Total 707 electronic engineer job vacancies in Legal / Public / Security category in Singapore

Our client is a leading fintech who is looking to onboard an Infosec Engineer to be part of their cyber fusion centre.

Responsibilities:

• Configure, troubleshoot, and maintain security infrastructure hardware and software.
• Develop and implement effective security measures to protect company data and network infrastructure.
• Regularly track and report on the performance of these security measures.
• Deep understanding of comprehensive cybersecurity architectures.
• Develop and update the company’s information security strategy, ensuring it aligns with industry best practices and business objectives.
• Identify, define, and document system security requirements.
• Prepare and maintain technical documentation.
• Recommend solutions to management based on these requirements.
• Install and manage software for monitoring systems and networks for security breaches and intrusions
• Establish and enforce preventive measures to mitigate potential security threats.
• Educate and train staff on information system security best practices.
• Foster a security-aware culture within the organization.

Experience:

• Preferable to have 3+ years of relevant experience
• Knowledge in managing security solution stated above.
• Strong understanding of cybersecurity principles, practices, and solutions.
• Effective communication and analytical abilities.
• Ability to analyze complex security systems and identify vulnerabilities and solution.
• Expertise in computer programming and scripting languages.
• CISSP, or any related vendor certification (preferred)
• Proficient in managing a range of security devices, including but not limited to:

· Email Security

· IDPS

· Attack Surface Monitoring

· Anti-Malware Solution

· Web Application Firewall

· Certificate Management System (CMS)

Responsibilities:

• Domain Expert responsible for design and implementation of network security architectural framework, standard methodologies, and compliance requirements.
• Identify and implement defense-in-depth network analytics technologies and solutions.
• Ensure best security practices, and provide technical consulting on the use of firewall, access control, intrusion detection and prevention, malware analysis, and threat correlation.
• Implementation of load balancers and other security appliances like email security, web gateway, web security appliances, etc
• Implementation of Firewall or APT like Cisco / Sonicwall / Palo Alto / Fortinet / Juniper
• Implementation of security applications like DLP / Anti-virus / NAC / SIEM
• Ability to provide customers' satisfaction and execution for all project deliverables
• Provide rectification and resolution of network problems/issues

Requirements:

• Degree with min 2 years' experience in Network & Security Project Implementation
• CCDA / CCNP certification
• Strong background in security architecture including a deep knowledge of IT network security (secure LAN, WAN, vLAN, MPLS, and secure network zoning and restricted network design) and cloud-based technologies
• Strong background in Network Engineering including a deep understanding of Windows Server architecture, Windows Virtualization, Networking, Backup Solutions, and Disaster Recovery
• Project management of large scale network projects will be an advantage
• Provide daily support team to meet stringent SLA requirements

Interested candidates who wish to apply for the advertised position, please click APPLYto submit your resume.

EA License No: 13C6305

Reg. No.: R1770654

For candidate who applied for the advertised position is deemed to have consented to us that we may collect, use or disclose your personal information for purpose in connection with the services provided by us.

The Job:

• Network security management
• Web security management
• End point security management
• Messaging security management
• Security & vulnerability management
• Automation of management tasks

What You’ll Need:

• Degree/Diploma in Computer-related disciplines
• At least 5 years of experience that covers management of enterprise security solution

Interested applicants can send their detailed resumes to [email protected]or call JANE @ 6735 1955.

JANE LUI JIE'EN

CEI: R1104482

Company Reg. No. 199601303W || EA Licence No. 99C4599

Cyber Security Engineer

Cyber Security Engineer is responsible for maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

Requirements

• Degree in engineering, science or information technology, or equivalent education.
• At least 3 years of related work experience in cybersecurity management and security governance.
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening,
  IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:
  a. Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)
  b. SASE (Zscaler, Netskope, Skyhigh)
  c. Tenable Security Center Continuous View
  d. Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)
  e. Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)
  f. Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)
  g. SIEM (e.g., Splunk, QRadar)
  h. CyberArk PAM and IAM

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Job Description:

• As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Company's Cloud services.
• You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more.
• You will provide prescriptive guidance in ensuring customers receive the best of what Company's Cloud Platform can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in the Cloud.
• Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Company's Cloud products and features
• We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on the Cloud. The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team.
• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in the Cloud environment.
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
• Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Cloud platform.
• Stay connected with the latest security trends throughout various industry verticals.
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Requirements:

• Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience.
• Coding experience in one or more general purpose languages.
• Experience managing customer projects to completion, working with engineering teams, sales and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.
• Ability to develop high-quality technical documentation and presentation materials.
• At Least 7 years of security architecture and/or security engineering experience
• Hands on and deep knowledge of security principles.
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
• Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
• Strong practical experience securing Kubernetes and containerised workloads.

