Total 200 analyst job vacancies in Legal / Public / Security category in Singapore

• Diploma / Graduate in Banking and Finance
• 0 to 2 years of relevant experience in Banking Operations
• Candidate has worked in a Banking Ops role (middle office or back office) in any of the Run The Bank Process with Settlements exp
• The candidate needs to demonstrate a level of efficiency and attention to detail while under pressure strictly adhering to timelines
• interface with internal and external clients to provide operational and administrative support as needed
• See that Operations processes comply with regulations, guidelines, standards and policies
• Interacted with the middle/front office to resolve trade discrepancies and articulate risks
• Great computer skills and the willingness to learn new programs and process flows
• Familiar with Corporate Action events, i.e. bond maturity, coupon payment calculation etc. Will be an added advantage

• Setup and operating Managed Endpoint and Detection Response (MDR) program and proposing enhancement to achieve better efficiency/ effectiveness
• Operating Network Traffic Analytics (NTA) program, identification of abnormalities in client’s environment
• Performs threat hunting within the clients’ technology environments to uncover indicators of threat activities
• Performs digital forensic preservation, legal documentation and electronic discovery for incidents and investigations
• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
• Supports the identification and documentation of Indicators of Compromise (IoCs)
• Leverages internal and external resources to research threats, vulnerabilities and intelligence on various threat actors and exploitation tools and platforms
• Use an analytics platform to identify threats in the available information repositories
• Perform threat research to identify potential threat vectors and work with multi-disciplines to improve prevention and detection methods
• Identify gaps in an organisation’s measurement metrics, telemetry and logging capabilities and propose enhancement strategies to achieve the intended outcomes
• Work with client’s appointed Incident Response Management team for cyber security incidents such as data security breach, Advanced Persistent Threat (APT)

Requirements

Basic Requirements

• 1 to 3 years of experience with threat hunting
• 1 to 3 years of experience in incident response handling
• 1 to 2 years of experience with digital forensics investigations
• Experience in consulting, including both internal and client facing experiences
• Ability to obtain a security clearance
• Bachelor Degree in Computer Engineering, Computer Science, Cyber Security, Information Security or other equivalents
• Ability to travel 20% of the time

Preferred Skills /Qualities

• 1 to 3 years of experience supporting or providing expert witness testimonials
• 1 to 3 years of experience in data analysis
• 1 to 3 years of experience in log analysis
• 1 to 3 years of experience in reverse malware analysis
• Experience with research, technical and business documentation and analysis.
• Knowledge of the Singapore Law, Singapore Government regulations and policies.
• Ability to demonstrate flexibility, initiative and innovation in dealing with ambiguous, fast-paced situations.
• Ability to show proficiency in one or more regional languages and dialects.
• Ability to show proficiency in Microsoft Office, Power BI and Tableau.
• Ability to show proficiency in Forensic Toolkits, e.g. EnCase Forensics, FTK Forensics, Magnet Forensics and Write Blockers.
• Ability to show proficiency in reverse malware engineering tools, e.g. IDA Pro
• Ability to show proficiency in programming and scripting, e.g. Java, .NET Programming, Python & PERL scripting, etc.
• Possession of excellent presentation and briefing skills.
• Possession of excellent oral and written communication skills.
• Professional certifications, including EnCE, GCIH, GCFE, GCFA, GREM, GNFA, GASF, GCTI, CISSP, or other SANS certifications.

The candidate’s responsibilities will be to provide support to the operation:

Our consultant will provide the following services related to systems

Security initiatives:

SAP Security design, development and testing. Gather requirements and build

new security roles.

Identify and create specification for SAP Security utilities and testing of utilities.

Implement new security features.

Validate system configuration, provide recommendations to secure Application.

Validate system configuration used for testing

Test any newly developed objects

Support Security activities.

Assist with Security analysis & administer Central Station tickets.

