Total 73 construction engineer job vacancies in Legal / Public / Security category in Singapore

Job Description

• Providing daily secretarial and administrative support.
• Assisting with the preparation of legal documents.
• Organizing and filing court documents via e-Litigation.
• Handling incoming calls, correspondences, and confidential documents.
• Assisting in drafting of correspondences.
• Managing calendars, hearings, meetings, and appointments.
• Assisting lawyer in handling client’s enquiries.
• Data entry, filing, photocopying, faxing, and binding of documents.
• Preparing invoices.
• Completing and submitting claims.

Requirements:

• Minimum diploma qualification.
• A team player with a meticulous eye for detail, strong sense of responsibility, and initiative.
• Excellent communication skills, both written and verbal.
• Strong organizational and interpersonal skills.
• Proficiency in Microsoft Office applications.
• Hard-working, committed, and able to multi-task effectively.
• At least two (2) years of experience in administrative, clerical, or secretarial roles.
• Knowledge of e-filing is an advantage.

Interested applicants, please send in your updated resume (with your expected salary) to [email protected].

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail, and supply chain.

We are currently looking to hire Security Engineer. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Job Type:One-year Renewable Contract

Mandatory- Cloud Security tools Ops support

Preferred-DAM, CTVL, Nexpose, EPP, EDR

The ideal candidate will have experience in delivery roles and success in implementation discussions, hands-on experience with good client handling skills and good team player within the team. The candidate should also be able to provide solutions and technical expertise to fellow team members and in client accounts.

• Apply technical knowledge, hands-on and customer insights to operate and administer a cloud infrastructure.
• Ensure all configuration conforms to high levels of performance, security, scalability, maintainability, and appropriate reusability and reliability upon deployment, aligning to design documentation specifications
• Ability to codify or implement/deploy configurations with the principles of automation by default in new projects with proper documentations
• Collaborate with team members to engage clients in operational meetings, discussions, process betterment and contribute to optimisations for the client’s environment
• Maintain technical skills, certifications and knowledge of market trends and competitive insights; collaborate and share with the technical community specifically in the cloud space
• Ability to manage issues with proper resolution/documentation and SLAs is required for this role.
• Audit, review, and implement IT security policies.

1. Database Activity Monitoring (DAM):

· Utilized DAM tools to monitor and track database activity, ensuring real-time detection of unauthorized access or suspicious activity.

· Configured policies and rules to detect SQL injection attacks, privilege escalation, and anomalous user behaviour across various database platforms (e.g., Oracle, SQL Server, MySQL).

· Worked with DAM logs and alerts to perform investigations, helping to uncover potential data breaches and mitigate security risks.

· Conducted regular reviews of database access permissions, identifying and remediating privilege creep to ensure least-privilege access controls.

2.Continuous Threat Vulnerability Library (CTVL):

· Applied knowledge of CTVLto maintain an up-to-date, centralized repository of known vulnerabilities and threats, supporting proactive risk management.

· Integrated CTVL data into the organization’s vulnerability management program, enhancing the detection and prioritization of vulnerabilities in the network, applications, and infrastructure.

· Regularly assessed and updated threat intelligence feeds, ensuring security measures are aligned with the latest emerging threats.

· Worked cross-functionally with the security team to assess and patch high-priority vulnerabilities before they could be exploited.

1. Nexpose (Vulnerability Management Tool):

· Led the deployment and configuration of Nexpose to scan and assess vulnerabilities within the organization’s IT infrastructure, including servers, networks, and web applications.

· Performed regular vulnerability scans to identify potential security weaknesses, documented findings, and worked with IT teams to prioritize remediation based on risk level.

· Customized Nexpose scanning templates to align with specific regulatory compliance requirements (e.g., PCI-DSS, HIPAA) and internal security policies.

· Analyzed Nexpose reports to generate actionable remediation plans, reducing the organization’s exposure to critical vulnerabilities.

· Integrated Nexpose with SIEM solutions to enhance real-time monitoring and vulnerability alerting.

Skills and Achievements:

• Expertise in configuring, managing, and optimizing DAM solutions to improve the security of sensitive data and prevent unauthorized access.
• Deep familiarity with CTVL as a vital resource for proactive threat intelligence and vulnerability management.
• Hands-on experience leveraging Nexpose to conduct vulnerability assessments, with a focus on ensuring comprehensive coverage across various network segments and applications.
• Proficient in interpreting vulnerability management data and translating it into actionable plans to reduce the organization’s attack surface.
• Familiar with integration of security tools like Nexpose and DAM with SIEM platforms to provide a unified security operations approach.

Soft Skills:

• Strong analytical abilities to identify and address vulnerabilities and incidents across multiple systems.
• Collaborative mindset for working with IT, development, and security teams to implement solutions derived from DAM, CTVL, and Nexpose insights.
• Detail-oriented with the ability to document and report security findings, incidents, and resolutions clearly.

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected]. Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS

Consultant Name: Deepa Shivakoti

Reg No: R1765546

Avensys Consulting Pte Ltd
EA Licence 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.

Highlights:

• Comprehensive Medical Benefits (health insurance, dental)
• Transport Allowance
• AWS + Performance Bonus
• Birthday Incentive

Job Summary:

We are seeking a Senior / Security Systems Project Engineer, where you will manage and execute security projects, ensuring timely delivery, within budget, and with high-quality standards. You’ll act as the main client contact, overseeing project milestones and ensuring customer satisfaction throughout the process.