THE JOB:

The Security Systems Engineer reports to the Campus Security Manager and is responsible for the physical security technologies and systems within the DataCenter.

JOB RESPONSIBILITIES

• Management of physical security technologies and systems within the Datacenter. Includes physical access control, video surveillance, security networks, VHF/UHF Radio systems, hard key management systems, and perimeter entry systems.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Collection and maintenance of system information on the health of current security systems and report out of performance trends. Identification of system issues or failures and coordination with site personnel to drive and correct failures by collaborating with other internal and external service providers in weekly / biweekly meetings.
• Receive escalations/notifications of physical security and business impacting incidents/events and appropriately triage, ensuring that leadership is made initially and continuously aware when appropriate and that the appropriate personnel are managing the incident response effectively.
• Serve as a Subject Matter Expert (SME) for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Continuously improve the efficiency and maturity of the overall physical security program.
• Collaborate with peer teams and organizations to ensure their team is aligned with broader strategy and initiatives, fully supporting leadership priorities, being good partners, helping reduce costs, time burden, complexity, and being responsive trusted advisors.
• Continuously seek data and recommend strategies and ideas to reduce churn, optimize, implement a creative solution to a problem, scale, automate, and simplify.
• Confident and skilled in preparing and delivering presentations and briefings to customers, senior leaders, and executives.
• Any other ad-hoc task assigned.

JOB REQUIREMENTS:

• Diploma or BS or BA in physical security or related discipline, or equivalent experience preferred.
• With 5 years’ experience successfully managing security systems projects in a corporate, law enforcement or government operations program role.
• Must be Lenel Certified Professional in Access Control and Digital Video or to attain Lenel certification within 6 months from date of hire.
• Experience with or exposure to regulatory and industry compliance frameworks and audits (e.g. ISO27001, PCI, SOC).
• Experience with datacentres or other critical infrastructure facilities.
• Experience with HA and DR solutions such as SQL Clustering, NEC WAN Express.
• With more than 5 years of managing, configuring, and maintaining Microsoft SQL Servers and processes.
• Experience making and influencing good decisions that impact mission-critical, 24x7 operations environments.
• Strong work and compliance ethic, and the ability to effectively prioritize and execute tasks in a dynamic and high-pressure environment.
• Proficient in the use of Microsoft Office products for business.
• Analytical and process improvement skills to produce data driven insights and associated process changes.
• Thought leadership and subject matter expertise to deliver one or more large programs and services while increasing standardization, simplification, and automation.
• Ability to change plans, goals, actions, and priorities in response to an evolving business environment with awareness to operate as a champion for course corrections when necessary.

Responsibilities:

• Provide consultation to engineers on security requirements, ensuring best practices are followed to meet these needs.
• Collaborate with the Cloud Infrastructure and Platform teams to spearhead initiatives that enhance the security utilities and tools .
• Develop and implement threat detection mechanisms for a hybrid infrastructure, encompassing application infrastructure, containers, and IoT systems.
• Lead and actively participate in discussions and communications within the team, as well as with customers and other business units.
• Translate standards and regulatory controls into actionable tasks for engineers, ensuring clarity in what needs to be accomplished.
• Develop and maintain a comprehensive infrastructure and platform security roadmap that aligns with customer demands and regulatory requirements.
• Address customer-sponsored penetration tests with timely and detailed responses.
• Develop, maintain, and promote security standards through various knowledge-sharing platforms such as workshops, office hours, and brown-bag sessions.
• Advocate for best practices and design patterns in security.
• Lead the onboarding and development of Security Orchestration, Automation, and Response (SOAR) systems.

