Total 680 design engineer job vacancies in Legal / Public / Security category in Singapore

Our client, one of world’s largest financial services institutions is looking for:

Cyber Security Engineer (24 hours/8 hours per shift, 7 days per week)

Reporting to the Team Lead of the Security Operations Center, the candidate will be responsible for monitoring and responding to any potential security related risk targeting the Group. It is essential for the candidate to have the background and knowledge to discuss incident response activities internally and support security incident investigations. This is a 24-by-7 shift work including graveyard shifts.

Work location : Changi, Singapore

Responsibilities:

• Monitor developing cybersecurity events around the world, and escalate to L2 team if relevant events are observed.
• Performs monitoring, risk assessment and analysis on security tools such as Anomaly Detection systems, Firewalls, Antivirus systems, Proxy devices.
• Follow pre-defined actions to handle security alerts including escalating to L2 team and other support groups.
• Execute daily ad-hoc tasks or lead small projects as needed.
• Participate in daily and ad-hoc documentation related tasks.
• Create and maintain operational reports for Key Performance Indicators and weekly and Monthly Metrics.
• Perform assessment phase of Vulnerability & Threat Management process.
• Receive threat intelligence from feeds the Group subscribed to and update to Threat Intel knowledge base.
• Be ready to support any security incident response investigation in the Group regardless of location and environment.
• Work closely with Team Lead to review, provide feedback and take actions to improve the methodology use in the Security Operations.
• Responsible to ensure all tickets logged are closed correctly and timely.
• Ensure timely submission of routine reports on threats, vulnerabilities and incidents handled by the Security Operations Center.
• Keep the Security Operations Center runbooks and procedures updated

Requirements

• 3+ years working in security operations, preferably with incident management experience.
• Experience in the Banking industry will be an advantage.
• Familiar with security products and network devices.
• Extensive technical experience with network security practices including Intranet, Extranet and Internet access.
• Technical experience with UNIX, AIX, Linux, Windows.
• Knowledge of TCP/IP, DNS, web, wireless security architectures and enterprise-grade security solutions.
• Knowledge of encryption and authentication methods such as 2FA, DES/AES/RSA, Digital Certificates, SSL/TLS, IPSec and development of DMZ’s.
• Knowledge of intrusion detection (deep TCP/IP knowledge, and cybersecurity), various operating systems (Windows/UNIX), and web technologies (especially internet security)
• Able to read and understand packet level data, handle Network/Host Security products (NIDS/NIPS, firewalls, HIPS, AV, scanners, etc.) and understand security events from these tools.
• Able to perform vulnerability assessment and manage such tools/processes, as well as application penetration testing or forensic analysis fields.
• Certifications from EC-Council, GIAC, (ISC)² are preferred [CISSP, CEH, GCIA, CCNA].

-----------------------------------------------------------------------------------------------------

Interested applicants can also email CV at [email protected] (for faster processing, please state the exact job/position title applied “Cyber Security Engineer”)

Only shortlisted candidates will be notified.

-----------------------------------------------------------------------------------------------------

EA License Number: 10C3636
EA Personnel Name: Jagveer Singh Arora
EA Personnel Registration Number: R22109615

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security SIEM Use-Case Engineer to join our Cyber Intelligence and Response Centre (CIRC). This role is crucial for the engineering, development, and continuous improvement of threat detection use-cases within our SIEM . You will also be involved in the engineering and development of custom rules to detect potential threats swiftly and creating transparency to map existing detection capabilities to the MITRE ATT&CK framework.

Key Responsibilities:

• Proactively create, test, and tune new detection use-cases in the SIEM
• Review and enhance existing detection use-cases using Machine Learning or User & Entity Behaviour Analytics (UEBA).
• Map detection use-cases to the MITRE ATT&CK framework to assess SIEM monitoring coverage.
• Perform regularly updates to threat detection engineering playbooks, processes, and documentation.
• Collaborate closely with the SOC to challenge and improve detection and prevention capabilities.
• Identify and implement SIEM use-cases to address blind spots.
• Coordinate with the log onboarding team and SIEM architect to validate new log sources for compliance and improve SIEM backend performance.
• Collaboration with Service Operations team to address challenges, process fulfillment, documentations, and improvement of Service Operations Quality.
• Provide governance on topic which related to operational stability.

