Total 200 analyst job vacancies in Legal / Public / Security category in Singapore

Job Responsibilities

Insider Threat Analyst is an operational role within the Bank’s Group Security Operations Center. The incumbent will be responsible for the continuous monitoring, analyzing, and investigating of insider threats and data leakage incidents. Must have good analytical and investigative skills to recognize and detect anomalous behavior.

Key Responsibilities

· To participate in the day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

· To work with internal teams to validate alerts within stipulated SLA

· To perform analysis on usage behavior trends to discover potentially fraudulent activities

· To perform continuous review and improvement on current monitoring operations to enhance effectiveness of monitoring

· Work with external partners to resolve issues or implement improvement to monitoring

· To gain good understanding of internal business applications to be able to analyze, recognize and identify potentially anomalous activities

· Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

· Carry out DLP System Ruleset change requests in accordance to change management procedures

· Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

· Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

· To work with internal cyber security teams to ensure investigations are comprehensive and complete to track and follow up on all escalated incidents to closure

Job Requirements

Education

· Diploma/Degree in Business Information Technology/Business Analytics from recognized academic institutions

Technical Skills and Experience

· Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

· Excellent analytical and investigative skills

· Prior experience with analytical platforms

· Experienced with working with machine learning enabled platforms would be advantageous

· Experience with administration and operation of DLP Systems preferred

· Experience in development and fine tuning of DLP Ruleset preferred

· Knowledge of Cyber Security would be advantageous

· Relevant working experience in SOC environment and related processes will be added advantages

Soft Skills

· Good communication skills

· Strong analytical and problem-solving skills

· Ability to adhere to work processes and procedures

Other Requirements

· Ability to work independently

· Ability to work well with the rest of the team and department

The security analyst is responsible for analysing cybersecurity events, improving threat detection capabilities and procedures. If an event results in a security incident, the analyst will work with the relevant stakeholders to respond and contain the incident.

Key Responsibilities:

- Improving threat detection capabilities, driving lessons learn from incidents and identifying potential gaps in security controls.

- Responsible for maintaining detection capabilities for the SOC.

- Analyse large dataset and correlate information from various sources to identify the root cause to an incident.

- Enhance and drive improvements for SOC detection and response playbooks.

- Take the lead in incident response to minimize the impact of a security incident to our organization.

- Work cooperatively with various IT infrastructure team, applications and business units for the effective operations of the security.

Qualifications:

- 3 years or more relevant working experience in information security technologies.

- Understanding of the tactics, techniques and procedures of cyber advesaries.

- Insurance / Financial industry experience.

- Industry certifications CISSP, CEH, or GIAC preferred.

- Experience in Splunk preferred.

- Comfortable with analysing and processing large datasets.

- Good interpersonal and communication skills.

- Willing to learn and able to work well in a team.

Job Responsibilities:

- Handle legal contracts (e.g. Purchase and Sales Agreement, Storage Agreements, Tenders etc.)

- Co-ordinate negotiations with third parties around any contract discrepancies

- Responsible for negotiation and management of Brokerage Agreement, Clearing Broker Agreement, and Brokers’ commission

- Evaluate and enhance processes, rules and protocols for administration and execution of contracts and agreements

Job Requirements:

- Minimum Degree in Maritime Studies / Law / Supply Chain Management or related field

- Knowledge about the energy market in Asia would be advantageous

- Team player, with good communication & interpersonal skills

To apply, please email your resume in MS Word format to [email protected] indicating in your CV the following information:

Expected Salary:
Notice Required:
Reason for Leaving:

Only shortlisted candidates will be notified.

Jackie Ng May Ying (R1104602)

Recruit Express Pte Ltd

EA No: 99C4599

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Process and settle daily Central Provident Fund Investment Scheme (CPFIS) and Supplementary Retirement (SRS) trades timely and accurately.
• Prepare and issue payments to Product Providers.
• Liaise with Product Providers on trade matters.
• Liaise with CPF Board on scheme matters and funds status.
• Prepare and issue payment to IRAS for SRS withholding tax and penalty fees.
• Ensure prompt settlement of Corporate Action events such as Tender Offer, Warrant Conversion and others.
• Perform check on reconciliation breaks.
• Manage queries from Customer Centre and branches.
• Participate and provide support in Operations initiatives/projects.