About the Company:

Our client is a trusted and leader provider of integrated security solutions, specializing in CCTV, card access, and alarm systems. With over 30 years of experience, the company offers innovative and reliable security services to residential, commercial, and government clients, focusing on creating safer environments through cutting-edge technology.

Responsibilities:

• Lead and manage security systems projects, ensuring alignment with project objectives and timelines.
• Collaborate with stakeholders to drive project milestones and meet strict deadlines.
• Act as the single point of contact for clients, ensuring satisfaction and managing escalations.
• Ensure projects deliver as-sold solutions, stay within the baseline budget, and are completed on time, all while meeting quality and client satisfaction criteria.
• Coordinate project team activities through effective task delegation, resource assignment, and program management.
• Maintain proper project documentation and ensure all required paperwork is completed accurately.
• Perform any additional tasks as assigned.

Requirements:

• Minimum Diploma in Electronics & Communication Engineering or a related field.
• Candidates with experience in the security systems industry will be highly preferred.
• Strong communicator with excellent coordination and interpersonal skills.
• Sensitive to deadlines with a strong ability to manage resources efficiently.
• Basic technical knowledge of ELV, Automation, Networking, and Security Systems (CCTV, Card Access, Alarm Systems) will be advantageous.
• Highly motivated individual with a proactive attitude and strong problem-solving capabilities.

How to Apply

Interested candidates, please submit your updated resume by using Apply button

**We regret to inform that only shortlisted candidates will be informed.**

Sarah Sevilla

Registration Number: R22107553

EA License No: 18C9027

Responsibilities:

• Identify, investigate, and remediate cybersecurity threats affecting the organization and its executives.
• Conduct manual threat scanning and real-time threat response under the Executive Digital Protection Program.
• Manage vendor relationships, ensuring the delivery of white-glove services to executives.
• Analyze external digital threats and convey violations of Terms of Service or Community Standards effectively.
• Lead multiple concurrent investigations with minimal supervision.
• Identify opportunities to improve existing tools and expand vendor capabilities in response to emerging threats.
• Deliver clear, concise, and timely communication across various audiences, including technical and non-technical stakeholders.
• Collaborate with cross-functional teams to resolve issues while minimizing organizational risk.

Skills and Experience:

• Comprehensive knowledge of computer networking, log analysis, information security principles, and adversarial tools/techniques.
• Strong analytical and problem-solving abilities.
• Proven ability to detect, analyze, and address cybersecurity threats, including emerging tactics and techniques.
• Effective written and verbal communication skills, with the ability to present to technical and non-technical audiences.
• Demonstrated project management and leadership skills.
• Experience managing multiple investigations simultaneously and working independently.
• Strong vendor management expertise.

Ikas International (Asia) Pte Ltd

“Sanderson-iKas” is the brand name for iKas International (Asia) Pte Ltd

EA Licence No: 16S8086 | EA Registration No. R1988468

We regret to inform you that only shortlisted candidates will be notified /contacted.

As a Systems Specialist, will be providing support in the following areas:

a) Develop and implement a threat hunting framework to provide a comprehensive structure for planning, executing, and managing threat hunting initiatives.

b) Develop and refine threat hunting methodologies and procedures to enhance the organization's ability to detect and respond to advanced threats.

c) Continuously enhance threat hunting techniques, processes, and tools to improve the organization's overall cybersecurity posture.

d) Stay updated with the latest vulnerabilities, security trends, and techniques in cyber threats and hacking methodologies.

e) Conduct research on emerging threats and vulnerabilities and provide recommendations for enhancing the organization's security posture.

f) Conduct proactive threat hunting exercises to identify and investigate potential security incidents and suspicious activities within the network.

g) Document all findings, analysis, recommendations and investigation results in a clear and concise manner and generate reports for management and stakeholders.

h) Develop and tune security monitoring rules, correlation logic, and detection signatures.

i) Be proficient in utilizing various security technologies, including SIEM (Security Information and Event Management) tools, network traffic analysis tools, endpoint detection and response (EDR) systems, vulnerability management system and threat intelligence platforms.

j) Work closely with other cybersecurity teams, such as for incident response, security operations, and threat intelligence, to share findings and collaborate on incident investigations.

k) Develop and implement a cyber intelligence framework to provide a systematic and organized framework for collecting, processing, and leveraging intelligence to enhance HDB's cybersecurity posture and decision-making capabilities.

l) Integrate the cyber intelligence framework with the HDB's Security Operations Center (SOC) and incident response team and ensure that the intelligence gathered is effectively used to detect, prevent, and respond to cyber threats.

m) Continuously monitor and collect information from multiple sources, including threat intelligence feeds, security vendors, dark web forums, social media, and other online platforms, to identify emerging cyber threats and attack trends.

n) Analyze the collected threat intelligence data to identify patterns, trends, and potential cybersecurity risks.

o) Prioritize and triage threats based on their relevance and potential impact to HDB.

p) Conduct in-depth analysis of threat actors, their motivations, capabilities, and tactics, and provide insights on potential risks and impacts to the organization's systems, networks, and data.

q) Produce regular and ad-hoc reports, briefings, and alerts on emerging threats, trends, and risk assessments to relevant stakeholders, including senior management, incident response teams, and other cybersecurity teams. The report shall also provide technical information in a clear and actionable format for various stakeholders.

r) Provide timely and accurate intelligence support during security incidents, assisting incident response teams in understanding the nature and scope of the threat, and providing guidance on containment, remediation and recovery strategies.

s) Support vulnerability management efforts by analyzing threat intelligence data to identify vulnerabilities, exploit trends, and potential targets, and prioritize patching and mitigation activities.

t) Collaborate with threat hunters and other cybersecurity teams to develop and refine threat hunting strategies based on threat intelligence insights and analysis.