Join us to play a pivotal role in enhancing our cyber security measures and protecting our global operations.

QUALIFICATIONS

Specific Knowledge

• Intense knowledge in using Splunk Enterprise Security (ES)
• Intense knowledge in developing and tuning detection use-cases (Correlation Searches) in Splunk based on Data Models
• Experience in Machine Learning and Risk Based Monitoring in Splunk is an advantage
• Ability to analyse and interpret security logs and events to identify potential threats and attack patterns
• Experience in validating data source compliant using the common interface model (CIM)
• Experience of setting up and utilize data models in Splunk
• Deep understanding of cyber security concepts to create detection use-cases targeting various phases of attack lifecycle
• Understanding of MITRE ATT&CK framework and detections of various tactics and techniques
• Experience and capable of creating interactive dashboards, alerts, reports in Splunk

Experience

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• At least 3 years of experience with demonstrable skillsets in SIEM use-case engineering, with over 5 years of experience
  in cybersecurity
• Previous relevant experience working in a security operational role, ideally within a Corporate, Military, or Police environment; engaging with and responding to a diverse array of internal stakeholders, including senior management
• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision

This position is based in location Singapore. A valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. We regret to inform you that only shortlisted candidates will be notified.

Job Responsibilities:

• Network security management (e.g. intrusion prevention system, virtual private network)
• Web security management (e.g. URL filtering, web application firewall)
• End point security management (e.g. anti-malware, device control, application control, data loss prevention or network access control)
• Messaging security management (e.g. anti-malware, anti-spam, content filtering)
• Security & vulnerability management (security information and event management, security device systems management, device and application vulnerability management)
• Automation of management tasks

Period:

• 1 year contract

Working Hours:

• Monday - Friday, 8.30am - 6pm

Salary:

• up to $7000

Location:

• Kallang

Requirements:

• Degree/Diploma in Computer-related disciplines
• At least 5 years of experience that covers management of enterprise security solution n
• Experience in implementation and integration of Cyber Security Platform
• Possess knowledge across various information security technologies/areas in a large enterprise including firewalls, intrusion detection, encryption, Linux O/S, Windows O/S, databases, antivirus, patch management, vulnerability scanning, backup, logging and monitoring, remote access, application development, network security, application security, and change management
• Information Security or IT Controls Certification such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM) would be an added advantage

Interested applicants, kindly email your detailed resume (MS Word format is preferred):
[email protected] (Registration no: R1107390)

Please ensure that applications sent through email are no bigger than 1Mb.

We thank all applicants for your interest but regret to inform that only shortlisted candidates would be notified.

Success Resource Centre Pte Ltd (EA License Number: 97C4832)

3 Shenton Way, #19-01 Shenton House, Singapore 068805

T: 6337 3183 | F: 6337 0329 | W: www.successhrc.com.sg

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

- Propose, plan, and execute Red Team Operations to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards based on realistic threats to the organization.

- Maintain a deep understanding of ByteDance Enterprise Products, how they work, and how they could be attacked or abused.

- Conducts security exercises that emulate real-world threats, TTPs that are most relevant to our organization.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations.

- Collaborate across multiple defense/product teams to propose enhancements and improve current security offerings.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

Strong knowledge in some of these various disciplines: red team operations, infrastructure security, MITRE, TTPs.

- An adversarial mindset to emulate a real-world attacker.

- Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.

Preferred Requirements

- Red Team Experience in an enterprise environment.

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Responsibilities

- Responsible for analysis, investigation and traceability of underground/blackmarket industry cases.

- Perform real-time analysis and trending of security log data from various security devices and systems, leveraging on in-depth analysis of understand industry exploitation chains and knowledge of most underground sources in non-China areas.

- Respond to user incident reports and evaluates the type and severity of security events.

- Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules

- Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.

- Constantly keep up with the latest attacks in the underground industry, identify business logic risks and independently conduct traceability or investigation.

- In-depth understanding of various business risks such as eCommerce/Payment/Advertisment business with the ability to lead discovery, data analysis, investigation, evidence collection, traceability analysis and communication with business teams.

Minimum Qualifications

- More than 3 years of security or anti-fraud work experience with high learning ability.

- Familiar with the various attack methods of the underground industry, experience in penetration testing and data analysis is preferred.

- Good data analysis skills and observation, able to accurately describe and identify attack patterns, and understand key points from large datasets.