Requirements

• Minimally Bachelor’s degree in Banking or Business with minimum 2 years of banking experience
• Proficiency in Microsoft Excel and Word
• Good in interpersonal and problem-solving skills

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognizes your achievements.

This is a 12 months contract assigned to our client

Work Location: To be confirmed (during interview)

Salary Range : $5,000-$7,500

Job Description

Top Mandatory skills

1. Azure native security

2. Security Incident response

3. Familiar with at least 2 of below security tooling upkeeping:

SIEM, Endpoint Detect and Response, Endpoint Anti-virus, Next Gen Firewall, VA Scanner

Skills which are good to have / optional

1. Hardening CIS benchmark

2. Impact analysis report drafting, testing of patches

3. Government compliance standards familiarity

4. Knowledge on Cloud Application Architecture

Skills: Linux, Networking, ArcSight, Troubleshooting, Security and/or operations experience

Years of Related Experience: 2-5 years

This specialist role will be responsible for the validation of all Security information and event management (SIEM) activities, promotion of content to production, ongoing routine maintenance of the security tools and infrastructure. This position is primarily responsible for the integration and management of secure, reliable, stable, and dependable solutions that support and ensure the confidentiality, integrity, and availability of the newer complex security systems into the existing security infrastructure.

The successful candidate will have a proven track record in information security derived from an all-round Information Technology background and SOC/SIEM experience and possess a combination of the following skills, and competencies:

• Progressive senior IT experience, ideally holding positions in both IT Infrastructure & Operations as well as Network Security.
• Working knowledge of Linux, networking, ArcSight, troubleshooting, and security strategies.
• Solid understanding of additional security technologies / disciplines such as Palo Alto and Juniper firewalls, intrusion prevention, encryption, threat analysis, and vulnerability assessment.
• Comfortable with managing complex, enterprise-scale logging, including ensuring reporting and alerting is appropriate.
• Exposure to project management techniques.
• Strong analytical, documentation, and communication skills, both oral and written
• Good team working skills and ability to work in a distributed global team environment.
• Strong analytical and problem-solving skills.
• Self-motivated, proactive and with determination to achieve goals.
• Flexible and able to deliver quality results in the required timeframe.
• Familiar and experienced in the software development lifecycle process.
• Influencing skills to drive development standards.

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

Job Description:

• Perform or coordinate the core operational cyber-security functions such as incident handling, incident response, vulnerability management, penetration testing, application security, data leakage prevention and identity/access management.
• Participate in response planning and remediation actions.
• Review existing and proposed system configurations and designs to ensure compliance with security controls and baselines.
• Participate in or conduct cyber-security assessments, and evaluate proposed changes, and/or execute action plans to enhance cyber-security resilience and risk mitigation.
• Design, implement, operate and maintain security tools, advance detection solutions with minimal supervision and guidance.
• Enhance cyber-security operations functions through process enhancements and stakeholder engagement.
• Lead enhancement of cyber-security functions through vendor/supplier identification, scope of work development, justification, contract review, contract negotiation and procurement engagement.
• Execute and communicate enhancement strategy of cyber-security functions using measured goals, proper tracking and reporting.
• Establish, maintain and enforce procedures, guidelines and baselines related to security for the users and administration of IT systems.
• Collaborate with stake holders from other IT functions for cyber gaps remediations efforts and provide security review consultations if required.
• Assess cloud security and propose improvements or solutions
• Implement security and data protection solutions in the cloud
• Strong understanding of API management and application integration methodologies
• Perform other miscellaneous duties as directed

Requirements:

• Bachelor's degree in the IT field.
• 9 years’ experience in IT and/or cybersecurity field.
• At least 5 years work experience at information security service-company or cybersecurity department.
• Intermediate or Advanced GIAC certifications in any of Cyber Defense, Penetration Testing, and/or Digital Forensics & Incident Response domains preferred (examples: GPEN, GWAPT, GCIH).
• CISSP or equivalent professional certification is preferred.
• Strong knowledge with emerging technologies, such as intelligent automation, artificial intelligence (AI)/ machine learning (ML)
• Strong Knowledge of modern cloud technology components and deployment patterns - Cloud security certification is preferred (CCSP, CCSE, AZ 500, GCSA, CompTIA Cloud+ etc)
• Experience developing software such as Python or scripting language
• Strong knowledge of REST APIs implementation
• Proficient in written and oral English.
• Proficient in SIEM and Log Management Solutions. - SOAR solutions recommended.
• Understanding and familiarity with securing cloud infrastructure.
• Proficient in both Windows and Unix/Linux operating system implementation and administration.