Qualifications

a) Possess fundamental application security knowledge like interpretation of HTTP response status codes and WAF violations.

b) Display understanding of network security best practices.

c) Display understanding of techniques in cyber threats and hacking methodologies.

d) Strong problem-solving skills and ability to work under pressure. Willingness to learn.

e) Fundamental skills on Microsoft Office products like Word and Excel.

f) Additional certifications like CCNA, CCNP, CISSP or related certifications are a plus.

g) Must be able to work beyond business hours including weekend when necessary

About the role

The position is part of our Cyber Fusion Center’s managed support and operations team and is responsible for day-to-day support and operations of assigned cybersecurity solutions and platforms.

Job Responsibilities:

• Provide support for assigned security platforms, including onsite troubleshooting, root cause analysis, prepare and present incident reports.
• Provide security knowledge in security architecture recommendation and perform the necessary best configuration.
• Provide collaboration efforts in assisting the SOC teams in incident investigation.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.
• Ensure that daily operations and tasks are properly completed and followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Support after-office hours activities and standby requirements as necessary.
• Support shift rotation as necessary.
• Prepare activities report and work documentation.

Job requirements:

• Educational background in Information Systems, Cybersecurity or related disciplines.
• 2-5 years of hands-on engineering, support or operations experience in Infrastructure, Network or Security Tools
• Broad understanding of systems, network infrastructure; working experience with databases, LDAP and directory services, application servers, operating systems, and network infrastructure.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Shell, PowerShell, Windows Scripting, Windows console programs, .Net, Yara, Regular expression) will be a plus.
• Certificates such as ITIL Foundations, Microsoft MCSA, CISA, CISSP will be a plus.
• Ability to work independently, under the general guidance.
• Support after office hour and during weekend/public holiday.

Role & Responsibilities:

• Develop, implement, and manage security controls to block and mitigate security threats across the IT infrastructure.
• Understanding of perimeter and endpoint security solutions and able to create policies based on requirements.
• Evaluate and perform analysis of the business risks and control environment to identify weaknesses and design the control to operate effectively.
• Regularly review and fine-tune existing policies to ensure they remain effective and up to date with the evolving latest security threats and best practices.
• Collaborate with other teams to ensure policies are aligned with organizational goals and compliance requirements.
• Troubleshooting policies if they are not working as intended.
• Monitor and Analyze Security Events: Continuously monitor security events and alerts, analyze potential threats, and take appropriate actions to prevent security incidents.
• Policy Development: Develop and maintain security policies, procedures, and guidelines to ensure compliance with industry standards and best practices.
• Incident Response: Collaborate with the incident response team to investigate and respond to security incidents, providing expertise on security controls and mitigation strategies.
• Reporting and Documentation: Maintain detailed documentation of security controls, configurations, and incidents. Prepare regular reports on the effectiveness of security controls.
• Training and Awareness: Provide training and guidance to other team members and stakeholders on security controls and best practices.

Skillset (Must have)

• Experience: Work experience in cybersecurity, with a focus on policy creation, monitoring, and incident response.
• Technical Skill: Skilled in managing NDR, EDR, WAF, email security, and DLP policies. Strong understanding of endpoint/network security, threat detection, and incident response. Proficient in SIEM data querying and analysis.
• Analytical Skill: Excellent analytical and problem-solving skills, with the ability to analyze complex security issues and develop effective solutions.
• Communication Skill: Strong written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders.
• Team Player: Ability to work collaboratively with cross-functional teams and build strong working relationships.
• Accountability and Responsibility: Take ownership of assigned tasks and projects, ensuring they are completed on time and to the highest standards. Proactively identify areas for improvement and take the initiative to address them.
• Critical Thinking: Apply critical thinking skills to analyze complex security issues, evaluate potential solutions, and make well-informed decisions.
• Independently perform tasks and responsibilities with minimal dependency and guidance, while continuously learning and adapting to evolving technologies.

