Total 9 network engineer job vacancies in Legal / Public / Security category in Ang Mo Kio, North East

We are currently looking to hire Cloud Security Engineer. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Job Type:One-year Renewable Contract

Mandatory- Cloud Security tools Ops support

Preferred-DAM, CTVL, Nexpose, EPP, EDR

The ideal candidate will have experience in delivery roles and success in implementation discussions, hands-on experience with good client handling skills and good team player within the team. The candidate should also be able to provide solutions and technical expertise to fellow team members and in client accounts.

• Apply technical knowledge, hands-on and customer insights to operate and administer a cloud infrastructure.
• Ensure all configuration conforms to high levels of performance, security, scalability, maintainability, and appropriate reusability and reliability upon deployment, aligning to design documentation specifications
• Ability to codify or implement/deploy configurations with the principles of automation by default in new projects with proper documentations
• Collaborate with team members to engage clients in operational meetings, discussions, process betterment and contribute to optimisations for the client’s environment
• Maintain technical skills, certifications and knowledge of market trends and competitive insights; collaborate and share with the technical community specifically in the cloud space
• Ability to manage issues with proper resolution/documentation and SLAs is required for this role.
• Audit, review, and implement IT security policies.

1. Database Activity Monitoring (DAM):

· Utilized DAM tools to monitor and track database activity, ensuring real-time detection of unauthorized access or suspicious activity.

· Configured policies and rules to detect SQL injection attacks, privilege escalation, and anomalous user behaviour across various database platforms (e.g., Oracle, SQL Server, MySQL).

· Worked with DAM logs and alerts to perform investigations, helping to uncover potential data breaches and mitigate security risks.

· Conducted regular reviews of database access permissions, identifying and remediating privilege creep to ensure least-privilege access controls.

2.Continuous Threat Vulnerability Library (CTVL):

· Applied knowledge of CTVLto maintain an up-to-date, centralized repository of known vulnerabilities and threats, supporting proactive risk management.

· Integrated CTVL data into the organization’s vulnerability management program, enhancing the detection and prioritization of vulnerabilities in the network, applications, and infrastructure.

· Regularly assessed and updated threat intelligence feeds, ensuring security measures are aligned with the latest emerging threats.

· Worked cross-functionally with the security team to assess and patch high-priority vulnerabilities before they could be exploited.

1. Nexpose (Vulnerability Management Tool):

· Led the deployment and configuration of Nexpose to scan and assess vulnerabilities within the organization’s IT infrastructure, including servers, networks, and web applications.

· Performed regular vulnerability scans to identify potential security weaknesses, documented findings, and worked with IT teams to prioritize remediation based on risk level.

· Customized Nexpose scanning templates to align with specific regulatory compliance requirements (e.g., PCI-DSS, HIPAA) and internal security policies.

· Analyzed Nexpose reports to generate actionable remediation plans, reducing the organization’s exposure to critical vulnerabilities.

· Integrated Nexpose with SIEM solutions to enhance real-time monitoring and vulnerability alerting.

Skills and Achievements:

• Expertise in configuring, managing, and optimizing DAM solutions to improve the security of sensitive data and prevent unauthorized access.
• Deep familiarity with CTVL as a vital resource for proactive threat intelligence and vulnerability management.
• Hands-on experience leveraging Nexpose to conduct vulnerability assessments, with a focus on ensuring comprehensive coverage across various network segments and applications.
• Proficient in interpreting vulnerability management data and translating it into actionable plans to reduce the organization’s attack surface.
• Familiar with integration of security tools like Nexpose and DAM with SIEM platforms to provide a unified security operations approach.

Soft Skills:

• Strong analytical abilities to identify and address vulnerabilities and incidents across multiple systems.
• Collaborative mindset for working with IT, development, and security teams to implement solutions derived from DAM, CTVL, and Nexpose insights.
• Detail-oriented with the ability to document and report security findings, incidents, and resolutions clearly.

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected]. Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS

Consultant Name: Deepa Shivakoti

Reg No: R1765546

Avensys Consulting Pte Ltd
EA Licence 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.

The L1 Security Engineer is responsible to:

• To provide 24 x 7 support for Data Center running on 12 hours shift

• Maintain systems plus controls to protect unauthorized access, disclosure, modification and deletion of information through resources and computer networks.