Qualifications & Experience:

• Bachelor’s degree in Computer Engineering or a STEM-related field (Science, Technology, Engineering, or Math).
• AZ-500 & AWS security certifications are advantageous.
• A minimum of 5 years of experience in managing security controls within Azure, AWS, or Google Cloud.
• Strong proficiency in CI/CD and automation tools (such as Chef, Git, Jenkins) and in Infrastructure as Code/Policy as Code.
• Deep understanding of identity management and identity federation technologies (SAML, OAuth).
• Extensive knowledge of virtual infrastructure and containerization technologies.
• Proven experience in designing and implementing security controls on cloud platforms like AWS, Azure, or similar environments.
• Skilled in risk identification and evaluation techniques.
• Experience with at least one SIEM and SOAR platform, including log source onboarding and automation development.
• Proficient in scripting and automation, particularly in Python.

Cloud Security Engineer

Responsibilities:

• Consult engineer on security requirements and utilize best practices to meet them
• Work with the Cloud Infrastructure and Platform teams to lead initiatives and develop and build security utilities and tools that will enable organisation to operate more securely
• Build threat detection for a hybrid infrastructure covering the overall technology stack that includes Application infrastructure, Containers, IoT infrastructure
• Contribute to and lead discussions and communications within the team and outside, including customers and other business units
• Translate Standards and Regulatory based controls to Engineers do they understand what needs to be done
• Build and maintain a robust infrastructure/platform security roadmap to meet customer demands and regulatory mandates
• Responding to customer-facing departments about EnOS Platform and Edge security posture
• Responding promptly and in detail to customer-sponsored penetration tests
• Develop, maintain, and promote standards through workshops, office hours, knowledge shares and brown-bags
• Promotes best practices and design patterns
• Onboard and development of Security Orchestration, Automation and Response system.

Qualifications & Experience:

• Bachelor Degree in Computer Engineering/ in STEM major in Science, Technology, Engineering or Maths)
• AZ-500 & AWS security certification will be a plus
• At least 5+ years of experience in security controls management aspects at Azure/AWS/Google cloud
• Strong knowledge of CI/CD and automation tools (Chef, Git, Jenkins) and Infrastructure as Code/Policy As code.
• Strong knowledge of Identity management and identity federation (SAML, Oauth)
• Strong knowledge of virtual infrastructure and containerization technologies
• Experience designing and implementing security controls in cloud platforms such as AWS, Azure and alike.
• Experience with the application of risk identification and evaluation techniques
• Experience with broad set of information security technologies and processes within a SaaS, IaaS, PaaS, or cloud environment
• Experience with at least one SIEM and SOAR platform – including on boarding of log sources and developing automation.

Regret to inform that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R1878287

Business Registration Number: 201735941W.

Licence Number: 18S9037

Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.

Excellent communication skills and the ability to collaborate with diverse teams.

Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.

Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.

Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services

Good knowledge in security

Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.

Proficient in security concepts related to infrastructure as code (IaC) and containerisation.

Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

As a Cyber Security Specialist at Jurong Port, you will be responsible for the daily administration and management of cyber security tools and systems. Your primary duties will include maintaining and optimizing security tools, monitoring system logs, conducting vulnerability assessments, and ensuring endpoint protection.

The Job:

• Oversee the daily operation and maintenance of security tools such as endpoint protection solutions, PAMS, WAF and vulnerability assessment tools.
• Review and investigate security logs from various systems and tools to identify and respond to potential security incidents and breaches.
• Conduct regular vulnerability assessments and penetration testing to identify and mitigate security weaknesses.
• Conduct cyber security training and exercise to test and improve staffs’ awareness and response
• Monitor and respond timely to security incidents and alerts, conducting thorough investigations and root cause analyses to minimize risk exposure.
• Work closely with IT and application team to ensure security compliance and best practices are integrated into all aspects of the organization's operations.
• Ensure regulatory compliance for cyber security matters.
• Develop and distribute security newsletters and advisories to educate staff on the latest security threats and best practices.
• Develop and maintain SOP documentation.
• Stay up to date with the latest security trends, threats, and technology solutions.