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

Join a Leading Manufacturing firm as a Cyber Security Engineer / Researcher to develop and improve business cyber security posture. This role is pivotal in ensuring the security and operational effectiveness of the organization

Your New Role:

• Enhance threat detection capabilities and validate SIEM configurations through rigorous testing
• Design, implement, and maintain new technologies and methods to identify and remediate security vulnerabilities
• Create and execute realistic threat scenarios (e.g., malware attacks, insider threats, and data exfiltration) to evaluate SIEM detection rules and correlation capabilities.
• Analyze and interpret logs from various sources (e.g., firewalls, IDS/IPS, endpoints) to identify gaps in coverage and improve detection use cases.
• Develop and implement automated scripts and tools to streamline SIEM testing processes and threat simulations.
• Stay updated on the latest cybersecurity threats, attack techniques, and best practices to enhance test cases and detection capabilities

What You Will Need

• Bachelor’s or Master;s degree in Computer Science, Cyber / Information Security, or a related field (or equivalent experience).
• Strong hands-on experience with implementation and developement of SIEM tools and platforms (e.g., Splunk, ArcSight, QRadar, LogRhythm, ELK and more).
• Strong understanding of cybersecurity frameworks, mitigration strategies and vulnerabilities (e.g., MITRE ATT&CK, NIST, CIS).
• Proficiency in log management, correlation rule creation, and incident detection and incident response best practices
• Experience with scripting languages (e.g., Python, PowerShell, Bash) for automation.
• Certifications such as CISSP, OSCP are highly advantageous

If this interests you, or you know of someone who might fit the bill, please click apply to submit an application or email your updated CV to [email protected].

EA registration No.: R1987315

Employment Agency License No.: 18C9146

Job Description:

• In Charge of designing, deploying, and managing security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Responsible for conducting security audits, compliance checks such as vulnerability assessments with risk analysis
• Taking charge of the development and enforcement of security policies, procedures and controls
• In charge of integrating security measures into new and existing IT systems and applications.
• Responsible in ensuring that applications are securely configured, including hardening default settings, securing APIs, and restricting file permissions.
• Conducting of initial investigations of security violations/incidents, and escalate as necessary
• Collaborating with other IT teams to ensure security is integrated across all systems and processes.
• Work with other contractors where required for delivery of network services
• Any other IT duties as assigned.

Requirements:

• Min Degree in Information Technology, Computer/ Network Engineering or equivalent.
• Minimum 5 years of experience in firewall administration, encryption technologies, and network protocols, designing and implementing security architectures.
• Advanced technical knowledge of security technologies and systems.
• Experience in designing and implementing security architectures.
• Proficiency in vulnerability assessment tools and penetration testing methodologies.
• Possess relevant certifications such as CISSP, CCSP, CEH, or advanced security certifications

Key Responsibilities:

• Professional Deployment and Services: Execute and manage the implementation and upgrading of cybersecurity solutions distributed by the company. Occasionally coordinate with customers and manage project timelines.
• Customized Solutions: Develop and recommend tailored solutions or alternatives to meet specific customer requirements.
• Product Training: Deliver training sessions on company products for customers, partners, and internal teams.
• Installation and Configuration: Perform independent installation and configuration tasks by following product manuals and guidelines.
• Skill Development and Certification: Continuously enhance technical skills by acquiring certifications relevant to the products or technologies managed.
• Domain Expertise: Build subject matter expertise to facilitate knowledge transfer and skill-sharing with the maintenance team, improving customer support capabilities.
• Technical Support: Collaborate with sales and support teams to address technical challenges, including product feature explanations, implementation planning, tender compliance, and ad-hoc technical queries.

Job Requirements:

• Professional Attitude: Maintain a positive and professional approach to work.
• Teamwork and Independence: Able to work both independently and collaboratively within a team.
• Adaptability: Perform effectively under pressure, meet tight deadlines, and thrive in a dynamic environment.
• Educational Background: Possess a Nitec/Higher Nitec certificate, Diploma, or Degree in IT, Information Security, Cybersecurity, or related fields.
• Experience: At least 2 years of experience in IT, Information Security, or Cybersecurity is preferred. Entry-level candidates may be considered for an Associate Engineer position.
• Technical Knowledge: Strong familiarity with technology infrastructures, including but not limited to:Firewalls, VPNs, DLP, IDS/IPS, Web Proxies, DNS, Email Security, Log Management, SIEM
  Virtualization, Containers, AWS, Azure, Google Cloud
  DevOps/DevSecOps, Privileged Account Security, Identity Access Management, Endpoint Security, and CyberArk Conjur
  
• Troubleshooting Skills: Proficient in diagnosing and resolving network and system issues, including:Routing, NAT, VLAN, Multicast, TCP/IP, OSPF, BGP, Active Directory (AD), LDAP, RADIUS, SNMP, Syslog, SMTP, TLS, SSH
  
• Cybersecurity Awareness: Demonstrate a keen interest in staying informed about cybersecurity trends and hacking techniques.
• Certifications (Preferred): Possession of certifications such as Cisco CCNA/CCNP, Check Point CCSE/CCSM, Thales, CyberArk CDE, Trellix, ArcSight ESM/Logger, ITOM, SailPoint, CISSP, CREST, or OSCP is advantageous.
• Programming Proficiency: Knowledge of programming languages such as Python, C++, Java, JavaScript, Ruby, Bash scripting, and PowerShell is a plus.
• Compliance: Adhere to company Information Security Standards.

