Total 21 Others/Any lead buyer job vacancies in Legal / Public / Security category in Singapore

Join a team where you can play a crucial role in shaping the future of a world-renowned company and make a direct and meaningful impact in a space designed for top performers.

As a Senior Lead Security Engineer at JPMorgan Chase within the Cybersecurity & Tech Controls, you are an integral part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

Job responsibilities

• Executes creative security solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions and break down technical problems

• Develops secure and high-quality production code and reviews and debugs code written by others.

• Implement complex business logic in languages such as Python and scripting languages like Bash.

• Executes on key deliverables in the security engineering space, designs and develops production deployments with the ability to think beyond routine or conventional approaches in order to deliver technology solutions for key stakeholders.

• Experienced with systems engineering, systems integrations, and systems administration.

• Has good working knowledge of Windows and Linux systems internals Defines and implements infrastructure as Code (IaC) and automation tooling to deploy third party security software in an enterprise environment.

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science or related disciplines

• Formal training or certification on software engineering concepts and 5+ years applied experience.

• Commanding knowledge of a programming/scripting language such as Python and scripting languages like Bash for automation, integration, and other tasks.

• Proficient in maintaining and managing Splunk application deployed in AWS ensuring high availability, performance and security.

• Extensive experience using Terraform to deploy , manage and scale infrastructure with AWS environment.

• Proficient in all aspects of the Software Development Life Cycle.

• Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.

Preferred qualifications, capabilities, and skills

• Experience effectively communicating with senior business leaders

• In-depth knowledge of the financial services industry and their IT systems

• Experience working within a large-scale or global enterprise

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=e0d8ae6d80a0fab8d7e6aef8defbd100

We are looking for Cloud Security Lead to pioneer in developing, implementing, and managing cloud security solutions to safeguard the organization's data and infrastructure. This role entails collaborating with cross-functional teams to ensure secure cloud environments while addressing emerging security challenges.

Details

• Working location: Central
• Working hour: 9am to 6pm / 10am to 7pm (Flexible arrangement), hybrid work arrangement
• Salary package: Up to 13K + AWS + Attractive Bonus Scheme
• Others benefits: Group insurance, above industries standard leave benefits, good employee welfare, annual dinners, cruise events, overseas trip, learning & development etc.

Responsibilities:

• Develop and execute cloud security strategies and roadmaps, provide leadership and direction to the cloud security team, aligning efforts with organizational objectives.
• Promote security best practices and foster a culture of security awareness across the organization.
• Design and deploy secure cloud architectures and solutions, evaluate and recommend security tools and technologies to enhance cloud security.
• Develop and manage IAM strategies to ensure secure and compliant access to cloud resources.
• Implement and enforce IAM policies, procedures, and controls for managing identities, roles, and permissions.
• Establish, enforce, and monitor cloud security policies and procedures.
• Ensure adherence to industry standards, regulations, and best practices (e.g., GDPR, HIPAA, NIST).
• Conduct regular security audits and risk assessments to identify and mitigate potential risks.
• Lead incident response efforts for cloud security incidents.
• Conduct root cause analysis and implement corrective actions to prevent future incidents.
• Partner with DevOps, IT, and development teams to integrate security into all stages of the software development lifecycle (SDLC).
• Collaborate with external vendors and partners to ensure robust security solutions.
• Regularly analyze security logs, alerts, and reports to detect and respond to threats.
• Prepare and present security metrics and reports to senior management.

Requirements

• Min 7years of experience in cloud security, with expertise in AWS, Azure, or Google Cloud Platform and min 2years in lead position.
• Strong understanding of cloud security & cloud infrastructure architectures, frameworks, and best practices.
• Relevant certifications such as OSCP, CISSP, CCSP, or AWS Certified Security – Specialty is a plus point.
• Knowledge of container security, Kubernetes, and microservices architecture.
• Hands-on experience with cloud security tools and services (e.g., AWS Security Hub, Azure Security Center).
• Proficient in security technologies such as IAM, encryption, SIEM, IDS/IPS, and vulnerability management.
• Familiarity with regulatory and compliance frameworks (e.g., ISO 27001, SOC 2).

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data not required at this application stage.
• To withdraw consent, email [email protected].

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

• Low Yong Wei (Wyman) - R1550983
• ScienTec Consulting Pte Ltd - 11C5781

• Experience in an international setting with high adaptability
• In depth understanding of China’s laws (GRC)
• People Manager role with a strong track record in leadership

about the company
Our client is a multinational company and they are a prominent player in the industry, renowned for its extensive brand portfolio, commitment to quality, and dedication to sustainability and social responsibility.

about the job

• Develop, govern and enforce cybersecurity policies, standards, and guidelines to ensure robust security practices.
• Lead evaluations of security and privacy risks, coordinating swift responses to suspected cyber incidents/events.
• Monitor cybersecurity risks and report findings to relevant technical and business executive committees.
• Manage the Information Security GRC team, focusing on all cybersecurity aspects within the designated region, domains, and tech portfolio.
• Proactively drive risk reduction initiatives within the defined scope.
• Ensure effective security measures within the scope of assigned regions, domains, and technology areas.
• Collaborate on cyber strategy and roadmap creation for long-term security goals.
• Drive compliance with internal standards and regional cybersecurity regulations, both internally and externally.

skills and experience required
Minimum of 10 years' experience in Governance, Risk, and Compliance (GRC), with a solid understanding of cybersecurity frameworks such as ISO 27001, SOC 2, MITRE ATTACK, and NIST, as well as expertise in penetration testing and security audits.

