Total 832 operations engineer job vacancies in Legal / Public / Security category in Singapore

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

· Act as Incident first responder for a 24/7 staffed SOC.

· Monitor security sensors and review logs to identify network anomalies or intrusions.

· Perform initial analysis of security alerts.

· Escalate security incidents using established policies and procedures in a timely manner.

· Work with customers to analysis potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s).

· Performing Response action based on standardize workflow and agreement with clients.

· Assist with the development of incident response plans, workflows, and SOPs.

· Provide threat and vulnerability analysis security advisory services.

· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management.

We are looking for an experienced IT Security Engineer to join our team. This role offers an opportunity to contribute to cutting-edge IT security solutions, support essential service operations, and play a key role in process automation strategies. If you thrive in complex, highly regulated environments and possess a proactive approach to problem-solving, we’d love to hear from you.

Responsibilities:

• Design, implement, and support team process automation strategies to optimize workflow efficiency.
• Collaborate with service stakeholders to analyze and develop new features.
• Implement and enhance IT Security Services, ensuring continual improvement.
• Analyze and troubleshoot errors, incidents, and user-reported issues.
• Maintain and update system technical documentation, primarily using Confluence.
• Apply best practices to maintain high standards of IT security.
• Participate in an on-call duty rotation to ensure service reliability.

Requirements:

• Expertise in one or more IT Security Engineering topics, such as Secure Browsing (Zscaler), PAM (Privileged Access Management), PKI (Public Key Infrastructure), or Multifactor Authentication.
• Proven ability to contribute to the development of architecture, concepts, and processes in IT security.
• Highly proactive, solution-focused, and results-driven, with strong abstract and conceptual thinking skills.
• Capable of independently assessing, prioritizing, and resolving outstanding tasks and requests.
• Operational or engineering-level experience (2nd and 3rd level) with IT Security Services.
• Experience working in complex, highly regulated environments, preferably within the financial sector.
• Proficiency in both Windows and Linux administration.
• Hands-on experience with automation tools and scripting languages such as Ansible, Python, Bash/Shell, Terraform, and version control systems like GIT.
• Familiarity with REST APIs and Regular Expressions.

This is an initial 1-year contract role that will get converted to a perm role based on performance.

Job Responsibilities

• Plan and monitor the day-to-day manpower schedule and the operations of the respective sites
• Proactively address client complaints, feedback, and inquiries to ensure exceptional service and satisfaction.
• Swiftly implement immediate responses to cover manpower shortages at various sites, ensuring continuous security coverage.
• Facilitate on-the-job training (OJT) for newly recruited security personnel and conduct refresher sessions on standard operating procedures (SOPs).
• Step in to cover for security officers who are on leave or absent at short notice, maintaining operational continuity.
• Effectively manage and resolve security-related issues at deployment sites to uphold safety standards.
• Conduct thorough security and safety risk assessments to identify vulnerabilities and enhance site security.
• Compile and prepare detailed operational reports to provide insights into security performance and operational effectiveness.
• Conduct investigations into incidents reported by the security team, reviewing incident reports and preparing after-action reviews (AAR) to improve future responses.
• Regularly manage and evaluate security procedures to ensure compliance with industry standards and best practices.
• Lead and handle a team of Patrol Officers & Control Room Operators
• Report to Operations Manager / Operations Director
• Other ad hoc requirements by the company

Job Requirements:

• PWM SS Rank & above
• Min 2 years of working experience in the security industry
• Class 3 Licence
• Own vehicle preferred
• Flexible and able to handle stress
• Good interpersonal & communication skill
• Computer literate
• 6 days work week

Interested applicants, please email to [email protected]

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

 Responsibilities:

Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.

Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.

Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.

Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.

Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.

Stay connected with the latest security trends throughout various industry verticals.

Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Preferred Qualifications (PQs):

• At Least 7 years of security architecture and/or security engineering experience
• Hands on and deep knowledge of security principles.
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
• Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
• Strong practical experience securing Kubernetes and containerised workloads.

