Total 23 it analyst job vacancies in Legal / Public / Security category in SG - Tuas, Singapore

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Security Analyst for Governance, Risk, and Compliance (GRC). This is a 3-year contract position.

Key Responsibilities:

Governance

• Coordinate with internal and external audit teams and assist in audit planning.
• Help deliver security awareness programs for staff and manage security governance efforts.
• Stay updated on IT trends and recommend best practices to align with governance policies.
• Support cybersecurity projects to ensure alignment with security objectives.

Risk Management

• Assist in identifying and assessing IT risks and managing vulnerabilities and threats.
• Support risk management in cybersecurity projects by focusing on threats and vulnerabilities.
• Track and monitor audit remediation actions related to risk management.
• Measure the effectiveness of security awareness programs to minimize risks from human error.
  

Compliance

• Ensure compliance with internal standards (ISO 27001, ISO 22301) and external regulations.
• Facilitate responses to internal and external IT audits.
• Participate in audit engagements and report on audit issues and remediation.
• Provide ongoing compliance reporting to ensure timely remediation of audit findings.

Requirements:

Educational Qualification(s)

• A University Degree in Information Technology, Cybersecurity, Risk Management, or Compliance, or an equivalent qualification.
• Desirable Certifications: CISSP, CISM, CISA, CRISC, or other relevant certifications.

Relevant Experience

• 3-5 years of experience in Information Security, IT Risk Management, or Compliance, preferably in a higher education or similar environment.
• Experience with IT security audits and compliance reviews in regulated industries.
• Experience with vendor security assessments and managing third-party security risks.
• Experience in security awareness training and working in cross-functional teams.

Knowledge Required

• Security Frameworks: ISO 27001, CTM, NIST, CIS controls, and their application in operational environments.
• Regulatory Standards: Understanding of the Cybersecurity Bill, PDPA, and related security laws.
• Risk Management: Knowledge of risk assessments, mitigation strategies, and identifying threats to information systems.
• Audit Processes: Understanding security audit processes, compliance, and remediation.
• IT System: Good knowledge of IT infrastructure, application management, and cybersecurity practices.
• GRC Tools: Experience with Governance, Risk, and Compliance platforms and software is advantageous.

Skills and Competencies

• Analytical Skills: Ability to analyze security risks and make data-driven decisions.
• Communication Skills: Ability to convey technical security concepts to non-technical audiences and document findings.
• Problem-Solving: Strong problem-solving capabilities, particularly during security incidents.
• Attention to Detail: High focus on detail in audits and risk assessments.
• Project Management: Ability to manage multiple projects, prioritize tasks, and meet deadlines.
• Team Collaboration: Proven ability to work with cross-functional teams (IT, legal, compliance, vendors).

Other Personal Attributes

• Integrity and Confidentiality: High ethical standards and the ability to handle sensitive information.
• Proactivity: Ability to act independently and proactively address security challenges.
• Adaptability: Capable of adjusting to evolving security threats and changes in regulations.
• Resilience under Pressure: Ability to make sound decisions under pressure, particularly during audits or security incidents.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018942

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security Defensive Analyst to join our Cyber Intelligence and Response Centre (CIRC). The Global Cyber Security Department oversees a 24/7 follow-the-sun operation with counterparts in EMEA and NAFTA. This role focuses on providing an intelligence-driven approach towards incident response affecting any Mercedes-Benz assets and providing containtment, eradication and recovery of affected asssets involved in a cybersecurity incident in a timely and efficient manner.

Furthermore, the role requires the mitigation of identified threat, addresses identified vulnerabilities and also provide incident coordination towards internal stakeholders and external customers. The role is crucial in enabling Mercedes-Benz's business by ensuring agile security operations and maintaining a secure environment.

