Total 250 automation engineer job vacancies in Legal / Public / Security category in tanah merah harbourfront and marina bay north east

Senior Security Engineer

We are looking for an experienced and proactive Senior Security Engineer for one of our clients. Reporting to the Senior Security Manager, the Senior Security Engineer will manage security incidents, conduct threat hunting with SIEM/SOAR tools, and support IT audits. You’ll oversee vulnerability assessments, security training, and IT security for vessels. Additionally, you lead security projects, provide advisory for projects, and engage with external parties on cyber threats.

The ideal candidates would have at least 3-5 years of relevant experience in IT and Cloud Security. He/she will have good communication skills, be resourceful, self-organized and a good team player.

Responsibilities

· Security Incidents

o Perform investigations of Security incidents.

o Perform threat hunting using SIEM and SOAR tools.

o SIEM/SOAR Tools: Hands-on experience with security monitoring tools like Microsoft

Sentinel or other relevant SIEM and SOAR platforms.

· Audit and Governance

o Participate in internal and external IT audits.

o Maintain Incident Response Plans and IT policies.

o Perform Vulnerability Assessment and Penetration Testing.

o Conduct Security awareness training for the organization.

o Conduct phishing campaigns.

o Design and review IT/Cyber security architectures.

o Works with external parties (eg; CSA, MPA) on the latest cyber threats and trends.

o Assist in vessel IT security setup, review, audit and remedial actions.

· Projects

o Manages Security related projects.

o Acts as Security Advisory for all projects.

o Participate in Request for Proposal and Request for Quote process.

Requirements

Education & Knowledge

· Degree in Information Security, Computer Science or related disciplines with at least 3 years of relevant experience.

· Knowledgeable in IT Security, Cloud Security, and security standards such as NIST, ISO 27000 and IMO.

· Azure Cloud Security: Strong expertise in Azure Security Center, Microsoft Defender for Cloud, and Azure Policy for real-time cloud threat management and compliance.

· IT Security Management experience of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc will be an advantage.

· Knowledge managing network security devices (NextGen Firewalls, IDS, IPS, UTM, NAC, AV, etc.), Windows, Linux, and networking service will be an advantage.

· Preferred Certifications: CCSP (Certified Cloud Security Professional) and Azure Security Engineer Associate are highly preferred, in addition to other certifications such as CISSP, CISM, or CEH.

· Strong hands-on knowledge and experience with security architecture and implementation of Azure Cloud Computing (IaaS, Containers, AKS, DevOps, CI/CD) is mandatory.

· Proficiency in automating security workflows within CI/CD pipelines, focusing on Azure DevOps integration.

· Ideally completed 2 or more of the following certifications: SC-200, SC-300, AZ-500, MS-500 and SC-100.

· Knowledge of Vessel IT will be an advantage.

· Maritime Cybersecurity: Familiarity with maritime cybersecurity standards such as IMO guidelines and TMSA (Tanker Management and Self-Assessment) is a strong advantage for vessel IT security.

Others

• UK MNC and good corporate culture

• 5-day work week (Centralised location)

To apply, please send your CV to [email protected]

We regret that only shortlisted candidates will be notified.