Security Operation Team supports Security Systems and processes to secure our clients IT Application systems and infrastructure .The team is responsible for Security system administration,security processes .

• You should have experience managing following security tools such as Email Security Solutions, Firewalls, Privileged Access Management (PAM), Anti-virus, HIPS/HIDS and Endpoint Detection and Response (EDR), and Multi-factor Authentication, will be helpful in your role and learn the rest on the job.
• Experience with deployment of cybersecurity solutions, including Firewalls, Email Security, Internet content filtering and endpoint protection solutions.
• Articulate systems and methodologies as well as reply to security-related events and support in remediation efforts
• Liaise with other support teams, or product teams as required to resolve requests/issues in a timely manner
• Conduct IT security incident investigation on the IT environment.
• Develop and support emergency procedures and oversee incident responses as well as the investigation of security breaches and assist with disciplinary and legal matters associated with such breaches as required.
• Support the development and implementation of security standards, guidelines and processes to ensure the ongoing maintenance of logical security

To apply please click the Apply button or send us your updated profile to [email protected]

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is undergoing a growth phase and are on the lookout for talent. Applicants are encouraged to follow Percept Solutions on LinkedIn @ https://www.linkedin.com/company/percept-solutions/ to stay up to date on our upcoming roles and events.

Industry : German MNC Automotive

Location: Westgate (Jurong East)

Salary Range: Up to $7,500.00

This is a permanent role.

Role and Responsibilities:

• Conduct technical analysis and triage based on triggered alerts to determine the severity, impact, scope and corresponding response actions.
• In-depth analysis and processing Open Source Threat Intelligence (OSINT) and Intelligence sources to assess cybersecurity threats, the risk associated and the organizational impact.
• Working closely with the Threat Intelligence team to enhance contextualization capabilities and improve monitoring scope
• Acting as a point of contact to internal Company stakeholders and vendors by emails and incident reporting hotline.
• This role involves working over the weekends (12 hours shifts with three days off-in-lieu after the shift)

Education and Certifications Qualifications:

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• One or more of the following professional certifications is beneficial: CISSP, GCIH or similar.

Technical Skills:

• Proficient understanding of cyber and IT security risk, threat and prevention measure.
• Proficient understanding of networking and network security technologies.
• Good understanding of Threat Intelligence utilization towards incident response
• Good knowledge of security standards and best practices
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills.
• Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.
• Knowledge of Microsoft Office suite (Word, Excel, PowerPoint and Access)
• Knowledge of Splunk is beneficial

Experiences:

• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English Language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives.
• Self-motivated with the ability to carry out assigned tasks with minimum supervision.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.
Please submit your updated resume in Word format by using the Apply Now Button.
We regret that only shortlisted candidates will be notified

Email resume to [email protected]

People Profilers Pte Ltd, 20 Cecil Street, #08-09, PLUS Building, Singapore 049705.
Tel: 6950 9722

http://www.peopleprofilers.com
EA License Number: 02C4944
Registration Number: R1111371
Posting Personnel: Tiffany Ong Meng Yen

My fintech client is looking to grow their IT security team. This is a full time, permanent position

Role

We are looking for a motivated IT Security Analyst to join our team and play a vital role in protecting our organization's IT infrastructure and data. Responsibilities include identifying, assessing, and mitigating IT risks, ensuring compliance with regulations, and supporting IT security operations.

Responsibilities:

• Conduct regular threat, risks, and vulnerability assessments.
• Assess technologies against cybersecurity standards.
• Identify, analyze, and prioritize IT security risks.
• Develop and implement risk mitigation strategies and controls.
• Maintain and update the organization's risk register.
• Stay updated on relevant IT security regulations and standards.
• Develop and implement security policies and procedures.
• Monitor and audit compliance activities and report on status.
• Monitor security logs for suspicious activity and investigate incidents.
• Assist with incident response and security tool deployment.
• Collaborate with IT operations, development, and other units to promote security awareness.
• Provide guidance and training on security policies and procedures.
• Collaborate with external auditors and regulators and prepare management reports on IT security posture.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• At least 2 years of experience in IT security, risk management, and compliance.
• Strong understanding of IT security concepts, frameworks, and methodologies.
• Working knowledge of relevant IT security regulations and standards.
• Experience with security tools (e.g., vulnerability scanners, SIEM, IDS/IPS).
• Certifications such as CISA, CISM, or CISSP are advantageous.
• Knowledge in PHP, C++, and Java programming is a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Self-driven, detail-oriented, and able to work independently or in a team.

