email protected]

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

Tel: 6950 9748

http://www.peopleprofilers.com

[email protected]

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

We protect Bloomberg.

There's no such thing as a "safe system" - only safer systems. Our security teams work to build and maintain the safest operating environment for Bloomberg’s users. The security analysts within the Cyber Security Operations Center are the main defenders of the company. The Cyber Security Analyst - Triage's function, within the CSOC, is considered to be a key pillar in Bloomberg’s security, as they are the initial responders to security events. Are you a motivated technical professional, who has a passion towards cyber security? And are accomplished in a systems- or applications-support role, or already have cyber security experience? In this security role, Bloomberg will provide you the opportunity to apply your current skills, while you rapidly develop new ones that are required in the cyber security field.

The Bloomberg CSOC is responsible for the detection of cyber threats, and when detected, responsible for the rapid response, across both the diverse lines of business and the global network. The CSOC is an open and collaborative environment, where members work together to identify and address the latest cyber security threats facing the company. The CSOC is staffed 24 x 7 x 365, with varying shifts, and multiple tiers of support, ranging from first response teams to the Computer Incident Response Team. Furthermore, there is opportunity to work with these more experienced members on some of the latest cyber security defense technologies.

In this role, we'll trust you to:

• Work within a dedicated shift, 8AM - 6PM, Wednesday through Sunday, to support the 24x7x365 Cyber Security Operations Center (some holiday coverage may be required)
• Demonstrate passion and good judgement as a network defender
• Identify, and act as the initial responder, to all security events
• Learn and understand the broader security of Bloomberg’s environment
• Monitor for events that match predefined criteria, and respond accordingly to standard operating procedures, as well as use good judgement for matters where a procedure doesn’t exist
• Bring to closure a significant majority of events without the involvement of other teams
• Share robust case notes when raising issues in order to help the next team member
• Remain up-to-date with cyber security threats and trends
• Deliver on relevant cyber security metrics and measurements for the role and area of responsibility
• Collaborate directly with colleagues across the firm to resolve security matters while furthering the program’s brand with a constructive and thoughtful approach
• Respond to varying seniority levels of employees and contractors throughout Bloomberg to address cyber security concerns
• Ensure appropriate coverage for the assigned shift and provide ample awareness to changes to commitments
• Produce and maintain documentation and standard operating procedures
• Generate ideas for continued improvement, including conceptual design of new threat scenarios

You'll need to have:

• A diploma or a degree in cyber security or a related technical field
• Minimum 1+ years of experience in a cyber security related role (e.g., Cyber Security Operations Center)
• Experience dealing with non-physical Security Operations, Incident Analysis, and/or Network and Host Log Analysis)
• Deep understanding in logs from a variety of sources, their log events, and Splunk
• Knowledge of enterprise network and host security controls
• Ability to be autonomous but proactive in reaching out for support
• Good familiarity with operating systems (Windows, Linux and MAC)
• Deep understanding of cyber security trends and potential threats
• Knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs and enterprise antivirus products
• Good communication and interpersonal skills and the ability to take initiative
• Dedication to role and ability to collaborate with team members
• Excellent written and verbal communication skill in English
• Demonstrated continuous career growth within an organisation

We'd love to see:

• Knowledge of AWS, Azure, and GCP cloud platforms
• Previous experience working with a Security Information and Event Management (SIEM) platform
• Certifications in the information security space (CompTIA Security+, SSCP, CEH)
• Familiarity with programming / scripting

If this sounds like you:

Apply! If we think you are a good match we'll get in touch to let you know the next steps.

To learn more, visit our YouTube channel "Inside Bloomberg" www.youtube.com/InsideBloomberg

SOC Cloud Monitoring Resources

1. Act as Incident first responder for a 24/7 SOC Cloud Operations

2. Monitor security sensors and review logs to identify network anomalies or intrusions

3. Perform initial analysis of security alerts

4. Escalate security incidents using established policies and procedures in a timely manner

5. Work with clients to analyse potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s)

6. Perform Response action based on standardize workflow

7. Assist with the development of incident response plans, workflows, and SOPs

8. Provide threat and vulnerability analysis security advisory services

9. Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management

10. Support 12 hours shift per day for 24 hours 365 days

About Us

Kronberg Capital is Max Kronberg’s personal equity investment office, which we will open as a boutique investment fund in the upcoming years. Current team consists of Max and one full-time analyst.