Responsibilities:

- Design and implement integration solutions for various physical security systems, including access control, video surveillance, intrusion detection, video analytics and alarm systems

- Ability to understand and address customer requirements and translate them into technical solutions

- Collaborate with product teams to address specific customer needs and feedback

- Design and propose security technology solutions tailored to different verticals

- Collaborate with cross-functional teams to gather requirements and define project scope

- Conduct site surveys and assessments to determine integration needs and best practices

- Conduct POC, demo, testing and setup of security system and video analytics

- Manage and execute projects with strong project management skills

- Develop documentation, including system specifications, integration plans, and user manuals

- Stay updated on industry trends, technologies, and best practices related to physical security

Requirements:

- Bachelor’s degree in Computer Science, Engineering, or a related subject

- Programming skills in Python, C++ and/or Javascript

- Fullstack experience is strongly preferred

- Strong understanding of networking, database management, and software integration

- Familiarity with industry standards and protocols (e.g., ONVIF, BACnet, etc.)

Nice to have:

- Professional experience working with VMS systems and integrating 3rd party solutions

- B2B (Business-to-Business) experience in physical security

- Technical security system certifications (I.e., Gallagher, Genetec, BICSI, Milestone) and/or related IT (i.e., CCNA) certifications preferred

- Possess market knowledge in physical security industry for verticals ie. transportation, commercial building, hospitality, etc.

Role Responsibilities

• Perform on-prem and cloud system management in Microsoft, Virtual (VMWare or Hyper-V), Azure and Microsoft 365 cloud infrastructure such as Exchange Online,SharePoint, Teams, etc
• Participate in design, system set-up and configuration, implementation and deployment of new server and Azure/AWS Cloud Technologies
• Maintains hardware, software and network firewalls and encryption protocols.
• Administers cybersecurity policies to control physical and virtual access to systems.
• Performs network security audits and testing and evaluates system security configurations to ensure efficacy and compliance with policies and procedures.
• Maintaining and supporting ISO/IEC27001 activities
• Responds to cybersecurity breaches, identifies intrusions and isolates, blocks and removes unauthorized access.

Requirements / Qualification

• Possess a Degree/Diploma in IT or equivalent
• Experience in leveraging industry standards and frameworks such as ISO/IEC 27001
• Hands-on experience on administrating Microsoft 365 cloud technologies such as Exchange Online, SharePoint Online, Microsoft Defender and Microsoft Intune
• Hand-on experience with implementing and configuring Azure/AWS cloud technologies such as virtual machines, application services, load balancer, SQL Managed Instance, site to site VPN, storage solutions, network, security, logging and monitoring
• Working knowledge in one or more security and privacy domains such as: security governance policies and procedures, risk management, compliance, access control, network

Job Description & Requirements

· Act as Incident first responder for a 24/7 staffed SOC.

· Monitor security sensors and review logs to identify network anomalies or intrusions.

· Perform initial analysis of security alerts.

· Escalate security incidents using established policies and procedures in a timely manner.

· Work with customers to analysis potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s).

· Performing Response action based on standardize workflow and agreement with clients.

· Assist with the development of incident response plans, workflows, and SOPs.

· Provide threat and vulnerability analysis security advisory services.

· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

• Execution of service and maintenance workflow
• Liaise closely with client representatives on all service/maintenance related issues
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities
• Manage day-to-day client interactions and expectations for optimal results
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises
• Familiarize yourself and deliver customer satisfaction base on each client’s business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act
• Perform any other technical tasks as and when required

Requirements

• Min Diploma or Higher Nitec in Mechatronics/Electrical/Electronic Engineering or relevant with at least 2 years working experience
• Hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must
• Hands-on experience in security system configuration, application programming and integration with third-party systems will be an advantage
• Technology savvy (hardware & software)
• Problem solving skills
• Must be a team player

Summary

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other’s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It’s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you’ll do more than join something — you’ll add something. There is a lot that goes into building the most secure yet user-friendly devices in the world. We are a unique Software Development group with a charter to secure our platforms, which include iOS software, iOS Devices, and Mac. We build solutions that are used by our customers, engineering teams, and manufacturing environments. We are looking for a candidate who is passionate about both software and hardware security and enjoys highly technical, hands-on role in a dynamic and fast paced environment. This role will be responsible for testing and securing the Software Development Life Cycle, world-wide hardware manufacturing ecosystem and associated global IT infrastructure. As a member of our fast-paced group, you will have the unique and rewarding opportunity to shape and improve the software that allows our products to surprise and delight billions of Apple’s customers every day. If you’re excited by the idea of making a real impact, and joining a team where we pride ourselves in being one of the most diverse and inclusive companies in the world, a career with Apple will be your dream job.