APPLY NOW! Interviews are ongoing! Email to [email protected]

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

Contract Duration: 12 months
Working Hour: Normal Office Hour
Working Location: AMK
Remarks: SINGAPOREAN Only

Requirements
• 5+ years IT security experience required.
• CISSP certification is a Must, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyse logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams

Responsibilities
• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• Conduct security risk management exercise
• Conduct table-top exercises
• Conduct vulnerability assessment, coordinate penetration tests activities
• Conduct information security awareness training
• Responsible for the development and management of customer’s security incident response plan.
• Lead and support customer in the matters of security incident resolution and response.
• Be the point-of-contact/customer liaison to assist and advise customer for ICT security related matters
• Project managed the activities and deliverables during the implementation phase.

Interested candidates, please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - GO Mobile.

We regret to inform you that only shortlisted candidates will be notified.

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance, and skills upgrading services, and partnering with employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nationwide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use, and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Gelangre Reyanelle Gelario | REG No : R1870995

PERSOLKELLY SINGAPORE PTE LTD | EA License No : 01C4394

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

We have an immediate position to be filled. Fresh graduates are welcome to apply to have a feel of what it's like to work in a Security, Network & Service Desk Operations Center.

Qualifications

• Fresh graduates Degree/Diploma/ITE in Computer Science or Information Technology or its equivalent, are welcome to apply
• Preferably with 1-2 years of experience in IT in system, network, and/or application security with knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, BGP and other routing protocols)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits, application of threat modeling or other risk identification techniques
• Possess basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and the above)
• Excellent teamwork player
• Strong sense of ownership and drive

Tier 1 Functions and Responsibilities:

• Work in a rotational 24/7 environment
• Respond to the incoming enquiries/incident/request/alerts (Call, Email, Webchat, EUP, IVR handling, Monitoring consoles)
• 1st level troubleshooting of in supported systems; i.e. Workplace; Server; Network; Microsoft 365; Secure Access Service Edge; Point of Sale
• Security event monitoring - accurate and rapid response to security events, participate in incident response
• Server and network availability and performance monitoring
• Password reset and unlock
• Perform log & route [to higher tier or Resolver Team(s)]
• Record and manage all transactions/ cases in Service Management System
• Broadcast notifications to the relevant parties
• Provide timely status update, follow up on cases escalated until closure within the service level agreement.
• Ensure daily tasks are executed according to the Standard Operation Procedure

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

• SME in Group Information Security Office
• All rounded exposure in application security, cloud security, DevSecOps

Key Responsibilities:

• Offer expert security consultancy, technical guidance, and education to our enterprise.
• Advise on and evaluate application and infrastructure security design for relevance and effectiveness.
• Ensure alignment of security architecture with business strategies and uphold cyber risk management framework.
• Review application security design, driving necessary remediation tasks.
• Develop application security blueprints and training courses to elevate developers’ security awareness.
• Assess security by design principles in Cloud platforms (GCP, AWS, Azure) and integrate security tools seamlessly into DevOps pipelines.
• Ensure adherence to security requirements for low code platforms and conduct threat modeling for critical applications.
• Manage project priorities, deadlines, and deliverables, and assist with ad-hoc duties as required.
• Review RFP proposals for compliance with security requirements.
• Offer expert security consultancy, technical guidance, and education to our enterprise.