As a Cyber Security Defensive Analyst, you will be responsible for:

• Conducting technical analysis and triaging of triggering alerts ingested from Mercedes-Benz log sources to determine impact, scope of impact and determine corresponding remedial actions to mitigate, contain and/or otherwise limit the impact of the incident.
• Analysing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information.
• Working closely with the CIRC threat intelligence team to aid in the enhancement of contextual analysis and providing threat hunting support towards Open Source Intelligence (OSINT) related Indicators of Compromise (IoCs).
• Taking the lead in managing Mercedes-Benz end users and stakeholders in providing cybersecurity incidents updates and other related activities that might arise from time to time during the incident coordination, remediation and recovery
• Providing duty analyst support for the CIRC operations during weekends, utilizing a pre-defined duty roaster, ensuring the continued operations and monitoring of threats and triggering alerts 24 by 7, follow the sun model.
• Coordinating projects assigned by the Head of Global Defensive Operations towards the rollout, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.
• Providing technical inputs towards the virtual teams as assigned by the Head of Global Defensive Operations towards the operational directions, method determination and other related administrative support required from time to time.
• Provide guidance and technical support in mentoring and guiding newer members of the team in technical and incident management skills and processes.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study
• One or more of the following professional certification is beneficial: CISSP, GCIH or similar.
• Have good emotional intelligence and is a proven team player
• Rational and able to remain calm under pressure
• Fluency in the English Language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision
• Proficient understanding of cyber and IT security risk, threat and prevention measure
• Proficient understanding of networking and network security technologies.
• Good understanding of Forensic tools and methodolgy used in incident response
• Good knowledge of security standards and best practices
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills
• Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.
• Knowledge of Microsoft Office suite (Word, Excel, PowerPoint and Access)
• Knowledge of Splunk is beneficial

This position is based in Singapore and a valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. Candidate may be offered a lower job level based on candidate’s experience. We regret to inform you that only shortlisted candidates will be notified.

Our Client is a telecommunications service provider in Singapore. With the expansion of the team, they are looking for a L1 Security Analyst to join the team.

Responsibilities: -

·       24 x 7 triage, short-turn analysis of real-time security alerts & generate tickets, or escalation to L2 Security Analysts that are not in the Automation Runbook.

·       24 x 7 escalation to resolver upon receiving automated generated incident tickets on the health of SOCaS infrastructure, IT/OT managed security devices, or from the website defacement restorer activation alert.

·       24 x 7 manage problems till closure which include:

o   Ensure that Service Level Agreements are met.

o   Liaising with customers with regards to information security incidents

o   Provision and performance of remedial actions to enhance customers' network security posture

·       Min 1 year working experience in IT Infrastructure Operation and/or Support.

·       Willing to work with 24/7 shift pattern that includes weekend work.

·       Sound fundamental knowledge on Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10 and web servers (e.g. Apache, IIS, Nginx, etc.).

·       Understanding of firewalls, endpoint detection and response (EDR), IDS/IPS, WAF, etc.

Desired qualifications:

·       Bachelor’s degree / Polytechnic Diploma in Computer Science, Information Technology or Information System.

·       Experience in scripting (e.g. shell scripting, Macro, PHP, Perl, Java, etc.) and/or Regular Expression.

·       Experience with TCP/IP packet analysis / network debugging with tcp dump or similar.

·       Experience with web security concepts and technologies such as web application firewall, proxy.

·       Experience general security technologies, processes, and concepts.

·       Industry recognized security certifications (GCIA/GCIH, CISSP, CISA, CEH, etc.).

·       Experience writing/decoding exploit, vulnerability, and attack detection signatures.

·       Experience working with a SOC team is an advantage.

- Monthly allowances and end-of-contract bonus

• Western Digital’s Global Physical Security Organization is seeking a highly talented and motivated individual to join the team. Our business unit is a 24/7 model where you may be required to work outside of normal business hours to address critical operational and technology issues. You must be able to drive complex technical solutions that provide scalability, efficiency, and effectiveness. This position is primarily responsible for the APAC regions physical security systems program, but the role will also provide guidance and support for our locations globally. 