Document Security procedures

Troubleshoot Security issues

Support Audits

Validate system configuration used for testing

BA/BS with 4-5 years’ experience

Strong comprehension of SAP Security concepts

Ability to troubleshoot SAP authorization issues

Collaborative skills

Proactive in assisting team members

Flexibility to work across multiple lines of business as well as geographies

Excellent communication skills including engaging with technical and non-technical groups in

finding solutions to issues

Deep understanding and ability to comprehend complex business processes to apply best

practice security methodologies

Strong time management skills

Able to independently plan and prioritize multiple assignments to meet expectations of time

and quality in a complex and fast-paced environment

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

The Opportunity

• Adecco is partnering with one of the most well-established and respected financial institution with a strong track record of success.
• They have a culture of innovation and continuous improvement, constantly looking for ways to improve their services and offerings.

Job Responsibilities

• Having an in-depth understanding of the network/security operational technologies and metrics that helps to measure quality, speed, user experience, and more, and making solid recommendations
• Manage service improvements for all Network and Security services supported throughout the organization
• Provide daily operational support for network security infrastructure documents, reviews, maintains and shares relevant technical information to the team
• Manage all high severity incidents and try to resolve them and restore the infra services within the stipulated SLA
• Manage all low severity incidents/requests without breaching the stipulated SLA
• Participate in incident management calls and problem management discussions
• Drives and delivers root cause for any high severity issue
• Support technical skills development within the team and provides training when required
• Plan, schedule, closely coordinate and implement network security changes and present them in respective CAB meetings while ensuring the conformity to CA-CIB change management policies, process and procedures
• Maximize network performance by monitoring performance; scheduling upgrades; collaborating with Network Architects on network optimization efforts.
• Review technology changes to identify potential risks
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery proce

Job Qualification

Must have:

• Cisco Nexus & Data Center Architectures (VPC/VDC/ACI/MPLS)
• Routing protocols – high level proficiency of BGP/OSPF
• Layer 2 switching technologies
• High level proficiency of operations and troubleshooting mechanisms
• Network monitoring and management tools (HPNNM/Solarwinds/Grafana)
• At least a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Good to have:

• Firewalls (Checkpoint/Fortinet)
• Proxy technologies
• Load balancers/reverse Proxy (F5)
• IPAM Technologies (DNS/DHCP)
• Packet analysis knowledge (wireshark)
• Scripting knowledge (python/ansible)

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Next Step

Click “apply” or send resume to: Tamanna Bilandi [email protected]

EA Licence No.91C2918| Personnel Registration No. R2096241

Job Description:

• Monitor and analyze log data, network traffic and/or alerts generated by a variety of security technologies in real-time; escalate and explain validated security incidents to customers. • Investigate attacks against customer networks.
• Write up security incident reports detailing the threat, its characteristics, and possible remediation activities.
• Research new threats and ensure appropriate detection capabilities are in place to identify and respond to these threats.
• Routinely review security incidents and other customer deliverables for adherence to the established procedures and guidelines.
• Document, rectify, and provide feedback to other analysts as necessary.
• Articulate security issues to customers, both verbally and written.
• Understanding of current vulnerabilities, attacks and countermeasures.
• Developing knowledge of key security technologies.
• Developing knowledge of cyber-attacks and vulnerabilities.
• The team operates on a 24x7 shift work to deliver monitoring services and support across multiple customers.
• Create new Security (SOP) document or update existing documents.
• Analyze security controls implementation and recommend area of improvement

Requirements:

• MUST have: carbon black, tenable, QRadar, Trend Micro, Imperva DAM, IWSVA - candidate who can start asap.