- Good communication and coordination skills, strong analytical skills, process management skills, experience in cross-team cooperation, strong execution.

Preferred Requirements

- Automatic data gathering and analysis tools development and scripting skills are preferred.

- Reversing engineering is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Assurance Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

1. Responsible for the security construction of ByteDance's overseas cloud products and infrastructure.

2. Continuously mitigate operational, configuration, and exposure risks for overseas cloud products and infrastructure, systematically enhancing the security level of business lines.

3. Liaise with overseas business lines to manage security risk assessments, incident response, security training, and more.

Minimum Qualifications

1. Familiarity with common risks, including their principles, attack and defense strategies, and systematic governance and construction approaches.

2. Proficiency in at least one of the following programming languages: Golang, Python, Java, or NodeJS, with the ability to conduct code review and development.

3. Knowledge of cloud-native and infrastructure technologies, such as network access, large models, big data, storage, cloud computing, microservices, and zero trust.

4. Strong communication and collaboration skills, a good sense of professional ethics, keen risk awareness, and a results-oriented mindset with a desire for long-term development in this field.

Preferred Qualifications

1. Candidates who have reported high-impact vulnerabilities or won major security competitions are preferred.

2. Experience in leading or participating in large-scale project governance, architecture, or design is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible. Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve. Join us.

The Business Risk Integrated Control (BRIC) team of TikTok, is missioned to:

- Protect TikTok users, including and beyond content consumers, creators, advertisers.

- Secure platform health and authenticity of community experience .

- Collaborate with cross-functional stakeholders to improve TikTok infrastructures, services, tools and algorithms, towards a higher standard of privacy and security.

The BRIC team works to measure and minimize the damage implied by inauthentic behaviors on TikTok and its extended platforms, covering multiple classical and novel interity/security areas such as fake account, fake traffic, spam, scraping, cyberbullying, live room risks, incentive fraud, monetization abuse, etc.

In this team, you will have a unique opportunity to:

- Have a first-hand experience contributing to TikTok's key security initiatives.

- Build scalable, resilient, intelligent integrity solutions that are also privacy-safe and user-friendly.

- Solve product and technical challenges that are often first-seen and highly adversarial. Both quick short term tactics and long term strategical moves are expected at various paces.

- Be part of a diverse and enthusiastic global workforce, grow with and learn from security and integrity experts across Asia, Europe, North America, etc.

Job Description:

- Research underground industry chains and technology, risk control, innovative technologies on defense and attacking

- Conduct various types of effective redteam practices from the external perspective of underground industries

- Following the latest security dynamism globally, responding and technical analyzing with security events timely.

Qualifications:

Minimum Qualification

- Familiarity with underground industry chains, attacking technical mechanisms and details with independent capability to analyze risk impact on business.

- Familiarity with reverse engineering on Android or iOS platform, or knowledge about the technical means of data scraping, cheating etc.

- Familiarity with basic strategies and mechanisms of risk control with capability for defense and attacking.

- Practical experience of programming, deep understanding of Android or iOS systems and proficient in (at least one): Java, Objective-C, Swift, C/C++. With solid programming skills and good coding habits;

Preferred Qualification

- Ability to think critically, objectively, rationally. Reason and communicate in result-oriented, data-driven manner. High autonomy;

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible. Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve. Join us.

The Business Risk Integrated Control (BRIC) team of TikTok, is missioned to:

- Protect TikTok users, including and beyond content consumers, creators, advertisers.

- Secure platform health and authenticity of community experience .

- Collaborate with cross-functional stakeholders to improve TikTok infrastructures, services, tools and algorithms, towards a higher standard of privacy and security.

The BRIC team works to measure and minimize the damage implied by inauthentic behaviors on TikTok and its extended platforms, covering multiple classical and novel interity/security areas such as fake account, fake traffic, spam, scraping, cyberbullying, live room risks, incentive fraud, monetization abuse, etc.

In this team, you will have a unique opportunity to:

- Have a first-hand experience contributing to TikTok's key security initiatives.

- Build scalable, resilient, intelligent integrity solutions that are also privacy-safe and user-friendly.

- Solve product and technical challenges that are often first-seen and highly adversarial. Both quick short term tactics and long term strategical moves are expected at various paces.

- Be part of a diverse and enthusiastic global workforce, grow with and learn from security and integrity experts across Asia, Europe, North America, etc.