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Agile in addressing troubleshooting issues and service requests
• Responsible for knowing status, locations of, quantities of, vendor, model, make and technical specifications of each system component, including connectivity requirements.
• Monitor performance of the system, highlight any issues, follow up on solution to resolution:
  • Initiate purchase order, service call, work order, etc., as necessary.
  • Verify that work was completed as requested.
• Provide training and guidance on security systems; create and maintain operator instructions, procedures, security system drawing, and related documentation as appropriate.
• Partner and drive physical security operations and systems technology with internal business units like IT, Real Estate, Legal, EH&S, Finance, Procurement when required
• Strategically improve system end users experience on a variety of applications
• Define physical security systems and technology roadmaps that drive overall program success
• Skilled in presenting solutions at a high level to internal key stakeholders
• Integrate and perform case studies, conduct research into product requirements to improve security systems and technology
• Familiar with internal tools, tracking and reviewing requests such as ServiceNow, Smartsheet, etc.
• Assist in deployment of enterprise level access control systems, video management systems, visitor management systems, etc.
• Work with multiple third-party vendors and SOCs to help maintain the global standard in security systems and technology
• Familiar with Windows, Linux and SQL, Networking, and IoT devices
• You will work to integrate a variety of security devices into existing network infrastructure including but not limited to: PSIM, C-Cure, Lenel, AMAG, Milestone, AXIS, ISOS, SWN, etc.
• Participate, oversee and drive project meetings and execute end-to-end, ensuring on-time delivery
• Configuring and maintaining APAC Security Systems, including hardware, system software, and security applications.
• Diagnosing and resolving hardware, software, networking, and system issues when they arise.
• Monitoring system performance to ensure everything runs smoothly and securely.
• Researching and recommending new approaches or system to improve the security system infrastructure. Enhance the current security model.
• Providing technical support when requested or be available at the site for further assistance.
• Works with users to identify system requirements; develops processing procedures and systems modifications to meet these specifications.
• Deploy, maintain, and troubleshoot core business applications, including application servers, associated hardware, endpoints, and databases.
• Document any processes, which employees need to follow in order to successfully work within our security systems

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within Identity and Access Management & PKI track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building within Identity and Access Management & PKI technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in Identity and Access Management & PKI cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

We’re searching for a Lead Consultant, IT Security to be part of our diverse team of talents here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Manage team of cyber day 2 engineering resources within specialization track providing guidance, mentorship, performance evaluations.
• Involve in project work to deliver security service which require deeper level of expertise and to drive resolution of operational issue which are escalated to ensure satisfactory closure.
• Responsible for tracking the progress of building technical competencies, develop training and growth plans within specialization track.
• Involve in the hiring process for cyber day 2 to expand the existing portfolio of services (e.g. network security, endpoint security, security analytics etc).
• Involve in the presale activities for cyber day 2, including defining the scope of cyber day 2 services, sizing the effort to support the security technologies deployed in client environment, determine what can be supported internally and what can be delivered via partnership with other parties in NCS or with sub-contractors and process standardization & improvement.
• Assist in improving the quality of service for cyber day 2 team.
• To be one of the Subject Matter Expert (or trusted technical advisor) in cyber technologies during presale and day 2 phases.
• Mentoring engineers or interns to ensure they can assist the team in executing operational tasks for projects.
• Accountable for various tasks above and provide regular update to the Practice Lead

What we seek to accomplish together:

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• Conduct security risk management exercise
• Conduct table-top exercises
• Conduct vulnerability assessment, coordinate penetration tests activities
• Conduct information security awareness training
• Responsible for the development and management of customer’s security incident response plan.
• Lead and support customer in the matters of security incident resolution and response.
• Be the point-of-contact/customer liaison to assist and advise customer for ICT security related matters
• Project managed the activities and deliverables during the implementation phase.

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Senior IT Security Analyst (3-year contract).

Key Responsibilities:

Incident Response Leadership

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and maintain incident response playbooks and procedures.
• Coordinate with internal, external stakeholders, and vendors during incidents.
• Conduct post-incident reviews and report findings to management.

Monitoring and Detection

• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Perform threat hunting and proactive security assessments.
• Collaborate with IT teams to deploy and optimize security solutions.

AI and Automation

• Integrate AI and automation technologies to enhance security operations.
• Develop automated workflows and scripts for incident response and routine tasks using SOAR.
• Leverage machine learning and AI-driven tools for threat detection and analysis.
• Stay updated with advancements in AI and evaluate their applicability to security operations.
• Apply system design thinking to security solutions.

Threat Statistics and Reporting

• Analyze and compile statistics on threats relevant to the Institute.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.

Innovation and Continuous Improvement

• Evaluate and integrate new technologies to enhance security operations.
• Foster a culture of continuous improvement within the team.
• Encourage continuous learning and professional development.