Job Requirement:

• Diploma or Degree in Computer Science, Information Technology, Cyber Security, or related field.
• At least 5 years of experience in cyber security or a related role.
• Minimum 2 years of experience in vendor management
• Strong knowledge of security principles, techniques, and technologies.
• Experience with security tools such as firewalls, endpoint protection, WAF, VA, SIEM and PAMS solutions.
• Good working knowledge of IT infrastructure (servers, networks, storages and endpoints).
• Relevant certifications such as CEH, CompTIA Security+, SSCP or any cyber security related certificate.

Description:

Role Description (About the job)
As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities
We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on Google Cloud. The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team.

● Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
● Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.
● Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
● Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
● Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.
● Stay connected with the latest security trends throughout various industry verticals.
● Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Minimum Qualifications (MQs)
● Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience.
● Coding experience in one or more general purpose languages.
● Experience managing customer projects to completion, working with engineering teams, sales and partners.
● Experience architecting, developing, or maintaining secure cloud solutions.
● Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications (PQs)
● At Least 7 years of security architecture and/or security engineering experience
● Hands on and deep knowledge of security principles.
● Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
● Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
● Strong practical experience securing Kubernetes and containerised workloads.

• Salary Range: $2.4k - $2.8k
• Working Days: 4 days
• Working Hours: 12-hr rotating shift (7.30am-7.30pm, 7.30pm-7.30am)
• Location: Toh Guan Road

Responsibilities

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement

• Possess at least a Higher Nitec
• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

Tong Wei Chin (Reg No.: R24123803)

The Supreme HR Advisory Pte Ltd (EA No: 14C7279)

Salary Range: $2.4k - $2.8k
Working Days: 4 days
Working Hours: Shift Work
Location: Toh Guan Road

Responsibilities

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement

• Possess at least a Higher Nitec
• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

Interested applicants can email your CV to [email protected] or whatsapp to +65 89249206

The Supreme HR Advisory Pte. Ltd || 14C7279

Chua Jie Ying (Cai Jie Ying), Evelynn || EA Personnel License R24120580

Responsibilities:

· Responsible for assessing the technologies, applications, and overall security controls in Cloud platforms to identify potential risks and vulnerabilities

· Understanding and complying of the Global Information Security policy and relevant cyber security threats to complete security assessments.

· Providing expert technical guidance to support partners and adapting testing methods to emerging cyber security regulations and evolving threats, while developing others on the team.

· Lead and oversee efforts to identify vulnerabilities and misconfigurations in Cloud platforms and workloads.

· Manage daily operations of Cloud security solutions such as Aqua, Wiz, Qualys, CrowdStrike

· Enhance vulnerability identification process for Hybrid Cloud platforms

· Drive Cloud Security solutions in alignment with the Bank’s cloud strategy and in accordance with security best practices

· Leads the analysis, implementation, execution, and improvement of proactive security controls to prevent external threat actors from infiltrating company systems or information.

· Conducts research and provides leadership updates regarding advanced threats to compromise security controls and protocols.

· Monitors new threats and complex attempts to compromise security controls while developing a deep expertise in the early lifecycle for security techniques

Skills and Experience

· Deep understanding of Microsoft Azure and/or AWS native services, tools, and architecture

· Deep understanding of cloud and container security

· Deep working knowledge of cloud threat landscape

· Deep technical experience in infrastructure and security functions

· Experience in DevSecOps and CI/CD pipeline integration through security engineering lifecycles

· Experience writing requirements documentation

· Experience deploying and managing Cloud-based vulnerability management solutions

· Understanding of Threat modeling and cybersecurity frameworks(MITRE ATTCK/D3FEND, OWASP, STRIDE)

· Understanding of vulnerability management and scanning tools

· Well-developed analytic, qualitative, and quantitative reasoning skills with a demonstrated creative problem-solving ability.

iKas International (Asia) Pte Ltd

“Sanderson-iKas” is the brand name for iKas International (Asia) Pte Ltd

EA Licence No: 16S8086 | EA Registration No. R1988468

We regret to inform you that only shortlisted candidates will be notified /contacted.

