Total 691 maintenance engineer service job vacancies in Legal / Public / Security category in Singapore

We are looking for an experienced Senior Cloud Security Engineer to join the Cyber Security Operations team. This is a 12 months contract role to start with a potential to extend / convert based on the performance and business needs.

Roles and Responsibilities:

• The ideal candidate must have deep knowledge of security controls, tools, features, and operations for AWS / Azure. Candidate should be able to demonstrate relevant experience with implementing and enhancing detective capabilities in a fully managed AWS / Azure environment.
• The candidate should be intellectually curious about technology and the evolving threat landscape.
  This role will help to build a detection engineering process and culture for a SIEM platform covering on-prem and multi-cloud environments while serving as a technical subject matter expert for the AWS / Azure environment.
• It will partner with teams across Global Information Security to design, develop, tune, and maintain detection content to protect the and support the information security policies and/or procedures.

Skills and Experience

• Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or related field.
• Eight (8) or more years relevant Cyber Security experience with at least five (5) years in Cloud SOC and/or Purple Team roles.
• Highly organized and motivated self-starter who can deliver results with minimal direction.
• Experience writing and tuning detections.
• Experience with SIEM tools.
• Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS.
• Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Experience with a range of AWS . Azure native services and tools (i.e. Guard Duty, Security Hub)
• Understanding of threat frameworks, such as MITRE ATTCK for Cloud and D3FEND.
• Understanding of Risk Management principles.
• Experience in building, configuring, operating and/or securing cloud infrastructure and applications in AWS / Azure with either native cloud service provider capabilities or 3rd party vendor tools.
• Ability to independently assess risks and identify vulnerabilities in infrastructure with an eagerness to suggest new processes, policies, and overall improvements to internal security controls.
• Experience partnering with incident response teams, threat intelligence researchers, Red/Purple teams, and/or HUNT researchers.
• Familiarity with common Information Security and data protection frameworks and standards (i.e. CIS, NIST, HIPAA, GDPR, PCI DSSS, ISO 270001).
• Ability to navigate and collaborate effectively within a geographically complex and dispersed global corporation.
• Excellent verbal and written communication skills with ability to distill key data points and effectively present information.
• Preferable Certifications
  CCSP / CCSK
  CISSP / CISM / Security +

Argyll Scott Consulting Pte Ltd

Your new company

This is a multinational investment bank.

Your new role

• Develop and implement a comprehensive cloud DLP security strategy that aligns with the organization's goals and compliance requirements.
• Design and architect secure cloud solutions, considering aspects such as network security, identity and access management (IAM), encryption, and data protection.
• Guide implementation of proactive measures to address security concerns effectively.
• Ensure that cloud security practices adhere to industry standards and regulatory compliance, such as GDPR, HIPAA, or SOC 2.

What you'll need to succeed

• Minimum of 10 years of experience in information security, with at least 5 years focused on cloud security. Prior experience as a Security Architect or similar role is highly desirable.
• Experience with developing performance baselines for DLP tools.
• Proficiency in cloud platforms such as AWS, Azure, or Google Cloud, including knowledge of their security services and best practices.
• Certified Cloud Security Professional (CCSP) preferred.

What you'll get in return

• Challenging yet fulfilling career with an equal opportunity employer.
• Various opportunities to learn and upgrade your skill sets
• Competitive remuneration package and benefits

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email [email protected] for a confidential discussion.

Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D

About the client

Our client is a prominent global trading platform, established in Australia, and serving millions of users worldwide. They specialize in delivering an integrated digital service platform designed for investors. Their offerings include market data, news, analysis, and comprehensive trading services, all within a user-centric fintech ecosystem.

About the role

The role involves planning, creating frameworks, roadmaps, processes, and controls, as well as coordinating across business and technical stakeholders to monitor and detect security threats and respond to security incidents.