Forensics Capability Development

• Enhance the team's digital forensics capabilities.
• Develop forensic investigation procedures and protocols.
• Train team members in forensic tools and methodologies.
• Oversee the collection, preservation, and analysis of digital evidence.
• Collaborate with legal and compliance teams to ensure regulatory alignment.
• Conduct regular drills and simulations for forensic readiness.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certification(s) in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Minimum of 8 years of progressive experience in IT security, with a focus on Incident response
• Minimum of 4 years of experience in a security operations center, with proven leadership capabilities.
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proven experience in managing incident response and performing threat hunting
• Proven experience in integrating AI and automation in IT Security using Security Orchestration Automated Response (SOAR) technologies.
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF) administration, virtualization, and cloud technologies.
• Experience in monitoring and administering host-based intrusion detection systems.
• Knowledge and experience in Linux/Windows/Database technologies preferred.
• Strong knowledge of industry standards and information security policy frameworks.
• Hands-on experience with scripting and automation tools to enhance security operations.
• Ability to conduct gap analysis of current processes and identify opportunities for improvement.
• Evaluate internal and external environments for threats related to Information Security and act as a subject matter expert to ensure these are properly addressed and controlled.
• Continuously improve event correlation and alerting processes and use cases to detect potential incidents.
• Automate manual processes to enhance security incident response.
• Experience with network security assessment tools.
• Excellent leadership and team management skills, with the ability to inspire and motivate a team.
• Strong communication skills, with the ability to effectively interact with stakeholders at all levels, including University administration.
• Demonstrated ability to drive strategic initiatives and lead a team through change.
• Exceptional problem-solving skills and the ability to think critically under pressure.
• Ability to interview stakeholders to define and document business requirements.
• Provide advice and guidance on response action plans for information risk events and incidents based on incident type and severity.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018131

You will be part of a well-established international team in Information Security focused on Cloud Security Architecture, Security Tooling Engineering and Automation.  

Your role will contribute to the success of the team and the Company. 

Your key tasks

• Support Cloud & Infrastructure Organization by reviewing and analysing Network, Systems, and Application architectures to enforce and validate Security requirements.
• Leads Threat Model exercises for new services/major changes.
• Actively Collaborate with your team members to support them on daily operations, including: 
  • Review of IT infrastructure solution designs to ensure compliance with policies and standards. 
  • Operational implementation, Automation, and ownership of Security Tools 
  • Assist in deploying automation of operational processes and procedures, identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design. 
• Support and maintain the APAC’s Information Security Management System (ISMS) to assure continuous compliance with regulations, laws, and contractual obligations by adopting and deploying industry and market standards and accepted best practices.
• Be on routine standby to support the team.

What we seek to accomplish together:

• and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• conduct security risk management exercise
• manage vulnerability assessment
• conduct information security awareness training
• for the development and management of customer’s security response plan. To lead and support customer in the matters of security incident resolution and response.
• of contact to assist and advise customer for ICT security related matters

Job Responsibilities

• Develop and maintain all documentation on security policies, standards and controls and enforce compliance with policies and procedures in entire organisation
• Develop, implement and monitor reporting mechanisms for governance, security and risk practices to support compliance and highlight areas of exposure
• Keep abreast of current advances in all areas of information technology concerning vulnerabilities, security breaches or malicious attacks, and maintain up-to-date knowledge of IT security industry
• Work with internal units to conduct regular reviews and audit of IT systems and applications to ensure statutory compliance
• Develops, tracks, and reports on Key Risk Indicators (KRIs) for information technology security risk assessment progress
• Support data protection under Personal Data Protection requirements
• Develop and maintain business continuity plan and IT disaster recovery plan. Conduct annual business continuity and IT Disaster recovery testing
• Conduct IT risk assessment, review and reporting of key IT risk exposures and metrics, develop IT risk management framework and remediation plans to improve security posture with IT security best practices
• Assist in the execution for enterprise information and security governance and architecture roadmap
• Identify potential threats or attempted breaches to minimise vulnerabilities and risks in operating environment
• Design, develop and conduct cybersecurity and personal data protection act awareness workshops.
• Execute, manage, enhance and implement security operational processes to comply with IT regulatory and corporate requirements
• Responsible to ensure information security agreement is established for any required IT system/service contracts
• Perform incident and security management through Identify, Protect, Detect, Respond and Recover functions
• Any other related tasks assigned by supervisor

