Total 30 firmware engineer job vacancies in Legal / Public / Security category in d04 harbourfronttelok blangah sentosa island

Requirements

The role requires handling of measurement and detection equipment for military and homeland security. The ideal candidate should possess strong IT skills including, software installation and configuration. The resposibilities includes managing sales product inquiries, overseeing post-sales equipment delivery, performing regular maintenance, and conducting diagnostic analyses for troubleshooting and repair. A keen learning attitude and strong problem-solving ability are essential in this position. The candidate will also be expected to prepare basic reports. Effective communication and interpersonal skills will be important for maintaining and strengthening existing customer relations.

Cloud Security Engineer (AWS | Security | IAM | OWASP)

Working Hours: Mon-Fri 830am to 6pm

Working Location: Central

Remuneration Package: Basic X 13months + Bonus + Attractive Staff benefits

Responsibilities:

• Protects system by defining access privileges, control structures, and resources.
• Safeguards information system assets by identifying and solving potential and actual security problems.
• Recognizes problems by identifying abnormalities; reporting violations.
• Determines security violations and inefficiencies by conducting periodic audits.
• Consolidate root cause analysis of past pentest results.
• Upgrades system by implementing and maintaining security controls.
• Require periodic after-hours/weekend support.

Requirements:

• Min 3years AWS Cloud Security, Security Hub, Guard Duty, Inspector, etc.
• Strong understanding of SSDLC and security frameworks.
• Hands on experience with vulnerability scanning and pentesting tools.
• Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations.
• Experience with identity and access management architectures and solutions including AD, RBAC, SSO, identity lifecycle management.
• Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security
• Certifications in OSCP / CISSP / SANS / Other relevant security certifications.

If you are excited by the above opportunity and challenges and enjoy making things happen, do apply now! OR

Email your resume to: [email protected] (indicating Job ID J43602 for faster processing).

• By submitting your resume, you consent to the collection, use, and disclosure of your personal information in line with ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).
• This authorizes us to contact you about potential alternative job openings beyond the positions you have initially applied for.
• Sensitive personal data that is not required at this stage of job application may be deleted accordingly.
• If you wish to withdraw your consent, please write to [email protected].

Low Yong Wei (Wyman) - R1550983

ScienTec Consulting Pte Ltd - 11C5781

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security SIEM Use-Case Engineer to join our Cyber Intelligence and Response Centre (CIRC). This role is crucial for the engineering, development, and continuous improvement of threat detection use-cases within our SIEM . You will also be involved in the engineering and development of custom rules to detect potential threats swiftly and creating transparency to map existing detection capabilities to the MITRE ATT&CK framework.

Key Responsibilities:

• Proactively create, test, and tune new detection use-cases in the SIEM
• Review and enhance existing detection use-cases using Machine Learning or User & Entity Behaviour Analytics (UEBA).
• Map detection use-cases to the MITRE ATT&CK framework to assess SIEM monitoring coverage.
• Perform regularly updates to threat detection engineering playbooks, processes, and documentation.
• Collaborate closely with the SOC to challenge and improve detection and prevention capabilities.
• Identify and implement SIEM use-cases to address blind spots.
• Coordinate with the log onboarding team and SIEM architect to validate new log sources for compliance and improve SIEM backend performance.
• Collaboration with Service Operations team to address challenges, process fulfillment, documentations, and improvement of Service Operations Quality.
• Provide governance on topic which related to operational stability.

Join us to play a pivotal role in enhancing our cyber security measures and protecting our global operations.

QUALIFICATIONS

Specific Knowledge

• Intense knowledge in using Splunk Enterprise Security (ES)
• Intense knowledge in developing and tuning detection use-cases (Correlation Searches) in Splunk based on Data Models
• Experience in Machine Learning and Risk Based Monitoring in Splunk is an advantage
• Ability to analyse and interpret security logs and events to identify potential threats and attack patterns
• Experience in validating data source compliant using the common interface model (CIM)
• Experience of setting up and utilize data models in Splunk
• Deep understanding of cyber security concepts to create detection use-cases targeting various phases of attack lifecycle
• Understanding of MITRE ATT&CK framework and detections of various tactics and techniques
• Experience and capable of creating interactive dashboards, alerts, reports in Splunk

Experience

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• At least 3 years of experience with demonstrable skillsets in SIEM use-case engineering, with over 5 years of experience
  in cybersecurity
• Previous relevant experience working in a security operational role, ideally within a Corporate, Military, or Police environment; engaging with and responding to a diverse array of internal stakeholders, including senior management
• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision

This position is based in location Singapore. A valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. We regret to inform you that only shortlisted candidates will be notified.