Description

Our organisation provides security server-side solution to enable various Apple product security features. As part of security team in this organisation, we are looking for someone who can drive advancements in security practices, proactively identifying security vulnerabilities, fortifying our platforms against emerging threats and enabling continuous innovation. The existing scope of the work includes the following and will be expanded with emerging new technology and new business initiatives.

• Perform penetration testing and vulnerability assessments on software applications, API services, and infrastructure.
• Develop and execute new test plans, methodologies, and tools for assessing hardware and software security.
• Conduct static code analysis to identify and triage application security issues. Work closely with DevOps and engineering teams to remediate application security vulnerabilities and implement security best practices throughout the Software Development Life Cycle (SDLC).
• Perform reverse engineering and forensic analysis on software & hardware to identify security vulnerabilities and its exploitability.
• Rotate between red and blue functions and conduct simulated attacks & defence. Develop security strategies, frameworks, tools, and processes to assess and improve security posture of the organisation.
• Collaborate with hardware design teams to integrate security best practices during product development.
• Document findings, prepare comprehensive reports, and provide detailed security recommendations for remediation.
• Fulfil on-call responsibilities for handling security-related incidents.
• Continuous learning and conduct security research to stay updated on the latest threats, vulnerabilities, attack vectors, and mitigation techniques.

Minimum Qualifications

• Understanding of fundamental IT domains including Networking, Operating Systems, Security Principles, Secure Coding Practices, Cryptography and System Administration.
• Hands-on experience in security penetration testing, red team exercises, Capture The Flag (CTF) competitions or security related hackathons.
• Understanding of software development and secure coding best practices.
• Respect diversity and inclusiveness in a global organisation with ability to collaborate and communicate effectively
• Ability to analyse complex problems, explore the greenfield and devise creative solutions.
• Willingness and ability to travel internationally (up to 1 weeks at a time).
• Strong team player with adaptability

Preferred Qualifications

• Knowledge in reverse engineering and exploit development.
• Understanding of cryptographic algorithms, secure boot, secure firmware update mechanisms is a plus.
• Understanding of hardware architecture, microcontrollers, processors, and firmware development and have knowledge in hardware security tools and techniques (e.g., JTAG, oscilloscopes.) is a plus.

Requirements

The role requires handling of measurement and detection equipment for military and homeland security. The ideal candidate should possess strong IT skills including, software installation and configuration. The resposibilities includes managing sales product inquiries, overseeing post-sales equipment delivery, performing regular maintenance, and conducting diagnostic analyses for troubleshooting and repair. A keen learning attitude and strong problem-solving ability are essential in this position. The candidate will also be expected to prepare basic reports. Effective communication and interpersonal skills will be important for maintaining and strengthening existing customer relations.

As a Cloud Security Engineer, you will deliver expert technical guidance to customers adopting Google Cloud services. This role involves sharing best practices for secure foundational cloud implementations, automating infrastructure and application provisioning, and designing cloud-ready application architectures. You will provide prescriptive guidance to ensure customers maximize the benefits of Google Cloud Platform (GCP) and deliver an exceptional experience as they migrate, build, modernize, and maintain applications on Google Cloud. Additionally, you will collaborate closely with Product Management and Engineering teams to drive improvements in Google Cloud products and features.

Job Responsibilities:

• Serve as a trusted advisor to customers, offering deep expertise in cloud security and tackling complex cloud security and compliance challenges.
• Partner with customers to design and implement secure cloud architectures and solutions that exceed their security requirements, through in-depth discussions, strategic recommendations, and hands-on implementation in Google Cloud.
• Develop and deliver best practices, tutorials, blog articles, sample code, and technical presentations tailored to different business and technical audiences.
• Communicate effectively via video conferencing for meetings, technical reviews, and onsite engagements.
• Manage senior stakeholders within customer environments to build consensus and drive successful outcomes on the Google Cloud platform.
• Stay current with industry trends and security best practices across various sectors.
• Travel regularly (up to 30%) within the region for meetings, technical reviews, and onsite engagements, with frequent use of video conferencing.