• Salary Range: $2.4k - $2.8k
• Working Days: 4 days
• Working Hours: 12-hr rotating shift, 7.30am-7.30pm, 7.30pm-7.30am
• Location: Toh Guan Road

Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement:

• Possess at least a Higher Nitec
• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

If you are interested to apply, kindly WhatsApp me your updated resume in DOC file and allow our Consultant to match you with our Clients.

Whatsapp: +65 8525 2419

Email: [email protected]

Tan Man Ee Reg No: R22108289

The Supreme Hr Advisory Pte Ltd EA No: 14C7279

Contract: 1 year, Renewable

Experience: 9+ years

Desired Skill:

1.Degree in Computer Science, Information Systems, Engineering or equivalent

2.At least 9 years of IT security experience in areas of security governance, risk management, application security design, security project management, security operation, cloud security technologies

3.Strong risk management principles, risk articulation skills, cloud technologies, network security, data protection 4.Knowledge of cloud platforms such as AWS, Azure or Google cloud is desirable

5.Professional security certification is preferable, such as CISSP, CISM, CISA, CCSP or other similar security certifications

6.Self-motivated with the ability to work independently and as a team member with minimal direction

7.Strong interpersonal and stakeholder management skills 8.Good written and communication skills

Job Responsibilities:

* Identify and assess Cyber risk(s). Propose treatment plan(s) to mitigate Cyber risk(s) identified.

* Provide guidance to Business Services Group (BSG) in ensuring that projects/systems comply with security policies and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the product lifecycle

* Perform adequate risk management, including identification, assessment and provide treatment of security risks associated with systems handled by Business Services Group. Risk assessment must be performed in accordance with the organization’s cybersecurity risk management framework

Job Description:

• Monitor, maintain and fine-tune existing network & security infrastructure: Endpoint Security, Next Generation Firewall (NGFW), Encryption, email and network proxy gateways, Microsoft 365, DLP etc.
• Monitor, analyze and response to Information Security Incidents by working across teams (e.g.: infrastructure, application, other departments, etc.)
• Prepare and document security hardening standard, security incident response plan & playbook.
• Collaborate with IT, engineering, production and QA team to ensure security practices are integrated into all systems and applications.
• Prepare documentation such as procedures and guidelines for security practices within the internal IT team, engineering and within OT environment.
• Implement, conduct external and internal vulnerability scans, network penetration tests and application security tests as required.
• With minimum supervision, generate reports from security tools, write incident reports, assessment-based findings, outcomes and propositions for further system security enhancement
• Support relevant projects, initiatives or security activities such as but not limited to security awareness programs, security incident response with relevant teams and security software deployments.
• Report on Security KPIs, vulnerabilities, non-compliance and other security exposures, including misuse of information assets and non-compliance.
• Conduct research, perform PoC to evaluate new emerging technologies and maintain up-to-date understanding of the latest threats, vulnerabilities, mitigation, industry best practices, regulations.
• Participate in projects involving IT systems, provide sound technical advice to ensure security principles are adhered to and provide support as needed.
• Other duties as assigned.

Job Requirements:

• At least 3 years’ experience in security operations centre (SOC) and cyber security incident response team (CIRT)
• A proven track record as an Information Security engineer collaborating with teams internationally
• Hands on experience with security technologies such as NGFW, Endpoint Security, DLP, Proxy, Secure Email Gateway, Active Directory, Identity and Access Management (IAM), Microsoft 65, etc.
• Hands on experience with the implementation, configuration, fine tuning, operations, and maintenance of security tools
• General knowledge of industry best practices on security hardening, OWASP, network security, security risk & management frameworks, national cybersecurity standards, ISO27001, etc.
• Team player and able to collaborate across diverse stakeholders to achieve security objectives
• Excellent communication, interpersonal and consultative skills
• Good problem solving and analytical skills and workshop facilitation skills
• Experience in working with high performance teams and understand the dynamics of international teamwork
• Ability to learn and understand new concepts quickly to keep up with new emerging technology
• It would be advantageous for you to have exposure to working directly for companies who have gone through extensive periods of change and / or a full-scale transformation programme in recent years.
• Data driven, with a continuous improvement mind-set acumen.
• Tertiary Education in Computer Science or related fields
• Experience in solutioning, architecting, implementing security solutions
• CISSP, GIAC, CEH or other security certifications would be good