Responsibilities:

• Manage IT Security Protection System, address technical and security issues, and perform Health Checks.
• Review and enhance IT security policies, procedures, and documentation based on industry standards.
• Enforce IT Security Policy compliance, assess security posture, and recommend measures to mitigate threats.
• Develop and enforce security policies to safeguard against unauthorized access and potential threats. Configure and manage IPSEC for secure communication and maintain Access Control Lists (ACLs).
• Implement POA to enhance network security and address vulnerabilities. Develop Plans of Action (POA) based on specific requirements and execute them efficiently.
• Implement and enforce IT security policies on firewalls to safeguard the network infrastructure. Manage and maintain various firewall platforms, including ASA, Juniper SRX, Fortinet, and Palo Alto.
• Utilize network monitoring tools such as SolarWinds, Manage Engine, Netflow, Cacti, and Tivoli to ensure proactive network management and security.
• Analyze and resolve complex network problems, ensuring minimal impact on business operations. Provide comprehensive network support, ensuring smooth operations and quick issue resolution.
• Support Cyber Security Incident management and response for both internal and external parties
• Collaborate with cross-functional teams to address network-related challenges and implement effective solutions.
• Leverage these tools for real-time analysis and reporting on network performance.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• At least 2 years proven experience in information security and network administration. Familiarity with industry best practices and emerging trends in information security.
• Proficient in Cyber and Network Security Management, IT Compliance and/or Risk Management. In-depth understanding of IPv4, Network Address Translation (NAT), Address Resolution Protocol (ARP), and Dynamic Host Configuration Protocol (DHCP).
• Firm understanding of TCP/IP, OSI Layer, network security, network routing and switching, firewall and etc
• Experienced with Gemalto, RSA, Splunk, SEP and other cybersecurity technologies is advantageous.
• Certification in cybersecurity and/or network design (e.g. SSCP, CISSP, CCNA, CISA)
• Strong understanding of ISO27001 and/or PCI Data Security Standards.
• Strong project management and communication skills (written and spoken)
• Be on standby to provide support for critical security alerts and incident management outside office hours.

Join the Pioneer Crypto Brand in the Philippines!

Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.

Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

We are seeking an experienced and skilled Senior Security Operations Center (SOC) Analyst to join our dynamic cybersecurity team. The Senior SOC Analyst will play a lead role in monitoring, analyzing, and responding to security incidents, ensuring the integrity and confidentiality of our organization's information assets. The ideal candidate will have a strong background in cybersecurity, incident response and threat intelligence.

Responsibilities:

• Security Monitoring and Incident Response:
• Implement and lead continuous monitoring of security events and alerts using SIEM technologies.
• Conduct in-depth analysis of security incidents, utilizing forensics and log analysis, to determine the root cause and extent of the compromise.
• Lead the development and enhancement of incident response processes, ensuring a swift and effective response to security incidents.
• Conduct tabletop exercises to simulate and evaluate the organization's incident response capabilities.
• Provide guidance and mentorship to the SOC team during incident investigations, fostering a collaborative and knowledge-sharing environment.
• Collaborate with external incident responders and law enforcement agencies when necessary.
• Contribute to security awareness initiatives by providing insights and recommendations based on incident analysis.
• Prepare and deliver comprehensive reports on security incidents to both stakeholders and technical audiences.

Threat Intelligence:

• Lead the collection, analysis, and dissemination of threat intelligence to stay ahead of emerging cybersecurity threats.
• Evaluate the relevance and impact of threat intelligence on current security controls and recommend adjustments as needed.
• Implement and lead the integration of threat intelligence feeds into security monitoring tools to enhance detection capabilities.
• Collaborate with industry peers and organizations to share threat intelligence and best practices.
• Lead the development of threat hunting strategies to proactively identify and mitigate potential threats.

Security Tools Management:

• Lead the management and optimization of security tools, including but not limited to SIEM, IDS/IPS, and endpoint detection and response (EDR) solutions.
• Collaborate with the IT and infrastructure teams to lead the deployment and configuration of security technologies.
• Ensure the tools are aligned with industry best practices and are effectively addressing the organization's security requirements.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field.
• Minimum of 5 years of experience in a Security Operations Center role.
• Relevant certifications such as CISSP, CEH, or GIAC are highly desirable.
• Proficient in using SIEM tools and other security technologies.
• Strong knowledge of networking protocols, operating systems, and security architectures.
• Extensive experience in incident response methodologies, including thorough forensic analysis.
• In-depth understanding of macOS and Linux operating systems and their security controls.
• Demonstrated ability to analyze and respond to security incidents on macOS/Linux/ Cloud Services platforms.
• Familiarity with scripting languages for automating security tasks (e.g., Python, Bash).
• Familiarity with cloud services (E.g AWS/GCP) and security best practices is a must.
• Excellent communication and interpersonal skills.