• Develop and implement the company’s cyber/info-security efforts to ensure compliance with information security requirements stipulated by financial services regulators. Plan and construct the company's cybersecurity and protection systems, continuously enhancing cybersecurity management and environment to ensure network system security and availability.
• Manage the company’s response to and relationship with info-security-related audits/compliance matters and inquiries from regulators or appointed auditors. This includes overseeing security compliance activities such as PCI/GDPR audits and IT security compliance related to financial regulations.
• Conduct daily security checks, analyze and detect potential security threats and vulnerabilities in the company's business systems and internal office environment. Conduct security audits and provide employee security awareness training.
• Oversee safety inspections in the company's R&D process and optimize related processes.
• Manage internal and external network attacks, phishing attacks, virus infections, intrusion defense, and other security incidents. Provide monitoring, early warning, response, and emergency response.

Skills and Experience requirements

• 5 years or more of experience in information security/cybersecurity.
• Familiarity with OWASP Top 10 and DDoS attack principles and protection.
• Proficiency in information security/cybersecurity skills such as offensive and defensive tactics, penetration testing, and vulnerability assessment.
• Familiarity with commonly used security tools and products.
• Experience with one or more public cloud security products.
• Understanding of TCP/IP principles.

Interested candidates who wish to apply for the advertised position, please click on "Apply Now". We regret that only shortlisted candidates will be notified.

Job Code: ANNH

EA License: 01C4394, R1872517 (Ho Hsien Ni)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates to collect, use and disclose your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services, complying with Government’s health advisories and such other purposes stated in our privacy policy. Our full privacy policy is available at https://www.persolkelly.com.sg/policies . If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

Job Description:

• Attend to internal and external inquiries at the counter.
• Handle Medical Report/Records queries.
• Assist in sending acknowledgment letters and receipts.
• Extend Medical Report/Medical Records deadlines as needed.
• Respond to external queries about Medical Report applications.
• Sort incoming mails and faxes.
• Receive documentation from staff or Courier Services.
• Manage returned cases from departments and clinics.
• Coordinate appointments for Workman Compensation/Specialist Medical Report/Objection.
• Manage the MRO hotline and respond to queries.
• Follow up on AM/PM process and close Records requests.
• Process Inter-hospital loan requests.
• Tag internal/external emails in a shared system.
• Assist Executives with ad hoc tasks.

Requirements:

• Diploma in Business or similar.
• 1-3 years of administration experience.

All qualified applicants, please click “ APPLY NOW”

Kimmy Low Yi Ting (Kim) | CEI Registration Number: R23112122

Recruit Express Pte Ltd Company Reg. No. 199601303W | EA LICENCE Number: 99C4599

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Job Description:

• Attend to internal and external inquiries at the counter.
• Handle Medical Report/Records queries.
• Assist in sending acknowledgment letters and receipts.
• Extend Medical Report/Medical Records deadlines as needed.
• Respond to external queries about Medical Report applications.
• Sort incoming mails and faxes.
• Receive documentation from staff or Courier Services.
• Manage returned cases from departments and clinics.
• Coordinate appointments for Workman Compensation/Specialist Medical Report/Objection.
• Manage the MRO hotline and respond to queries.
• Follow up on AM/PM process and close Records requests.
• Process Inter-hospital loan requests.
• Tag internal/external emails in a shared system.
• Assist Executives with ad hoc tasks.

Requirements:

• Diploma in Business or similar.
• 1-3 years of administration experience.

All qualified applicants, please click “ APPLY NOW”

Kimmy Low Yi Ting (Kim) | CEI Registration Number: R23112122

Recruit Express Pte Ltd Company Reg. No. 199601303W | EA LICENCE Number: 99C4599

The TS Senior Security Engineer performs test activities and manages the internal or external customer independently. The Lead Technical Analyst is responsible for the customer satisfaction of the test deliverables and enables a smoothly running testing, validation or certification process. This includes using test automation tools, analyzing and validating test results and reporting to the customer. The Lead Technical Analyst participates in evaluating the security of IT products, such as network device, encryption software, mobile devices, payment terminals or e-Passports based on certain scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc. This will include the development document review, IT products analysis, the development and the realization of penetration test, the support and training of evaluation engineers.