Job Requirement:

• Bachelor’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
• Proficiency in coding in one or more general-purpose programming languages.
• Experience managing customer projects to completion in collaboration with engineering teams, sales, and partners.
• Proven experience in architecting, developing, or maintaining secure cloud solutions.
• Excellent verbal and written communication skills in English and Mandarin Chinese, with the ability to create high-quality technical documentation and presentation materials.

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

· Act as Incident first responder for a 24/7 staffed SOC.

· Monitor security sensors and review logs to identify network anomalies or intrusions.

· Perform initial analysis of security alerts.

· Escalate security incidents using established policies and procedures in a timely manner.

· Work with customers to analysis potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s).

· Performing Response action based on standardize workflow and agreement with clients.

· Assist with the development of incident response plans, workflows, and SOPs.

· Provide threat and vulnerability analysis security advisory services.

· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management.

Standard/Basic Security Role Duties & Responsibilities

• Assist in implementing and coordinating operational workflow for security systems operations
• Support APAC physical security team regarding emergency situations, and submit a comprehensive security report post-event
• Support development and maintenance of assigned policies and procedures
• Contribute to the development of local security and global security policies and procedures, as required, such as business continuity, screening standards, warehouse security guidelines and IT information security (Intellectual Property)
• Support Security intelligence monitoring and understand the external security threats levels as well as their impact on Micron in the context of its activities, review the physical security risk assessment, identify and implement mitigating actions
• Maintain monthly program of security tests and checks to identify further risks or weaknesses to the security systems
• Support raising security awareness across Micron assets in APAC by providing induction and training to enable Micron team members, delegates, contractors and visitors to carry out their activities in compliance with requirements of the physical security policies and procedures
• Support procurement procedures for security related matters and contract management, agreeing and monitoring service level agreements and key performance indicators
• Troubleshoot Access Control System & CCTV system or work with security vendor to resolve issues
• Liaison with APAC team on any global or regional projects
• Perform any other duties assigned by the Country Security Manager or his higher report
• Assist the Country Security Manager and the site security operations teams on matters related to security system state/health, and has basic responsibility towards crisis management, security incident response, health & safety emergencies and procedures
• Provide input to the site security lead and Country Security Manager on the work plan and activities related to the security system planning, reporting and budget monitoring
• The security specialist can and will be the backup together with the site security leads; to manage the security portfolio when the Country Security Manager is away.
• Be the security representative during the Country Security Manager or site leads’ absence to engage with stakeholders

Work Experience & Preferred Qualification:

• Min 2 years' relevant working experience
• Preferably with a diploma in any discipline

Responsible for overseeing the technical operations of physical security system at Micron APAC premises. Day to day responsibility over security systems operations and ensuring that all security services provided by third-party contractors are well-managed as per performance benchmarks and to ensure security systems like Access Control System, Visitor Management System (VMS), Alarm Monitoring system, CCTV are operational and in good state/health. This role also requires collaboration with APAC physical security team on their country security system health and collaboration with Global Technical Manager on security projects as well as initiatives pertaining to security system in APAC.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services,

and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you

could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems,

and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything

we create is the result of people in different roles and teams working together to make each other’s ideas

stronger. That same passion for innovation that goes into our products also applies to our practices,

strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the

Threat Analysis and Incident Response function. A successful candidate will possess a proven technical

background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You

will work with a global team of security professionals on a follow-the-sun model with a primary focus on the

identification, containment, and mitigation of security incidents. This role is an integral part of the security controls

Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology

and processes with global reach. Apple is an Equal Opportunity Employer that is committed to inclusion and

diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants,

including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or

retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job

application or interview process, to perform essential job functions, and to receive other benefits and privileges of

employment. Please contact us to request accommodation.