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As a part of ByteDance's Security Department, the Security Governance and Compliance team plays a pivotal role in supporting various business lines. This involves offering expertise in security governance and compliance by implementing robust information security management systems. The team is dedicated to tailoring solutions that address key aspects such as data security, privacy protection, and regulatory compliance. Moreover, they actively pursue and obtain a multitude of security compliance qualifications and certifications essential for the diverse business lines. Additionally, the team actively engages in shaping industry standards for security and privacy, while also conducting advanced research to anticipate and navigate future risks and opportunities.

Job Description:

1. Stay abreast of the latest developments of laws, regulations, policies and information security standards related to Network Security, Data Security and Data protection. Ensure timely updates and maintenance of the internal information security management system.

2. Apply for information security certifications such as ISO 27001, SOC and PCI for our products.

3. Advocate for and oversee the implementation of security compliance and privacy protection requirements. Promptly address and rectify any non-compliant items.

4. Validate and verify that the organization's security controls meet industry requirements. Conduct thorough examinations of processes, systems, policies, procedures, network diagrams, and system configurations.

5. Monitor business activities through collaborating with cross-functional team leaders to guarantee ongoing compliance with external certifications.

Minimum Qualifications:

1. More than 3 years of relevant experience in managing ISO 27001:2022, SOC 2 audit, and compliance programs within a global organizational setting.

2. Demonstrate extensive knowledge and hands-on experience with cybersecurity frameworks, such as ISO 27001, PCI-DSS, SOC 2, and other relevant regulatory requirements.

3. Exhibit excellent communication skills, logical reasoning abilities.

4. Maintain a calm and composed demeanor , showcasing a robust commitment to continuous learning and a collaborative, team-oriented mindset.

5. Display self-driven and results-oriented attributes, enjoy challenging tasks, demonstrate a genuine enthusiasm for work, and work well under pressure.

Preferred Qualifications:

1. Experience in ISO management systems, SOC audit, and PCI certification is preferred.

2. Relevant industry certifications such as CISM, CISA, CISSP is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Responsibilities

• Configure, manage, and maintain security devices such as firewalls, Endpoint Security etc. listed below.

• Ensure proper integration and functioning of security platforms.

• Regularly review and update security device configurations to align with best practices and evolving threats.

• Perform routine maintenance, updates, and patches on security devices and platforms.

• Monitor security alerts and events from various sources, including SIEM systems, IDS/IPS, firewalls, and Endpoint security tools etc..

• Investigate and analyse security incidents to determine the root cause and impact.

• Conduct regular vulnerability assessments and scans on the organization's systems, networks, and applications.

• Analyse scan results, prioritize vulnerabilities based on risk, and work with IT teams to remediate identified issues.

• Track and report on the status of vulnerabilities and remediation efforts.

• Work closely with IT, network, and application teams to ensure security controls are integrated into system design and implementation.

• Collaborate with external partners and vendors to address security issues and coordinate incident response efforts

Requirements

• Degree in Computer Science or Equivalent

• At least 3-5 years of relevant experiences

• Familiar with at least 5 of the listed tools below:

• Privilege Access Management

• Database Activity Monitoring

• Endpoint Detect and Response

• Endpoint Anti-malware

• Vulnerability Assessment scanner

• Next Gen Firewall

• Patch management system

• Security Information and Event management

• Security event review and investigation

• Handling of security advisory

• Security configuration management system

Licence no: 12C6060

Principal Security Management Engineer

Job Description:

1. Developing and implementing security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.

2. Leading the design and implementation of security controls, including firewalls, intrusion detection systems, endpoint protection, and security information and event management (SIEM) systems.

3. Conducting regular security assessments and vulnerability scans to identify potential risks and vulnerabilities.

4. Responding to and investigating security incidents and breaches, and implementing measures to prevent future occurrences.

5. Managing and monitoring security systems and tools to detect and respond to security events and threats.

6. Collaborating with other IT teams to ensure security best practices are followed during system and software development.