Cloud Security and consulting background would be high preferred.

Skilled in managing incident response, evaluating cybersecurity risks, and conducting vulnerability assessments.

Proven ability to lead a team, with a track record of managing at least 2-3 direct reports.

Experience working in a regional setting, with the ability to navigate diverse regulatory environments and cultural considerations.

Whats on offer
The permanent opportunity for an Information Security & Risk Governance Lead (GRC), will pay a salary range of $15,000 - $ 17,000 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

Role Description

This is a full-time on-site role for a SOC Team Lead located in Singapore. As a SOC Team Lead, you will be responsible to:

• Plan monthly duty roster for site team.
• Cover shift function if there are any shift resources are absent.
• Generate report dashboarding for technical analysis.
• Proficient in Microsoft excel/Power BI.
• Will run operation and work the SOP to ensure the 24X7 Security operations support services operate effectively.
• Responsible for site monthly report and documentations submissions.
• Onboarding/off boarding of manpower resources (1 month).
• Submit monthly timesheet and monthly service report as part of billing documentation timely.
• Work with Main Contractor to ensure security devices or apps are patched and firmware versions are upgraded in accordance with IM8 requirements.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

Joining Arup

Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.

The Security Technology lead will provide direction and leadership to the specialist electronic security engineering and consultancy services (including integrated electronic security system such as video surveillance, electronic access control, intrusion detection etc.) in Singapore and South-East Asia. Arup’s Singapore Resilience Security & Risk (RSR) team is providing high end advisory services in Singapore and South-East Asia. The team currently has personnel with professional qualifications and skills in Security Risk & Strategy, Security Technology, Protective Design and Cyber Security.

The Opportunity

• Drive the overall performance and growth of the Security Technology team as part of the RSR leadership cohort.
• You will project manage a range of security projects, either direct security commissions or as part of larger multi-disciplinary projects. Here you will be responsible for the client interaction, project financial matters, quality assurance, delivery and resourcing.
• Undertake, manage and deliver the security engineering (electronic and protective) design for a range of facilities and/or for a variety of projects through all stages of design from concept, detailed and tender design to construction, and within established quality, budget and project expectations.
• Proactively approach clients, identify and develop business opportunities for RSR and other Arup disciplines. This includes planning and implementation of new market offers.
• You will develop and implement long term strategic plans to grow the RSR business in Singapore and across the region.

At Arup, you belong to an extraordinary collective – in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas.
You will have the opportunity do socially useful work that has meaning – to Arup, to your career, to our members and to the clients and communities we serve.

Is this role right for you?

• Recognised relevant tertiary qualifications in electrical or electronic engineering or IT or similar area.
• At least 10 years of relevant industry experience in electronic security system design as consultant, manufacturer/distributor, end-user and/or security systems integrator.
• In depth understanding of latest security technologies (electronic and physical security).
• Membership of relevant professional institutions/professional peer bodies or significant credit towards eligibility for membership.
• Proven working knowledge of relevant legislation, regulations, codes of practice, and guidelines.

What we offer you

At Arup, we care about each member’s success, so we can grow together.
Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair, and equitable pay, we offer a career in which all of our members can belong, grow and thrive – through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.
We are owned in trust on behalf of our members, giving us the freedom, with personal responsibility, to set our own direction and choose work that aligns with our purpose and adds to Arup’s legacy. Our members collaborate on ambitious projects to deliver remarkable outcomes for our clients and communities. Profit Share is a key part of our reward, enabling eligible members to share in the results of our collective efforts.

Please see a list of Arup’s Singapore benefits below:

• Hybrid working policy & flexible working hours
• 13th month bonus
• Birthday leave
• Purchase Additional leave of up to 20 days (permanent employees)
• Paid parental leave for birth mothers 16 weeks & new parents (excluding birth mothers) 4 weeks
• Marriage leave (3 days)
• Examination leave (2 days)
• Family care leave
• Paid Annual subscription to relevant Professional association
• Reimbursement of Professional Engineers application and examination Fees
• International mobility opportunities
• QP allowance
• Site Allowance
• Work related travel insurance
• Dental expense cover
• Bike Loans of up to SGD2000

Different people, shared values

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. We are an open environment that embraces diverse experiences, perspectives, and ideas – this drives our excellence.
Guided by our values and alignment with the UN Sustainable Development Goals, we create and contribute to equitable spaces and systems, while cultivating a sense of belonging for all. Arup provide an environment where you will make a positive difference. Discover more about life at Arup at www.arup.com/careers/your-life-at-arup.
We are committed to making our recruitment process and workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and/or to perform the essential functions of the role. We will do everything we can to support you.