• Overall 5-8 years relevant work experience in Endpoint Security, EDR / XDR or similar roles required
• Develop, implement, and manage security controls to block and mitigate security threats across the IT infrastructure.
• Understand perimeter and endpoint security solutions and create policies based on specific requirements.
• Evaluate business risks and the control environment to identify weaknesses, then design effective controls.
• Regularly review and adjust existing policies to ensure they remain effective and aligned with the latest security threats and best practices.
• Hands on experience on EDR/XDR or Next Gen AV tools like Carbon Black, Palo Alto
• Experience as a Security Incident Responder or SOC analyst/manager
• Hands on experience in Symantec Endpoint Protection Manager.
• Good in SEP configuration and troubleshooting endpoints.
• Good in SEPM policies configuration SEPM up gradation from old 11.x to 12.x new version.
• Generating AV Compliance Report.
• Threat log analysis and event Monitoring Certificate Management L2/L3 Venafi Trust Platform.
• Sharing reports with stakeholders/clients Endpoint Security L2/L3 Symantec Endpoint Protection.
• Hands-on to Manage Windows Defender ATP capabilities.
• Good knowledge in XDR .
• Should have expertise knowledge on ADR, SCCM configuration, WSUS configuration and AAD configuration.
• To manage AV policy, ASR policy, EDR policy and Firewall policy.
• Hands-on to manage Co-managed devices from console.
• Knowledge to Query Advanced hunting and to create Custom detection rules.
• Knowledge on Next gen Antivirus, EDR, Device Control.
• Knowledge on Threat hunting & Intel, Malware search & analysis.
• Knowledge on Managing and protecting identities in Azure AD.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of the Security Engineering team, we are responsible for supporting the company's construction of security capabilities and platform services, combining other teams to create efficient and high-quality service docking capabilities, enhancing interactive experience, and lowering the user's barriers to understanding and using security services.

Responsibilities

We are looking for Security Software Engineers to join our Security Engineering team in building the next-generation of ByteDance's product security & privacy infrastructure that furthers our system security and user data privacy protection level, which will impact all ByteDance's products globally. In addition, you will also have opportunities to work closely with product teams across the world. Together we will identify opportunities, define innovative ways to build our users a safe and trustworthy environment, and help us shape the future of ByteDance.

- Research, design, develop, test, maintain and continuously improve ByteDance's product security & privacy Infrastructure and softwares.

- Analyse user needs and security & privacy objectives, develop software solutions, applying principles and techniques of computer science, engineering, and mathematical analysis.

- Update Software, enhances existing software capabilities. Develop and direct software testing and validation procedures to optimize reliability, availability and performance of globally distributed systems.

- Work with multiple cross-functional global teams to integrate hardware and software systems and develop specifications and performance requirements, to deliver high-quality work in rapid product development.

- Deploy, troubleshot and operate large distributed systems.

- Manage individual project priorities, deadlines and deliverables

Minimum Qualifications

- Bachelor's degree and or above in Computer Science, Computer Engineering or other relevant majors.

- Strong knowledge of data structures and algorithms

- Proficiency in at least one server library / framework like Express, Koa, Gin, Kite, Django, etc and at least one kind of database like MySQL, Redis, MongoDB, Hive, ClickHouse, ES, etc and at least one kind of message queue like Kafka, RocketMQ, etc

- Understanding of load-balance, container virtualization, familiarity with NGINX, Docker, K8s, Serverless, etc

- Proficiency in TypeScript, CSS and various layouts, at least one kind of general purpose programming language like Node.js etc

- Understanding of component-based development ideas, familiarity with React.js, Vue.js, or any other equivalent library / framework

- Excellent programming, debugging, and optimization skills in general purpose programming languages

- Ability to think critically and to formulate solutions to problems in a clear, concise and timely manner

Preferred Qualifications

- Experience in cloud-native security services and infrastructure such as Key Management System (KMS), or Public Key Infrastructure (PKI) to serve as a foundation for production infrastructure security. Experience in securing software supply chains to ensure source and build integrity at any stage of the software lifecycle.

- Experience with two or more general purpose programming languages including but not limited to: Go, Node.js, Java, or Python. Preferred familiarity in Rust.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

We are seeking an experienced AWS Security Engineer to design, evaluate, and enhance the security of our cloud infrastructure. The ideal candidate will be well-versed in AWS services, with a focus on securing containerized architectures (ECS, EKS) and cloud-based services (EC2, S3, IAM).