Responsibilities for Internal Candidates

• Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations management.
• Conduct IT product security function evaluation work based on scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc..
• Customer code review when needed : due to stringent confidentiality and security requirements, it often requires traveling to customer premises.
• Based on the code review result, conduct a vulnerability analysis to determine if the customer product has any potential security weaknesses.
• Customer site audit when needed : normally traveling to customer premises, conduct remote audit in current Covid situation.
• Investigate possible logical attack scenarios. Provide support for the penetration tester in charge of product testing – by interpreting the code review findings and compliance checking result, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements.
• Delivery of customer projects on time.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
• Performs other duties as directed by supervisor.
• Maintains Laboratory accreditation and resolve scheme's mandated corrective action plans.

Qualifications for Internal Candidates

• Master or Bachelor level degree (or equivalent) in Information Technology, Computer Science or equivalent proving your analytical skills and technical approach.
• Minimum 5 to 8 years’ information security working experience, Common Criteria evaluation experience is the best and ISO 27001 auditing will be an advantage.
• Possess CISM / CISA Certification or related is an added advantage.
• COMMON CRITERIA SINGAPORE EVALUATOR (under SCCS) Certified is an added advantage.
• Comfortable in trying yourself in new areas without necessarily knowing everything and can figure out things as you go.
• Like working towards a larger goal and willing to take the initiative in your own hands.
• Good at communicating and can convey message to both technical and business audiences.
• Able to make decision independently under certain scenario, such as during site audit in customer site.
• Nice to have IT product development experience or penetration testing experience.

Overview:

We are seeking a highly skilled and experienced Senior Security Engineer to join our team. This role focuses on significantly enhancing the security posture of our platform, ensuring a robust and resilient environment for our customers' financial data. The Senior Security Engineer will be responsible for implementing advanced security measures, conducting comprehensive security reviews, and performing thorough threat modeling and risk assessments.

Key Responsibilities:

• Security Tooling Enhancement:
  • Implement and configure industry-leading security tools to enhance the overall security infrastructure.
  • Continuously evaluate and integrate new security technologies to ensure state-of-the-art protection.
• Security Design Reviews:
  • Conduct detailed security design reviews of the platform's architecture and development processes.
  • Collaborate with development teams to incorporate security best practices and improve existing design methodologies.
• Threat Modeling and Risk Assessment:
  • Develop and maintain comprehensive threat models to identify potential security threats and vulnerabilities.
  • Perform risk assessments to evaluate the potential impact of identified threats and implement appropriate mitigation strategies.
• Third-Party Security Assessments:
  • Streamline and manage the process for conducting security assessments of third-party vendors and partners.
  • Ensure third-party integrations comply with the company’s security standards and policies.

Deliverables:

• Security Tooling Implementation:
  • Successful implementation and configuration of industry-leading security tools to enhance platform security.
• Improved Security Design Practices:
  • Establish and promote improved security design practices within the development process to ensure secure coding and architecture.
• Comprehensive Threat Models and Risk Assessments:
  • Develop and maintain detailed threat models and conduct risk assessments to identify and mitigate potential security risks.
• Streamlined Third-Party Security Assessments:
  • Create and manage a streamlined process for third-party security assessments, ensuring compliance and security of external partnerships.

Qualifications:

• Proven experience as a Security Engineer or similar role, with a focus on enhancing security postures for financial data platforms.
• Strong expertise in security tooling, design reviews, threat modeling, and risk assessment.
• Experience in conducting third-party security assessments and managing vendor security compliance.
• Excellent knowledge of security technologies, protocols, and best practices.
• Strong analytical and problem-solving skills, with the ability to identify and mitigate security threats effectively.
• Excellent communication and collaboration skills, with the ability to work closely with cross-functional teams.
• Bachelor’s degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are a plus.

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Job Description

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Skills Required

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.