We are region- and industry agnostic and invest with a concentrated, bottom-up, long only approach. Mainly consumer facing companies.

We look for great companies off the beaten path, run by exceptional management, which we can buy with a significant margin of safety.

For further details about us, visit our website: https://kronberg-capital.com/

Job Description

The primary focus of the job lies in equity research, - analysis and monitoring of the investments.

Since we are a small investment office, job duties are a bit wider. This is a great opportunity to help creating new structures from scratch.

• Perform equity research and find suitable companies.
• Analyse equities based on the underlying fundamentals.
• Portfolio monitoring and reporting.
• Execution of market orders and transactions.
• Support with setting up the investment fund.
• Support with accounting, compliance, and other administrative requirements.

Job requirements

• At least 3 years of professional experience in equity research and analysis, preferably in a boutique public equity fund or SFO.
• CFA charterholder is a plus
• Similar investment philosophy and mindset as Kronberg Capital.
• Bachelor or Master’s degree in Finance, Accounting, Economics or equivalent from a reputable university.
• You are hands on and have a pragmatic approach.
• Strong analytical skills
• Self-starter personality, highly motivated with an international mindset and willingness to grow and learn

If you are interested, please apply with: your resume, an investment pitch (one pager) and expected salary range.

We are looking for a Identity Defense analyst on a 12 months extendable contract basis.

You must have expereince in cloud security operations, conducting analysis/investigation and containment of potential data breaches or cyber security incidents.

Description:

• An Identity Defense analyst is accountable for researching, designing, engineering, implementing, and supporting solutions to prevent and detect anomalous use of accounts.
• The Identity Defense Specialist will support design efforts to build out new processes, controls, and supporting governance related to implementation of human and non-human account monitoring to protect.
• You will utilize in-depth technical knowledge and business requirements to help implement scalable solutions, inclusive of monitoring, alerting, and escalation frameworks focused on core account protections.
• Leveraging your knowledge of both common and emerging threats related to account take-over, you will have an opportunity to proactively develop, implement, and influence controls and policy within the digital identity domain.
• You will partner with leaders from line of business organizations to triage security events and report on impacting security incidents.
• The Analyst will regularly collaborate with experts in and out of our team, both in country and in other regions, so excellent communication skills are very important.
• The role will also involve discussion with employees as part of alert analysis and disposition.
• Build and monitor Splunk alerting and dashboards.
• Identify areas for further process automation, simplification, and improvement.
• Provide status updates for executives and stakeholders in non-technical terms encompassing risk, impact, containment, remediation, etc.
  Risk management.
• Comprehensively document analysis, investigative activities

Required Skills/Qualifications:

• 3+ years of experience with cloud information security related activities.
• 3+ years of experience in an operations focused cloud information security role.
• Experience conducting analysis/investigation and containment of potential data breaches or cyber security incidents.
• Ability to analyze data and evaluate relevance to a specific incident under investigation.
• Ability to handle multiple competing priorities in a fast-paced environment; ability to be decisive and take action without causing an undue delay.
• Ability to exercise independent judgment when responding to alerts.
• Ability to communicate effectively across all levels of the organization, to both technical and non-technical audiences.
• Familiarity with security vulnerabilities exploits and hacker techniques.
• Familiarity identity management standards, social engineering TTPs, and the incident response lifecycle.
• Familiarity with Splunk, and the ability to build queries, alerts, dashboards, etc.
• Knowledgeable of current authentication-based exploits.

Argyll Scott Consulting Pte Ltd

Summary of the role

The primary responsibility of the Red Team Analyst is to protect Marina Bay Sands' gaming, retail, and hospitality sectors from cyber threats. This includes conducting adversarial simulations, red/purple team exercises, and security assessments. All duties are to be performed following Marina Bay Sands’ policies and procedures. All duties are to be performed in accordance with the department and Marina Bay Sands’ policies, practices and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

Adversarial Simulation:

• Perform comprehensive analyses and simulations to mimic cyber threats and identify vulnerabilities.
• Execute threat-led penetration testing and red/purple team exercises using frameworks such as MITRE ATT&CK and TIBER-EU.
• Conduct attack simulation exercises using Tactics, Techniques, and Procedures (TTPs) that cyber threat actors use to plan and execute cyber-attacks.