Job Description:

- Research underground industry chains and technology, risk control, innovative technologies on defense and attacking

- Conduct various types of effective redteam practices from the external perspective of underground industries

- Following the latest security dynamism globally, responding and technical analyzing with security events timely.

Qualifications:

Minimum Qualification

- Familiarity with underground industry chains, attacking technical mechanisms and details with independent capability to analyze risk impact on business.

- Familiarity with reverse engineering on Android or iOS platform, or knowledge about the technical means of data scraping, cheating etc.

- Familiarity with basic strategies and mechanisms of risk control with capability for defense and attacking.

- Practical experience of programming, deep understanding of Android or iOS systems and proficient in (at least one): Java, Objective-C, Swift, C/C++. With solid programming skills and good coding habits;

Preferred Qualification

- Ability to think critically, objectively, rationally. Reason and communicate in result-oriented, data-driven manner. High autonomy;

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

• CCNA/CCSA certification is preferred
• At least 1-2 years relevant experience is required.
• Good exposure and training is provided.

Responsibilities:

• Be responsible for Post-sales activities of Cybersecurity or Network Performance Monitoring products.
• Involve in Large-scale (Local & Regional) Project Implementation.
• Provide on-site implementation services including testing, deployment & documentation.
• Provide technical support in ensuring customer satisfaction.
• Analyse and clarify customer queries though troubleshooting and researching existing knowledgebase articles/known issues.
• Be on routine standby to support 24×7 maintenance support calls.
• Requires the ability to communicate issues clearly and concisely.
• Excellent written and verbal communication skills are a necessary part of the job.

Requirements:

• Bachelor’s degree or Diploma in Cyber Security, Computer Science, Computer Engineering or related field.
• At least 1-2 years relevant experience in IT industry providing network support and administration.
• Equip with knowledge & experience in networking such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Analytical and possess good troubleshooting skills.
• Willing to work extended hours and on standby duty.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to [email protected] or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are looking for a SOC Engineer (Shift) to join us in our mission to enhance Singapore’s competitiveness as a trusted ICT hub for citizens and businesses. This role will be a 2-year rolling contract employment.

A brief summary of your job responsibility:

• Act as Incident first responder, reviewing and verifying system alerts
• Perform security incident discovery, triage, and remediation plan coordination.
• Daily analysis of SIEM events to identify malicious events and define use-cases to alert the operations team on threat events.
• Identified and onboarded assets into SIEM with all necessary use cases, dashboards, and reports.
• Monitoring of security procedures and practices; recommend optimizations and improvements when gaps are identified
• Provide support on IDS, SIEM, vulnerability management systems (VMS) and advanced endpoint detection/prevention.
• Escalate security incidents using established policies and procedures
• Any other ad-hoc duties as assigned by the SOC Manager

To succeed in this role, you will ideally have:

• Experience with analysis of server, network and web security events.
• Working experience with SIEM and VMS support tools.
• Security certifications like SSCP and CISSP will be an added advantage
• ITILV4 foundation certified is preferred.
• Strong interpersonal communication skills, verbal and written.
• A team player and can also work on own initiative.
• Willing to work on 12-hour shift pattern.

Join us and discover a challenging and rewarding career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now"

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

• Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
• We promote a learning culture and encourage you to grow and learn.
• A competency framework is in place to help you grow your career with us.
• Contract Staff enjoys the same benefits as Permanent Employees.

Area Description:

Google Cloud provides organizations with leading infrastructure, platform capabilities and industry solutions. We deliver enterprise-grade cloud solutions that leverage Google’s cutting-edge technology to help companies operate more efficiently and adapt to changing needs, giving customers a foundation for the future. Customers in more than 150 countries turn to Google Cloud as their trusted partner to solve their most critical business problems.

Role Description:

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities:
We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on Google Cloud. The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team.
● Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
● Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.
● Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
● Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
● Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.
● Stay connected with the latest security trends throughout various industry verticals.
● Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities

● Bilingual Mandarin preferred

About ST Engineering

ST Engineering is a global technology, defence, and engineering group with offices across Asia, Europe, the Middle East, and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence, and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Our history spans more than 50 years, and our strategy is underpinned by our core values – Integrity, Value Creation, Courage, Commitment and Compassion. These 5 core values guide every aspect of our business and are embedded in our ST Engineering culture – from the people we hire, to working with each other, to our partners and customers.