Minimum Qualifications

More than 7 years of experience in Information Security with a focus on Incident Response, Security

Engineering, and/or Intrusion Detection

Proficient understanding of incident response automation strategies, with demonstrated ability to implement

them

Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors

Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues

In-depth technical knowledge of macOS or Linux Operating Systems

Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze

endpoint, network, and application logs

Proficient in one or more programming/scripting languages

Excellent verbal and written communication skills

Preferred Qualifications

Experience with disk and memory forensic tools

Experience writing and tuning IDS signatures

Experience triaging malware

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

About TikTok

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

About Trust & Safety

Building a world where people can safely discover, create and connect. The Trust & Safety (T&S) team at TikTok helps ensure that our global online community is safe and empowered to create and enjoy content across all of our applications. We have invested heavily in human and machine-based moderation to remove harmful content quickly and often before it reaches our general community.

It is possible that this role will be exposed to harmful content as part of the core role/as part of project/ in response to escalation requests/by chance.

This may occur in the form of images, video, and text related to every-day life, but it can also include (but is not limited to) bullying; hate speech; child safety; depictions of harm to self and others, and harm to animals.

About the team

As a Child Safety Operation Specialist within the Trust & Safety Team, you’ll be part of a global team that ensures the timely detection and removal of content across the broad spectrum of online child endangerment, such as child sexual abuse and exploitation. Through close partnerships with Legal, Policy, and Product & Process teams, you will manage global time-sensitive escalations, and child endangerment incidents to protect our online community.

You will also work closely with internal teams to create and streamline business and operational processes, develop detailed documentation and process diagrams, and increase our overall operational efficiency to ensure our products are free of any violative content. The team is seeking a candidate with a strong work ethic, excellent judgment, exceptional partnering skills and a passion for protecting children.

Note: This position will include reviewing content and writing policies for some materials that may be offensive or sensitive to some people.

Responsibilities

- Demonstrate operational excellence on a team that evaluates risk, threats, and user safety in time-critical escalations.

- Be aware of and willing to operate in a work environment with sensitive content that includes child sexual abuse and exploitation, and other content that may be considered offensive or disturbing.

- Review user escalations related to the most vulnerable in our community.

- Review and assess inbound escalations from Law Enforcement and other teams.

- Execute instant decision-making while analyzing a variety of factors that include imminence of danger, sensitivities, and graphic content and coordinate with a number of internal and external partners including law enforcement in an attempt to ensure user’s safety.

- Availability to work on weekends on a rotational basis or a regular schedule of either Tuesday-Saturday or Sunday-Thursday.

Qualifications

Minimum Qualifications

- English proficiency is required along with professional working proficiency in Bengali / Urdu / Arabic as this role will be covering the South Asian market.

- Up to 5 years hands on experience from either an Investigative or Trust and Safety Analytical role, working on online abuse or similar related field of work.

- Experience in reviewing or being exposed to sensitive content and a deep understanding of removal workflow calibrations and escalations management.

- Proven ability to analyze information to assess threat and risks, and problem solving skills.

- Proven ability to make important decisions independently and multi-task under pressure, responding quickly to changing situations in complex environments without compromising quality.

- Excellent verbal and written communication skills and ability to adapt communication style to suit different stakeholders like cross-functional teams and law enforcement partners.

- Passionate about protecting children.

Preferred qualifications

- Experience with Crisis Management, Government Agencies or Law Enforcement would be advantageous.

- Knowledge of child safety policies and/or legislation.

- Experience with social media, analytical tools, and online research.

- Your ability to work in a high tempo environment, adapt, respond to day-to-day challenges of the role.

- Your resilience and commitment to self-care to manage the emotional demands of the role.

Trust & Safety recognises that keeping our platform safe for TikTok communities is no ordinary job which can be both rewarding and psychologically demanding and emotionally taxing for some. This is why we are sharing the potential hazards, risks and implications in this unique line of work from the start, so our candidates are well informed before joining.We are committed to the wellbeing of all our employees and promise to provide comprehensive and evidence-based programs, to promote and support physical and mental wellbeing throughout each employee's journey with us. We believe that wellbeing is a relationship and that everyone has a part to play, so we work in collaboration and consultation with our employees and across our functions in order to ensure a truly person-centred, innovative and integrated approach.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

#LI-Onsite

About TikTok

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

About Trust & Safety

Building a world where people can safely discover, create and connect. The Trust & Safety (T&S) team at TikTok helps ensure that our global online community is safe and empowered to create and enjoy content across all of our applications. We have invested heavily in human and machine-based moderation to remove harmful content quickly and often before it reaches our general community.