Job Description

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors, client & authorities from inception to completion of projects
• Responsible for timely submission of design, plans and reports
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in Electrical/ Mechanical Engineering or relevant engineering recognized by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM etc
• Candidates with experiences in design of integrated electronic security systems (CCTV, access control system, intrusion detection system etc) or experience with a security specialist contractor / integrator would be advantageous
• Candidates with understanding of latest electronic security technologies would be advantageous
• Candidates with experiences in crash protection measures would be advantageous
• Critical thinking skill, good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges
• Candidates with more than 4 years of relevant experience would be considered for Senior Engineer position

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments and conformity assessments on Consumer, Industrial and Medical related products and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT/product-related technologies
• Cross-collaboration to ensure comprehensive service delivery.
• Develop and review documents according to guidelines and frameworks.
• Product knowledge and testing on any of the following requirements but not limited to:
• IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, etc.)
• OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
• Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.

Responsibilities:

• Provide consultation to engineers on security requirements, ensuring best practices are followed to meet these needs.
• Collaborate with the Cloud Infrastructure and Platform teams to spearhead initiatives that enhance the security utilities and tools .
• Develop and implement threat detection mechanisms for a hybrid infrastructure, encompassing application infrastructure, containers, and IoT systems.
• Lead and actively participate in discussions and communications within the team, as well as with customers and other business units.
• Translate standards and regulatory controls into actionable tasks for engineers, ensuring clarity in what needs to be accomplished.
• Develop and maintain a comprehensive infrastructure and platform security roadmap that aligns with customer demands and regulatory requirements.
• Address customer-sponsored penetration tests with timely and detailed responses.
• Develop, maintain, and promote security standards through various knowledge-sharing platforms such as workshops, office hours, and brown-bag sessions.
• Advocate for best practices and design patterns in security.
• Lead the onboarding and development of Security Orchestration, Automation, and Response (SOAR) systems.

Qualifications & Experience:

• Bachelor’s degree in Computer Engineering or a STEM-related field (Science, Technology, Engineering, or Math).
• AZ-500 & AWS security certifications are advantageous.
• A minimum of 5 years of experience in managing security controls within Azure, AWS, or Google Cloud.
• Strong proficiency in CI/CD and automation tools (such as Chef, Git, Jenkins) and in Infrastructure as Code/Policy as Code.
• Deep understanding of identity management and identity federation technologies (SAML, OAuth).
• Extensive knowledge of virtual infrastructure and containerization technologies.
• Proven experience in designing and implementing security controls on cloud platforms like AWS, Azure, or similar environments.
• Skilled in risk identification and evaluation techniques.
• Experience with at least one SIEM and SOAR platform, including log source onboarding and automation development.
• Proficient in scripting and automation, particularly in Python.

As a Cyber Security Specialist at Jurong Port, you will be responsible for the daily administration and management of cyber security tools and systems. Your primary duties will include maintaining and optimizing security tools, monitoring system logs, conducting vulnerability assessments, and ensuring endpoint protection.

The Job:

• Oversee the daily operation and maintenance of security tools such as endpoint protection solutions, PAMS, WAF and vulnerability assessment tools.
• Review and investigate security logs from various systems and tools to identify and respond to potential security incidents and breaches.
• Conduct regular vulnerability assessments and penetration testing to identify and mitigate security weaknesses.
• Conduct cyber security training and exercise to test and improve staffs’ awareness and response
• Monitor and respond timely to security incidents and alerts, conducting thorough investigations and root cause analyses to minimize risk exposure.
• Work closely with IT and application team to ensure security compliance and best practices are integrated into all aspects of the organization's operations.
• Ensure regulatory compliance for cyber security matters.
• Develop and distribute security newsletters and advisories to educate staff on the latest security threats and best practices.
• Develop and maintain SOP documentation.
• Stay up to date with the latest security trends, threats, and technology solutions.