EA Number: 11C4879

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.
• Key Requirements:
• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

· Perform analysis, prioritization and classification of risk.

· Handle day-to-day security vulnerability assessments and operational request.

· Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.

· Proactive monitoring of remediation plans and progress.

· Schedule security checks in accordance with reporting schedules.

· Continuous enhancement of existing security vulnerability assessment process.

· Verifies security controls are implemented accordingly.

· Review security incident reports

· Evaluate the type and severity of security events

· Assist with establishing procedures for handling detected security events

· Create final incident report detailing the events of the incident

· Prepare periodic status reports for presentation to management

· At least 5 year working experience in vulnerability management and incident response.

· Familiar with at least one vulnerability scanner.

· Strong analytical skills and ability to work independently.

· Good team player as well as strong communications skills with stakeholders at all levels

· Possess QISP, CEH, CISSP and/or related security certification.

· Experience in healthcare industry is an added advantage.

· Degree in Computer Science, Engineering or equivalent.

THE JOB:

The Security Systems Engineer reports to the Campus Security Manager and is responsible for the physical security technologies and systems within the DataCenter.

JOB RESPONSIBILITIES

• Management of physical security technologies and systems within the Datacenter. Includes physical access control, video surveillance, security networks, VHF/UHF Radio systems, hard key management systems, and perimeter entry systems.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Collection and maintenance of system information on the health of current security systems and report out of performance trends. Identification of system issues or failures and coordination with site personnel to drive and correct failures by collaborating with other internal and external service providers in weekly / biweekly meetings.
• Receive escalations/notifications of physical security and business impacting incidents/events and appropriately triage, ensuring that leadership is made initially and continuously aware when appropriate and that the appropriate personnel are managing the incident response effectively.
• Serve as a Subject Matter Expert (SME) for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Continuously improve the efficiency and maturity of the overall physical security program.
• Collaborate with peer teams and organizations to ensure their team is aligned with broader strategy and initiatives, fully supporting leadership priorities, being good partners, helping reduce costs, time burden, complexity, and being responsive trusted advisors.
• Continuously seek data and recommend strategies and ideas to reduce churn, optimize, implement a creative solution to a problem, scale, automate, and simplify.
• Confident and skilled in preparing and delivering presentations and briefings to customers, senior leaders, and executives.
• Any other ad-hoc task assigned.

JOB REQUIREMENTS:

• Diploma or BS or BA in physical security or related discipline, or equivalent experience preferred.
• With 5 years’ experience successfully managing security systems projects in a corporate, law enforcement or government operations program role.
• Must be Lenel Certified Professional in Access Control and Digital Video or to attain Lenel certification within 6 months from date of hire.
• Experience with or exposure to regulatory and industry compliance frameworks and audits (e.g. ISO27001, PCI, SOC).
• Experience with datacentres or other critical infrastructure facilities.
• Experience with HA and DR solutions such as SQL Clustering, NEC WAN Express.
• With more than 5 years of managing, configuring, and maintaining Microsoft SQL Servers and processes.
• Experience making and influencing good decisions that impact mission-critical, 24x7 operations environments.
• Strong work and compliance ethic, and the ability to effectively prioritize and execute tasks in a dynamic and high-pressure environment.
• Proficient in the use of Microsoft Office products for business.
• Analytical and process improvement skills to produce data driven insights and associated process changes.
• Thought leadership and subject matter expertise to deliver one or more large programs and services while increasing standardization, simplification, and automation.
• Ability to change plans, goals, actions, and priorities in response to an evolving business environment with awareness to operate as a champion for course corrections when necessary.

Responsibilities:

1. Establish and Enhance Cloud Security Compliance:

• Build and improve the cloud security and compliance framework.
• Research industry security products and compliance practices and apply them to the company's cloud services.

2. Respond to Online Security Issues:

• Provide professional solutions and security recommendations to address online security incidents.
• Ensure timely resolution of security events.

3. Track Industry Security Cases:

• Study the technical principles behind industry security incidents.
• Internally share knowledge related to security cases.