Our Application Process

Please apply directly through our applicant tracking system. Shortlisted candidates will be contacted by Talent Acquisition to discuss next steps. Stay safe online – Arup will never ask for your bank details as part of our recruitment process.

Arup does not accept unsolicited resumes from recruiters or employment agencies.

Position Objective

Cognita is a global leader in independent education. Founded in 2004, we are a growing community of 100+

schools in 16 countries - in Europe & North America, Latin America, Asia and the Middle East - serving more

than 85,000 students. Each of our schools are proudly unique, however our collective purpose is to create an environment where everyone can, ‘Thrive in a rapidly evolving world’.

As part of our global cyber security initiatives, we are seeking a Cyber Security Lead based in our Singapore

Regional office to support the Asia region. Reporting to the UK based Group Manager of Cyber Governance

Risk and Compliance, with operational reporting to our Regional IT Director for Asia, the Regional Cyber

Security Lead will ensure the effective communication, implementation, and adherence to cyber security

policies and best practices across Asia. You will lead regional incident response efforts, help regional and

local teams implement security controls, provide assurance of control implementation, and ensure

compliance with organisational policies. This role requires collaboration with diverse stakeholders,

contributing to reporting and assurance activities for both regional and global teams. There will be a travel requirement associated with this role (around 20-30%) within Asia.

Key Accountabilities

Regional Expertise and Leadership

• Develop a deep understanding of the region and its unique country-level differences, staying informed on new technologies, regulatory changes, and industry best practices as you lead and oversee cyber security initiatives for the region.

Incident Response

• Develop and implement regional incident response plans, ensuring alignment with Group Policy and best practices.
• Lead regional incident response efforts, coordinating with local IT and security teams to ensure the effective handling of security incidents.
• Act as the primary liaison between Regional Teams and Group Cyber Security during major incidents which may involve engagement with local regulators.

Implementation of Security Best Practices

• Support local IT teams in implementing security good practices based on Group policies, NIST CSF 2.0 framework, and local regulatory requirements.
• Regularly review security controls and configurations, recommending improvements to strengthen the regions security posture.

Assurance and Compliance

• Lead assurance activities to ensure compliance with security policies, standards, controls, and operational procedures, conducting regular reviews and audits.
• Assist in ensuring the region meets all regulatory requirements related to cyber security.

Reporting and Metrics

• Develop and maintain key risk and performance indicators (KRIs and KPIs) as guided by Group Cyber Security to monitor the regions security programme.
• Contribute to group-level reports, providing insights into the region’s security posture for senior leadership.
• Provide the Asia Leadership Team with regular updates on cyber security progress at the school and regional levels

The Key Accountabilities listed above are not exhaustive and may be varied from time to time as dictated by the changing needs of Cognita. In this case, any significant changes or variations will be consulted with the post holder before undertaking these responsibilities.

Security Awareness and Training

• Support and lead regional security awareness initiatives, delivering tailored training to improve security culture and readiness.
• Ensure staff are informed of emerging threats and best practices for mitigation.

Cross-Functional Collaboration

• Build strong relationships with regional IT, operations, and business teams to foster collaboration on cyber risk management.
• Work closely with Group Cyber Security to ensure alignment with global initiatives.

Remediation and Transformation

• Drive remediation efforts for identified vulnerabilities, ensuring timely and effective action.
• Support broader security transformation initiatives to improve the regions cyber maturity in line with Group strategy.

Safeguarding Responsibilities

Cognita Schools are committed to safeguarding and promoting the welfare of children and young people and expects all staff, volunteers and other third parties to share this commitment. Safer recruitment practice and pre-employment background checks will be undertaken before any appointment is confirmed.

• To comply with safeguarding policies, procedures and code of conduct
• To demonstrate a personal commitment to safeguarding and student/colleague wellbeing
• To ensure that any safeguarding concerns or incidents are reported appropriately in line with policy
• To engage in safeguarding training when required

Person Specification

Essential Skills & Experience

• Ability to implement security controls, policies, and mitigation strategies within agreed budgetary guidelines and operational constraints.
• Strong working knowledge of cyber security good practices, including incident response and risk management
• Knowledge and experience working with common security management frameworks such as NIST, CIS etc.
• Experience coordinating and communicating penetration tests
• Strong analytical skills with excellent attention to detail
• Ability to plan strategically and implement positive change that is operationally sustainable.
• Ability to prepare and deliver clear reports and presentations to senior management, including the ability to clearly articulate cyber security risk to the business.
• Proficiency in using Microsoft Office applications (Word, Excel, PowerPoint)
• Excellent communication skills in English both written and verbal
• Minimum of 7 years’ experience in a cyber security or GRC role, preferably within an international organisation.
• Proven ability to implement and support security best practices across regional and local teams
• Experience developing and tracking security metrics (KRIs and KPIs)
• Proven ability to manage and respond to cyber incidents effectively within the region.