Red Team Activities:

• Conduct authorized offensive security operations to test the effectiveness of cyber defenses and simulate cyber-attacks.
• Execute penetration tests on external and internal infrastructures, web applications, and mobile applications to identify security weaknesses and misconfigurations.
• § Perform social engineering assessments (email phishing, vishing, physical access attacks) to simulate password theft, system infiltration, and malware/ransomware deployment.
• Perform source code reviews to identify software vulnerabilities and detect malicious embedded code.
• Assess security configurations for cloud, server, network, and middleware infrastructures.
• Review IT architecture for both cloud and on-premises environments.

Forensics and Incident Response:

• Lead cyber incident investigations and response efforts.
• Collaborate with cybersecurity specialists to maintain and update security testing methodologies.
• Perform other related duties as assigned.

Job Requirements

• Minimum diploma with at least 3-5 years of hands-on cybersecurity experience in relevant areas.
• Preferred certifications: CISSP, OSCP, CRTP, CRTO, OSWE.
• Experience in Gaming, Banking, or Critical Infrastructure InfoComm Industry is an advantage.
• Effective verbal and written communication skills.
• Proficiency with offensive security tools such as Cobalt Strike, Empire, Havoc, Mythic.
• Experience in setting up red teaming Command and Control (C2) infrastructure, including web/proxy servers, redirectors, domain frontingSkills in developing malicious payloads and understanding obfuscation and encryption techniques.
• · Proficiency in at least one scripting language (e.g., Bash, PowerShell) and/or programming language (e.g., Python, C, C#, C++, Java).
• Understanding of basic networking concepts and Internet protocols (e.g., TCP/IP, HTTP(S), SMTP, DNS, SSL/TLS).
• Knowledge of industry-recognized security testing standards and penetration testing methodology.
• Strong understanding of enterprise technologies, operations, and security evaluations.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

Summary of the role

The primary responsibility of the Governance Analyst is to perform duties in one or more of the following areas: vulnerability management, cyber data governance, risk and verification, cyber policy/standards/standard operating procedures development, and penetration testing and red teaming. All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

• Cyber governance, risk and verification which performs risk assessments, system security and industrial control system zone security plans including listing controls, gaps in implemented controls and tracking remediation of gaps, and provides input to the risk register
• Network and Operating Systems Security Configuration assessment which performs security configuration reviews including hardening controls, firewall rules review, web/application security configurations
• Penetration testing and red teaming which includes performing security testing to identify security vulnerabilities on LVSC applications and environment, providing recommendations for remediation, and tracking and remediating found issues.
• Cyber policy/standard and standard operating procedure creation, review, distribution, and maintenance
• Vulnerability management which includes successfully scanning the LVSC computing environment for secure configurations and vulnerabilities, researching and eliminating false positives, tracking and remediating found issues, and tracking and performing the exception processes
• Performs other related duties as assigned.

Job Requirements

• Minimum diploma with at least 5 - 8 years cyber security hands-on experience in one or more of the areas listed in place of a degree.
• Preferrable to have a current and in good standing CISSP or similar certification, and Offensive Security (OSCP, OSWE, OSEP) or Crest (CRT, CCT) certifications
• Demonstrated experience in at least 1 area in the following list:
• Cyber Vulnerability Management
• Cyber Governance, Risk and Verification
• Cyber Policy/Standard/Standard Operating Procedures
• Cyber Penetration Testing and Red Teaming
• Working knowledge of threats and vulnerabilities and their significance to cyber risk, network operations, and end-point security
• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

• Conduct macroeconomic research (quantitative and qualitative data) to draft a comprehensive white paper to government agencies on a Special Economic Zone
• Investigate public policies that will impact macroeconomic forces and financial markets (e.g., government policies on firm/individual-level outcomes)
• Monitor and keep abreast of Cambodian public policy regulations and communique
• Review government legislation and regulatory proposals and provide technical recommendations
• Examine statistical data on the exchange of goods and services in the region, and propose tax and business incentives to drive investments
• Research financial products, issuance, and related policies, and conduct peer benchmarking with financial centers in the region
• Prepare reports, presentations, and correspondence material to advance the development of the SEZ