Additional requirements:

This role may require participation in an on-call rotation and occasional off-hours work to address security incidents or support critical changes.

The Opportunity

• Adecco is partnering with one of the most well-established and respected financial institution with a strong track record of success.
• They have a culture of innovation and continuous improvement, constantly looking for ways to improve their services and offerings.

Job Responsibilities

As an expert of his/her team, he/she:

• assigns technical tasks and manages delegation for technical issues,
• animates the team to encourage collaboration and sharing of best practices,
• has a role in supporting technical skills development and provides training when required,
• supports new technologies and leverages them to provide consistency of service across streams,
• manages service improvements for all Network and Security services supported throughout the organization,
• documents, reviews, maintains and shares relevant technical information to the team
• provides technical direction, supports services both proactively and reactively to maintain the availability and reliability of system infrastructure in accordance to the SLA,
• implements and develops improvements based on LEAN-CA-CIB best practices,
• focuses on automation and optimum use of the team to improve efficiency,
• drives and delivers root cause for any high severity issue,
• reviews technology changes to identify potential risks,
• is responsible for problem management and resolution
• Perform real-time analysis and trending of security systems
• Respond to user incident reports and evaluates the type and severity of security events.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

As an experienced professional in Network-Security Services, he/she:

• supports his/her team during diagnosis when technical issues rise in his/her scope of expertise,
• is aware of the global IT structure so that he/she anticipates interrelationships within the organization,
• engages with technical peer, Service managers, Architect and project teams on technology roadmap and projects,
• facilitates transformation projects and suggest future directions for new areas of improvement and change,
• guarantees the production readiness and license to operate of new projects and solutions
• is available and able to drive technically, any complex or high severity incidents that occur within the scope of their role,
• actively engages to understand new technologies and technology trends and reviews them with a view to incorporating them into CACIB operations,
• actively assists in identifying the most technical skilled candidates for open roles,
• technically coach and develop partner resources to improve quality and productivity,
• Define the technical skillset required to support CA-CIB technologies.

As the escalation point of contact for Clients, he/she:

• manages the daily relationship with Clients including planning, requests clarification, risks mitigation and service quality

Legal and Regulatory Responsibilities

• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Job Qualification

• Fluent in English, both written and spoken
• 15+ years of Experience in managing network and security infra.
• 10+ years Experience in handling major network security projects (ex: SDWAN )
• 10+ years Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.
• At least a Bachelor’s degree in any of these faculties:
• Computer Science
• Information Technology
• Programming & Systems Analysis
• Science (Computer Studies)

Working Hours:

• Primarily match Europe business hours
• On-call support will be expected on a rotational basis

Next Step

Click “apply” or send resume to: Tamanna Bilandi [email protected]

EA Licence No.91C2918| Personnel Registration No. R2096241

About the client:

Our client is a reputed organization

Responsibilities:

• You will be a member of the Cyber Security Team responsible for responding to threats and incidents to the corporate networks, systems and digital assets.
• Perform security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques.
• Detect incidents through proactive “hunting” across security-relevant data sets.
• Document incident response analysis activities thoroughly
• Develop new, repeatable methods for finding malicious activities
• Provide recommendations to enhance detection and protection capabilities.
• Analyse endpoint, network, and application logs and security events
• Help other IT teams in security-related issues.