Job Requirement:

• Diploma or Degree in Computer Science, Information Technology, Cyber Security, or related field.
• At least 5 years of experience in cyber security or a related role.
• Minimum 2 years of experience in vendor management
• Strong knowledge of security principles, techniques, and technologies.
• Experience with security tools such as firewalls, endpoint protection, WAF, VA, SIEM and PAMS solutions.
• Good working knowledge of IT infrastructure (servers, networks, storages and endpoints).
• Relevant certifications such as CEH, CompTIA Security+, SSCP or any cyber security related certificate.

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

The TS Senior Security Engineer performs test activities and manages the internal or external customer independently. The Lead Technical Analyst is responsible for the customer satisfaction of the test deliverables and enables a smoothly running testing, validation or certification process. This includes using test automation tools, analyzing and validating test results and reporting to the customer. The Lead Technical Analyst participates in evaluating the security of IT products, such as network device, encryption software, mobile devices, payment terminals or e-Passports based on certain scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc. This will include the development document review, IT products analysis, the development and the realization of penetration test, the support and training of evaluation engineers.

Responsibilities for Internal Candidates

• Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations management.
• Conduct IT product security function evaluation work based on scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc..
• Customer code review when needed : due to stringent confidentiality and security requirements, it often requires traveling to customer premises.
• Based on the code review result, conduct a vulnerability analysis to determine if the customer product has any potential security weaknesses.
• Customer site audit when needed : normally traveling to customer premises, conduct remote audit in current Covid situation.
• Investigate possible logical attack scenarios. Provide support for the penetration tester in charge of product testing – by interpreting the code review findings and compliance checking result, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements.
• Delivery of customer projects on time.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
• Performs other duties as directed by supervisor.
• Maintains Laboratory accreditation and resolve scheme's mandated corrective action plans.

Qualifications for Internal Candidates

• Master or Bachelor level degree (or equivalent) in Information Technology, Computer Science or equivalent proving your analytical skills and technical approach.
• Minimum 5 to 8 years’ information security working experience, Common Criteria evaluation experience is the best and ISO 27001 auditing will be an advantage.
• Possess CISM / CISA Certification or related is an added advantage.
• COMMON CRITERIA SINGAPORE EVALUATOR (under SCCS) Certified is an added advantage.
• Comfortable in trying yourself in new areas without necessarily knowing everything and can figure out things as you go.
• Like working towards a larger goal and willing to take the initiative in your own hands.
• Good at communicating and can convey message to both technical and business audiences.
• Able to make decision independently under certain scenario, such as during site audit in customer site.
• Nice to have IT product development experience or penetration testing experience.

Key Roles and Responsibilities:

• Ensures that email infrastructure at the client site is configured, installed, tested, and operational
• Performs necessary checks, apply monitoring tools and respond to alerts
• Identifies problems and errors prior to or when it occurs and logs all such incidents in a timely manner with the required level of detail
• Assists in analysing, assigning, and escalating support calls
• Investigates third line support calls assigned and identify the root cause of incidents and problems
• Reports and escalates issues to 3rd party vendors if necessary
• Provides continuous feedback to clients and affected parties and update all systems and/or portals as prescribed by NTT
• Proactively identifies opportunities for work optimization including opportunities for automation of work
• Coaches L2 teams for advance technical troubleshooting and behavioural skills
• May manage and implement projects within technology domain, delivering effectively and promptly per client agreed upon requirements and timelines
• May work on implementing and delivering Disaster Recovery functions and tests

Knowledge, Skills and Attributes:

• Hands on experience in managing enterprise email security solutions
• knowledge on Cisco email security solution - ESA (Email security appliance) , Threat Grid, Antimalware protection systems
• Ability to communicate and work across different cultures and social groups
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances
• Ability to maintain a positive outlook at work
• Ability to work well in a pressurized environment
• Ability to work hard and put in longer hours when it is necessary
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information,and refraining from interrupting
• Ability to adapt to changing circumstances
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey

Academic Qualifications and Certifications:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience)
• Certifications relevant to mail hygiene security such as Cisco email security or equivalent

Required Experience:

• Minimum 5 years IT experience with 2 years experience in supporting large scale email security environment.
• Seasoned working knowledge of ITIL processes
• Seasoned experience working with vendors and/or 3rd parties