Job Requirements

• Bachelor’s Degree in Computer Science / Cyber Security / Information Technology or equivalent
• Minimum 3 years’ experience in IT audit, IT security or Data protection
• Possess relevant IT Governance, security and project management certifications (eg COBIT, CISSP, CISA, CISM, CITPM, PMP) will be advantageous
• Strong understanding of key IT security concepts such as access control, confidential data, encryption, business continuity, info-sec scans, and vendor apps
• Strong knowledge of IT organisation business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management)
• Good understanding of risk management functions, including IT audit, cyber security, and/or IT compliance.
• Experience in or knowledge of 3rd party / vendor management lifecycle
• Good understanding of Singapore Personal Data Protection Act (PDPA)
• Strong oral and written communication skills to work effectively with staff at all levels of the organisation

Note: All new hires will be offered a two-year contract in the first instance. Contract renewal and emplacement on permanent appointment will be subject to continuous good performance.

Responsibilities :

● Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.

● Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.

● Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.

● Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.

● Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.

● Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.

● Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.

● Developing and implementing security policies and procedures that ensure the organization’s data

and systems are protected against cyber threats.

● Conduct regular vulnerability assessments and penetration testing to identify potential security

weaknesses and risks to make improvements in the organization’s security.

● Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

● Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.

● Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

● Bachelor’s degree in computer science, information technology, or equivalent experience.

● 5+ Years of experience in a cyber or information security management role.

● Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).

● Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.

● Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.

● Demonstrated understanding of business processes, IT risk management, and related standards.

● Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.

● Excellent problem-solving skills and the ability to think critically under pressure.

● Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.

● Proven track record of staying current with evolving cybersecurity threats and best practices.

● Exceptional planning and organizational skills, and excellent written and oral communication.

● Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

● Professional information security certification preferred, such as:

○ CompTIA Security+

○ Certified Information Systems Security Professional (CISSP)

○ Certified Information Systems Auditor (CISA)

○ Certified Information Security Manager (CISM)

Location: East area

HOW TO APPLY :

Interested candidates, please submit your resume by clicking on “Apply Now” or aliceyap(a)hkmsvs.com

All applications will be treated in the strictest confidence and only shortlisted candidates will be notified

Yap Lay Choo

EA Licence No. 03C5391 | Registration No. R1987101

Technical Specifications:

• Good in providing solution by investigating and post-mortem analysis to resolve security violations.
• Experience in Information Security
• CISSP or Global Information Assurance Certification (GIAC) or equivalent.
• Performed asset and network discovery activities to ensure full coverage of vulnerability discovery.
• Good Experience in system and application vulnerability testing for Web servers, DB servers, Network devices Etc. using Nessus or Nexpose or other vulnerability Manager Tools.
• Good in monitoring security vulnerability information from vendors and third parties applications.
• Good in implementing policy audit for servers and workstations
• Prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets.
• Research threats and vulnerabilities and, where appropriate, take action to mitigate threats and remediate vulnerabilities.
• In-depth knowledge of security systems and applications and a strong foundation in core area of security (e.g. OS hardening, Active Directory, DLP, network and perimeter).
• Good experience in configuring hardening guidelines and helped in maintaining baseline standards.
• Good experience in configuring CIS benchmarks on (Servers, Desktop & Network Devices)
• Configuring and monitoring of operational security infrastructure
• Good exposure to industry standards such as ISO 27001, PCI-DSS, with Audit experience in large enterprise/Service provider environment.
• Have good knowledge in web application security testing.
• Have a very good understanding about life cycle of Information Security Audit / VA
• Recommend, scheduled the security patches and other measures required in the event of a security breach.
• Monitor system logs, SIEM tools and network traffic for unusual or suspicious activity. Interpret such activity and make recommendations for resolution.
• Experienced in investigate and resolve security violations by providing post-mortem analysis to illuminate the issues and possible solutions.
• Good knowledge of Application exploitations and configuring alerts on SIEM
• Worked on installation, configuration management of security systems and applications, includes policy assessment, compliance tools, network security appliances and host-based security systems.
• ·Worked on monthly management reports, dashboards, documentation for security systems and procedures.
• Good in reporting unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
• Good in training, mentoring and guiding for team members to use of security tools and resolve issues.
• Good in evaluating, implementing information security solutions to protect against potential threats for security violations
• Worked on incident response and architecture review processes.
• Managed and supported Endpoint Security/ ePolicy Orchestrator, Virus scan Enterprise, Data Loss Prevention, Host Intrusion Prevention and Endpoint Encryption.
• Have good knowledge on Data loss prevention and Endpoint Encryption tools.