4. Conduct Regular Security Audits:

• Engage in red team-blue team exercises with the testing team.
• Ensure the overall security of the system.

Requirements:

• Education: Bachelor's degree or higher.
• Relevant Majors: Background in Electronics, Telecommunications, Computer Science, Network Engineering, or Software Engineering.
• Programming Language Skills: Proficiency in at least one of Java, Python, or Go, ability to solve problems through programming.
• Security Experience: Prior experience in web application security, network security, container security, or data security is advantageous.
• Soft Skills: Strong logical thinking and rigorous problem-solving abilities, excellent learning capacity, communication skills, and teamwork spirit, passion for technology and a desire to contribute to technical advancements.
• Ability to speak and write in Chinese as the incumbent requires to liaise with the China HQ counterparts/personnel for work or project related matters

We are seeking a highly motivated security analyst to join our Global Security Operations Centre (GSOC). You will be responsible for performing security monitoring and investigation, incident response, threat research and hunting for our global infrastructure, encompassing both cloud-based and enterprise environments.

The ideal candidate will be well-versed in security methodologies and technologies, with a passion for protecting systems and data from cyber threats.

Responsibilities:

• Perform security monitoring on global infrastructures, leveraging variety of analytic tools and techniques to detect incidents from security-relevant datasets.
• Detect incidents through daily monitoring and hunting efforts, work with cross-functional teams for remediation.
• Thoroughly document cybersecurity activities, thinking of ways to improving detection capabilities.
• Help maintain security appaliance rulesets, generate false/true positive statistics on exsiting rules, engage respective engineers to tune false rules.
• Assist the development of incident response plans, playbooks, and SOPs to improve the incident handling processes.

Requirements:

• Minimum 3 years of work experience in cybersecurity operations or engineering field; the candidate should possess a strong background in addressing security threats within both enterprise network settings and cloud-based environments.
• Able to perform deep dive analysis in endpoints incidents, so you need have strong knowledge in Windows, Mac OS and Linux operating systems.
• Deep understanding of network/endpoints defense principles, common attack vectors; have a good understanding in MITRE ATT&CK’s tactics and techniques.
• Well versed in data analysis and be able to locate anomaly through large datasets.
• Good understanding of principles in common security vulnerabilities. Those who submit vulnerabilities with good grades on major security platforms are preferred.
• Have a certain level of programming knowledge, such as: Python, Java, R, Go etc.
• Experience with the following technologies or concepts:
• SIEM or other security/log management platforms
• EDR/XDR/CNAPP/CSPM
• Basic host-based forensics analysis
• NTA, SOAR, WAF, Cloud

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Role Overview

Security Subject Matter Expert (SME) is responsible for designing, implementing, and managing security solutions to protect the company's information systems, networks, and data from potential threats and cyber-attacks.

The primary role is to provide expert guidance, support, and leadership in all matters related to security within an organization. This role will require strong analytical and collaboration skills, detailed working knowledge of current and emerging security technologies, as well as the ability to correlate events to identify abnormal behavior.

Responsibilities

• Serve as a Subject Matter Expert (SME) for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Investigate any security incidents and provide insights to internal/external business users.
• Develop processes and procedures and fine-tune alerts as part of ongoing improvisation of security operations.
• Develop cloud/hybrid and cloud platform-specific security policies, standards, and procedures on cloud providers (Azure, AWS) and cloud-native platforms (PCF, Docker, Kubernetes, etc.).
• Identify and deliver appropriate cloud security controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business risk and cloud-native threats.
• Conduct integration of supported Cloud-based Security Products such as Web Application Firewall (WAF), Web Security Proxy, etc.
• Conduct detailed & comprehensive investigations and triage on a wide variety of security events.
• Recommend and implement remediation processes.
• Stay up-to-date with the latest security threats, vulnerabilities, and mitigation techniques.
• Collaborate with cross-functional teams to implement security measures and address security requirements.
• Communicate security risks, recommendations, and status updates to stakeholders, management, and team members.
• Identify opportunities to improve processes and/or tools to ensure the highest level of quality, including documentation, mentoring, and training sessions.
• Own the technical components of a customer integration project including but not limited to configuration, debugging, documentation, testing, and go-live support.
• Identify and mitigate potential security threats and vulnerabilities.
• Provide relevant recommendations to improve the overall security posture of customers.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Assist in any ad-hoc tasks when necessary.