Requirements:

• Degree in Computer Engineering, Computer Science, Information Systems, or equivalent qualification.
• At least 2-3 years of experience in cybersecurity with at least 2 years in handling cyber-security operations related work
• Experience working in Security Operations Centre and/or Computer Incident Response Team.
• Experience with Threat Intelligence Platforms.
• Experience with SIEM (especially Splunk).
• Excellent problem-solving skills combined with hands-on experience doing root cause analysis and post-incident reviews.
• Demonstrate experience in Information Security with a focus on Cyber Security operations, Incident Response and Detection.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret to inform that only shortlisted candidates will be contacted

Thanks& Regards,

Annie Pal

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1331366 (Annie Pal)

**********************************

The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an emailto let us know. Please feel free to contact us if you have any queries.

All parties involved in any form of workforce engagement are to strictly adhere to prevailing regulations and laws that govern local fair employment practices, and to invest reasonable efforts in building a strong Singaporean core workforce, recruit and select candidates based on merit and prohibit discrimination based on age, race, gender, religion, marital status and family responsibility or disability. For more information, please refer to MOM and TAFEP websites.

**********************************

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB

• Normal working hours
• Exposure to latest technology

About the company

Our client is an established multinational end user company. As part of their plan to invest in technology, they are now hiring a new SOC Engineer / Analyst (Cyber Defence)- Incident Response to be part of their Cyber Security team here in Singapore.

About the job

• Reporting directly to Head of Cyber Security, SOC, your role involves:
• Ensuring incident Responses towards IT security threats are well managed. Ensuring timely triage of cybersecurity incidents, investigation and incident response for Cyber security incidents
• Managing security operation to ensure implemented security technologies and controls are effective and adequate to protect the company
• Conducting Identifying root cause and remediating of cybersecurity incidents
• Providing advisory on security threats and vulnerabilities. This includes performing vulnerability scans and analyze results of scans
• Directing post-mortem activities following critical incidents
• Overseeing the development and execution of corporate security awareness and training programs. This includes getting the buy-in of senior business stakeholders which includes securing funding for IT security programs
• Enhancing early detection capability - Driving lessons learned activities after incidence closure to identify potential gaps in security control

Skills and experience required
As a successful applicant, you will have at least 3 years of experience in IT Security / SOC / Incident response / SIEM / Splunk / Incident response.

Whats on offer

This is an excellent opportunity to join an established company with ambitions to scale up their IT security capabilities.

To apply online please use the 'apply' function, alternatively you may contact Hoon Teck TAN at https://www.linkedin.com/in/hoonteck-nologyrecruitment/ (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB (EA: 94C3609/ R1219669)

• Monitor third party security feeds, forums, and mailing lists to gather information related to the client through automated means
• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Review vulnerabilities advisories
• Review and process threat intelligence reports
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assess each event based on factual information and wider contextual information available
• Review, propose and generate reports to automate or reduce low value event escalations
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations through SIEM Rules, DB scripts etc.
• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
• Assist the Security Analysts with the investigative works
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to detection Use Case
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

The Company:

Our client is a multi-national information technology company with its headquarters in Singapore. It is also the largest Systems Integrator domestically.

The Project:

This project consists of multiple teams deployed within Cybersecurity Operations Command Centre delivering mission critical 24x7 threat monitoring, prevention, analysis, intelligence to high-valued clients.

The Role :

1. Provide support for internet security surveillance activities.

2. Responsibility for managing and escalating security incidents, ensuring a prompt and effective response.

3. Assist in the thorough preparation of incident reports, contributing to comprehensive documentation of security events.

4. Assist in detecting and resolving issues arising from security incidents, and demonstrate a proactive approach to maintaining system integrity.

5. Provide first-level troubleshooting for serviced devices, and address and resolve security-related issues.

6. Work closely with engineers team to troubleshoot and resolve problems. Your expertise and insights will play a crucial role in finding effective solutions.

7. Stay informed about the latest security advancements by consistently reviewing security updates and ensuring that systems are up to date with the most current protective measures..

8. Provide support for the Level 1 (L1) team by assisting with resource management, helping to ensure operational continuity and efficiency.

9. Assist in the onboarding program for new security analysts, facilitate a smooth integration into the team and ensure familiarity with established protocols.