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a video tour of our global network of 24/7 Security Operations Centers (SOCs).

Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs).

We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis.

Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches.

While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.

Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within.

Summary:

The Offsite Security Analysts are a key component of our SOC-as-a-Service operations.  They are on the front line receiving and triaging alerts from our clients who require dedicated support.  Our Security Analysts have strong network and security knowledge, are strong problem solvers, and work under time pressure to quickly analyze and report security threats in our client’s networks.

The Offsite Security Analyst will be reporting to the Offsite Lead, he/she will be working closely with the client’s cybersecurity threat operation management team.

•  Perform the security tasks for PCIDSS Compliance and other Aspire Lifestyles-related compliance required for internal and external audits (ISO27001, SOC2 Type II, etc.) and ensure successful completion.
• Provide technical consultation and support on the resolution of the findings on the security tests done.
• Assist compliance officers/managers in preparing and timely submission of security evidence for audits (remote and onsite) and ensure timely and successful closure of assessments.
• Provide security support for client assurance (evidence, questionnaire and audits).
• Perform or coordinate PCI DSS scans and penetration tests including tracking of findings remediation, required for PCI DSS Compliance on Aspire in scope components and coordinate with systems, network, local IT, applications and relevant departments on timely resolution of findings.

• Application vulnerability scans – Perform or coordinate dynamic security scan of internal and external web applications. The tests to be of the following types:
    a. Dynamic Web Application Scans
    b. Patch Management - Coordinate and maintain patch tracking for servers/devices in scope for PCI DSS and ISO27001
    c. Vulnerability tracking - Track and follow-up with Stakeholders to fix the reported vulnerabilities and share Dashboard with Compliance team on monthly basis
    e. Highlight and report deviations on the activities or high-risk audit areas.
• Perform or coordinate internal vulnerability assessments required to manage PCIDSS compliance on networks, systems and security related systems. The tests to be of the following types:
    a. Configuration Scan,
    b. Patch Scan, and
    c. Vulnerability Scan
• Operate an effective Log Management, Host Based Intrusion Detection System across geographies and support the incident management and change management work and maintain PCIDSS compliance, SOC 2 Type II Compliance and ISO 27001 Compliance.
• Maintain compliance tracks and ensure HIPS system, compliance system, etc. are maintained up to date for certifications (PCIDSS, SOC 2 Type II, ISO/IEC 27001 Certification audits).
• Perform troubleshooting on SIEM, FIM and HIPS products and seek support from AV support team by creating and following up on tickets.
• Ensure the SIEM, HIPS, FIM, MSS and other technologies implemented for PCIDSS compliance runs optimally with no negative impact on systems.
• Prepare reports from the technical (SIEM, MSS, HIPS, FIM) and non-technical systems (excel reports) the support the client audit requests, PCIDSS audits, ISO27001 audits, SOC 2 Type II etc. and maintain the dashboards.
• Firewall Review - Perform Firewall review using automated tools and maintain PCI DSS requirement.
• Access review - Perform periodic access reviews of security solutions.
• Configuration review of Security devices - Periodic review of security devices as per MSS guidelines
• Segmentation testing - Perform or coordinate segmentation test for the PCI in scope systems.
• Any other delegated tasks reasonably considered to be within the scope of the post and as agreed with managers.

• At least 2+ years of working experience in a cybersecurity function such as Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence or Vulnerability Management.  Work with SIEM technologies receiving and triaging alerts from various log sources preferred.
• Network security or IT certifications are advantageous.
• Knowledge of network concepts, network protocols, and network security methodologies.
• Knowledge of network technologies in one or more areas such as perimeter firewalls, demilitarized network zones (DMZ), encryption, encoding, network virtualization or wireless networks.
• Knowledge of enterprise IT networks, cybersecurity threats and vulnerabilities at the network layer.
• Knowledge of network traffic analysis methods such as packet analysis and analyzing network flow data.
• Continuous learner who has a passion for defensive cybersecurity; ability to utilize resources at your disposal in an efficient manner; advanced problem-solving skills when encountering emerging security attack scenarios
• Demonstrated communication skills including written documentation of troubleshooting and required responses
• Proven ability to work in a fast-paced environment with strict SLAs for response time

• Opportunity to work in a progressive organization with structured training and roadmap for success

• Lunches and fun employee activities!
• Experience in one of the hottest IT industries today

Proficio is an EOE employer.

Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work, offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.

Job Responsibilities :

• Implement security detection and monitoring processes and use cases
• Monitor and respond to security alerts and incidents
• Partner with internal and external stakeholders in the containment of and response to breaches, including threat hunting
• Work with internal and external stakeholders on the remediation of security vulnerabilities as part of the vulnerability scanning, bug bounty management and penetration testing effort
• Conduct vulnerability scanning across multiple platforms and architectures
• Follow through on all remediations to ensure closure with SLA
• Assist in the implementation of Infosec initiatives
• Develop automations to further improve the efficiency of security operations
• Perform any other tasks assigned by line manager

Pre-Requisites :

• Diploma or Degree in Computer Science, IT, Cyber Security or related field
• Minimum 4 years of hands-on experience in the information security operations domain
• Familiar with security tools (e.g., CSPM, SIEM, Privileged Access Management)
• Good knowledge of AWS or Azure Cloud platform, Active Directory and Linux
• Possess at least CISSP or equivalent information security certifications
• Ability to develop solutions and use tools to help discover and mitigate security vulnerabilities
• Experience in one or more scripting languages, e.g., Python, Java
• Good verbal/written communications skills
• Positive mindset, open-minded and adaptable for a change fast-paced environment
• A strong multi-tasker with a keen eye for detail

Good-to-have(s):

• DevSecOps (CI/CD) knowledge
• Experience in an end-user environment

Are you game?

We is seeking a talented Cyber Security Analyst based in Singapore. As a Cyber Security Analyst, you will play a key role in ensuring the security and integrity of our organization's data and systems.

Responsibilities:

• Monitor, detect, and respond to cyber threats and security incidents,
• Conduct vulnerability assessments and penetration testing to identify potential weaknesses in our systems,
• Develop and implement security measures and best practices to protect against cyber attacks,
• Stay up-to-date with the latest cyber security trends and technologies,
• Collaborate with cross-functional teams to identify security risks and implement appropriate solutions,
• Provide training and guidance to employees on cyber security awareness and best practices.

Requirements:

• Bachelor's degree in Computer Science, Information Security, or a related field,
• Proven experience in cyber security or a related role,
• Strong knowledge of security protocols and tools,
• Ability to analyze and interpret complex data and make informed decisions,
• Excellent problem-solving and communication skills,
• Relevant certifications (e.g. CISSP, CISM) are preferred but not required.

About Us

Zone IT Solutions is an Australia-based Recruitment Company. We specialise in Digital, ERP and larger IT Services. We offer flexible, efficient and collaborative solutions to any organisation that requires IT, experts. Our agile, agnostic and flexible solutions will help you source the IT Expertise you need. Our delivery Offices are in Melbourne, Sydney, India, USA and UK. If you are looking for new opportunities, your profile at [email protected] or contact us at +61434189909

Also, follow our LinkedIn page for new job opportunities and more.

Zone IT Solutions is an equal-opportunity employer, and our recruitment process focuses on essential skills and abilities.

Control Risks' Embedded Consulting practice is growing in Singapore and we have a great opportunity for a Senior Intelligence Analyst to join us as part of a dedicated team, embedded within a high profile, international technology company.

The Senior Security Intelligence Analyst will be a key member of the Global Security Intelligence team as they collect, curate, and disseminate current and forecasted risk intelligence in a timely manner to partners and stakeholders. This position will also work to edit and compile written analysis by the Junior Analysts.

Responsibilities:

• Monitor and analyse geopolitical and global events identify and assess threats the client's specific global operations, assets, and personnel.
• Provide major vent safety and security assessment, forecast, and vulnerability reports.
• Oversee production of analysis by the Junior Analysts on the team.
• Conduct site and travel vulnerability assessments to ensure the safety of the client's employees and locations.
• Support location-specific intelligence, including active and archived alerts; city and country intelligence; and interactive maps.
• Drafting comprehensive, well-researched, and articulate analysis products providing tailored research for client-specific needs.
• Define priorities for in-depth analysis of selected locations relevant to the client's global interests.
• Lead production of specific briefings or presentations.
• Other responsibilities may develop with programme growth.