Desirable Skills & Experience

• Familiarity with cyber security tools (e.g., SIEM, DLP, IDS/IPS)
• Experience working with Power BI
• Experience supporting internal and external audits and negotiating control improvements
• Good knowledge and understanding of the regulatory frameworks in the Asian countries where we operate.
• Experience coordinating major security incident response processes
• Experience managing security due diligence and integration for M&A activities
• Experience working within the education sector or a similar customer centric industry like Healthcare etc.
• Experience working in decentralised global or international business models.

Qualifications

• Relevant degree or diploma in Information Security, IT, or a related field and or;
• Relevant certifications related to information security or GRC (e.g., CISA, CISSP, CRISC)

Terms of Employment

• Based in Singapore Regional Office with hybrid work arrangement
• Official work hours: Mondays to Fridays from 9am to 6pm
• Flexibility for extended work hours to accommodate Global team based in UK as required

At Cognita how we achieve our goals is as important as what we do. Behaving in line with our values is essential to performing effectively at Cognita.

• Excellence: We aspire to achieve excellence in everything we do, no matter how big or small.
• Collaboration: Together, we are more aligned and more effective.
• Respect: We treat all with fairness, compassion and respect.
• Integrity: We do what we say we will do.

Accountability: We have a clear sense of what is expected of us, and we do our utmost to deliver, taking our responsibilities as educators seriously.

Ability to travel up to 30% in the first year (to embed security policies and practices), and also at short notice when required (to assist with local cyber incidents)

Key Stakeholders

Internal - Group IT Director, Regional IT Director, Heads of Schools, Asia Executive Team members, Regional Colleagues, Managing Directors of Operations, Group IT Senior Leadership Team, Cyber Security Teams, Other Group IT Teams, Regional and School based IT Teams, Legal.

External - Cyber Security Vendors, Partners & Third Parties, Regulators.

For interested applicants, please submit your applications to https://cognitapeople.csod.com/ux/ats/careersite/1/home/requisition/480?c=cognitapeople&source=MyCareersFuture

Role Description

This is a full-time on-site role for a SOC Team Lead located in Singapore. As a SOC Team Lead, you will be responsible to:

• Plan monthly duty roster for site team.
• Cover shift function if there are any shift resources are absent.
• Generate report dashboarding for technical analysis.
• Proficient in Microsoft excel/Power BI.
• Will run operation and work the SOP to ensure the 24X7 Security operations support services operate effectively.
• Responsible for site monthly report and documentations submissions.
• Onboarding/off boarding of manpower resources (1 month).
• Submit monthly timesheet and monthly service report as part of billing documentation timely.
• Work with Main Contractor to ensure security devices or apps are patched and firmware versions are upgraded in accordance with IM8 requirements.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

Job Description:

The jobholder will be providing support and project delivery for the SSO and Identity Management platforms in the following topics

Architecture

Project Delivery

Platform Support and Maintenance

Incident and Problem Management

Change Management

The candidate should be well versed with cryptographic notions such as RSA, symmetric and asymmetric encryption, certificates and digital signatures etc.

Architecture

To provide architectural expertise thereby driving change and improvement in technology and process.

To contribute to the development of the SSO and LDAP technology roadmaps.

To liaise with CIB architecture teams in undertaking architectural reviews.

Project Delivery

To take responsibility for the delivery of key projects around SSO and LDAP which are aligned to drive significant change within the platform.

To work with the Application Production Support project managers in defining, designing, documenting and implanting new functionality for existing and new applications.

To liaise with the Application Developers in low-level diagnosis of on-going issues.

Platform Support and Maintenance

Pro-actively monitor, manage and improve availability and performance of the production environments

(from presentation and application layers to Infrastructure layers)

Pro-actively manage the capacity of production applications

Incident and Problem Management

To work with partner teams to conduct analysis of major and critical incidents.

To identify tactical or strategic improvements that can be introduced to help reduce the number of on- going incidents within the SSO and LDAP area.

Change Management

To work within the change management framework adopted to ensure that all changes to

the production environment are planned and executed in a controlled manner.

To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that

changes raised are of sufficient standard in terms of technical and planning detail.

Requirements

Technical Skills essential for the role include minimum 15 plus years of experience into

CA Siteminder Web SSO

SOA security - SAML / WS-Security

Autoprovisionning tools such as BMC ControlSA, Sailpoint, or Forgerock

LDAP

Kerberos / SSL/TLS / PKI / GSS-API / SPNEGO

Auth2, OpenIDConnect

IIS/WCF/WIF, WAS security models

Infrastructure standards for network load balancers, servers, networks and storage

Automation mind-set with experience in using tools like Ansible

Scripting skills using Python/JS or shell

Application Server : Good exposure in configuring and supporting web technologies such as Tomcat,

Apache, nginx, IIS

Proven logical and methodical problem analysis and troubleshooting skills

Working with an industry recognised service desk and project management toolset

ITIL certification

Shift

On Site Services: From 8:00 to 19:00 schedule to cover in weekly shifts of 8 working hours/day

On Call Services: Out of regular schedule, we provide On Call services (out of business hours) to be covered in weekly shifts by team members.

