Total 5 construction engineer job vacancies in Legal / Public / Security category in D10 Ardmore, Bukit Timah, Holland Road, Tanglin

Role:IT Security Engineer(ITSO)

JD:

•Define the project's goals, scope, and deliverables, and establish a detailed plan with timelines and resources •Manage the project's day-to-day operations, including assigning tasks, monitoring progress, and making adjustments.

•Keep stakeholders informed and engaged, and resolve issues

•Ensure the project meets quality standards and delivers the expected outcomes

•Maintain project documentation and handle compliance or regulatory issues

• Good communication and problem-solving skills

• Excellent interpersonal skills • Dedicated as well as hard working individual with the intercommunication skills to work at all the level of organization.

• Teamworker and well-mannered

• Working tirelessly to enable the growth and development of organization that is customer centric and outward-looking.

Asset inventory knowledge and project/implemantaion documentation. Implement and maintain security policies and procedures to protect the organization's IT assets Configure and manage security tools and platforms to ensure they are integrated with the network infrastructure Conduct security and risk assessments of change requests, infrastructure, and data Monitor compliance to information security policies and ensure compliance with the customer's cybersecurity policies Conduct information security awareness training Manage information security risks and incidents Manage information security and related projects and initiatives Communicate and enforce compliance with information security policies and standards

Must have Talent / Skills - Good communication and excellent interpersonal skills, Proficient in Microsoft Office - ITIL Process Knowledge -Process handling Infra Incident and request handling.

We’re on a mission to make financial services accessible and effortless for SMEs. As one of Singapore’s latest digital wholesale banks fully regulated by MAS, we’re committed to continuous innovation to bring about simpler, safer and more rewarding financial services. #bringingaboutwhatsnext

We are looking for a highly motivated Bank Security Engineer who will report directly to the Chief Information Security Officer (CISO). The ideal candidate will possess advanced proficiency in firewall and Web Application Firewall (WAF), Mobile Device Management (MDM), cloud desktop security, bastion host configuration, as well as Identity and Access Management (IAM) and Key Management Service (KMS) administration. In this pivotal role, you will collaborate closely with our Security Engineer Lead to design, deploy, and sustain the bank's security infrastructure. Your primary objective will be to fortify our defenses against cyber threats while ensuring adherence to regulatory mandates.

Job Description:

• Manage the end-to-end lifecycle of security solutions with Infra team.
• Implement and oversee the configuration of firewall and Web Application Firewall (WAF) systems to safeguard the bank's applications against external threats and malicious attacks.
• Collaborate closely with the infrastructure team to facilitate the monthly rollout of security patches across all cloud instances and data centre security systems.
• Administer Mobile Device Management (MDM) solutions to ensure secure access and management of mobile devices used by bank employees.
• Oversee the formulation and maintenance of cloud desktop security policies, including the coordination with the infrastructure team to apply security patches. This ensures the secure access to banking applications and data.
• Configure and manage bastion hosts to provide secure remote access to internal banking systems for authorized users, including employees and third-party partners.
• Administer Identity and Access Management (IAM) systems to control user access and permissions across the bank's internal applications and databases.
• Oversee Key Management Systems (KMS) and Hardware Security Modules (HSM) to facilitate the lifecycle management of digital certificates and cryptographic keys, including generation, distribution, rotation, and revocation of digital certificates and cryptographic keys.
• Implementation of various kernel hardening techniques in accordance with industry standards.
• Continuously evaluate and enhance overall security posture of cloud environments and maintain a good security score.
• Troubleshoot and resolve device outages with technology teams, engineers and vendors. Perform the incident and problems management for security systems.
• Ensure security systems are implemented and operated in compliance with regulatory requirements, the established security standards and control procedures.

Requirement:

• BS/MS in Computer Science / Cybersecurity with 5 years and above relevant experience in cyber security, with a focus on network security, endpoints security and identity access management domains
• Experience implementing, operating cloud-based security systems and services
• Experience solutioning and incorporating technical security controls align with industrial framework and regulatory requirements such as NIST CSF framework, MAS TRMG, MAS Cloud Advisory
• Hands-on experience deploying, operating, automating security systems
• Strong working knowledge of cloud computing, OS, networking (TCP/IP, DNS, proxy, etc) and its security aspects
• Keeps abreast with relevant vulnerabilities, response and mitigating technical controls
• Strong analytical skills and a problem-solver
• Relevant certifications in CISSP, CISA, GSEC, CEH will be an added advantage

Job Summary:

We are seeking a proactive and skilled Security Analyst to join our cybersecurity team. In this role, you will implement and maintain a robust security architecture blueprint covering DevSecOps, applications, infrastructure, and operational security. You will engage in vulnerability scanning, manage access controls and SIEM tools, and support auditing processes while maintaining high standards in security operations.