Responsibilities:

• Develop and implement security strategies and best practices for AWS services, including ECS, EKS, and EC2.
• Configure and maintain IAM roles and policies with a principle of least privilege.
• Regularly audit and evaluate AWS account security, including S3 encryption, network access controls, and logging.
• Ensure the security of containers (Docker) and orchestration platforms (ECS, EKS).
• Implement container image scanning to identify and remediate vulnerabilities.
• Manage and optimize runtime security configurations for containerized environments.
• Configure and maintain AWS native security services such as GuardDuty, Inspector, and Security Hub.
• Design and implement real-time intrusion detection and incident response processes.
• Investigate and mitigate security incidents, providing post-incident analysis and recommendations.
• Design secure VPC architectures, including subnet isolation, security groups, and NACL configurations.
• Configure Web Application Firewalls (WAF) to protect against common attacks such as SQL injection and XSS.
• Optimize AWS Shield and other DDoS protection mechanisms.
• Conduct regular security audits and generate reports to assist with third-party assessments.
• Develop and maintain automation scripts (Python, Shell) to streamline security tasks.
• Integrate security checks into CI/CD pipelines.

Requirements:

• Degree in IT/Computer Science/Engineering or equivalent.
• Expertise in AWS cloud security, Proficiency in Docker and container orchestration security.
• Familiarity with vulnerability scanning, penetration testing, and compliance tools.

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernizing, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities

• We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on customer.
• The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team. 
• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges. 
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment. 
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.  Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities. 
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Cloud platform. 
• Stay connected with the latest security trends throughout various industry verticals
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities

Minimum Qualifications (MQs) 

• Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience. 
• Coding experience in one or more general purpose languages. 
• Experience managing customer projects to completion, working with engineering teams, sales and partners. 
• Experience architecting, developing, or maintaining secure cloud solutions. 
• Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications 

• At least 10+ Year work experience of security architecture and/or security engineering experience  Hands on and deep knowledge of security principles. 
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles. Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks. 
• Strong practical experience securing Kubernetes and containerized workloads.

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Summary:

• Develop, implement, and manage security controls to block and mitigate security threats across the IT infrastructure.
• Understanding of perimeter and endpoint security solutions and able to create policies based on requirements.
• Evaluate and perform analysis of the business risks and control environment to identify weaknesses and design the control to operate effectively.
• Regularly review and fine-tune existing policies to ensure they remain effective and up to date with the evolving latest security threats and best practices.
• Collaborate with other teams to ensure policies are aligned with organizational goals and compliance requirements.
• Troubleshooting policies if they are not working as intended.
• Monitor and Analyze Security Events: Continuously monitor security events and alerts, analyze potential threats, and take appropriate actions to prevent security incidents.
• Policy Development: Develop and maintain security policies, procedures, and guidelines to ensure compliance with industry standards and best practices.
• Incident Response: Collaborate with the incident response team to investigate and respond to security incidents, providing expertise on security controls and mitigation strategies.
• Reporting and Documentation: Maintain detailed documentation of security controls, configurations, and incidents. Prepare regular reports on the effectiveness of security controls.
• Training and Awareness: Provide training and guidance to other team members and stakeholders on security controls and best practices.

Skillset (Must have):

• Possess a degree in Computer Science/Information Technology or related fields.
• Experience: Work experience in cybersecurity, with a focus on policy creation, monitoring, and incident response.
• Technical Skill: Skilled in managing NDR, EDR, WAF, email security, and DLP policies. Strong understanding of endpoint/network security, threat detection, and incident response. Proficient in SIEM data querying and analysis.
• Analytical Skill: Excellent analytical and problem-solving skills, with the ability to analyze complex security issues and develop effective solutions.
• Communication Skill: Strong written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders.
• Team Player: Ability to work collaboratively with cross-functional teams and build strong working relationships.
• Accountability and Responsibility: Take ownership of assigned tasks and projects, ensuring they are completed on time and to the highest standards. Proactively identify areas for improvement and take the initiative to address them.
• Critical Thinking: Apply critical thinking skills to analyze complex security issues, evaluate potential solutions, and make well-informed decisions.
• Independently perform tasks and responsibilities with minimal dependency and guidance, while continuously learning and adapting to evolving technologies.