Requirements:

• Bachelor degree in IT, computer science or related fields
• 6+ years' experience in information security
• Expertise in application security will be a bonus
• Have in-depth knowledge of secure application development techniques and hands-on experience with security testing tools; good understanding in cyber security threats, vulnerabilities, and hacking methods.
• Possess professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.), preferably.
• Be familiar with Agile, DevSecOps, OWASP Top 10, and cloud security in (Azure / AWS / GCP); experience with technologies like WAF and Anti Bot Protection will be a bonus

If you are interested in the above job or related cybersecurity opportunities, please kindly send your updated CV to [email protected]

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

• Leading regional financial institution
• Focus in Information Security Compliance, Policy & Control
• Open to IT professionals with passion in InfoSec Control and Risk Management

Reporting to Head of Information Security & IT GRC, here are your responsibilities:

• Collaborate with the cybersecurity team to develop and execute the annual information security action plan.
• Establish and maintain an efficient incident reporting and tracking system, overseeing corrective and improvement measures.
• Monitor and provide guidance on the effectiveness of information security workflows and controls.
• Lead information security projects and automation initiatives in Asia.
• Manage outsourcing matters across BUs in Asia and oversee outsourcing requirements
• Conduct annual on-site reviews of BUs in Asia.
• Support compliance efforts under Singapore’s PDPA, including policy communication, query management, and liaison with regulatory authorities.
• Report to the Board and management on adherence to laws, regulations, and information security policies.
• Review and update regional information security and outsourcing policies to ensure compliance.
• Develop training materials to enhance information security awareness.
• Design, develop, and maintain automated compliance and information security workflow management systems.
• Manage regional reporting tools and consolidate results.
• Prepare reports and documents for internal committee meetings.
• Collaborate with the Compliance team on various compliance-related initiatives.

Requirements:

• Bachelor's degree in computer science or related disciplines
• Preferred certifications: CISM and/or CISSP.
• 3+ years of experience in information security or IT risk management
• Strong understanding of information security risks, controls, processes, and trends.
• Experience in project management.
• Familiarity with regional information security regulations and the insurance sector.
• Understanding of Asian cultural and business dynamics.

If you are interested in the above job or related information security opportunities, please kindly send your updated CV to [email protected]

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Administration and management (technical operations) of firewall infrastructure
• Evaluate and upgrade firewall hardware and/or firmware
• Coordinate with vendor, deploy, configure and manage Firewall devices according to system engineering design
• Coordinate with information security governance team to align IT infrastructure with established standards
• Ensures system compliance with all established information security policies
• Perform period health check and tuning of firewall devices
• Performs technical assessment of any non-well defined or complex firewall change requests prior to implementation
• Performs regular review of firewall rulebases and recommend necessary optimization actions
• Assists Level 1 Support Engineers during problem determination and resolution whenever necessary.
• Planning and recommending overall improvements in firewall management
• Device Access management
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Performance and historical trend analysis
• Implements changes to firewall infrastructure hardware in order to correct errors or enhance functionality
• Develops processes for improving operational efficiencies, as well as identifies/implements automation tools for existing manual processes.
• Prepares technical reports, memoranda, and instructional manuals as documentation of network design and operational requirements.
• Management of network daily activities; incident and problem management
• Responsible to work with respective team members on the review of network architecture and design
• Responsible to work with the respective server and application team's members
• Responsible to work with the respective network vendor's teams for the trouble-shooting, identification and resolution of network problems
• Responsible for network devices, as well as appliances, vulnerability review and assessment.
• Responsible for network devices, as well as appliances, change implementation review and assessment
• Responsible to conduct pre / post implementation plan review
• Responsible to conduct and train Level 1 engineers, i.e. to empower and equipped the L1 engineers with the knowledge to run and maintain Data center network
• Coordinate with information security governance team to align IT infrastructure with established standards
• Change requests prior to implementation
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Design and monitor operations metrics on a monthly basis to keep track of key operation metrics
• Ready to work in shifts including public holidays
• Ready to be on call for 24x7 support during shifts

Requirement

• Experience: Minimum 8 years firewall operations and/or management role
• Certification : CCSA, CCSE, JNCIA-FWV, JNCIA-SEC, JNCIS-SEC (Preferred but not mandatory CISSP, CISM, ITIL Foundation)
• Checkpoint Firewalls, Juniper Netscreen / SRX Firewalls, VPN Technologies, DNS, NTP, 2 Factor Authentication technologies.
• Ability to work independently or as a team player.
• Experience in highly complex data center network design and support
• Experience with Cisco and Arista products specially DCI technology
• Experience with Cisco and Arista Software Define network (ACI, DNAC, etc)
• Strong hands on experiences on Fabric Patch, OTV, VPC+, Vxlan, Mlag, MP-BGP
• Knowledge and experience in employing and using various networking trace tools, i.e. Sniffer, Wireshark, riverbed net profiler, NetBrain, Gigamon and etc.
• Pro-active, dynamic and with good analytical/conceptual thinking.
• Certifications such as CCIE or above level in networking is an advantage
• Python or Linux shell scripting skill is a plus

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

1. Responsibilities

· Strategic planning for IT security investments and technology adoption to maximize effectiveness of IT security controls against rapidly evolving threats.