Public Holidays: Team members must cover all public holidays except 1 st January and 25 th December (2 persons only in shifts)

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286

“To be the most loved everyday food and groceries destination!” - that’s our mission at foodpanda (small ‘f’).

foodpanda is the largest food and grocery delivery platform in Asia, outside of China. Operating in more than 400 cities across 11 markets, we continue to expand and grow in our core food delivery business, as well as in new verticals like grocery deliveries, with a strong tech infrastructure at our core. From our restaurants-partners, cloud kitchens and cloud grocery stores — foodpanda is just one tap away, getting everything you need into your hands quickly and conveniently!

If you love working with technology to create solutions and are not afraid to roll up your sleeves to get things done, you will find your tribe here at foodpanda. foodpanda comprises of people from more than 60 nationalities, and we believe in winning through diversity.
foodpanda is part of the Delivery Hero Group, the world’s leading local delivery platform operating in 70+ countries worldwide

Job Description
We are looking for a highly-driven and motivated Lead, Public Affairs to join our Singapore team to drive foodpanda’s public affairs objectives.

Responsibilities:

• Lead foodpanda Singapore’s public policy and advocacy strategy in partnership with foodpanda business verticals, industry associations and other stakeholders
• Represent foodpanda Singapore in engagements with government regulators and other stakeholders, including but not limited to academia, NGOs, business associations
• Drive collaboration opportunities in sustainability topics of relevance to the business
• Develop supporting materials for advocacy and engagements in collaboration with the regional and global teams
• Track and evaluate regulatory issues that may have an impact on foodpanda’s business objectives and verticals. Where appropriate, proactively shape the regulatory landscape on critical issues
• Build thought leadership with government agencies, key opinion leaders or credible organisations
• Be a strong partner for foodpanda Singapore’s senior leadership and internal teams, such as PR, legal, operations, marketing, and commercial

Qualifications

• 8 to 12 years of demonstrated experience managing public policy and/or government relations and advocacy work
• Experience working and engaging with policymakers, civil society and non-governmental organisations and other stakeholders
• Knowledge of Singapore’s political system, environment and institutions
• Ability to exercise strong judgment and problem-solving skills, creativity, and ability to work in a dynamic, cross-functional, multi-cultural environment
• Experience in policy work for a multinational corporation or government preferred

What we offer:

• A dynamic and challenging working environment with a steep learning curve
• Responsibility from day one in the leading food delivery company in the world
• The opportunity to be part of a happy, high functioning and smart team
• Periodic fun, engaging company events & team activities
• A company committed to developing you personally and professionally.
• A vibrant and international team with diverse backgrounds from all over the world
• A culture that empowers you to take full ownership of your work and career

Our parent company, Delivery Hero, is a global leader in the food delivery industry processing over 3 million orders every day and operating in 40+ markets in the world, with 18,000 employees and approximately 500,000+ restaurant partners.

Please apply directly via the link here: https://smrtr.io/nZrN3

• Driving innovation and shaping the future with cutting-edge projects
• Personal growth and collaboration.

About Our Client

Client is a global technology firm known for its innovative approach to content creation and distribution. It operates a range of platforms that combine artificial intelligence and machine learning to deliver personalized experiences to users. The company's products span entertainment, social networking, and e-commerce, with a strong focus on fostering creativity and community engagement. It has a diverse and rapidly growing global presence, continuously pushing the boundaries of digital media and technology.

Job Description

• Communicate technical and non-technical concepts effectively to the business side.
• Coordinate security assessments with product teams.
• Conduct cyber risk assessments and technical security reviews to identify IT risks for new products and features, and recommend controls.
• Collaborate with security and business teams to design defense-in-depth controls and improve security posture.
• Fulfill business security requirements like red teaming, fraud detection, and penetration tests, while enhancing security maturity.
• Monitor and manage risk mitigations, exceptions, and ensure adequate monitoring is in place.
• Track emerging cyber threats, vulnerabilities, and exploits affecting infrastructure and products.

The Successful Applicant

A successful candidate will have a strong technical background in cybersecurity, with the ability to communicate effectively between technical teams and business stakeholders. They should be skilled in risk assessments, vulnerability management, and implementing security controls. Proactive, collaborative, and able to manage security requirements like red teaming and penetration testing, they will stay ahead of emerging threats and continuously improve security posture across the organization.

What's on Offer

A chance to work on impactful security initiatives in an innovative environment, collaborate with cross-functional teams, and grow your career. You'll receive a competitive package, opportunities for professional development, and the chance to work with cutting-edge technologies.