Requirements

• Over 5 years of experience in Information Security or engineering.
• At least 2 years of direct experience in one of the public cloud platforms, such as AWS or Azure with strong knowledge of their security features.
• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).
• Ability to identify and drive remediation of public and hybrid cloud risks.
• Experience in general security technologies, processes, and concepts.
• Experience with web security concepts and technologies such as web application firewalls, and proxy.
• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel.
• Working experience with common security operations systems, Intrusion Detection Systems(IDS/IPS), Security Incident Event Management systems(SIEM), anti-virus log collection systems, etc.
• Working knowledge of security systems and programs.
• Sound fundamental knowledge of Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10, and web servers (e.g. Apache, IIS, Nginx, etc.).
• Familiarity with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, and Open-source tools like Jenkins, DefectDojo, and OWASP Glue will be an added advantage.
• Strong analytical and problem-solving skills, with the ability to identify and address security risks and Vulnerabilities.
• Ability to analyze and develop innovative recommendations and solutions.
• Excellent verbal and written communication skills.
• Independent and results-oriented.
• Willing to work on a flexible schedule depending on business need.

Job Summary:

Join our client as a dynamic team as a Senior Cyber Security Engineer, focusing on privileged access management within the banking sector. This role is essential for enhancing the security posture of our bank by providing innovative solutions and aligning with industry trends.

Responsibilities:

• Provides vision for privileged access management, enables innovation, and aligns with industry trends and continuous improvements that enhances the security posture of the bank with regards to privileged access.
• Responsible for budgeting, project management, deployment and operations support of new initiatives in the privileged access management space.
• Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.
• Responsible for the day-to-day support, monitoring, upgrades, patching, configuration, and management of privileged access infrastructure.
• Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements:

• Bachelor’s degree in computer science, Information Systems, or Engineering (or similar) OR combination of relevant professional experience and education, such as CyberArk certifications
• Requires 4 or more years of related technical experience in CyberArk, including deployment, configuration, management, and support of all CyberArk infrastructure components. This includes regional support and integration of CyberArk via APIs. CyberArk certifications are preferred.
• Able to write PowerShell scripts and SQL statements to develop management reports on the usage and operations management of privileged accounts.
• Experience with Tableau data visualization tool for dashboarding.
• Strong understanding of enterprise privileged access management, risk management, compliance, governance, and control.
• Strong understanding of key platform OS/databases e.g., Windows, Unix, MSSQL, MariaDB. Prior experience in administering such key platforms is preferred.
• Experience in working in banking environment is preferred.
• Hands-on, well organised, risk and compliance focused, and self-driven.
• Comfortable operating in a fast-paced and highly technical environment.
• Able to prioritize tasks, responsiveness, along with excellent verbal and written communication skills.

EA License No. 01C4394 • RCB No. 200007268E • Lim Jia Jie EA Registration No. R22108969

By sending us your personal data and CV, you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for account creation in GO and the purposes set out in the Privacy Policy https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with GO’s Terms of Use https://go.persolkelly.com/Tacand the Privacy Policy. If you wish to withdraw your consent, please email us at [email protected]. Please feel free to contact us if you have any queries.

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

About EPAM

EPAM is a leading global provider of digital platform engineering and development services. EPAM has been expanding in Singapore since 2013 and delivering the best solutions to our customers. As a recognized leader, EPAM Singapore achieved Great Place to Work® Certification in 2023 and is committed to providing our team with inspiring careers.