· Develop and enhance the integrated Security Operations Centre (SOC) for advanced cyber threat monitoring and detection, early warning and active defence capabilities for both the Financial Sector and MAS as an institution.

· Work closely with internal and external stakeholders to manage the operations of the integrated SOC.

· Develop and implement cyber resilience frameworks, standard operating procedures and playbooks for cyber security operations and incident response.

· Ensure that cyber threats, risks and vulnerabilities are appropriately investigated and addressed promptly.

· Coordinate the investigations of cybersecurity incidents with internal teams and cross agency partners.

· Perform periodic management and third-party reporting.

· Work with partners to perform periodic rules tuning, streamline procedures and implement automation to improve efficiency and quality of output.

· Participate in various internal, external and international forums/projects on cyber security.

· Broad understanding of Financial Sectors operations will be provided so that we can better relate the linkages between business and cyber operation.

2. What we are looking for

• Strong interest in SOC operations.

• Hands-on experiences with implementing services/application on Windows and/or Linux preferred.

• Hands-on experiences with prevailing SIEM tools preferred.

• Hands-on experiences with prevailing cloud technologies preferred.

• Scripting/coding skills preferred.

• Normal office hours, but off-office hours standby to respond to exigencies is expected.

• Management of technical projects/implementation is expected.

• Writing of proposals and procurement related work is expected.

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

This is a 12 months contract assigned to our client

Work Location: To be confirmed (during interview)

Salary Range : $5,000-$7,500

Job Description

Top Mandatory skills

1. Azure native security

2. Security Incident response

3. Familiar with at least 2 of below security tooling upkeeping:

SIEM, Endpoint Detect and Response, Endpoint Anti-virus, Next Gen Firewall, VA Scanner

Skills which are good to have / optional

1. Hardening CIS benchmark

2. Impact analysis report drafting, testing of patches

3. Government compliance standards familiarity

4. Knowledge on Cloud Application Architecture

• Location: Singapore / Hong Kong / Dubai
• Relocation support provided if you are interested in relocating to Dubai
• SGD 11-14K / HKD 62-81K / AED 29-38K
• Passionate in security risk and security audit in Web3 / Fin-tech / Wallets / Crypto / Blockchain Technologies
• Bilingual capabilities in English and Chinese (Mandarin) will be a plus as you will liaise with English and Chinese speaking stakeholders.

Responsibilities:

• Conduct thorough security audits for web3 wallets, focusing primarily on Java code, to identify potential risks related to business requirements and technology implementation schemes. Provide actionable solutions and facilitate their implementation.
• Analyze the characteristics of new blockchain networks, gaining deep insights into potential risks during the integration process and advocating for risk mitigation strategies within code implementation.
• Actively contribute to the research and development efforts of the entire Product R&D team, ensuring the adherence to Secure Development Lifecycle (SDL) practices.

Requirements:

• Proficient in relevant application security and blockchain security concepts, with a comprehensive understanding of common security vulnerabilities, including their internal principles, exploitation methods, and mitigation strategies.
• Experience in security auditing, with a strong emphasis on Java or other programming languages. Experience in leading or participating in SDL implementation is preferred.
• Thorough understanding of the blockchain industry and its technologies, including common security risks and the operational principles of mainstream chains such as BTC and ETH.
• Familiarity with widely-used encryption, decryption, and signature algorithms, particularly those employed in web3 wallets (e.g., ECDSA, ED25519, RSA, AES, SSS).
• Background in penetration testing and proficiency in mainstream attack methodologies.
• Demonstrated passion for emerging blockchain technology, with a proactive attitude towards self-driven learning and understanding.
• Bilingual capabilities in English and Chinese (Mandarin) will be a plus as you will liaise with English and Chinese speaking stakeholders.

If you are interested in the above position or other cyber / information security position, please kindly send your updated CV to Shannagh Wu at [email protected]
*Due to high volume of applications, only shortlisted applicants will be contacted.*

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).