It is possible that this role will be exposed to harmful content as part of the core role/as part of project/ in response to escalation requests/by chance.

This may occur in the form of images, video, and text related to every-day life, but it can also include (but is not limited to) bullying; hate speech; child safety; depictions of harm to self and others, and harm to animals.

About the team

As a Child Safety Operation Specialist within the Trust & Safety Team, you’ll be part of a global team that ensures the timely detection and removal of content across the broad spectrum of online child endangerment, such as child sexual abuse and exploitation. Through close partnerships with Legal, Policy, and Product & Process teams, you will manage global time-sensitive escalations, and child endangerment incidents to protect our online community.

You will also work closely with internal teams to create and streamline business and operational processes, develop detailed documentation and process diagrams, and increase our overall operational efficiency to ensure our products are free of any violative content. The team is seeking a candidate with a strong work ethic, excellent judgment, exceptional partnering skills and a passion for protecting children.

Note: This position will include reviewing content and writing policies for some materials that may be offensive or sensitive to some people.

Responsibilities

- Demonstrate operational excellence on a team that evaluates risk, threats, and user safety in time-critical escalations.

- Be aware of and willing to operate in a work environment with sensitive content that includes child sexual abuse and exploitation, and other content that may be considered offensive or disturbing.

- Review user escalations related to the most vulnerable in our community.

- Review and assess inbound escalations from Law Enforcement and other teams.

- Execute instant decision-making while analyzing a variety of factors that include imminence of danger, sensitivities, and graphic content and coordinate with a number of internal and external partners including law enforcement in an attempt to ensure user’s safety.

- Availability to work on weekends on a rotational basis or a regular schedule of either Tuesday-Saturday or Sunday-Thursday.

Qualifications

Minimum Qualifications

- English proficiency is required along with professional working proficiency in Bengali / Urdu / Arabic as this role will be covering the South Asian market.

- Up to 5 years hands on experience from either an Investigative or Trust and Safety Analytical role, working on online abuse or similar related field of work.

- Experience in reviewing or being exposed to sensitive content and a deep understanding of removal workflow calibrations and escalations management.

- Proven ability to analyze information to assess threat and risks, and problem solving skills.

- Proven ability to make important decisions independently and multi-task under pressure, responding quickly to changing situations in complex environments without compromising quality.

- Excellent verbal and written communication skills and ability to adapt communication style to suit different stakeholders like cross-functional teams and law enforcement partners.

- Passionate about protecting children.

Preferred qualifications

- Experience with Crisis Management, Government Agencies or Law Enforcement would be advantageous.

- Knowledge of child safety policies and/or legislation.

- Experience with social media, analytical tools, and online research.

- Your ability to work in a high tempo environment, adapt, respond to day-to-day challenges of the role.

- Your resilience and commitment to self-care to manage the emotional demands of the role.

Trust & Safety recognises that keeping our platform safe for TikTok communities is no ordinary job which can be both rewarding and psychologically demanding and emotionally taxing for some. This is why we are sharing the potential hazards, risks and implications in this unique line of work from the start, so our candidates are well informed before joining.We are committed to the wellbeing of all our employees and promise to provide comprehensive and evidence-based programs, to promote and support physical and mental wellbeing throughout each employee's journey with us. We believe that wellbeing is a relationship and that everyone has a part to play, so we work in collaboration and consultation with our employees and across our functions in order to ensure a truly person-centred, innovative and integrated approach.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

#LI-Onsite

Company Overview:

Traveloka is a leading technology company that provides a one-stop travel and lifestyle platform for customers in Southeast Asia. Our platform offers a wide range of travel-related services, including flight and hotel bookings, activities, attractions, and more. With a mission to empower travelers with seamless experiences, we're committed to pushing the boundaries of technology and innovation in the travel industry.