You will have the opportunity to work with fellow talented technologists and accelerate your career by participating in our numerous upskilling, training, and certification programs. That is why EPAM Singapore was awarded Gold for Best In-House Certification Programmes in the Employee Experience Awards 2023 and Silver in the SkillsFuture Employers Awards 2022 for our efforts in championing employees' skills development and building a lifelong learning culture at the workplace. You can also look forward to developing holistically with the multiracial festivals and various wellness and cultural activities organized by our passionate colleagues here.

Why EPAM?

• By choosing EPAM, you're getting a job at one of the most loved workplaces according to Newsweek 2022 & 2023.
• Employee ideas are the main driver of our business. We have a very supportive environment where your voice matters.
• You will be challenged while working side-by-side with the best talent globally. We work with top-notch technologies, constantly seeking new industry trends and best practices.
• We offer a transparent career path and an individual roadmap to engineer your future & accelerate your journey.
• At EPAM, you can find vast opportunities for self-development: online courses and libraries, mentoring programs, partial grants of certification, and experience exchange with colleagues around the world. You will learn, contribute, and grow with us.

What You’ll Do

• Design, implement, and manage security measures for cloud environments
• Conduct regular security assessments and audits of cloud infrastructure
• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services
• Monitor and respond to security incidents, ensuring timely resolution
• Implement and maintain access controls, encryption, and other security features
• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities
• Develop and document security policies, procedures, and guidelines for cloud environments

What Will Make You Shine

• Bachelor’s degree in computer science, Information Security, or a related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus
• Minimum five (5) years of relevant IT experience in deploying and managing applications and services on the cloud, including the design, development, implementation and/or management of the solution
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge of security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud
• Proficient in security concepts related to infrastructure as code (IaC) and containerization
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

How We Hire

Here, we summarize the typical journey to finding a job within EPAM:

• Apply and tell us about yourself
• Go through some standard interviews:

1. General interview with a recruiter
2. Technical interview with our technology experts
3. Manager interview or Offer interview with a hiring manager

• Get ready to join the team

Not sure if you meet all the requirements? No problem. Let’s talk anyway and find out more.

It takes 1 min of application to start the journey with us. Apply now!

Cyber Security Engineer

A Cyber Security firm is expanding their operations in Singapore and are actively seeking for qualified cyber security engineers to join their growth.

Training will be provided by leading security providers to get up to speed on current projects.

The Opportunity:

The Cyber Security Engineer will have the opportunity to work on high-profile projects. You will gain valuable hands-on exposure to various security solutions across various businesses.

What we look for:

• Degree or Diploma in Computer Science, Information Technology, Information Security, Computer Engineering or equivalent
• Demonstrate a good level of understanding of cyber security operations
• Can show an ability to resolve technical problems
• Gained at least 1-Security Certifications (i.e. CISA, OSCP, CREST, CISSP, CEH, CISM etc) would be an advantage
• Ability to provide solutions and recommendations on projects
• Can demonstrate working knowledge on any security solutions including Network Security, Endpoint Protection, Security Management, Server Security, Data Protection & Encryption, Security Analytics, Server Security, Web Security
• An ability to manage and execute requirements such as the implementation, integration and upgrade of security solutions
• Experience in managing, setup advanced configuration and fine tuning of the solutions
• Ability to work independently on projects, project management, problem solving and ability to communicate well
• Singapore based

What is on offer:

• High-profile projects
• Full-time opportunity
• Comprehensive training provided to joiners
• Competitive remuneration and benefits

What’s next:

If you are interested to join this Cyber Security firm and to be an integral part of their growth then we would like to hear from you.

Full support and training will be provided to meet your career objectives.

Please reply directly to this posting with your CV or send us your details to [email protected]

We apologise that due to the high volume of applicants we may be unable to respond to everyone. Should you not hear from us, please assume your application was unsuccessful for this time round and good luck for the next.

Engage Group Cyber (Singapore)

[email protected]

Engage Group Pte.Ltd is a licensed business under the Ministry of Manpower: (EA: 18C9316)