• A bachelor's degree in history, political science, international relations, intelligence analysis, or a related discipline.
• 5-7 years of experience in related global risk and threat analysis experience required.
• Experience in collection and analytical methodologies.
• Experience in editing and compiling written analysis.
• Keen understanding of social media monitoring techniques.
• Proficiency in client workspace product suite; the ability to present information in a graphic format and concise reports.
• Excellent research, analytical, writing, and verbal presentation skills.
• Ability to quickly adapt to the external environment and organization.
• A strong customer service focus and ability to build and maintain trusting relationships.
• Ability to be a positive and effective team member.
• Ability to effectively manage multiple projects simultaneously and prioritize.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

Control Risks' Embedded Consulting practice is growing in Singapore and we have a great opportunity for a Junior Intelligence Analyst to join us as part of a dedicated team, embedded within a high profile, international technology company.

The Junior Security Intelligence Analyst will help collect, curate, and disseminate current and forecasted risk intelligence in a timely manner to partners and stakeholders. Analysts provide strategic foresight and analysis on security and operational concerns that may pose a safety risk to the client, its employees, or community.

Responsibilities:

• Monitor and analyse geopolitical and global events identify and assess threats the client's specific global operations, assets, and personnel.
• Provide major event safety and security assessment, forecast, and vulnerability reports.
• Conduct site and travel vulnerability assessments to ensure the safety of the client's employees and locations.
• Support location-specific intelligence, including active and archived alerts; city and country intelligence; and interactive maps.
• Drafting comprehensive, well-researched, and articulate analysis products providing tailored research for client-specific needs.
• Other responsibilities may develop with programme growth.

• A bachelor’s degree in history, political science, international relations, intelligence analysis, or a related discipline.
• 0-2 years of experience in related global risk and threat analysis experience required.
• Experience in collection and analytical methodologies.
• Keen understanding of social media monitoring techniques.
• Proficiency in client workspace product suite; the ability to present information in a graphic format and concise reports.
• Excellent research, analytical, writing, and verbal presentation skills.
• Ability to quickly adapt to the external environment and organization.
• A strong customer service focus and ability to build and maintain trusting relationships.
• Ability to be a positive and effective team member.
• Ability to effectively manage multiple projects simultaneously and prioritize.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

Rapsodo Inc. is a sports analytics company that uses computer vision and machine learning to help all athletes maximize their performance. Our proprietary technology applications range from helping PGA Tour golfers optimize their launch conditions to allowing MLB pitchers to increase the efficiency of their breaking balls. Current partners include all 30 MLB teams, MLB, USA Baseball, Golf Digest, PGA of America, and over 1000 NCAA athletic departments.

Our IT team assist clients to address their concerns around Confidentiality, Integrity, Availability and Privacy of their technology.

As an IT Security Intern at Rapsodo, you will have a holistic view of how Technology and Business Integrate, and responsible for a wide range of technologies not limited to systems administration, helpdesk, telephony administration, laptop/desktop computer build-up/replacement etc.

Roles & Responsibilities

·       Be the 1st level support for inbound email and phone based technical support for on-site and remote employees

·       Assist with setting up and configuration of laptop and desktop computers (OS Installations, Software Installs, etc.)

·       Assist the team with keeping the hardware inventory up to date

·       Develop and update Support Documentation as well as research information for incomplete documents

·       Assist the team with developing an IT Security Handbook that includes log reviews, firewall attestation, etc.

·       Assist the team with mapping and consolidation of existing IT Security tasks to the requirements of a quality IT Security Programme

·       Assist with reviewing and analysing security vulnerabilities to identify false positives

·       Assist with conducting server/network/middleware security configuration assessments

·       Assist with preparing reports on identified security vulnerabilities and possible recommendations to remediate vulnerabilities

·       Work cross-regionally between the Rapsodo Singapore, US, Turkey & Japan offices

Experience

·       Absolute professionalism and discretion required due to exposure to confidential information

·       Pro-active, organized, and meticulous

·       Able to work independently in a fast-paced environment

·       Strong aptitude to learn and contribute

·       Possess strong analytical, problem solving, and interpersonal skills

·       Excellent written and oral communication skills to present ideas and results to technical and non-technical audiences

·      Being handy with gadgets and having experience building your own PC is a plus

Qualification

·       Diploma in Information Technology, Cyber Security, or any related discipline