About our Line of Business – Mission Software & Services

Our Mission Software & Services business provides leading-edge mission critical command, control, and communications (C3) systems with secured IT infrastructure and managed services. We support our client’s innovation journey through design thinking, analytics, and AI-enabled decision support with our full suite of cloud computing solutions. We provide intelligent, actionable insights and sustainable solutions to our valued partners in diverse industries including defence, government, and commercial sectors.

Together, We Can Make A Significant Impact

The Security Engineer will participate in the development and implementation of secure system architectures. He/ She understands security principles in carrying out the assigned tasks to mitigate the risks posed by new technologies and business practices. He/ She contributes to the development of artefacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture. He/ She performs routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.

Be Part of Our Success

• Collaborate in the design of security controls and systems in alignment with security guidelines
• Assist in the testing and evaluation of new security technologies and controls
• Document the design, operation, use, and expected outputs of new systems
• Participate in the Implementation of new enterprise security architecture, technologies and enhancements
• Resolve issues that arise in implementation of new security systems
• Monitor security systems for strengths and weaknesses and propose improvements to address weaknesses
• Involve in the maintenance of security systems, platforms and associated software
• Collaborate in the development and implementation of custom disaster recovery drills and simulation tests on existing systems
• Assist in the resolution of identified problems and incidents

Qualities We Value

• Familiar with modern security architectures and cloud architecture design best practices
• Knowledge of Python is an advantage
• A good team player who can contribute and work effectively in a collaborative team environment.
• Candidates with critical thinking, analytical and creative problem-solving skills is highly desired.
• Attention to detail and quality is a desired attribute.

Our Commitment That Goes Beyond the Norm

• An environment where you will be working on cutting-edge technologies and architectures.
• Safe space where diverse perspectives are valued, and everyone’s unique contributions are celebrated.
• Meaningful work and projects that make a difference in people’s lives.
• A fun, passionate and collaborative workplace.
• Competitive remuneration and comprehensive benefits.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Key Responsibilities:

· Lead the design and implementation of the security architecture for projects within the GovTech scope.

· Perform comprehensive risk assessments and implement security controls for cloud and on-premises solutions.

· Collaborate with internal teams and stakeholders to ensure security by design is embedded in all solutions.

· Develop secure architectural frameworks based on best practices, ensuring alignment with business requirements and compliance regulations.

· Conduct security assessments of infrastructure, systems, and applications to identify vulnerabilities and develop remediation strategies.

· Stay up-to-date with emerging security threats, technologies, and best practices to continuously improve the security posture of the organization’s systems.

Qualifications:

The ideal candidate must possess internationally recognized professional security certifications related to risk assessment and security design services, such as:

· ISACA Certified Information Security Manager (CISM)

· Cybersecurity Practitioner (CSX-P)

· Certified Information Systems Security Professional (CISSP)

· CISSP-Information Systems Security Architecture Professional (CISSP-ISSAP)

· Certified Cloud Security Professional (CCSP)

· AWS Certified Solutions Architect (Professional, Associate)

· AWS Certified Security

· Azure Solution Architect or Security Engineer

· Google Cloud Certified Professional Cloud Architect

· Cisco Certified Architect (CCAr)

Additional Skills:

· Strong understanding of security frameworks such as NIST, ISO 27001, and CIS controls.

· Experience with cloud platforms such as AWS, Azure, and Google Cloud in a security architecture capacity.

· Excellent problem-solving and analytical skills.

· Strong written and verbal communication skills, with the ability to clearly articulate complex security concepts to technical and non-technical stakeholders.

· Proven ability to manage multiple projects and meet deadlines under pressure.

Experience:

· Minimum 5-10 years of experience in security architecture and design, preferably in a government or highly regulated environment.

· Demonstrated experience in working with cloud security, network security, and application security.

Application Process:

Interested candidates who meet the qualifications and experience requirements are encouraged to apply with a resume and cover letter detailing their relevant certifications and experience in security architecture.

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Descriptions:

In this role, you will join a team of six members from Sopra Steria to support one of our government project. The scope of work includes:

1. Security Risk Assessment
2. Security Policies, Standards, Guidelines, And Procedures Review
3. Security Design
4. Application Security
5. Vulnerability assessment and
6. System Security Acceptance Testing

You will be an expert in the field of Cloud Security.