• Support logs, categorizes, prioritizes, tracks, and routes

• (i) incidents reported by users or

• (ii) alarms raised by monitoring tools

• Interact directly with business technical specialist to guide on authentication, authorization and encryption solutions.

• Investigate known and suspected information security events and develop related reports.

• Conduct hardware and software security alerts as available.

• Resolve issues through responding IT threats and vulnerabilities.

• Conduct routine security risk analysis, evaluate business needs against collision, vulnerabilities and search resulting risks.

• Implement Change Request and Service Request.

• Perform patching on security equipment.

• To implement change request and service request.

Requirements:

• Minimum 2 years of relevant working experience in IT infrastructure operation

• 12 hrs shift working

• Be customer and service oriented, positive working attitude

• Good Knowledge of following products will be advantageous:

-Beyond Trust

-SEPM

-RSA

-Palo Alto

-Checkpoint

-Fortigate

-Safenet

Job Description:

The role is for the position of Security Solutions Engineer ASO TIS Job. The successful candidate will be part of a growing dynamic regional team that oversees IT design and development of Infrastructure security Solutions In the region.

We are seeking a talented Security Solutions Engineer to join our team. The security engineer will be responsible for implementing and maintaining the Infrastructure security infrastructure to ensure the confidentiality, integrity, and availability of our organization's data and systems.

Roles & Responsibilities:

• Maintain & ensure availability of Security Solutions platforms.
• Production support of Security Solutions platforms lead managing a team to provide 24x7 support (on-call after office hours)
• Work with stakeholders and other teams to ensure Infrastructure security platforms are effectively integrated into the IT infrastructure, both on-premises and cloud workloads.
• Provide technical leadership on Infrastructure security across a variety of enterprise systems and applications.
• Collaborating with other IT staff to integrate Infrastructure security framework with other security technologies.
• Work closely with the project managers, Security and Compliance personnel, application developers and other administrators in evaluating functional, scalable, and secure Infrastructure security solutions from design and development through implementation for business clients.
• Enhance Permit-To-Operate of new & existing Security Solutions.

Technical Capabilities

Production Support of Security Solutions:

• Support Infrastructure security solutions to protect the organization's Infrastructure from unauthorized access and attacks.
• Support Virtual Private Infrastructure (VPNs) to ensure secure remote access for employees.
• Set up secure access controls to restrict access to sensitive data and systems.
• Good understanding of security solutions domains:Endpoint security
  Email security
  Web Security
  Network security
  Data Loss Protection
  Threat Detection
  Vulnerability Scanning
  Identity & Access Management
  

Contribute into Risk Assessments and Security Audits:

• Participate in regular risk assessments to identify potential security vulnerabilities and threats.
• Contribute to security audits to assess the effectiveness of existing security controls and identify areas for improvement.
• Recommend security enhancements based on the findings of risk assessments and audits.

Collaborate with IT Teams:

• Work closely with IT teams to integrate security controls into infrastructure and applications.
• Provide guidance on implementing security best practices and standards.
• Collaborate with application developers and system administrators to ensure that security requirements are met.

Monitor Infrastructure Traffic and Investigate Security Violations:

• Monitor Infrastructure traffic for signs of security breaches or unauthorized activity.
• Investigate security violations and breaches to determine the cause and extent of the incident.
• Take appropriate actions to mitigate the impact of security incidents and prevent future occurrences.

Stay Updated on Emerging Threats and Security Technologies:

• Stay abreast of emerging threats and security technologies to ensure that the organization's Infrastructure security posture remains strong.
• Participate in security forums, conferences, and training sessions to stay informed about the latest trends and developments in Infrastructure security.

Participate in Incident Response and Forensic Investigations:

• Participate in incident response activities to contain and mitigate security incidents.
• Conduct forensic investigations to determine the root cause of security incidents and identify corrective actions.
• Document incident response procedures and lessons learned for future reference.