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

Summary:

• Develop, implement, and manage security controls to block and mitigate security threats across the IT infrastructure.
• Understanding of perimeter and endpoint security solutions and able to create policies based on requirements.
• Evaluate and perform analysis of the business risks and control environment to identify weaknesses and design the control to operate effectively.
• Regularly review and fine-tune existing policies to ensure they remain effective and up to date with the evolving latest security threats and best practices.
• Collaborate with other teams to ensure policies are aligned with organizational goals and compliance requirements.
• Troubleshooting policies if they are not working as intended.
• Monitor and Analyze Security Events: Continuously monitor security events and alerts, analyze potential threats, and take appropriate actions to prevent security incidents.
• Policy Development: Develop and maintain security policies, procedures, and guidelines to ensure compliance with industry standards and best practices.
• Incident Response: Collaborate with the incident response team to investigate and respond to security incidents, providing expertise on security controls and mitigation strategies.
• Reporting and Documentation: Maintain detailed documentation of security controls, configurations, and incidents. Prepare regular reports on the effectiveness of security controls.
• Training and Awareness: Provide training and guidance to other team members and stakeholders on security controls and best practices.

Skillset (Must have):

• Possess a degree in Computer Science/Information Technology or related fields.
• Experience: Work experience in cybersecurity, with a focus on policy creation, monitoring, and incident response.
• Technical Skill: Skilled in managing NDR, EDR, WAF, email security, and DLP policies. Strong understanding of endpoint/network security, threat detection, and incident response. Proficient in SIEM data querying and analysis.
• Analytical Skill: Excellent analytical and problem-solving skills, with the ability to analyze complex security issues and develop effective solutions.
• Communication Skill: Strong written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders.
• Team Player: Ability to work collaboratively with cross-functional teams and build strong working relationships.
• Accountability and Responsibility: Take ownership of assigned tasks and projects, ensuring they are completed on time and to the highest standards. Proactively identify areas for improvement and take the initiative to address them.
• Critical Thinking: Apply critical thinking skills to analyze complex security issues, evaluate potential solutions, and make well-informed decisions.
• Independently perform tasks and responsibilities with minimal dependency and guidance, while continuously learning and adapting to evolving technologies.

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Singlife is a leading homegrown financial services company, offering consumers a better way to financial freedom. Through innovative, technology-enabled solutions and a wide range of products and services, Singlife provides consumers control over their financial wellbeing at every stage of their lives.

In addition to a comprehensive suite of insurance plans, employee benefits, partnerships with financial adviser channels and bancassurance, Singlife offers investment and advisory solutions through its GROW with Singlife platform. It also offers the Singlife Account, a mobile-first insurance savings plan.

Singlife is the exclusive insurance provider for the Ministry of Defence, Ministry of Home Affairs and Public Officers Group Insurance Scheme. Singlife is also an official signatory of the United Nations Principles for Sustainable Insurance and the United Nations-supported Principles for Responsible Investment, affirming its commitment to finding a better way to sustainability.

The merger of Aviva Singapore and Singlife was announced in September 2020 and created one of the largest homegrown financial services companies in Singapore in a deal valued at S$3.2 billion. It was the largest insurance deal in Singapore at the time.

Singlife was subsequently acquired by Sumitomo Life in March 2024, one of Japan’s leading life insurers, which valued Singlife at S$4.6 billion, making the transaction one of the largest insurance deals in Southeast Asia.

Purpose of the Role:

Responsible for the tactical and operational oversight of our information security program in term of managed security services. This role involves in implementing and maintaining robust security measures to safeguard our information and network infrastructure. One will be the driving force behind our cybersecurity strategy, ensuring our systems are resilient against threats, and our team is equipped with the knowledge and tools to maintain high security standards.