Contact

Miao Xia Neo (Lic No: R21103441/ EA no: 18C9065)

Quote job ref

JN-112024-6583081

Phone number

+65 6416 9828

Michael Page International Pte Ltd | Registration No. 199804751N

We are looking for a highly-driven and motivated Lead, Public Affairs to join our Singapore team to drive foodpanda’s public affairs objectives.

Responsibilities:

• Lead foodpanda Singapore’s public policy and advocacy strategy in partnership with foodpanda business verticals, industry associations and other stakeholders
• Represent foodpanda Singapore in engagements with government regulators and other stakeholders, including but not limited to academia, NGOs, business associations
• Drive collaboration opportunities in sustainability topics of relevance to the business
• Develop supporting materials for advocacy and engagements in collaboration with the regional and global teams
• Track and evaluate regulatory issues that may have an impact on foodpanda’s business objectives and verticals. Where appropriate, proactively shape the regulatory landscape on critical issues
• Build thought leadership  with government agencies, key opinion leaders or credible organisations 
• Be a strong partner for foodpanda Singapore’s senior leadership and internal teams, such as PR, legal, operations, marketing, and commercial

• Make a difference in one of the fastest-growing teams
• Become part of a premier team of Security Experts

About Our Client

This multinational tech company is known for a popular social media platform and focuses on AI-driven content solutions to enhance user experience. Its subsidiary provides businesses with tools for data analysis, content moderation, and cloud services, helping enterprises optimize operations and improve customer engagement.

Job Description

• Responsible for developing security products targeting customers in Southeast Asia region, and identifying potential business opportunities.
• Deeply understand customer requirements, develop cutting-edge solutions as a technical expert, provide consulting services to our partners.
• Works closely with internal teams (e.g. Sales and Developers) during the pre-sale process by offering technical expertise, translating business needs, and identifying potential existing or new solutions to help shape the deal and influence budget estimates.
• Position will be based in Singapore

The Successful Applicant

Join our dynamic Cloud Security Solutions team, where you'll play a pivotal role in bringing cutting-edge cloud security products to market and driving their commercial success. This is a unique opportunity to lead the business for the APAC region in a newly created role, giving you the chance to shape the future of our offerings and make a significant impact in the industry.

What's on Offer

If you're passionate about cloud security and ready to take on a leadership position that influences strategy and growth, we want to hear from you! Be part of a forward-thinking team that values innovation and collaboration, and help us redefine the landscape of cloud security. Your journey starts here!

Contact

Miao Xia Neo (Lic No: R21103441/ EA no: 18C9065)

Quote job ref

JN-112024-6580695

Phone number

+65 6416 9828

Michael Page International Pte Ltd | Registration No. 199804751N

• GRC Lead for APAC regions, including China and India
• People Manager role with a strong track record in leadership
• Reporting line to headquarters in France

About the company

Our client is a multinational company that has a rich history spanning nearly 200 years, a testament to their enduring success in the business world. Headquartered in Paris, France, the company has grown to become one of the world's leading wine and spirits producers. They are a prominent player in the global alcoholic beverage industry, renowned for its extensive brand portfolio, commitment to quality, and dedication to sustainability and social responsibility.

About the job

• Develop, govern and enforce cybersecurity policies, standards, and guidelines to ensure robust security practices.
• Lead evaluations of security and privacy risks, coordinating swift responses to suspected cyber incidents/events.
• Monitor cybersecurity risks and report findings to relevant technical and business executive committees.
• Manage the Information Security GRC team, focusing on all cybersecurity aspects within the designated region, domains, and tech portfolio.
• Proactively drive risk reduction initiatives within the defined scope.
• Ensure effective security measures within the scope of assigned regions, domains, and technology areas.
• Collaborate on cyber strategy and roadmap creation for long-term security goals.
• Drive compliance with internal standards and regional cybersecurity regulations, both internally and externally.

successful candidate

Minimum of 10 years' experience in Governance, Risk, and Compliance (GRC), with a solid understanding of cybersecurity frameworks such as ISO 27001, SOC 2, MITRE ATT&CK, and NIST, as well as expertise in penetration testing and security audits.

Skilled in managing incident response, evaluating cybersecurity risks, and conducting vulnerability assessments.

Proven ability to lead a team, with a track record of managing 2-3 direct reports.

Experience working in a regional setting, with the ability to navigate diverse regulatory environments and cultural considerations.

Whats on offer
The permanent opportunity for a Information Security & Risk Governance Lead (GRC), will pay a salary range of $13,000 - $ 15,000 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

Qualification training shall be provided as necessary to attain competency to deliver job responsibilities.

Main Job Responsibilities:

• Conduct 3rd party audits to assess organizations' Information Security Management System and related Statement of Applicability (SoA) for conformity with ISO/IEC 27001 and in strict compliance with GIC's Code of Ethics and established audit procedures
• Conduct other related Information Security, Cybersecurity, Data Protection audits – ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, CSA Cyber Essentials mark, CSA Cyber Trust mark, IMDA Data Protection Trust mark, GDPR Compliance audits, Second Party IT audits
• Conduct Information Security, Cybersecurity, Data Protection trainings/workshops/seminars
• Manage the entire audit process from planning, conducting, reporting, and following up on the assigned audits.
• Support in technical review of audit reports and technical advice to Sales Team and Certification Team as and when required.