Job Requirements:

• Min 8 years of experience in Infrastructure Security domain, with 6 years of experience in technical deployment, support, and maintenance of Security Solutions.
• Experience with deployment of Infrastructure security / perimeter security controls/solutions for enterprise.
• Experience in security solutions domains: Endpoint security, Email security, Web Security, Network security, Data Loss Protection, Threat Detection, Vulnerability Scanning, Identity & Access Management.
• Demonstrate a deep understanding of risk and change management, security policies and controls, user account life-cycle management, access controls and management, AAA. Strong understanding of Infrastructure security concepts, protocols, and technologies.
• Good scripting and task automation experience preferably leveraging Shell, Powershell, Python, Ansible.
• Experience with below solutionsEndpoint security - like McAfee, Symantec, MS Defender
  Email security – Trend Micro
  Web Security – Trend Micro, Menlo, ForcePoint
  Network security – Trend Micro DDI
  Data Loss Protection – MS Purview, Forcepoint
  Threat Detection – DDAN, Splunk
  Vulnerability Scanning - Qualys
  Identity & Access Management – CyberArk, Oracle IAM
• Experience with product deployment of SASE (components) and micro-segmentation solutions.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.

Educational Requirements:

• Bachelor’s degree in computer science, Information Technology, or a similar field preferred.
• Knowledge of security standards and frameworks (e.g., NIST Cybersecurity Framework).
• Relevant certifications (e.g., CISSP, CCNP Security level) a must.

We regret to inform that only shortlisted applicants will be notified.

Job ID: 10068291

Key Responsibilities

The Security Operations Analyst will be part of the team that deliver the following key responsibilities:

1. Security Event MonitoringReview security logs, alerts, and system events to detect anomalies or signs of unauthorised access.
   Analyse logs from firewalls, intrusion detection/prevention systems, and other security tools to identify patterns or security behaviour.
   Prioritise and investigate security incidents based on severity and impact.
   Adjust alert thresholds to reduce false positives and improve detection accuracy.
   Monitor user activity for deviations from normal behaviour.
   
2. Malware Analysis and Email SecurityAssess and respond to malware incidents.
   Ensure that malware has been thoroughly eradicated from end-points and no lateral movement has occurred.
   Investigate suspicious emails and phishing attempts.
   
3. Threat Detection and AnalysisAnalyse logs, network traffic, and security data to detect and respond to cyber threats.
   Search for indicators of compromise or signs of advanced persistent threats.
   Collaborate with incident response teams to mitigate risks promptly.
   
4. Security Tools OperationsConfigure, monitor and maintain various security tools to ensure up-to-date protection
   Conduct regular vulnerability scans
   Manage Identify Access Management systems
   Assist in providing complete and thorough responses to external and internal audit RFIs.
   
5. Incident Response and MitigationExecute incident response procedures during security incidents.
   Coordinate with cross-functional teams to contain and remediate threats.
   Produce post-incident reviews and identify areas for improvements.
   
6. Cyber Threat IntelligenceStay informed about emerging threats and vulnerabilities.
   Leverage threat intelligence sources to enhance our security posture.
   
7. Operational ReadinessParticipate in cyber exercises and simulations to improve readiness.
   Advocate for security
   

Requirements

• Diploma or degree in Computer Science, Computer Engineering or Information Security related fields.
• At least 3 years’ of working experience in IT Security Operations and Security Operations Centre.
• Relevant certifications such as CISSP, CISM, GSOM, SSCP, CASP+, GCIH will be a significant advantage.

The AVP - Perimeter Security Build Engineer seats within the Perimeter Security Services Team, focusing on maintaining next generation, large scale perimeter security solutions for the enterprise globally. The purpose is to ensure the overall health and integrity of Citi’s network and perimeter defence.

In this role you will be responsible to work on various large scale security initiatives, establish and utilize processes for perimeter security lifecycle management, influence stakeholders and drive the general security posture along with various peer groups and organizations.

As an Perimeter Security Build Engineer you will

• Configure, deploy and integrate firewall and remote access infrastructure for Citi environment
• Work with aligned technology teams to ensure deployment and decommissioning of devices happen according to approved Citi standard build baselines
• Perform troubleshooting related to project rollouts
• Create and maintain documentation and reports for the configuration procedures & support checklists
• Perform process review, reengineering and standardization to ensure risk-free efficiency
• Work with perimeter security engineering and vendors on understanding and utilizing standard builds
• Participate in new product/solution testing and rollout

Ideal background

• 3+ years of experience with multiple security disciplines and understanding of perimeter security solutions and concepts
• Experience with Check Point, Juniper SSL and Palo Alto firewall solutions
• Unix / linux experience
• Advanced written and verbal English communications skills
• Stakeholder management skills, with ability to communicate with stakeholders of varying seniority across business and technical functions.
• University degree or certifications in a relevant cyber security / networking area