As a Systems Specialist, will be providing support in the following areas:

a) Develop and implement a threat hunting framework to provide a comprehensive structure for planning, executing, and managing threat hunting initiatives.

b) Develop and refine threat hunting methodologies and procedures to enhance the organization's ability to detect and respond to advanced threats.

c) Continuously enhance threat hunting techniques, processes, and tools to improve the organization's overall cybersecurity posture.

d) Stay updated with the latest vulnerabilities, security trends, and techniques in cyber threats and hacking methodologies.

e) Conduct research on emerging threats and vulnerabilities and provide recommendations for enhancing the organization's security posture.

f) Conduct proactive threat hunting exercises to identify and investigate potential security incidents and suspicious activities within the network.

g) Document all findings, analysis, recommendations and investigation results in a clear and concise manner and generate reports for management and stakeholders.

h) Develop and tune security monitoring rules, correlation logic, and detection signatures.

i) Be proficient in utilizing various security technologies, including SIEM (Security Information and Event Management) tools, network traffic analysis tools, endpoint detection and response (EDR) systems, vulnerability management system and threat intelligence platforms.

j) Work closely with other cybersecurity teams, such as for incident response, security operations, and threat intelligence, to share findings and collaborate on incident investigations.

k) Develop and implement a cyber intelligence framework to provide a systematic and organized framework for collecting, processing, and leveraging intelligence to enhance HDB's cybersecurity posture and decision-making capabilities.

l) Integrate the cyber intelligence framework with the HDB's Security Operations Center (SOC) and incident response team and ensure that the intelligence gathered is effectively used to detect, prevent, and respond to cyber threats.

m) Continuously monitor and collect information from multiple sources, including threat intelligence feeds, security vendors, dark web forums, social media, and other online platforms, to identify emerging cyber threats and attack trends.

n) Analyze the collected threat intelligence data to identify patterns, trends, and potential cybersecurity risks.

o) Prioritize and triage threats based on their relevance and potential impact to HDB.

p) Conduct in-depth analysis of threat actors, their motivations, capabilities, and tactics, and provide insights on potential risks and impacts to the organization's systems, networks, and data.

q) Produce regular and ad-hoc reports, briefings, and alerts on emerging threats, trends, and risk assessments to relevant stakeholders, including senior management, incident response teams, and other cybersecurity teams. The report shall also provide technical information in a clear and actionable format for various stakeholders.

r) Provide timely and accurate intelligence support during security incidents, assisting incident response teams in understanding the nature and scope of the threat, and providing guidance on containment, remediation and recovery strategies.

s) Support vulnerability management efforts by analyzing threat intelligence data to identify vulnerabilities, exploit trends, and potential targets, and prioritize patching and mitigation activities.

t) Collaborate with threat hunters and other cybersecurity teams to develop and refine threat hunting strategies based on threat intelligence insights and analysis.

Qualifications

a) Possess fundamental application security knowledge like interpretation of HTTP response status codes and WAF violations.

b) Display understanding of network security best practices.

c) Display understanding of techniques in cyber threats and hacking methodologies.

d) Strong problem-solving skills and ability to work under pressure. Willingness to learn.

e) Fundamental skills on Microsoft Office products like Word and Excel.

f) Additional certifications like CCNA, CCNP, CISSP or related certifications are a plus.

g) Must be able to work beyond business hours including weekend when necessary

Job Responsibilities:

• Security solution implementation (Products such as SIEM, SOAR, Threat Intel, EDR, BAS, ASM).
• Documentation for project requirements.
• Follow project implementation lifecycle.
• After sales support such as product incident escalation and technical support (24x7 SLA).
• Conduct user training and knowledge transfer session.
• Integration and customization of security solutions.
• Keen in cyber security domain.

Job requirements:

• Strong analytical, problem solving, communication and interpersonal skills.
• Computer Science/Computer Engineering/Information Engineering or equivalent discipline.
• At least 1-2 years’ experience in security system integrator environment.
• Knowledge in programming
• Basic knowledge on networking such as TCP/IP, firewall, switching and routing.
• Working knowledge on various operating system.
• Working knowledge in Database Platform.
• Basic knowledge in PCI/MAS TRM/IM8 compliance (Good to have).
• Working Knowledge in Coding/scripting (YARA-L, Python, Powershell, YAML, XML, etc).
• Basic knowledge in Cloud Services (AWS/AZURE/GCP) with knowledge on containers, stacks, Kubernetes, Dockers (Good to have).
• Senior Role will only be given to relevant experience in this field .

Join a team where you can play a crucial role in shaping the future of a world-renowned company and make a direct and meaningful impact in a space designed for top performers.

As a Senior Lead Security Engineer at JPMorgan Chase within the Cybersecurity & Tech Controls, you are an integral part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

Job responsibilities

• Executes creative security solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions and break down technical problems

• Develops secure and high-quality production code and reviews and debugs code written by others.

• Implement complex business logic in languages such as Python and scripting languages like Bash.

• Executes on key deliverables in the security engineering space, designs and develops production deployments with the ability to think beyond routine or conventional approaches in order to deliver technology solutions for key stakeholders.

• Experienced with systems engineering, systems integrations, and systems administration.

• Has good working knowledge of Windows and Linux systems internals Defines and implements infrastructure as Code (IaC) and automation tooling to deploy third party security software in an enterprise environment.

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science or related disciplines

• Formal training or certification on software engineering concepts and 5+ years applied experience.

• Commanding knowledge of a programming/scripting language such as Python and scripting languages like Bash for automation, integration, and other tasks.

• Proficient in maintaining and managing Splunk application deployed in AWS ensuring high availability, performance and security.

• Extensive experience using Terraform to deploy , manage and scale infrastructure with AWS environment.

• Proficient in all aspects of the Software Development Life Cycle.

• Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.

Preferred qualifications, capabilities, and skills

• Experience effectively communicating with senior business leaders

• In-depth knowledge of the financial services industry and their IT systems

• Experience working within a large-scale or global enterprise

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=e0d8ae6d80a0fab8d7e6aef8defbd100

Key Roles and Responsibilities:

• Lead and direct projects and ensure they are directed towards a common objective
• Engage and communicate with stakeholders to deliver project milestones and comply with strict deadlines
• Ensure client satisfaction and manage escalations, acting as single point of contact to the client
• Ensure that the project delivers as-sold solution, remains within the baseline budget and is delivered on time whilst maintaining quality criteria and client satisfaction
• Coordinate activities of the project teams through task delegation, resource assignment and programme management
• Ensure proper documentation is in order
• Any other duties as assigned

Job Requirement:

• Minimum Diploma in Electronics & Communication Engineering or related field
• Preferably with 2 years’ relevant work experience, or entry level candidates in relevant field of study
• Good communicator with excellent coordination skills
• Ultra-sensitive to deadlines and capable of good resource planning
• Basic technical knowledge on ELV, Automation, Networking and Security Systems (CCTV, Card Access, Alarm System) will be an advantage
• Committed individual with great initiative and strong problem-solving skills
• Candidates from the same industry will be highly preferred
• Only Singaporeans may apply
• This job is suitable for older workers

Please indicate in your profile your expected salary as you apply. Thank you.

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.
• Min 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Experience with zLinux and zVM will be advantageous
• Support of third party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.

Title: IT Security Operation Engineer

Please share your resume to [email protected] or WA at +65 92333815 for quicker response.

JD:

Develop and implement a threat hunting framework to provide a comprehensive structure for planning, executing, and managing threat hunting initiatives.

Continuously enhance threat hunting techniques, processes, and tools to improve the organization's overall cybersecurity posture.

Stay updated with the latest vulnerabilities, security trends, and techniques in cyber threats and hacking methodologies.

Conduct proactive threat hunting exercises to identify and investigate potential security incidents and suspicious activities within the network.

Qualifications

Display understanding of network security best practices.

Display understanding of techniques in cyber threats and hacking methodologies.

Strong problem-solving skills and ability to work under pressure. Willingness to learn.

Fundamental skills on Microsoft Office products like Word and Excel.

Additional certifications like CCNA, CCNP, CISSP or related certifications are a plus.

Must be able to work beyond business hours including weekend when necessary

Thanks, and Best Regards

Karanam Vijaya Kiran

(EA Registration no: R1443178)

HP: +65 92333815

Recruitment Manager

Helius Technologies Pte Ltd (EA Licence No: 11C3373)

About the role

The position is part of our Cyber Fusion Center’s SOC team and is responsible for real time security event monitoring and security incident investigation.

Job Responsibilities:

• Investigate and review computer intrusions focusing on initial infection vector determination, identification of new indicators of compromise (IOC), and tactics, techniques, and procedures in support of threat detection and remediation.
• Continuously monitor security alerts queue and perform initial triage to identify any false positives and initiate improvement as necessary.
• Monitors health of security sensors and managed security infrastructure, and provide necessary support, including root cause analysis, and prepare incident reports.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Collects data, evidence, and context necessary for Level 2 escalation.
• Works closely with Level 2 & Level 3 team towards the continuous improvement of the service.
• Ensure that daily operations and tasks are properly completed or followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Able to work in day and night rotational shift covering weekend/public holiday.
• Prepare scheduled and ad-hoc security summary report.

Job requirements:

• Diploma/Degree in Computer Science/Computer Engineering/Information Engineering/Cybersecurity or equivalent.
• At least 2 years of knowledge experience with security solutions and tools such as Firewall, Router, Proxy, EDR, PAM, IDS/IPS, SIEM.
• Basic understanding of common networking protocols and system infrastructure.
• Strong analytical, problem solving and interpersonal skills.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Java, Yara, Regular expression etc) will be a plus.
• Relevant certification e.g., Certified Ethical Hacker (CEH) or Security+ will be a plus.
• Ability to work independently, under the general guidance.
• Working experience and knowledge on system infrastructure with interest of exploring into security domain also welcome to apply.
• Fresh graduates are also welcomed to apply.

Job Description:

- To implement and deploy solutions like SIEM, EDR, and NMS:

o Splunk

o QRadar

o Carbon Black EDR

o SolarWinds NMS

o Other new onboarded products or solutions

- To manage and work/liaise with product vendors, partners, and customers in terms of schedule, expectation, and requirements

- To be able to research and stage test environment for project preparation

- To provide consistent and clear communication to external and internal stakeholders

- To provide informal training to partners and customers

Requirements:

- Diploma/Degree in Computer Engineering, Computer Science, Information Systems or equivalent

- Minimum 2 years of relevant work experience in IT security implementation and deployment

- Minimum 1 year of relevant work experience with relevant product deployment

- Good understanding of operating system technology, such as Unix, Linux, and Windows Server

- Good networking & scripting knowledge

- Technically inclined and hands-on

- Good interpersonal skills, independent, proactive and a team player

- Good communication, presentation, and writing skills

- Able to work independently

- Preferably from a System-Integrator or Distributor background

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Descriptions:

In this role, you will join a team of six members from Sopra Steria to support one of our government project. The scope of work includes:

1. Security Risk Assessment

2. Security Policies, Standards, Guidelines, And Procedures Review

3. Security Design

4. Application Security

5. Vulnerability assessment and

6. System Security Acceptance Testing

You will be an expert in the field of Cloud Security.