1. Minimum requirement is a Diploma with a module in IT or Cyber Security.

2. Having a security Analyst certification like Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA), or Computer Hacking Forensic Investigator (CHFI) is advantageous but not mandatory.

3. Preferably, candidates should have experience in one or more of the following areas:

• Management of IDS/IPS and firewall systems.
• Experience in Vulnerability Assessment, penetration testing, and risk assessment using various scanning and penetration testing tools.
• Knowledge of Unix, WIN2K, NT, and web server security practices such as OS tightening, SSO, and virus scanning.

4. General understanding of Information Security concepts.

5. Adequate understanding of Layer 1-7 Networking concepts is required.

6. Ability to follow predefined procedures, policies, and processes, and work under pressure.

7. Good communication skills (verbal, reading, and writing).

8. Working hours are from 9.00 AM to 6.30 PM, Monday to Friday.

• End of contract bonus

Job Summary:

We're seeking a driven Security Analyst to fortify and safeguard manufacturing environments by identifying vulnerabilities, strengthening security protocols, and fortifying our systems. You'll collaborate across teams to bolster our security posture while ensuring the integrity of sensitive data.

Responsibilities:

• Linux & AWS Security: Conduct audits and assessments specifically tailored for Linux and AWS environments, rectifying detected vulnerabilities to uphold stringent security standards.
• Collaborative Security Initiatives: Work closely with engineering teams dedicated to building, scaling, and managing manufacturing infrastructure, ensuring robust security in application services, data pipelines, and logging mechanisms.
• Monitoring and Investigation: Vigilantly monitor, analyze, and investigate security alerts within these environments, pinpointing root causes and implementing proactive measures.
• Comprehensive Audits: Conduct thorough security audits and assessments, both for cloud and manufacturing setups, enhancing the overall security posture.
• Operational Support: Provide operational assistance for security-related projects, aligning implementations with security objectives.

Requirements:

• Experience: 4 to 6+ years of hands-on experience in securing Linux or Windows/AD systems in large-scale production environments.
• Cloud Proficiency: Strong expertise in AWS cloud platforms, ideally with experience using tools like Terraform, Ansible, or Chef for configuration management.
• Tool Proficiency: Familiarity with security platforms and tools such as Wazuh, Osquery, Wireshark, Zeek, and Suricata.
• Network Security: In-depth understanding of TCP/IP fundamentals, network services, and adeptness in analyzing network and host security logs.
• Cryptography and Security Measures: Knowledge of applied cryptography principles, including PKI, SSL, and key management practices.
• Communication and Problem-Solving: Strong communication skills, adept problem-solving capabilities, and the ability to work independently.

This role is on an initial contract basis of 12 months.

Morgan McKinley is hiring for the Security Analyst - Onsite role

Job Responsibilities:

• Work with partners to identify and resolve security weaknesses in the environments which could pose risk to the company.
• Fix detected vulnerabilities to maintain a high-security standard.
• Work closely with teams of engineers chartered with building, scaling, deploying and
  maintaining manufacturing infrastructure, application services, data and logging pipelines
• Monitor, analyze and investigate all related security alerts in the environment to identify the root cause.
• Conducting security audits & assessments for cloud & manufacturing environments.
• Operational support to security related requests and projects implementations.
• Enhance the security posture
  

Job Requirements:

• The candidate has 4 to 6+ years of hands-on experience in security audits for cloud and manufacturing environments.
• Skilled in using tools like Qualys and Microsoft Defender, handling security alerts, and managing identity and access. Additionally, they have expertise in Linux/Windows security, configuration management tools, and AWS platforms.
• The candidate is familiar with security tools such as MDE, Wazuh, Osquery, Wireshark, Zeek, and Suricata. They possess knowledge in TCP/IP, network services, cryptography, and problem-solving capabilities.