Job Qualifications / Requirements:

• Possess a professional degree in Computer Science/Information Security/Cybersecurity or related fields to Information Technology
• At least two years are in a role or function relating to information security/Cybersecurity
• Successfully completed a Lead Auditor Course in ISO/IEC 2700 Information Security Management System (ISMS)
• Having completed training courses in Singapore PDPA Fundamentals/Practitioner and holding industry certifications like CISA, CIPM, CISSP will be advantageous

About the Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role (Lead Security Engineer):

• We are seeking a lead security engineer who can drive security strategy and initiatives from 0 to 1. This could be across a wide range of domains covering identity, application security, cloud, DevSecOps, or detection engineering. We are open to security engineers with deep skills in one or more of these domains.
• You will have excellent stakeholder management skills, and are able to operate and influence across the business.
• You should be excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source and build tools that automate our security posture.

The day-to-day activities:

• Work with the wider security engineering team to take security requirements and build scalable applications and solutions that automate security and reduce the risk of the bank.
• Own the strategy for assigned security domains, consisting of tactical initiatives and strategic multi-year decisions.
• Partner with teams across the bank including SRE, Data Engineering, GenAI and Product to identify areas of security posture improvement, create the plan and execute.
• Maintain standards and procedures inline with regulatory and internal policy requirements.
• Lead engagements with internal and external audits that are applicable to first line technology.
• Mentor junior engineers to uplift their ability across security domains, increasing the teams knowledge and standard operating procedures.

The must-haves:

• Should have relevant experience of 8+ years within information security
• Experience with scripting/programming security automation.
• Knowledge of cloud platforms (AWS, Serverless, managed services, containers, etc)
• Excellent soft skills - able to handle pressure in a fast-paced environment. Open-minded, creative and innovative.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• In-depth knowledge of security frameworks, standards, and best practices.
• Proficiency in security technologies (e.g., SIEM, IDS/IPS, firewalls, endpoint protection).
• Strong understanding of network protocols, operating systems, and application security.
• Excellent problem-solving, analytical, and decision-making skills.
• Strong leadership, communication, and collaboration abilities.
• Ability to manage multiple projects and priorities in a fast-paced environment.

About the company

CGS International Securities Pte. Ltd. (CGS International) is an award-winning and market leading integrated financial services provider, ranked among the top securities houses in Asia.

CGS International taps on our wealth of global and ASEAN insights to offer equities trading, leveraged products, wealth management, investment banking, equities research, Shariah-compliant financing, fixed income, currency and commodities, structured products and prime brokerage services in over 15 countries and regions.

Along with its parent organisation China Galaxy Securities, a leading securities house in China, CGS International is trusted by more than 15 million customers globally.

Job Responsibilities

1. Conducting security testing such as vulnerability assessments, penetration tests, application security test (code level), red teaming, simulation exercises/tests (process level)
2. Tracking and ensuring prompt completion of remediation and mitigations
3. Recommending, building and maintaining security testing platforms, tools, technologies
4. Formulating security testing policies, standards, guidelines
5. Establishing security testing processes
6. Measuring and improving maturity of security testing
7. Managing development and performance of team member(s)
8. Mentoring and guiding junior team member(s)
9. Staying up to date with business, regulatory and IT requirements
10. Ensuring the secure testing program enables business, addresses regulations, aligns with IT strategies

Job Requirements

• Bachelor degree in computer science, computing
• At least 1 years of experience building and managing security team.
• At least 3 years of IT security testing experience covering areas such as vulnerability assessments, penetration tests, application security test, simulation exercises/tests
• Able to speak both English and Chinese to liaise with our Chinese counterparts
• Frequent and regular communications and sharing with senior management, technical personnel and business users
• Experience working with cross-geographical teams in various time zones
• CISSP, CEH, CREST, OSCP or other related information security certifications
• A good communicator
• Able to lead by example
• Keen to share and collaborate
• Able to influence to garner buy-in

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of ByteDance's Security Department, Security BP team is not only responsible for the security and risk management of the Monetization business, but also plays an important role in connecting and building trust between the business and security team. Leveraging on various capabilities provided by the Security Department, we ensure the business and customer data are secured by providing high-quality services to the Monetization business, such as platform security, product security, business security and compliance governance.

Responsibilities

- Ability to communicate technical and non-technical concepts to the business side.

- To coordinate and make arrangements for security assessments with various product teams.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct cyber risk assessment/technical security reviews in support of technologies initiatives to help identify IT related risk fr any new products and feature requirements, as well as determine appropriate controls to mitigate risks.