Responsibilities:

• Be a subject matter expert on cloud and cyber security risks.
• Provide expertise in cloud security and be a trusted technical advisor and solve complex cloud security & compliance challenges.
• Support on their cloud transformation journey by helping to design and build secure and compliant cloud solutions. Leveraging various industry standards and frameworks (e.g., CSA CSM, NIST CSF, ISO 27001, CIS), regulatory guidelines.
• Advise on designing more effective, efficient cloud security capabilities across a range of areas such as identity and access management, incident response, cryptographic key management, backup & recovery, third-party risk management, and others.
• Perform risk assessment for Cloud Computing Environment and Service.
• Hands on and deep knowledge of security principles.
• Experience managing customer projects to completion, working with engineering teams, and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.

Requirements

• Minimum of 3 years of experience in Cloud Security (AWS will be highly advantageous)
• Strong understanding of security frameworks
• Fluent in spoken and written English
• Ability to work closely with international team in a professional manner
• Excellent verbal and written communication skills, including ability to solve complex technical situation and explain it clearly
• Relevant certifications, such as AWS Certified Security – Specialty (SCS-C01), Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), are a plus.

Benefits

• Regular team buildings
• 18 leave days / year
• Insurance: GP, Hospitalisation, Dental and Optical
• Annual bonus
• Working hours: from 8:30am to 6pm, Monday to Friday
• Training and certifications paths

Only shortlisted candidates would be contacted for interview.

We are excited to share an excellent opportunity to join our team as a Zscaler L2/L3 Support Engineer.

This role is ideal for IT Security professionals with a strong background in managing and supporting Zscaler services within a dynamic environment.

Role: Zscaler L2/L3 Support Engineer

Contract: 12 months (renewable based on performance )

Location: Changi, Singapore

Employer : NTT DATA Singapore

About Client : A Swiss wealth management group that provides private banking services to high-net-worth individuals, families, and corporations. The bank is known for its client-centric approach, independent advice, and strong financial base

As part of the Security Infrastructure Solutions Team, you will manage L2 and L3 tickets primarily for Zscaler while contributing to the development, operation, and enhancement of IT security services.

Key Responsibilities

Client Management (Internal Users):

• Deliver exceptional customer support with a highly customer-oriented mindset.
• Communicate technical information clearly and effectively.
• Provide advice and assistance for planning and executing virtual events.

Business Management:

• Manage and operate ZIA and other IT security-related services.
• Develop strategies to improve platform performance and stability.
• Design and implement automation strategies for team processes.
• Collaborate with stakeholders to analyse and integrate new features.
• Troubleshoot and resolve incidents, user issues, and initiate bug fixes.
• Maintain technical documentation, including architecture and security parameters.
• Evaluate and procure security systems and tools while applying best practices.

Regulatory Responsibilities:

• Uphold values of honesty, integrity, due diligence, and fair dealing.
• Manage risks and ensure compliance with applicable laws and regulations.

Required Skills

Personal and Social:

• Minimum 5 years of technical, customer-focused experience.
• Strong ability to work independently and as part of a team.
• Effective communication skills with a proactive, solution-oriented approach.

Professional and Technical:

• Analytical thinking and ability to assess impact and prioritize tasks.
• Hands-on Windows and Linux administration skills.
• Proficiency in scripting (Python, Bash/Shell, JavaScript).
• Experience with GIT, REST, Regular Expressions, and automation tools like Ansible and Terraform.

We are looking for a skilled IT Security Engineer to join our client for a 1-year direct contract. The successful candidate will bring strong expertise in information security and hands-on experience managing security projects from start to finish.

Responsibilities:

• Lead and execute security projects across various domains, including endpoint, network, and application security.
• Implement and manage security tools, such as Web Proxy, Endpoint Protection, Email Security, and Vulnerability Scanners.
• Assess system security through threat modeling and propose effective solutions.
• Explore and integrate emerging security technologies to strengthen the organization’s security posture.
• Collaborate with teams to ensure secure deployment and operation of cloud environments.

Requirements:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related field.
• 5 years experience in IT Security, with deep expertise in one or more security domains.
• 3 years hands-on experience in end-to-end IT security projects or project delivery.
• Familiarity with security tools and frameworks.
• Security certifications (CISSP, CISM, AWS Certified Security, etc.) are highly desirable.
• Experience with cloud security is an added advantage.
• Thrives in fast-paced and demanding environments.

This role is a great opportunity to work on impactful security projects in a dynamic environment.

Key Responsibilities:

• Manage and optimize cybersecurity solutions including IDS/IPS, email defenses, EPP, DLP, vulnerability management, PAM (Cyberark, Beyondtrust), IAM/IGA, DAM, proxy, and NGFW.
• Oversee daily operations and security solution design, implementation, and documentation.
• Implement and refine cybersecurity solutions; ensure secure-by-design principles are followed.
• Support security incident response, containment, and recovery; conduct cybersecurity awareness training.
• Stay updated on industry trends and support team and cross-department needs as required.