Responsibilities:

• Provide expertise in cloud security and be a trusted technical advisor and solve complex cloud security & compliance challenges.
• Design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment.
• Perform risk assessment for Cloud Computing Environment and Service
• Hands on and deep knowledge of security principles.
• Experience managing customer projects to completion, working with engineering teams, sales and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.

• Minimum of 3 years of experience in Cloud Security (AWS will be highly advantageous)
• Strong understanding of security frameworks
• Fluent in spoken and written English
• Ability to work closely with international team in a professional manner
• Excellent verbal and written communication skills, including ability to solve complex technical situation and explain it clearly
• Relevant certifications, such as AWS Certified Security – Specialty (SCS-C01), Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), are a plus.

• Regular team buildings
• 18 leave days / year
• HSBC Insurance, GP, Dental, Optical
• Annual bonus
• Working hours: from 9am to 6pm, Monday to Friday
• Training and certifications paths

Responsibilities

• Developing and implementing security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.
• Leading the design and implementation of security controls, including firewalls, intrusion detection systems, endpoint protection, and security information and event management (SIEM) systems.
• Conducting regular security assessments and vulnerability scans to identify potential risks and vulnerabilities.
• Responding to and investigating security incidents and breaches, and implementing measures to prevent future occurrences.
• Managing and monitoring security systems and tools to detect and respond to security events and threats.
• Collaborating with other IT teams to ensure security best practices are followed during system and software development.
• Providing guidance and support to junior security operations engineers and other team members.
• Staying up-to-date with the latest security trends, threats, and technologies, and making recommendations for improvement.
• Participating in incident response and disaster recovery planning and testing.
• Collaborating with external vendors and partners to ensure the security of third-party systems and services.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or related field.
• Strong technical knowledge and experience in security operations, network and systems administration, and incident response
• Experience with programming languages (Rust is a plus), Embedded Systems, Hardware peripherals.
• Familiarity with Operating System Security (e.g. Linux, Windows).
• Excellent problem-solving and analytical skills.
• 6+ years of professional experience in hardware and firmware security.
• Chinese speaking to liaise with Chinese counterparts

Benefits

• Up to 20 days Annual Leave
• Shift Allowance
• Festive Gifts
• Overtime Meal and Transport Benefits
• Employee Growth Fund
• Group Insurance
• Regular Employee Bonding Events
• Attractive Annual Variable Bonus AND Quarterly Performance Incentives

Culture

• We foster our core values through active listening, caring, and supporting continuous improvement for all our staff members
• Experience the energetic working environment with multicultural staff members with varied skills and experiences

Reporting to the Team Lead of the Security Operations Center, the candidate will be responsible for monitoring and responding to any potential security related risk targeting the Group. It is essential for the candidate to have the background and knowledge to discuss incident response activities internally and support security incident investigations. This is a 24-by-7 shift work including graveyard shifts.

Principal Job Functions

1. Monitor developing cybersecurity events around the world, and escalate to L2 team if relevant events are observed
2. Performs monitoring, risk assessment and analysis on security tools such as Anomaly Detection systems, Firewalls, Antivirus systems, Proxy devices
3. Follow pre-defined actions to handle security alerts including escalating to L2 team and other support groups
4. Execute daily ad-hoc tasks or lead small projects as needed
5. Participate in daily and ad-hoc documentation related tasks
6. Create and maintain operational reports for Key Performance Indicators and weekly and Monthly Metrics
7. Perform assessment phase of Vulnerability & Threat Management process
8. Receive threat intelligence from feeds the Group subscribed to and update to Threat Intel knowledge base
9. Be ready to support any security incident response investigation in the Group regardless of location and environment
10. Work closely with Team Lead to review, provide feedback and take actions to improve the methodology use in the Security Operations
11. Responsible to ensure all tickets logged are closed correctly and timely
12. Ensure timely submission of routine reports on threats, vulnerabilities and incidents handled by the Security Operations Center
13. Keep the Security Operations Center runbooks and procedures updated