Role Attributes:

Running operation of Singlife’s Managed Security Services program for entire Singlife Group under the Cyber Fusion Centre team.

Key Responsibilities:

Security Measures Implementation and Performance Tracking

• Develop and implement effective security measures to protect company data and network infrastructure.
• Regularly track and report on the performance of these security measures.

Cybersecurity Architecture and Strategy

• Deep understanding of Singlife’s comprehensive cybersecurity architectures.
• Develop and update the company’s information security strategy, ensuring it aligns with industry best practices and business objectives.

System Security Requirements

• Identify, define, and document system security requirements.
• Prepare and maintain technical documentation.
• Recommend solutions to management based on these requirements.

Security Infrastructure Management

• Configure, troubleshoot, and maintain security infrastructure hardware and software.
• Install and manage software for monitoring systems and networks for security breaches and intrusions.

Behavior Monitoring and Preventive Measures

• Monitor systems for irregular behavior and anomalies.
• Establish and enforce preventive measures to mitigate potential security threats.

Staff Training and Awareness

• Educate and train staff on information system security best practices.
• Foster a security-aware culture within the organization.

Project Monitoring and Milestone Achievement

• Ensure regular monitoring of project activities.
• Guarantee that project milestones are met in a timely and efficient manner.

Managed Security Device Expertise:

• Proficient in managing a range of security devices, including but not limited to: Email Security, IDPS, Attack Surface Monitoring, Anti-Malware Solution, Web Application Firewall, Certificate Management System (CMS)

Key Decision within the Role:

• Standard Operating Procedure write-up
• BAU Operation Process write-up

Requirements:

Experience

• Preferable to have 3+ years of relevant experience
• Knowledge in managing security solution stated above.
• Strong understanding of cybersecurity principles, practices, and solutions.
• Effective communication and analytical abilities.
• Ability to analyze complex security systems and identify vulnerabilities and solution.
• Expertise in computer programming and scripting languages.

Education

• Academic: Bachelor’s degree in computer science / information technology(preferred)
• Professional Certification(s): CISSP, or any related vendor certification (preferred)

If you find yourself able to demonstrate the criteria above, apply with us now. We look forward to your application.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

The AVP - Perimeter Security Build Engineer seats within the Perimeter Security Services Team, focusing on maintaining next generation, large scale perimeter security solutions for the enterprise globally. The purpose is to ensure the overall health and integrity of Citi’s network and perimeter defence.

In this role you will be responsible to work on various large scale security initiatives, establish and utilize processes for perimeter security lifecycle management, influence stakeholders and drive the general security posture along with various peer groups and organizations.

As an Perimeter Security Build Engineer you will

• Configure, deploy and integrate firewall and remote access infrastructure for Citi environment
• Work with aligned technology teams to ensure deployment and decommissioning of devices happen according to approved Citi standard build baselines
• Perform troubleshooting related to project rollouts
• Create and maintain documentation and reports for the configuration procedures & support checklists
• Perform process review, reengineering and standardization to ensure risk-free efficiency
• Work with perimeter security engineering and vendors on understanding and utilizing standard builds
• Participate in new product/solution testing and rollout

Ideal background

• 3+ years of experience with multiple security disciplines and understanding of perimeter security solutions and concepts
• Experience with Check Point, Juniper SSL and Palo Alto firewall solutions
• Unix / linux experience
• Advanced written and verbal English communications skills
• Stakeholder management skills, with ability to communicate with stakeholders of varying seniority across business and technical functions.
• University degree or certifications in a relevant cyber security / networking area

Benefits

• exposure to a broad range of investment technology businesses and products
• access to our world-class testing lab with physical hands on using hundreds of devices in the IT security ecosystem
• competitive compensation package
• access to Citi’s huge training database and subscription to external online trainings
• a socially active team and communities with diverse networking opportunities

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Position Overview:
We are seeking a skilled and motivated IT Security Specialist to join our team. The ideal candidate will play a pivotal role in implementing and managing security architecture, ensuring compliance with security standards, and mitigating risks through effective vulnerability management. This position demands expertise in IT security tools and methodologies, a proactive approach to incident detection and resolution, and familiarity with operational security processes.