It's fun to work in a company where people truly BELIEVE in what they're doing!

Job Description:

As a leading travel technology company, Traveloka manages a vast ecosystem of APIs, microservices, cloud infrastructures, and front-end applications (web and mobile) that serve millions of users worldwide. On the back side, we operate large-scale data pipelines and internal business operations, many are engineered in-house, which require robust security measures to protect user data, intellectual property, and sensitive corporate information.

The Security Engineering Manager will take a holistic approach to safeguarding our engineering assets, working and managing across multiple teams including DevSecOps, Product Security, and Offensive Security. Success in this role requires strong analytical, problem-solving, and leadership abilities, as well as the capacity to think from defensive, offensive, and engineering perspectives to craft tailored security solutions for our unique environment. The ideal candidate will not only be proficient in using readily available or off-the-shelf tools but will also have the expertise to assess when and how custom security tools need to be developed and maintained with a software engineering perspective to address specific challenges.

Requirements:

• Proven experience managing Security Engineering or Software Engineering teams, with at least 7 years of extensive expertise in cybersecurity.
• Strong background in leading cybersecurity or software development projects using agile methodologies.
• Experience securing applications in fast-paced environments with frequent changes.
• Proficient in general-purpose programming languages (e.g., Python) and Object-Oriented Programming (e.g., Java).
• Hands-on experience with cloud platforms like AWS and GCP, including platform- specific security features and common security tools.
• Familiarity with modern technologies such as containerization, managed container services, serverless functions, infrastructure as code, API gateways, BFF (Backend for Frontend), CI/CD, and microservices.
• Deep technical knowledge of web, mobile, OS, and network security
• Able to practically demonstrate various security tests and control implementation such as SAST, DAST, SCA, WAF, secure-by-design, and secure application framework.
• Excellent verbal and written communication skills.
• Strong self-initiative to bridge gaps between Software Engineering, Infrastructure Engineering, and Security Engineering, while providing a security framework for the entire technology team and management.
• Commitment to cybersecurity with a dedication to continuous learning and staying updated on new technologies.
• Experience in CTF, bug bounty programs, presenting at security conferences, or publications is a plus.
• Experience with penetration testing, red teaming, or purple teaming is a plus.
• Web development experience or developing security tools is a plus.
• Relevant technical security certifications (e.g., Offensive Security, CREST, SANS GIAC) are a plus

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a video tour of our global network of 24/7 Security Operations Centers (SOCs).

 Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs).

 We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis.

 Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches.

 While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.

 Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within.

 SUMMARY

We are seeking an energetic Security Engineer II to serve as a technical resource and leader. This position has two components and supports both our team that Onboards new customers and our MSS team that manages security devices for our customers. 

Onboarding, 60% of this role:  this part of the position centers on security and availability of customer data as it is brought into the Proficio SIEM. The Security Engineer II will assist in working with new clients as they transition to our ProSOC service. This includes ensuring timely deployment of services, developing a personalized on-boarding strategy for each customer and auditing of systems reporting from the client to our Security Operation Center. 

MSS device configuration/maintenance, 40% of this role:  this part of the position will help ensure delivery of our Elastic Stack Managed Security Services to meet or exceed the defined service levels of our clients. The Security Engineer II will respond to customer requests and act as a trusted technical resource for our clients while striving to maintain high reliability and performance within our customer’s environments. This position also includes managing and optimizing overall IT infrastructure and systems used in the delivery of our Managed Security Services.

 Responsibilities

• Assist in the onboarding and implementation of ProSOC service and Managed Security Services solutions for Proficio clients across industries and geographic locations. 
• Act as a technical liaison between Proficio and its customers during the onboarding process.
• Review technical security posture (network, application, and database) for existing and newly acquired businesses or services.
• Perform security reviews and monitoring of the production environment. 
• Perform the installation and configuration of security monitoring tools in support of our ProSOC service.
• Use out of the box thinking as well as industry standard troubleshooting tools, such as, Wireshark, TCPDUMP, and other tools, to facilitate on-boarding of customer data sources.
• Work with senior staff to evaluate client security devices and make recommendations based on industry standards for security configurations.
• Assist Proficio engineering team with tasks related to the review and development of Managed Security Services related processes and procedures.
• Assist senior staff when they provide Subject Matter Expert (SME) services, engaging directly with clients to perform necessary research, answering questions and making recommendations based on industry standards and best practices.
• Participate in engineering team on-call rotation.