Benefits

• exposure to a broad range of investment technology businesses and products
• access to our world-class testing lab with physical hands on using hundreds of devices in the IT security ecosystem
• competitive compensation package
• access to Citi’s huge training database and subscription to external online trainings
• a socially active team and communities with diverse networking opportunities

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Responsibilities:

• Designing, implementing, and managing security solutions to protect against cyber threats while ensuring seamless IT Infrastructure, Servers and Applications performance.
• Continuously optimize existing IT Infrastructure, Servers and Applications security policies and models, monitor and respond to threat detection event alerts and response handling, and enhance overall detection levels and coverage.
• Be responsible for vulnerability management (CVE, CVSS, OWASP Top 10), container, network & systems security, as well as cloud security tools and services
• Design, configure, and maintain firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and other security devices.
• Monitor and analyze security events and logs to identify potential vulnerabilities and incidents.
• Threat Prevention & Incident Response: Identify, investigate, and resolve security breaches and incidents.
• Develop and implement strategies to mitigate identified risks and vulnerabilities.
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Conduct regular audits of IT Infrastructure, Servers and Applications security to ensure compliance with security policies.
• Maintain compliance with industry standards such as ISO 27001, GDPR, or SOC 2.
• Create and maintain detailed network diagrams and security documentation.
• Work closely with IT teams to ensure robust security integration across systems.
• Educate employees on security best practices and emerging threats.
• Manage tools like SIEM, antivirus solutions, IDS/IPS and DLP software.
• Stay updated with the latest technologies, trends, and vulnerabilities in cybersecurity.

Requirements:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Relevant certifications (e.g., CISSP, CEH, CCNP Security, Palo Alto PCNSA) are a plus but not mandatory.
• 7 to 12 years of experience in the designing, implementing, and managing of IT Infrastructure, Servers and Applications security according to industry standards such as ISO 27001, GDPR, or SOC 2.
• Expertise in one or more IT Security Engineering topics, such as Secure Browsing, PAM, PKI, or Multifactor Authentication.
• Proven ability to contribute to the development of architecture, concepts, and processes in IT security.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.), firewalls, VPNs, intrusion detection / prevention systems (IDS/IPS), vulnerability management (CVE, CVSS, OWASP Top 10) and etc.
• Proficiency in firewall technologies (e.g., Fortinet, Palo Alto, Cisco ASA).
• Experience with vulnerability scanning tools and penetration testing.
• Experienced with cloud environments and cloud security principles. Knowledge in AWS/Azure cloud security tools and services.

Role Description

AtomIT Networks Pte Ltd is seeking a highly skilled and motivated Cyber Security Engineer to join our team in Singapore. This is a full-time, on-site role requiring hands-on expertise in Cybersecurity operations and solutions delivery. The Cyber Security Engineer will play a pivotal role in safeguarding our clients' networks, systems, and data against sophisticated cyber threats and vulnerabilities. This position demands a dynamic professional capable of operating in a fast-paced environment with 24x7 standby responsibilities to respond to critical incidents and ensure uninterrupted security operations.

Key Responsibilities

• Design, implement, and manage robust cybersecurity measures to protect networks, applications, and systems.
• Regularly monitor latest cybersecurity news and proactively identify & mitigate potential security risks.
• Monitor and analyze network traffic, logs, and alerts to detect and respond to security incidents promptly.
• Collaborate with cross-functional teams to align security strategies with business objectives.
• Create and update detailed documentation, including implementation plan, procedures, and incident reports.
• Stay updated with emerging threats and security technologies to implement proactive defenses.
• Provide 24x7 standby duty support to address urgent security incidents and maintain system integrity.

Qualifications

• Proven expertise in Cybersecurity, Network Security, and Information Security.
• Proficiency in security technologies such as firewalls, SD-WAN, IDS/IPS, WAF, SIEM, ZTNA, SASE, EDR and etc.
• Familiarity with cloud security across platforms like AWS, Azure, or GCP.
• Relevant certifications such as Fortinet NSE, Cisco CCNP Security, CISSP, CEH, AWS & Azure Security Specialization, or equivalent are highly desirable.
• Strong analytical skills and the ability to troubleshoot complex security challenges.
• Excellent communication and collaboration skills with a proactive, detail-oriented mindset.
• Hands-on experience in Vulnerability Assessment, threat modeling, and risk analysis is a plus point.
• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• Priority will be given to Singapore Citizens and Permanent Residents.