Recommended prerequisites:
1. 3+ years working in security operations, preferably with incident management experience
2. Experience in the Banking industry will be an advantage
3. Familiar with security products and network devices
4. Extensive technical experience with network security practices including Intranet, Extranet and Internet access
5. Technical experience with UNIX, AIX, Linux, Windows
6. Knowledge of TCP/IP, DNS, web, wireless security architectures and enterprise-grade security solutions
7. Knowledge of encryption and authentication methods such as 2FA, DES/AES/RSA, Digital Certificates, SSL/TLS, IPSec and development of DMZ’s
8. Knowledge of intrusion detection (deep TCP/IP knowledge, and cybersecurity), various operating systems (Windows/UNIX), and web technologies (especially internet security)
9. Able to read and understand packet level data, handle Network/Host Security products (NIDS/NIPS, firewalls, HIPS, AV, scanners, etc.) and understand security events from these tools
10. Able to perform vulnerability assessment and manage such tools/processes, as well as application penetration testing or forensic analysis fields
11. Certifications from EC-Council, GIAC, (ISC)² are preferred [CISSP, CEH, GCIA, CCNA].
12. People Skills:
i. Be performance oriented; always try to excel past achievements
ii. Able to work under pressure during critical situations
iii. Able to work in a collaborative manner with peers
13. Communication Skills:
i. Can communicate effectively with peers in discussions/meetComments for Vendors:This is a 24-by-7 shift work including graveyard shifts.

Primary Location: Singapore, Changi

Internal ref: 9188

Regards,

Lini

Recruitment Consultant

R22108463

Key Responsibilities:

• Perform penetration testing on blockchain networks and smart contracts to identify potential vulnerabilities and exploitable weaknesses.
• Conduct code audits to ensure smart contracts and blockchain-based applications are secure and free from vulnerabilities.
• Use advanced techniques for vulnerability mining in blockchain environments, identifying zero-day vulnerabilities and emerging threats.
• Develop and execute comprehensive security auditing plans for blockchain platforms, including decentralized finance (DeFi) protocols and Layer 2 solutions.
• Lead the incident response process for security breaches, including root cause analysis, containment, eradication, and post-incident reporting.
• Implement vulnerability scanning tools to proactively identify security issues in both blockchain and traditional applications.
• Collaborate with development and engineering teams to define and implement effective risk mitigation strategies.
• Keep up to date with blockchain security trends, new attack vectors, and cutting-edge tools for identifying and defending against threats.
• Prepare and deliver detailed security reports, documenting vulnerabilities, attack simulations, and recommended security improvements.
• Train developers on secure coding practices in blockchain environments, ensuring best practices are followed throughout the development lifecycle.
• Engage with external security auditors and penetration testers as needed, managing the auditing process for continuous improvement.

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (Master’s degree or certifications such as OSCP, CEH, or CISSP preferred).
• 5+ years of experience in cybersecurity, with a focus on blockchain technology and security practices.
• Extensive experience with penetration testing, specifically in blockchain networks, smart contracts, and distributed applications (dApps).
• Strong background in vulnerability scanning, using tools like Nmap, Nessus, Metasploit, and OWASP ZAP.
• Proficiency in code auditing, with knowledge of blockchain-specific languages like Solidity, Rust, or Vyper.
• Familiarity with blockchain consensus algorithms, cryptography, and attack vectors such as Sybil attacks, 51% attacks, and front-running.
• Hands-on experience with incident response and security event management (SIEM tools such as Splunk or ELK).
• Strong understanding of security auditing frameworks and risk management methodologies.
• Knowledge of threat modeling techniques and experience with blockchain security tools like Mythril, Slither, and Remix IDE.
• Solid understanding of smart contract security vulnerabilities such as reentrancy, integer overflow, and denial of service.
• Experience in designing and implementing risk mitigation strategies, focusing on secure design and architecture for blockchain applications.
• Experience with Decentralized Finance (DeFi) protocols and Layer 2 scaling solutions.
• Familiarity with blockchain platforms such as Ethereum, Hyperledger, Polkadot, or Binance Smart Chain.
• Knowledge of Zero-Knowledge Proofs (ZKP), Multi-signature wallets, and other advanced cryptographic techniques.
• Familiarity with cloud security in AWS, Azure, or GCP, especially in blockchain-based deployments.
• Strong scripting skills in Python, Bash, or Go to automate security testing and incident response tasks.
• Certifications in blockchain security, such as Certified Blockchain Security Professional (CBSP) or Blockchain Security Expert.

Savita Rai

EA REG NO: R1873418

EA License No:23C2060

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)