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Koh Boon Sien
EA Licence No: 11C5502
EA Registration No. R1110345

Job Summary:

We're seeking a driven Security Analyst to fortify and safeguard manufacturing environments by identifying vulnerabilities, strengthening security protocols, and fortifying our systems. You'll collaborate across teams to bolster our security posture while ensuring the integrity of sensitive data.

Responsibilities:

• Linux & AWS Security: Conduct audits and assessments specifically tailored for Linux and AWS environments, rectifying detected vulnerabilities to uphold stringent security standards.
• Collaborative Security Initiatives: Work closely with engineering teams dedicated to building, scaling, and managing manufacturing infrastructure, ensuring robust security in application services, data pipelines, and logging mechanisms.
• Monitoring and Investigation: Vigilantly monitor, analyze, and investigate security alerts within these environments, pinpointing root causes and implementing proactive measures.
• Comprehensive Audits: Conduct thorough security audits and assessments, both for cloud and manufacturing setups, enhancing the overall security posture.
• Operational Support: Provide operational assistance for security-related projects, aligning implementations with security objectives.

Requirements:

• Experience: 4 to 6+ years of hands-on experience in securing Linux or Windows/AD systems in large-scale production environments.
• Cloud Proficiency: Strong expertise in AWS cloud platforms, ideally with experience using tools like Terraform, Ansible, or Chef for configuration management.
• Tool Proficiency: Familiarity with security platforms and tools such as Wazuh, Osquery, Wireshark, Zeek, and Suricata.
• Network Security: In-depth understanding of TCP/IP fundamentals, network services, and adeptness in analyzing network and host security logs.
• Cryptography and Security Measures: Knowledge of applied cryptography principles, including PKI, SSL, and key management practices.
• Communication and Problem-Solving: Strong communication skills, adept problem-solving capabilities, and the ability to work independently.

This role is on an initial contract basis of 12 months.

Key Responsibilities and Attributes:

· Provide Technical Application Support for the Security Infrastructure and Applications.

· Production and UAT Environment Troubleshooting expertise.

· Capacity, performance and Stability reporting and Management.

· Maintenance of scripts and other tools for system monitoring and process automation.

· Provide Technical Mentoring.

· Lead Operations-related projects and Security assessment for the infrastructure associated with the applications in scope.

· Leadership Skills to Document and do knowledge transfer to other team members.

· Be responsible to assess the risk and associated impact of all operational issues and change events and react quickly to escalate to technology management in a timely manner when required.

· Work closely with the infrastructure team to ensure the operational requirements are met during application integrations.

· Continuously keep the Knowledge Share repository up to date.

· Strong interpersonal and communication skills.

· Strong analytical skills and attention to detail.

· Ability to work across all levels of the organization.

· Proven ability to work with demanding global partners within aggressive timelines; solid problem solving, analytical and technical abilities.

Qualifications :

Strong candidates will possess the following qualifications:

· Bachelor’s degree in information technology or any other equivalent

· Knowledge and 3-5 years of experience in Operations support or System Administration

· Knowledge and experience with the following Operating Systems is a must: Red Hat, Linux, Windows System, or other Unix-based Operating Systems

· Hands on experience with Unix scripting, SQL, or any other equivalent

· Knowledge of Security tools and hands-on experience with some of the following technologies is an added advantage:

o Multi-Factor Authentication and Authorization Technologies: Safeword Premier Access, Cisco ISE, CITI2EE End to End Encryption, Cloud IAM, SiteMinder

o Data Security Technologies: Cortosis, DTAAS, Ionic

o PKI Technology and Encryption Systems: Entrust, MS-PKI, Venafi Encryption Director, OCSP, Hashicorp

o Identity Management Technologies: SailPoint, Powerbroker

o Privileged Access and Vault Management Technologies: CyberArk, SCAPDAP, WAIS

o Monitoring or Automation Tools: Tivoli, Sensu, Autosys, ServiceNow

· Knowledge of the following components would be a good addition:

o Web Servers (Apache, IIS, Sun One Web servers)

o Application Servers (WebLogic, WebSphere)

o Databases (Oracle, SQL server, Sybase)

o Programming languages (Java, Perl, C/C++)

o Understanding of security, network architectures and protocols.

o Familiarity of Compliance and risk management frameworks and methodologies (ISO27002, SDLC)

o Certifications (CISSP, ITIL, CCNA/CCNP, CEH, RedHat, MCSE, Cloud)

Working knowledge in Key and certificate encryption, life cycle and end-to-end communication.