Summary

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other’s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It’s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you’ll do more than join something — you’ll add something. There is a lot that goes into building the most secure yet user-friendly devices in the world. We are a unique Software Development group with a charter to secure our platforms, which include iOS software, iOS Devices, and Mac. We build solutions that are used by our customers, engineering teams, and manufacturing environments. We are looking for a candidate who is passionate about both software and hardware security and enjoys highly technical, hands-on role in a dynamic and fast paced environment. This role will be responsible for testing and securing the Software Development Life Cycle, world-wide hardware manufacturing ecosystem and associated global IT infrastructure. As a member of our fast-paced group, you will have the unique and rewarding opportunity to shape and improve the software that allows our products to surprise and delight billions of Apple’s customers every day. If you’re excited by the idea of making a real impact, and joining a team where we pride ourselves in being one of the most diverse and inclusive companies in the world, a career with Apple will be your dream job.

Description

Our organisation provides security server-side solution to enable various Apple product security features. As part of security team in this organisation, we are looking for someone who can drive advancements in security practices, proactively identifying security vulnerabilities, fortifying our platforms against emerging threats and enabling continuous innovation. The existing scope of the work includes the following and will be expanded with emerging new technology and new business initiatives.

• Perform penetration testing and vulnerability assessments on software applications, API services, and infrastructure.
• Develop and execute new test plans, methodologies, and tools for assessing hardware and software security.
• Conduct static code analysis to identify and triage application security issues. Work closely with DevOps and engineering teams to remediate application security vulnerabilities and implement security best practices throughout the Software Development Life Cycle (SDLC).
• Perform reverse engineering and forensic analysis on software & hardware to identify security vulnerabilities and its exploitability.
• Rotate between red and blue functions and conduct simulated attacks & defence. Develop security strategies, frameworks, tools, and processes to assess and improve security posture of the organisation.
• Collaborate with hardware design teams to integrate security best practices during product development.
• Document findings, prepare comprehensive reports, and provide detailed security recommendations for remediation.
• Fulfil on-call responsibilities for handling security-related incidents.
• Continuous learning and conduct security research to stay updated on the latest threats, vulnerabilities, attack vectors, and mitigation techniques.

Minimum Qualifications

• Understanding of fundamental IT domains including Networking, Operating Systems, Security Principles, Secure Coding Practices, Cryptography and System Administration.
• Hands-on experience in security penetration testing, red team exercises, Capture The Flag (CTF) competitions or security related hackathons.
• Understanding of software development and secure coding best practices.
• Respect diversity and inclusiveness in a global organisation with ability to collaborate and communicate effectively
• Ability to analyse complex problems, explore the greenfield and devise creative solutions.
• Willingness and ability to travel internationally (up to 1 weeks at a time).
• Strong team player with adaptability

Preferred Qualifications

• Knowledge in reverse engineering and exploit development.
• Understanding of cryptographic algorithms, secure boot, secure firmware update mechanisms is a plus.
• Understanding of hardware architecture, microcontrollers, processors, and firmware development and have knowledge in hardware security tools and techniques (e.g., JTAG, oscilloscopes.) is a plus.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services,

and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you

could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems,

and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything

we create is the result of people in different roles and teams working together to make each other’s ideas

stronger. That same passion for innovation that goes into our products also applies to our practices,

strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the

Threat Analysis and Incident Response function. A successful candidate will possess a proven technical

background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You

will work with a global team of security professionals on a follow-the-sun model with a primary focus on the

identification, containment, and mitigation of security incidents. This role is an integral part of the security controls

Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology

and processes with global reach. Apple is an Equal Opportunity Employer that is committed to inclusion and

diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants,

including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or

retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job

application or interview process, to perform essential job functions, and to receive other benefits and privileges of

employment. Please contact us to request accommodation.

Minimum Qualifications

More than 7 years of experience in Information Security with a focus on Incident Response, Security

Engineering, and/or Intrusion Detection

Proficient understanding of incident response automation strategies, with demonstrated ability to implement

them

Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors

Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues

In-depth technical knowledge of macOS or Linux Operating Systems

Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze

endpoint, network, and application logs

Proficient in one or more programming/scripting languages

Excellent verbal and written communication skills

Preferred Qualifications

Experience with disk and memory forensic tools

Experience writing and tuning IDS signatures

Experience triaging malware