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust as a global technology, defence and engineering group, spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Collaboration is key to our success. We prioritize open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructure, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

Job Description

• Best to have formal experience in pre-sales, post sales, delivery team and highly familiar in the project methodologies such as Planning, Design, and relevant Technologies in order to develop proposal for the tenders/bids.
• Experience in overall design for network and security solutions
• Propose technical solutions and oversee the selection of technologies and work with subject matter partners to develop the proposed solutions to meet customer’s requirements.
• Propose technical solutions and oversee the selection of technologies and work with subject matter partners to develop the proposed solutions to meet customer’s requirements.
• Articulate alternatives in terms of cost, benefit and risk where multiple solutions exist.
• Actively participate in identifying opportunities, generate proposals, and support sales efforts
• Increase organization effectiveness by identifying opportunities to leverage solutions to other engagements
• Take ownership and responsibility for customers’ risks and issues.

Requirement

• At least 3 – 5 years of working experience with in-depth knowledge of pre-sales solutioning and is in abreast with evolving technology capabilities
• Possess in-depth knowledge of current technologies, tools, methodologies and industry trends, Government guidelines
• Strong problem resolution, judgment and decision making skills
• Fosters proactive and cooperative relationships within own team and other individuals/groups that interface with the team.
• Excellent interpersonal and group dynamic skills.
• Highly developed analytical and problem solving skills.
• Ability to deal with the ambiguity associated with working in a fast paced and changing environment
• Any other ad-hoc duties as required or assigned
• Possess relevant professional certification like CISSP, CCIE would be an added advantage
• Familiar with regularity compliance like IM8, AIAS, CSA Security by Design, MAS TRM
• Work Location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Job Responsibilities:

· Drive the fortification and optimization of the wallet security system, including but not limited to security policies, patching vulnerabilities, and monitoring unusual activities.

· Responsible for the daily operational maintenance of the wallet system, including but not limited to node deployment, on-chain data synchronization, and system backup, etc.

· Provide reasonable and effective suggestions for the existing wallet system framework, assist in upgrading the security organizational framework, participate in the design and implementation of security policies, to ensure the security of the exchange wallet system.

· Design and collaborate on the development of a security framework with rational security logic.

· Enrich and optimize existing rules, participate in the emergency response to daily security incidents, as well as the maintenance of security systems.

· Continuously track the latest technologies and threats in the field of blockchain and digital asset security, providing professional advice and guidance to the team.

· Proactively identify and resolve potential system risks, improving the overall security awareness and capabilities of the team.

Qualification Requirements:

· Have a sense of infrastructure security, familiar with common security vulnerabilities and attack methods.

· Capable of independently developing, writing, and maintaining a security framework.

· Familiar with common Linux commands and tools, penetration testing processes and tools.

· Familiar with security risk management, security node upgrades.

· Familiar with WEB3 development technology, with priority given to those who have experience in Solidity smart contract development.

· Have a deep understanding of blockchain technology and digital assets, familiar with the application skills of common scenarios on the chain.

· Good communication and written expression abilities, able to effectively communicate and cooperate with colleagues in different positions.

Bonus Points:

· Experience in security framework design.

· Experience in handling security incidents & offensive and defensive real-world experiences.

· Priority given to those with practical project or tool development experience.

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments on Consumer, Industrial and Medical related products and systems.
• Evaluate and perform attack surface analysis on IoT products and respective network and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems.
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT technologies
• Collaboration across various teams to ensure comprehensive service delivery.
• Product conformity testing on any of the following requirements but not limited to:

1. IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, IMDA TS RG-SEC, etc.)
2. OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
3. Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc.)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.
• On the job training will be provided as required

Roles & Responsibilities：

• Site Leadership Teams Serve as a knowledgeable resource to the Site Leadership Teams (SLT’s) providing support and direction pertaining to IT-OT Foundational Infrastructure and ICS Security.