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

The Role:

The role is part of our Global SOC team, tasked to deliver Managed Security Services (MSS) and help customers achieve its business goals & objectives by re-imagining cybersecurity as one of its business enabler. The role reports to SOC vertical based in Singapore.

It is great opportunity to put your past experiences in building a world class SOC and address cybersecurity challenges of organizations in the region. It provides exposure to wide variety of security technologies, and provides opportunity for the candidate to pioneer in developing SOC and build new MSS offerings.

Accountabilities:

· Work in 24x7 shift environment to handle security incidents and provide level two (L2) support during analysis & investigations to identify the root cause.

· Provide detailed remediation recommendation to customers for the incidents within agreed SLAs, and if required assist them during remediation implementation.

· Execute SOC playbooks, knowledge base to minimize the security incident impact and perform detailed investigation on the infected assets.

· Escalate critical incidents to 3rd level support team, for further analysis & investigations, and demonstrate excellent collaboration skills for timely resolution to minimize impact to customers.

· Review 3rd party threat intel feeds and integrate them into MSS platforms to provide value to our customers.

· Prepare SOC monthly reports, which includes customization based on business requirements and present them to customers during monthly meetings, highlighting risks and mitigation plans.

· Enable regional L1 Security Analysts to deliver seamless L1 support by developing SOC playbooks, relevant and sufficient knowledge base.

The Individual and their Experience:

· Candidate should have at least 3 years of experience working in SOC and MSS environments, with a Bachelor’s degree in Computer Science/IT/Information security.

· Excellent hands-on experience on incident analysis using SIEM platforms such as Microsoft Sentinel, IBM QRadar.

· Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if Microsoft Defender, CrowdStrike.

· Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.

· Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with a proven Unix (Solaris, Linux, BSD) experience.

· Knowledge on any shell scripting language, and to apply them to automate mundane operations tasks.

· Candidate should have at least one cybersecurity industry certification such as CEH, CHFI.

· Good understanding of basic network concepts and advantage if exposure to cloud technologies.

· Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL standards.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB

• Normal working hours
• Exposure to latest technology

About the company

Our client is an established multinational end user company. As part of their plan to invest in technology, they are now hiring a new SOC Engineer / Analyst (Cyber Defence)- Incident Response to be part of their Cyber Security team here in Singapore.

About the job

• Reporting directly to Head of Cyber Security, SOC, your role involves:
• Ensuring incident Responses towards IT security threats are well managed. Ensuring timely triage of cybersecurity incidents, investigation and incident response for Cyber security incidents
• Managing security operation to ensure implemented security technologies and controls are effective and adequate to protect the company
• Conducting Identifying root cause and remediating of cybersecurity incidents
• Providing advisory on security threats and vulnerabilities. This includes performing vulnerability scans and analyze results of scans
• Directing post-mortem activities following critical incidents
• Overseeing the development and execution of corporate security awareness and training programs. This includes getting the buy-in of senior business stakeholders which includes securing funding for IT security programs
• Enhancing early detection capability - Driving lessons learned activities after incidence closure to identify potential gaps in security control

Skills and experience required
As a successful applicant, you will have at least 3 years of experience in IT Security / SOC / Incident response / SIEM / Splunk / Incident response.

Whats on offer

This is an excellent opportunity to join an established company with ambitions to scale up their IT security capabilities.

To apply online please use the 'apply' function, alternatively you may contact Hoon Teck TAN at https://www.linkedin.com/in/hoonteck-nologyrecruitment/ (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB (EA: 94C3609/ R1219669)