Key Responsibilities:

Security Architecture and Access Management:

· Design and implement security architecture blueprints to support secure interactions between applications and systems.

· Define processes, provisioning, and interfaces, providing actionable recommendations to enhance security.

· Manage and enforce access control policies across the environment.

Vulnerability Scanning and Issue Resolution:

· Conduct and engage in security vulnerability scanning activities, including HCR, NVA, Pen Testing, SAST, and DAST.

· Analyse findings and implement effective resolutions.

Security Operations Management:

· Oversee and operate tools such as Access Management and SIEM (e.g., IBM Security Verify Access, IBM Qradar).

· Facilitate external auditing processes and ensure compliance with regulatory standards.

Operational Security Processes:

· Perform OS-level and application-level patching to address vulnerabilities.

· Implement and follow procedures for server and application hardening.

· Execute security incident detection, reporting, and resolution processes.

· Manage SSL certificate renewals and operational housekeeping tasks.

Technologies & Tools:

· OS Administration (Linux / Windows)

· IBM Security Verify Access

· IBM Qradar

· Thales HSM

· OpenSSL

· Vulnerability and Penetration Testing Tools (e.g., Tenable Nessus, Burp Suite Enterprise)

Required Skills and Qualifications:

Must-Have Skills:

Experience:

· Minimum 2+ years of experience in IT Security.

Certifications:

· Preferably certified in CISSP, CCSP, CCSK, or equivalent certifications.

Cybersecurity Expertise:

· Hands-on experience in at least 1-2 areas of cybersecurity domains such as Identity Access Management, Security and Risk Management, Application and Network Security, and Vulnerability Management.

· Broad understanding of other cybersecurity domains.

Good-to-Have Skills (Optional):

· Experience planning and executing SSAT, Security Compliance Checks, DAST, and SAST activities.

What you'll be doing

• Implement and manage security solutions like firewalls, IDS/IPS, and encryption
• Perform security audits, vulnerability assessments, and risk analyses
• Develop and enforce security policies, procedures, and controls
• Integrate security into IT systems, ensuring secure configurations and hardened settings
• Investigate and escalate security incidents promptly
• Collaborate with IT teams to embed security across systems and applications
• Stay updated on security trends and technologies
• Work with contractors to deliver network and security services
• Handle additional IT duties as assigned

What we're looking for

• Bachelor Degree in Information Technology, Computer/ Network Engineering
• 4 - 6 years of experience in similar role and/ or with CyberTrust Mark certification, preferably in Healthcare will be advantageous
• Extensive expertise in security technologies, including firewall administration, encryption, network protocols, and designing robust security architectures
• Certification such as CISSP, CCSP, CEH, or advanced security certifications will be advantageous

Interested applicants, kindly furnish us with your detailed resume in MS Words format and click "Apply Now" button.

**We regret to inform only shortlisted candidates will be notified. Applicants who do not possess necessary experience or qualification will still be considered on individual merits and may be contacted for other opportunities.**

**JobStudio will not solicit any money, request to use your bank account for business or request you to transfer any monies to any parties. Please be aware of scams impersonating JobStudio and our employees. You may call our office directly for verification. We will not be liable for any loss arising from scams.**

JOBSTUDIO PTE LTD

EA License No: 10C4754

EA Personnel: Stephanie Toh

EA Personnel Reg No: R1217674

Area Description
Google Cloud provides organizations with leading infrastructure, platform capabilities and industry solutions. We deliver enterprise-grade cloud solutions that leverage Google’s cutting-edge technology to help companies operate more efficiently and adapt to changing needs, giving customers a foundation for the future. Customers in more than 150 countries turn to Google Cloud as their trusted partner to solve their most critical business problems.

Role Description (About the job)
As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities
We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on Google Cloud. The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team.
● Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
● Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.
● Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
● Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
● Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.
● Stay connected with the latest security trends throughout various industry verticals.
● Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Minimum Qualifications (MQs)
● Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience.
● Coding experience in one or more general purpose languages.
● Experience managing customer projects to completion, working with engineering teams, sales and partners.
● Experience architecting, developing, or maintaining secure cloud solutions.
● Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications (PQs)
● At Least 7 years of security architecture and/or security engineering experience
● Hands on and deep knowledge of security principles.
● Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
● Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
● Strong practical experience securing Kubernetes and containerised workloads.