• Work with the ICS Security Team, OT admin to implement and support an IT-OT Foundational Infrastructure, integrated with Manufacturing Application Services

• Monitor Vulnerabilities and work with OT Admin / Asset Leaders to mitigate potential impacts and take corrective actions

• Improve the ability to resist, detect, respond to, and contain cyber attacks

• Work with technical resources, architects to plan and implement cyber security activities appropriate for all Purdue Levels (PCN Core, PCN DMZ, and PCN Services, PCN Access, within the Manufacturing Site)

• Perform compliance audits of security policies, standards, processes, procedures, guidelines and regulatory requirements

• Assist in IT/OT security and network setup and implementation

• Network Infrastructure and Firewall Services Support

• Provide Network Infrastructure and Firewall Services Support Provide

• Incident Management and Response

Competencies Required：

• Demonstrated ability to serve as a knowledgeable resource to the Site Leadership Team (SLT) providing support and direction

• Evidence of the ability to practice a high level of confidentiality

• Excellent organizational management skills

• Ability to work effectively across a diverse technical team

• Self-motivated requiring minimal supervision

• Demonstrated ability to work in a fast pace environment with many changes

• Effectively prioritize resources against workload demand

• Bachelor’s degree in a technical discipline (or equivalent work experience) : process control, automation; process safety;

• Minimum of 5 years experience in IT or OT within Manufacturing Industry

• Outstanding interpersonal relationship building and employee coaching and development skills

• Excellent written and spoken communication skills

• Knowledge of the functions, operation and mission of Manufacturing Operations

• Process Automation / Control Background in the Chemical Area

• Fundamental knowledge of various industrial network solution providers to include Cisco, Fortinet, Palo Alto, Tofino, Hirschman, Nozomi, Claroty, CyberX, and Armis.

• Fundamental knowledge of various technologies and their integration into an ICS enterprise

• Experience with multiple operational technologies such as Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) software, Distributed Control Systems (DCS), and Safety Instrumented Systems (SIS).

• Knowledge about functional Safety

• Knowledge in Remote Access, Remote Operation

Cloud Security Engineer is responsible:

• • Design, implement, and manage security measures for cloud environments.
• • Conduct regular security assessments and audits of cloud infrastructure.
• • Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• • Monitor and respond to security incidents, ensuring timely resolution.
• • Implement and maintain access controls, encryption, and other security features.
• • Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• • Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• • Bachelor’s degree in Computer Science, Information Security, or related field.
• • Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• • Excellent communication skills and the ability to collaborate with diverse teams.
• • Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• • Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• • Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• • Good knowledge in security
• • Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• • Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• • Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Cloud Security Engineer is responsible:

• • Design, implement, and manage security measures for cloud environments.
• • Conduct regular security assessments and audits of cloud infrastructure.
• • Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• • Monitor and respond to security incidents, ensuring timely resolution.
• • Implement and maintain access controls, encryption, and other security features.
• • Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• • Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• • Bachelor’s degree in Computer Science, Information Security, or related field.
• • Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• • Excellent communication skills and the ability to collaborate with diverse teams.
• • Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• • Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• • Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• • Good knowledge in security
• • Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• • Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• • Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

• Design, analysis and plan for Structural engineering works
• Design, analysis and plan for the protection of building and infrastructure from explosion and dynamic effects (e.g. blast loading)
• Liaise with other consultants, contractors & authorities from inception to completion of projects
• Responsible for timely submission of plans and reports to authorities and clients
• Manage projects to meet the time, cost and quality objectives
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in Civil & Structural Engineering or equivalent recognized by the Professional Engineers Board
• Candidates with knowledge of design and analysis of structures under dynamic loading, e.g. blast, shock and vibration would be advantageous
• Knowledge of Finite Element Modelling is an advantage

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors & authorities from inception to completion of projects
• Responsible for timely submission of plans and reports to authorities and clients
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in an engineering discipline, preferably recognised by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM
• Good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors & authorities from inception to completion of projects
• Responsible for timely submission of plans and reports to authorities and clients
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in an engineering discipline, preferably recognised by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM
• Good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges

Mandatory Skills

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

Job Summary:

Seeking a highly skilled and experienced z/OS Systems Programmer to be responsible for providing technical support for IBM's z/OS operating system, RACF, zSecure, MFA and subsystems including JES2, and USS.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments on Consumer, Industrial and Medical related products and systems.
• Evaluate and perform attack surface analysis on IoT products and respective network and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems.
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT technologies
• Collaboration across various teams to ensure comprehensive service delivery.
• Product conformity testing on any of the following requirements but not limited to:

1. IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, IMDA TS RG-SEC, etc.)
2. OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
3. Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc.)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.
• On the job training will be provided as required