7. Providing guidance and support to junior security operations engineers and other team members.

8. Staying up-to-date with the latest security trends, threats, and technologies, and making recommendations for improvement

9. Participating in incident response and disaster recovery planning and testing

Collaborating with external vendors and partners to ensure the security of third-party systems and services.

Requirements:

· Bachelor's degree in Computer Science, Information Systems, or related field.

· Strong technical knowledge and experience in security operations, network and systems administration, and incident response

· Experience with programming languages (Rust is a plus), Embedded Systems, Hardware peripherals.

· Familiarity with Operating System Security (e.g. Linux, Windows).

· Excellent problem-solving and analytical skills.

· 6+ years of professional experience in hardware and firmware security.

· Chinese speaking to liaise with Chinese counterparts

Interested applicants, Kindly email your updated resume to yvonne.chai@quesscorp.sg and we regret that only shortlisted candidates will be notified

Yvonne Chai Cheng Man

(EA License: 23115356 | UEN: 201715683K)

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

This an awesome role for someone who has experience with DevSecOps, Cyber Security and specifically Software Applications Security who wants to use all of their skills and learn alot more.

Key Responsibilities:

• Ensure that software developed is free of security vulnerabilities.

• Manage application security program across multiple SDLCs.

• Review and understand code from both business logic and technical standpoint.

• Coordinate with developers to prioritize and remediate identified true positive vulnerabilities.

• Collaborate with software development and quality assurance teams to ensure code is free from security defects.

• Communicate cybersecurity standards applicable to technology and coding workflows.

• Working with Application Security Engineers, optimize security with existing technologies and processes.

• Review performance of controls such as threat modelling, SCA, SAST, DAST, IAST, RASP, Secrets Scanning, Container Scanning, Misconfiguration Identification, Secure Code Review, CI/CD Pipeline Security, Deployment Environment Security.

• Coordinate with software development leadership, operations leadership, IT leadership, and cybersecurity leadership to integrate application security practices across departments.

Experience Required:

• At least 5 years of total IT experience
• Cyber Security, Software Applications Security and DevSecOps experience
• Demonstrated experience working with technical and non-technical staff.
• Any experience with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure or other cloud platforms, with experience in developing and implementing software would be ideal.
• Experience developing software in various coding languages such as Java, C#, Python, PHP would be helpful
• Strong interpersonal skills with the ability to communicate effectively with guests and other team members of different backgrounds and levels of experience.
• Professional certifications in cyber security (CISSP, OSCP, etc) is highly desirable

Adam Davies

Partner

Technology 'recruitment & search'

Menrva Group

Registered Agent R1326604

Company EA License 19S9808

Company Registration 201900823K
MENRVA PTE. LTD.

Job Purpose

A Red Team operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed “testing” team.

Team Duties

• Red Team Core (70%): primarily, as a Red Team operator, you will work closely with team members to deliver sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring Artificial Intelligence based applications such as Large Language Models (LLMs).
• Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests (“TTPs”) not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.
• Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Responsibilities
Seniority is determined by experience and demonstration of exceptional competencies including:

• Documenting and effectively publishing technology guidance and repeatable processes
• Mentoring peers in groups and individually
• Improving processes and incorporating advanced methodologies into engagements
• Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices

Knowledge and Experience

• University degree in Mathematics, Computer Science, Engineering, or related discipline
• 4 years or more direct penetration testing and red teaming experience.
• Scripting - python, bash, Go etc, software engineering, and system administration
• Offensive Security Certified Expert (OSCE) or CREST CCT qualification
• Artificial Intelligence background is a plus

Schedule

This role offers work from home flexibility of one day per week.

Intercontinental Exchange, Inc. is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin or ancestry, age, disability or veteran status, or other protected status.

Cyber Security Operations and Support Engineer

Responsibilities:

• Maintain the IT security infrastructure components such as firewalls, servers, intrusion prevention / detection systems, end-point protection system, VMware systems, SIEM, PAM, etc.
• Manage problem resolution process and solve technical issues with hardware and software using various diagnostic tools.
• Work well with OEM/ product vendor to keep customer infrastructure in good shape.
• Handle patching process and look after the IT security components, e.g. monitor, evaluate, test, and apply critical patches to operating systems, applications, firmware, network switches, etc.
• Technically proficient in networking technologies.
• Able to perform hardening, vulnerabilities assessment and findings resolution.
• Ready to be on 24x7 standby (rare activation).