- Collaborate closely with other parts of the security team and business teams to design defense-in-depth controls that limit attackers' ability and improve our security posture.

- Fulfil business side security requirements such as red teaming, fraud detection and penetration tests. Organise resources and improve security maturity for the Monetization team.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

- Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to the Monetization infrastructure and products.

Minimum Qualifications

- Minimum Bachelor's Degree in Computer Science, Computer Engineering, Information Systems or other STEM disciplines. Preferred candidates with experience in communicating with the business side on security requirements.

- Proven track record in managing a high-performing team for at least 2 years with excellent leadership skills.

- Good project management skills and focused teamwork.

- Works well under pressure and within time/budget constraints to solve problems or meet objectives.

- Demonstrated teamwork and collaboration skills, in particular in leading or contributing to global and multi-functional teams

- Good knowledge/interest in some of these various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing.

Preferred Qualifications

- Passionate about self-studying cutting edge technologies and staying relevant.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Cyber Security Roles in Singapore
Job Posting by Belle Lim, Section Manager at Hays Singapore
[email protected]

Cloud Security Lead

Cyber Security jobs in Singapore
ACTIVELY HIRING NOW

Hi Everyone,

An established leading technology software company with strong APAC presence is looking for a Cloud Security Lead to join them. This is brand new headcount as part of the business’s expansion plan. This individual will get the autonomy to build from scratch. This position focuses on engineering secure methods of utilizing cloud infrastructure services and software to improve the overall security posture and enhance the security of cloud-based environment.

Your new role

· Lead the development and implementation of cloud security strategies and roadmaps.

· Design and implement secure cloud architectures and solutions.

· Develop and manage IAM strategies and solutions to ensure secure and compliant access to cloud resources.

· Develop, enforce, and monitor cloud security policies and procedures.

· Work closely with DevOps, IT, and development teams to ensure security is integrated into all stages of the software development lifecycle (SSDLC).

What you’ll need to succeed

· At least 5 years of experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector etc

· Hands-on experience with AWS, Kubernetes, and web application security

· Strong understanding of SSDLC and security frameworks.

· Strong understanding of cloud security architectures, frameworks, and best practices.

· In-depth knowledge of security technologies and tools such as IAM, encryption, SIEM, IDS/IPS, and vulnerability management.

· Experience with security compliance and regulatory frameworks (e.g., ISO 27001, SOC 2).

· Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security.

What you’ll get in return

· Attractive Career Development / Growth – Leadership Opportunity

· Attractive Remuneration Package

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to [email protected]. If this job isn't quite right for you but you are looking for a new position, please contact me for a confidential discussion on your career.

Apply now or refer a friend (Get rewarded with $200 CapitaStar Gift voucher upon a successful friend referral!)

At Hays, we value diversity and are passionate about placing people in a role where they can flourish and succeed. We actively encourage people from diverse backgrounds to apply.

EA License Number: 07C3924 l Registration Number: R21100438 l Company Registration ID No.: 200609504D

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible. Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve. Join us.

Team Introduction

The Global Security Organization provides industry-leading cybersecurity and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk.

Responsibilities

- Lead a research team focusing on monitoring and analyzing emerging cyber threats, vulnerabilities, and exploits relevant to our infrastructure and products.

- Conduct research and analysis to stay up to date with current vulnerabilities, provide detailed risk analysis and potential impact

- Analyze, assess, compile, and prioritize vulnerabilities to document and communicate mitigation recommendations

- Attract and retain great people, invest in their growth

- Collaborate with cross-functional software engineering teams in developing products and services for delivering security assurance.

- Identify and assess emerging risks, including analysis of deep and dark web data

Qualifications

Minimum Qualifications:

- Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or other relevant majors.

- Passion and extremely self-motivated about security research, especially to discover real-world security problems, and addressing in-the-wild security threats. Deep understanding of vulnerability analysis and discovery as well as exploitation process and techniques.

- Knowledge of Common Vulnerabilities and Exposures (CVEs), cyber threats, and vulnerability mitigation strategies. - Experience with Vulnerability Research

- Research experience in two or more of the following: threat intelligence, IAM, key management systems, data security, application security, web application and browser security, security protocols, operating system internals and hardening (e.g., Windows, Linux, OS X, Android), network security, vulnerability management, penetration testing, or applied cryptographic concepts.

Preferred Qualifications

- Bachelor's degree in Cybersecurity, Computer Science, or a technical field (or equivalent work experience in related field

- Professional certifications in Cybersecurity (OSCP, GCIH, GREM, GNFA or other relevant certifications)

- Experience in working and investigating incidents in Cloud environments (e.g. AWS, GCP)

- Familiarity with container technologies such as Docker and Kubernetes

- Familiarity with OSINT tools such as Liferaft, Skopenow, Flashpoint, TLOxp, LexisNexus, etc

- Experience working with strategic, tactical, technical, and operational threat intelligence

- A strong background in data science, AI, machine learning, and deep learning. Experience in applying AI technology to security domain is highly preferred.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.