Qualifications

• 3 -5 years of experience in a public policy, economics research, or consultancy role for Associate Level
• Academic English is mandatory, business Chinese fluency is advantageous

Working for banking client , as part of their IT security team, you will be carrying out the following

Key Responsibilities

Day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

To work with internal teams to validate alerts

Perform investigatin of usage behavior trends to discover potentially fraudulent

Understand business applications to be able to analyze, recognize and identify potentially anomalous activities

Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

Carry out DLP System Ruleset change requests in accordance to change management procedures

Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

To work with internal cyber security teams to ensure investigations are comprehensive and to track and follow up on all escalated incidents to closure

Requirements

Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

Excellent analytical and investigative skills

Prior experience with analytical platforms

Experienced with working with machine learning enabled platforms would be advantageous

Experience with administration and operation of DLP Systems preferred

Experience in development and fine tuning of DLP Ruleset preferred

Knowledge of Cyber Security would be advantageous

Relevant working experience in SOC environment and related processes will be added advantages

Interested candidates please email your latest resume to [email protected]

• MNC at CBD
• Salary: $9,000 - $12,500 per month
• Permanent position

Responsibilities

• Perform or coordinate the core operational cyber-security functions such as incident handling, incident response, vulnerability management, penetration testing, application security, data leakage prevention and identity/access management.
• Participate in response planning and remediation actions.
• Review existing and proposed system configurations and designs to ensure compliance with security controls and baselines.
• Participate in or conduct cyber-security assessments, and evaluate proposed changes, and/or execute action plans to enhance cyber-security resilience and risk mitigation.
• Design, implement, operate and maintain security tools, advance detection solutions with minimal supervision and guidance.
• Enhance cyber-security operations functions through process enhancements and stakeholder engagement.
• Lead enhancement of cyber-security functions through vendor/supplier identification, scope of work development, justification, contract review, contract negotiation and procurement engagement.
• Execute and communicate enhancement strategy of cyber-security functions using measured goals, proper tracking and reporting.
• Establish, maintain and enforce procedures, guidelines and baselines related to security for the users and administration of IT systems.
• Collaborate with stake holders from other IT functions for cyber gaps remediations efforts and provide security review consultations if required.
• Assess cloud security and propose improvements or solutions
• Implement security and data protection solutions in the cloud
• Strong understanding of API management and application integration methodologies
• Perform other miscellaneous duties as directed

Requirement:

• Bachelor's degree in the IT field.
• 9 years’ experience in IT and/or cybersecurity field.
• At least 5 years work experience at information security service-company or cybersecurity department.
• Intermediate or Advanced GIAC certifications in any of Cyber Defense, Penetration Testing, and/or Digital Forensics & Incident Response domains preferred (examples: GPEN, GWAPT, GCIH).
• CISSP or equivalent professional certification is preferred.
• Strong knowledge with emerging technologies, such as intelligent automation, artificial intelligence (AI)/ machine learning (ML)
• Strong Knowledge of modern cloud technology components and deployment patterns
• Cloud security certification is preferred (CCSP, CCSE, AZ 500, GCSA, CompTIA Cloud+ etc)
• Experience developing software such as Python or scripting language
• Strong knowledge of REST APIs implementation
• Proficient in written and oral English.
• Proficient in SIEM and Log Management Solutions. – SOAR solutions recommended.
• Understanding and familiarity with securing cloud infrastructure.
• Proficient in both Windows and Unix/Linux operating system implementation and administration.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to [email protected]

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

Tel: 6950 9748

http://www.peopleprofilers.com

[email protected]

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

VP - ICT Security Operations Analyst

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations & Technology re-engineers client and partner processes to deliver excellence through secure, reliable, and controlled services.

Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients' and our proprietary data. We manage information security as one end-to-end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO’s Cyber Security Engineering and Architecture is responsible for delivering integrated risk reduction capabilities and services aligned to the architectural goals and priorities associated with leading ‘Change the Bank’ (CTB) and ‘Run the Bank’ (RTB) initiatives. This role entails leading and coordinating the execution of SASE Services, across the network security domain. The successful candidate will have demonstrated success and be highly adept at: leading global programs and engineering change efforts; managing risk and execution of global programs by aligning resources and tactical/strategic decisions; and driving transformation across a complex enterprise to support cybersecurity goals. The candidate needs to have the ability to work on defining highly scalable and integrated security architectures, and influence roadmaps across a variety of product portfolios. The candidate needs to have the ability to define and drive interoperability with security components of a complex end to end network and cloud security ecosystem, focusing on client experience. Strong experience across cybersecurity, Technology Infrastructure, large enterprises will assist in delivering aspects of this service.

Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Responsibilities:

• Working with Transformation Program Directors, Senior Architects, Steering Committees, CISO and CTI partners in delivering the transformational Programs related to SASE. Onboarding of users on Zscalar and ensuring smooth transition.
• Troubleshooting issues and work on finding RCA.
• Zscaler Internet Access design and migration methods from legacy Internet Access solutions to SASE based architecture.
• Interface and support Citi’s Security Architecture Council and Working Groups building strong rapport across teams.
• Firewall rules Management (creation/ modification/ deletion) by following Change management process and via automation.
• Participate in migration activities and provide troubleshooting support from Infrastructure defense standpoint. Identify issues, provide support for isolating problems, finding RCA.
• Willing to work on weekends for migration activities off business hours.
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Qualifications:

• 8-12 years of extensive Security Experience with Checkpoint Firewalls, Juniper Networks Firewalls, Palo Alto Network Firewalls, Bluecoat Proxy, IPS/IDS, Illumio, Crowdstrike and EDR tools.
• Extensive knowledge on SASE Zscalar user onboarding and operational support experience.
• Strong troubleshooting skills over the Firewalls, Proxy and network infrastructure.
• Extensive Data Networking knowledge and an understanding of network security standards such as Firewall Rules, Security Zones, Multicast Data Feeds, Ultra Low Latency Network Architectures & Platforms.
• Hands-on experience in Zscaler Internet Access, Zscaler Private Access and Zscaler Digital Experience
• Proven influencing and relationship management skills.
• Exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary
• Strong communication skills, including verbal and written skills.
• Ability to work as part of a team with remote colleagues in other countries.
• Strong knowledge of Proxy functionality and Proxy features
• Consistently demonstrates clear and concise written and oral communication as well as strong presentation skills to both technical and non-technical audiences.
• Advanced analytical and problem-solving skills
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure.
• Thorough understanding of industry and corporate technology standards for Cyber Security services

Critical Competencies:

• Firewalls, Proxy and network infrastructure
• Zscaler Internet Access, Zscaler Private Access

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

Industry : German MNC Automotive

Location: Westgate (Jurong East)

Salary Range: Up to $7,500.00

This is a permanent role.

Role and Responsibilities:

• Conduct technical analysis and triage based on triggered alerts to determine the severity, impact, scope and corresponding response actions.
• In-depth analysis and processing Open Source Threat Intelligence (OSINT) and Intelligence sources to assess cybersecurity threats, the risk associated and the organizational impact.
• Working closely with the Threat Intelligence team to enhance contextualization capabilities and improve monitoring scope
• Acting as a point of contact to internal Company stakeholders and vendors by emails and incident reporting hotline.
• This role involves working over the weekends (12 hours shifts with three days off-in-lieu after the shift)

Education and Certifications Qualifications:

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• One or more of the following professional certifications is beneficial: CISSP, GCIH or similar.

Technical Skills:

• Proficient understanding of cyber and IT security risk, threat and prevention measure.
• Proficient understanding of networking and network security technologies.
• Good understanding of Threat Intelligence utilization towards incident response
• Good knowledge of security standards and best practices
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills.
• Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.
• Knowledge of Microsoft Office suite (Word, Excel, PowerPoint and Access)
• Knowledge of Splunk is beneficial

Experiences:

• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English Language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives.
• Self-motivated with the ability to carry out assigned tasks with minimum supervision.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.
Please submit your updated resume in Word format by using the Apply Now Button.
We regret that only shortlisted candidates will be notified

Email resume to [email protected]

People Profilers Pte Ltd, 20 Cecil Street, #08-09, PLUS Building, Singapore 049705.
Tel: 6950 9722

http://www.peopleprofilers.com
EA License Number: 02C4944
Registration Number: R1111371
Posting Personnel: Tiffany Ong Meng Yen

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).