Requirements:

• Degree / Diploma in Information Technology, Information Systems, IT Security, Computer Science or equivalent
• Good working knowledge in Windows and Red Hat Linux OS
• Good working knowledge of virtualization, end-point security and network security
• Basic knowledge in Nessus scan, PAM and SIEM is preferred.
• Good troubleshooting and problem-solving skill.
• Independent with little supervision
• Relevant work experience in servers & network management and maintenance
• Certification in Cybersecurity or networking has an advantage.
• Mainly in Changi Naval Base, occasionally at AMK or Tuas Naval base (transport reimbursement provided)

Maestro HR

damien lee tian hong

R1106726

16C8462

We are looking for an experienced Senior Cloud Security Engineer to join the Cyber Security Operations team. This is a 12 months contract role to start with a potential to extend / convert based on the performance and business needs.

Roles and Responsibilities:

• The ideal candidate must have deep knowledge of security controls, tools, features, and operations for AWS / Azure. Candidate should be able to demonstrate relevant experience with implementing and enhancing detective capabilities in a fully managed AWS / Azure environment.
• The candidate should be intellectually curious about technology and the evolving threat landscape.
  This role will help to build a detection engineering process and culture for a SIEM platform covering on-prem and multi-cloud environments while serving as a technical subject matter expert for the AWS / Azure environment.
• It will partner with teams across Global Information Security to design, develop, tune, and maintain detection content to protect the and support the information security policies and/or procedures.

Skills and Experience

• Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or related field.
• Eight (8) or more years relevant Cyber Security experience with at least five (5) years in Cloud SOC and/or Purple Team roles.
• Highly organized and motivated self-starter who can deliver results with minimal direction.
• Experience writing and tuning detections.
• Experience with SIEM tools.
• Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS.
• Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Experience with a range of AWS . Azure native services and tools (i.e. Guard Duty, Security Hub)
• Understanding of threat frameworks, such as MITRE ATTCK for Cloud and D3FEND.
• Understanding of Risk Management principles.
• Experience in building, configuring, operating and/or securing cloud infrastructure and applications in AWS / Azure with either native cloud service provider capabilities or 3rd party vendor tools.
• Ability to independently assess risks and identify vulnerabilities in infrastructure with an eagerness to suggest new processes, policies, and overall improvements to internal security controls.
• Experience partnering with incident response teams, threat intelligence researchers, Red/Purple teams, and/or HUNT researchers.
• Familiarity with common Information Security and data protection frameworks and standards (i.e. CIS, NIST, HIPAA, GDPR, PCI DSSS, ISO 270001).
• Ability to navigate and collaborate effectively within a geographically complex and dispersed global corporation.
• Excellent verbal and written communication skills with ability to distill key data points and effectively present information.
• Preferable Certifications
  CCSP / CCSK
  CISSP / CISM / Security +

Argyll Scott Consulting Pte Ltd

Your new company

This is a multinational investment bank.

Your new role

• Develop and implement a comprehensive cloud DLP security strategy that aligns with the organization's goals and compliance requirements.
• Design and architect secure cloud solutions, considering aspects such as network security, identity and access management (IAM), encryption, and data protection.
• Guide implementation of proactive measures to address security concerns effectively.
• Ensure that cloud security practices adhere to industry standards and regulatory compliance, such as GDPR, HIPAA, or SOC 2.

What you'll need to succeed

• Minimum of 10 years of experience in information security, with at least 5 years focused on cloud security. Prior experience as a Security Architect or similar role is highly desirable.
• Experience with developing performance baselines for DLP tools.
• Proficiency in cloud platforms such as AWS, Azure, or Google Cloud, including knowledge of their security services and best practices.
• Certified Cloud Security Professional (CCSP) preferred.

What you'll get in return

• Challenging yet fulfilling career with an equal opportunity employer.
• Various opportunities to learn and upgrade your skill sets
• Competitive remuneration package and benefits

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email [email protected] for a confidential discussion.

Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D