• A Bachelor’s degree in Information Systems, Business, Engineering, or a related field from an accredited institution OR equivalent experience
• 4-5+ years’ experience as a Network Engineer or Security Engineer working with a broad range of technologies
• Minimum 2+ years’ experience in Information Technology IT Security in a SOC or NOC environment working with a broad range of technologies highly preferred.
• Security certification required, such as, Security+ and Network+. Security certification such as SANS/GIAC, CISSP, CISA, CISM are a plus
• Basic Unix or Linux systems administration and command-line experience (Redhat/Linux, FreeBSD, Ubuntu, etc.).
• Experience with Windows Server security logs.
• Experience in the configuration and troubleshooting of IPSec VPN tunnels.
• Knowledge of network analysis tools, such as, Wireshark and TCPDump and SCP.

• Knowledge of UNIX and Windows environments as may pertain to Network and Security tasks including syslog, DNS, load balancers and BIND, BigIP command line on BSD, Windows Event Log.
• Hands-on experience installing, configuring and administering network and security devices, applications and systems
• General understanding of SIEM operations experience with Elasticsearch is a strong plus
• Managed Services experience preferred with a customer focused mindset that is willing to go above and beyond to satisfy a customer requirement absolutely required
• Experience performing vulnerability assessment and remediation using products such as Qualys, Nexpose or Nessus is a plus
• Proficient with Linux (scripting in Bash or Perl is required and Python is a plus)
• Vendor certifications from Palo Alto, Cisco, Juniper etc. are a plus
• Effective time task management skills.
• Strong communications skills, both written and oral
• Ability to participate in on-call rotation for after hours and weekend escalations

 At least 1 years’ experience configuring and/or using the following:

•  Security Management Systems (i.e. Tipping Point SMS, CheckPoint Security Management Server, Cisco Sourcefire Management Console, or JunosSpace)
• Firewalls (Cisco, Palo Alto, Checkpoint, Fortinet, Juniper SRX, or IPTables)
• IDS/IPS (Cisco AIP or Sourcefire, McAffee, Juniper or Tipping Point)
• Linux command line or similar operating system
• Experience with Vulnerability Management Tools
• Wireshark or other similar industry standard application
• Data Encryption using SSH, IPSEC VPN or TLS/HTTPS

• Opportunity to work in a progressive organization with structured training and roadmap for success

• Lunches and fun employee activities!
• Experience in one of the hottest IT industries today

Proficio is an EOE employer.

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 1 to 4 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 4 to 5 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

Job Description

• Oversee day-to-day PKI operations, including the issuance, renewal, and revocation of digital certificates.
• Manage certificate lifecycle in both enterprise and cloud environments.
• Monitor and maintain certificate authorities (CA) and related infrastructure, ensuring high availability and security.
• Implement best practices for secure key management, including key rotation, backup, and recovery processes.
• Support cryptographic hardware devices, such as HSMs (Hardware Security Modules), ensuring proper configuration and compliance.
• Identify and resolve issues related to PKI infrastructure, certificates, and cryptographic hardware.
• Provide Level 1/2 support for PKI-related incidents and requests.
• Document troubleshooting steps and resolutions to improve future responses.
• Ensure PKI operations align with industry standards and regulatory requirements.
• Conduct regular audits of PKI systems and assist with compliance reporting.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).

Experience:

• Minimum of 3 years in IT with a focus on systems administration, networking, or cybersecurity.
• At least 2 years of hands-on experience with PKI or certificate operations
• Strong understanding of PKI concepts, protocols (e.g., TLS/SSL, x.509), and standards (e.g., FIPS, NIST).
• Familiarity with certificate management tools and software.
• Experience with scripting languages (e.g., PowerShell, Python) is a plus.
• Excellent problem-solving skills and attention to detail.
• Effective communication skills to interact with technical and non-technical stakeholders.