Requirements:

• Degree/Diploma in Computer Science, Engineering, or Information Security.
• Experience administering solutions like Cyberark, Beyondtrust, Trendmicro, Tenable, and IMPERVA; strong knowledge of Linux, Unix, and Windows.
• Familiarity with scripting (Python, PowerShell) and AWS security operations; security and product certifications (e.g., GSEC, GCIA) are advantageous.
• Understanding of regulatory standards (MAS Cyber Hygiene, Technology Risk Management) and cybersecurity practices.
• Strong problem-solving, communication, and project management skills.

The Cyber Security GRC Specialist is responsible for developing, implementing, and maintaining governance, risk, and compliance programs within an organization's cybersecurity framework. The role involves ensuring adherence to regulatory requirements, identifying and mitigating risks, and establishing
robust security policies and controls. This individual will collaborate across departments to ensure a secure, compliant, and risk-aware environment.

Responsibilities:
1. Governance

• Develop and maintain cybersecurity policies, procedures, and standards in alignment with industry frameworks (e.g., ISO 27001, NIST Cyber Security Framework).
• Oversee the organization's cybersecurity governance program and ensure alignment with business objectives.
• Provide guidance and training to stakeholders to ensure compliance with established policies and standards.

2. Risk Management

• Identify, assess, and document cybersecurity risks to the organization.
• Develop and maintain risk registers and implement mitigation strategies.
• Perform regular security assessments, including vulnerability assessments and third-party risk evaluations.

3. Compliance

• Ensure the organization's adherence to relevant regulations, standards, and frameworks (e.g., PDPC).
• Conduct regular compliance audits and provide recommendations for remediation.
• Monitor changes in regulatory requirements and ensure timely updates to policies and procedures.

4. Incident Response and Monitoring

• Collaborate with incident response teams to establish protocols for managing and reporting cybersecurity incidents.
• Ensure compliance with legal and regulatory reporting requirements for incidents.

5. Reporting and Metrics

• Develop and present reports on cybersecurity compliance, risk posture, and governance metrics to leadership and stakeholders.
• Track and analyze key performance indicators (KPIs) related to GRC initiatives.

6. Collaboration and Stakeholder Engagement

• Work closely with IT, Legal, HR, and other departments to ensure a cohesive approach to cybersecurity.
• Act as a liaison between technical teams and business units to align cybersecurity practices with organizational goals.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 3+ years in a cybersecurity or GRC-related role.
• Good working knowledge of security risk management, security governance framework and compliance, vulnerability management (vulnerability assessment, penetration testing), and security incident response and security assessment.
• Strong understanding of ISO27001 standard and NIST Cyber Security Framework.
• Strong background in vulnerability management tools.
• Knowledge of SIEM and GRC tools.
• Understand Disaster Recovery, Business Continuity and IT Regulatory Compliance.
• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.
• It will be advantageous to have at least one of these certifications: CGRC (ISC2), CRISC (ISACA).
• Prior IT security consulting experience will be advantageous.

Interested candidates who wish to apply for the advertised position, please click on “Apply”. We regret that only shortlisted candidates will be notified.
EA License No.: 01C4394 (PERSOLKELLY Singapore PTE LTD)
By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Job Description

• Plan, deploy and implement Data Loss Prevention on security projects and initiatives.
• Responsible for management, advanced configuration, monitoring and finetuning of Data Loss Prevention solution.
• Configure, develop and maintain DLP tools & platform.
• He/she will be reporting to the DLP Team Lead will be working on projects and operational work.
• Responsible for processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

Requirements

• Diploma/Degree in Computer Science, Engineering or equivalent.
• At least 5 years of working experience in IT Incident Management, DLP Operations.
• Experience in multiple channels of DLP implementation and operations.
• Good team player as well as strong communications skills.
• Strong analytical skills and ability to work independently.

Morgan McKinley Pte Ltd

Syairah Banu

EA Licence No: 11C5502

EA Registration No. R21100522

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

- Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)

- Guide IT managers of the group companies per the headquarters' directive.

- Effectively manage and analyze system logs on an ongoing basis.

- Remain updated about the latest security vulnerabilities and take immediate action if necessary.

- Collaborate with internal and external parties to ensure secure, smooth operations.

- Handle client inquiries about our proprietary applications.

- Automate redundant tasks using programming language skills.

- Regularly monitor and maintain system metrics dashboard and alerts.

- Educate colleagues and enhance company documentation about our IT infrastructure.

- Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

- At least 5 years of extensive experience in IT-related fields.

- Proficient reading and writing skills in Japanese.

- Exceptionally good communication and interpersonal skills.

- Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.

- Strong ability to configure SIEM and Power BI tools.

- In-depth familiarization with account management and data security.

- Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

- Proficiency in additional languages such as Chinese, Malay, or Thai.

- Proven experience with Cyber Incident Response Plan (CIRP).

- Expertise in vulnerability management, penetration testing, and implementing security incident response processes.

- Extensive experience in developing, implementing, and maintaining security policies.

- Knowledge of network security design and implementation.

- Experience in using vulnerability scanning tools and security tools.

- Proven record of enhancing cloud security through policy implementation and monitoring.

- Experience in promoting social engineering and phishing countermeasures.

- Ability to provide in-house security training.

- Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.