Key Responsibilities:

• Security Architecture Implementation:Develop and implement a security architecture blueprint encompassing DevSecOps, application, infrastructure, and operational security.
  Define processes, provisioning, and interfaces for secure application interaction.
  Provide expert recommendations on security practices and improvements.
  
• Access Management and Control:Manage and optimize access control processes and tools.
  Oversee access management systems, ensuring secure and compliant operations.
  
• Vulnerability Management:Execute security vulnerability scanning activities, including HCR/NVA, Pen Testing, SAST, and DAST.
  Analyze and resolve findings from security assessments and audits.
  
• Operational Security Management:Oversee OS and application-level patching, operational housekeeping, and archival processes.
  Implement server and application hardening procedures, following IM8 policies and vulnerability assessment standards.
  Handle security incident detection, reporting, and SSL certificate renewals.
  
• Audit Facilitation:Support and facilitate external auditing processes to ensure compliance with security frameworks.
  

Technologies & Skills Required:

• OS Administration (Linux/Windows).
• Expertise in security tools, including:IBM Security Verify Access
  IBM QRadar
  Thales HSM
  OpenSSL
  Tenable Nessus
  Burp Suite Enterprise
  

Requirements:

• Minimum 2+ years of experience in IT Security.
• Professional certifications such as CISSP, CCSP, CCSK, or equivalent are preferred.
• Proficiency in 1-2 Cyber Security domains, such as Identity Access Management, Security and Risk Management, Application/Network Security, or Vulnerability Management, with a broad understanding of other areas.

EA License number: 11C4879

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Morgan McKinley is seeking an IT Security Engineer for a 12 month contract assignment with a possibility to extend or to go perm!

Key Responsibilities:

• Implement a security architecture blueprint ensuring cohesive interaction among applications, infrastructure, and operational security.
• Define processes, provisioning, and interfaces while providing actionable recommendations.
• Execute security vulnerability scanning activities (HCR/NVA/Pen Testing/SAST/DAST) and address identified findings.
• Manage access management and SIEM tools within the organization's environment.
• Facilitate external auditing processes.
• Ensure application-level and OS-level patching and operational housekeeping.
• Execute server and application hardening procedures.
• Uphold IM8 policy, conduct vulnerability assessments, and manage security incident detection and reporting.
• Oversee SSL certificate renewals and other operational security processes.

Qualifications:

• Minimum 2+ years of experience in IT Cyber Security domains, such as Identity Access Management, Security and Risk Management, Application and Network Security, and Vulnerability Management, along with a broad understanding of related areas.
• Proficiency in OS Administration (Linux/Windows).
• Hands-on experience with IBM Security Verify Access and IBM Qradar.
• Knowledge of Thales HSM, OpenSSL, and tools like Tenable Nessus and Burp Suite Enterprise.

Good to Have Skills (Optional):

• Familiarity with Singapore Government standards of security posture, including planning and executing SSAT, Security Compliance Check, and Security Vulnerability Scanning (DAST & SAST).
• Experience in working with security tools and environments.
• CISSP/CCSP/CCSK certification or equivalent is preferred.

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.


Morgan McKinley Pte Ltd
Koh Boon Sien
EA Licence No: 11C5502
EA Registration No. R1110345

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Role Description:
As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities:

• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
• Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.
• Stay connected with the latest security trends throughout various industry verticals.
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Requirements:

• Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience.
• Minimum 5 years of security architecture and/or security engineering experience
• Coding experience in one or more general purpose languages.
• Experience managing customer projects to completion, working with engineering teams, sales and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.
• Hands on and deep knowledge of security principles.
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
• Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
• Strong practical experience securing Kubernetes and containerised workloads.