Total 94 operations engineer job vacancies in Legal / Public / Security category in Singapore

Step into the role of Security Operations Analyst and contribute to maintaining a robust, secure digital environment through proactive monitoring and response.

As a Security Operations Analyst in the Cybersecurity and Tech Controls, SIEM Operations team, you play a role in safeguarding the firm's digital assets and infrastructure by monitoring, detecting, assessing, and responding to security incidents in real-time. You will apply your general knowledge of cybersecurity principles and practices to identify vulnerabilities, implement security measures, and proactively mitigate potential risks. You will generate influence within your team and contribute to the effectiveness of your team's cybersecurity efforts. Collaborating with cross-functional teams, you will contribute to the development of a coordinated approach to security and help educate employees on best practices, policies, and procedures for maintaining a secure digital environment.

Job responsibilities

• Conduct security research and stay up to date with industry trends, emerging threats, and best practices to enhance the organization's security posture

• Perform log analysis, threat hunting, incident response, and vulnerability impact activities to proactively identify and mitigate potential risks to the firm's digital assets

• Collect evidence from devices, systems, and data, extract relevant information and document initial findings, contributing to recommendations for further investigation or remediation

• Collaborate with cross-functional teams to implement coordinated security measures, policies, and procedures that align with the firm's objectives

Required qualifications, capabilities, and skills

• Bachelor's degree in Computer Science or equivalent

• Formal training or certification on software engineering concepts and at least 1 year of applied experience in cybersecurity operations, network security, or a related field

• Baseline knowledge of cybersecurity operations, security monitoring, incident response, or vulnerability assessment

• Emerging proficiency in scripting for automating tasks and enhancing efficiency

• Foundational understanding of network protocols, security architecture, design principles, and common vulnerability and exposures (CVE) to effectively safeguard digital assets

Preferred qualifications, capabilities, and skills

• Experience with crafting regular expressions (regex)

• Experience reviewing vulnerabilities and the effectiveness of the mitigatory measures

• Possess a basic understanding of cloud architecture and an understanding of how attackers leverage these platforms

• Knowledge of scripting languages like Python, PowerShell, and JavaScript and understanding how scripting languages are used in a cybersecurity context

• Possess the ability to manage fluctuating workloads and conflicting priorities

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=a8d900382723717a35b7dc509cd16017

The suitable candidate will join a team of engineers and operations specialists in the support of enterprise privileged access management infrastructure and operations. He/She will be responsible for the end to end design, deployment, operations and development of the bank’s privileged access management framework, infrastructure and processes.

Key responsibilities

Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.

Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements

5+ Years of CyberArk Experience:

Demonstrated expertise in the deployment, configuration, management, and support of CyberArk infrastructure components. Proven ability to provide regional support and integrate CyberArk solutions via APIs. CyberArk certifications are preferred to validate knowledge and skills.

Scripting and Reporting:

Proficient in writing PowerShell scripts and SQL statements to develop comprehensive management reports focused on the usage and operational management of privileged accounts. This includes automating reporting processes and ensuring accurate data presentation for stakeholders.

Data Visualization: Experienced with Grafana for creating data visualizations and dashboards, enabling real-time insights into access management and security posture. Skilled at translating complex data sets into understandable visual formats for better decision-making.

Privileged Access Management: Strong understanding of enterprise privileged access management principles, encompassing risk management, compliance, governance, and control. Ability to develop and enforce policies that mitigate risks associated with privileged access.

Audit Experience:

Extensive experience in responding to audit queries and preparing detailed reports related to access management. Skilled in analyzing audit findings and implementing corrective actions to address compliance gaps. Proven ability to collaborate with internal and external auditors to ensure all necessary documentation is accurate and readily available.

Remediation Expertise:

Extensive experience in remediating CyberArk failed objects to ensure that auto-managed objects comply with security policies and standards. This includes troubleshooting and resolving issues to maintain operational integrity and compliance.

Technical Platform Knowledge:

In-depth knowledge of key operating systems and databases, including Windows, Unix, MSSQL, and MariaDB. Previous experience in administering these platforms enhances ability to manage and secure privileged accounts effectively.

Banking Environment Experience:

Familiarity with working in a banking or financial services environment, understanding the unique regulatory and security requirements involved. This background supports effective implementation of access management solutions tailored to industry standards.

We are looking for an Operations Executive - Security to oversee daily Visitor Registration Center (VRC) operations, including managing security systems, carpark management equipment, and access control. Additionally, you shall witness e-waste disposal and shredding exercises to ensure compliance.

Key Responsibilities:

• Supervise outsourced security staff and manage daily security operations.
• Operate and maintain security systems, including CCTV, alarm systems, and carpark management system.
• Manage Card Access and Facial Recognition System in creation and updating access credentials.
• Ensure proper functioning of the carpark management equipment and daily car park usage.
• Respond to any incident and breaches quickly and effectively.
• Oversee and witness e-waste disposal and shredding exercises to ensure safe and compliant handling of sensitive materials.
• Any other duties assigned.

Requirements:

• Possess a PLRD License
• Any qualification in security management or a related field.
• Minimum 3 years of experience in security operations.
• Experience with security systems, card access, carpark management, and e-waste disposal.
• Strong leadership, communication, and problem-solving skills.
• Ability to handle emergencies and work under pressure.

About SRS

Founded in 2006, Security & Risk Solutions Pte Ltd (SRS) is a global security solutions provider that started in Singapore.

Today, we operate in Asia Pacific, China, the Middle East, the Africas, Europe, and Latin America, and work with over 90 clients, with a strong presence in the Finance and Technology sectors. SRS understands there is no one-size-fits-all security solution.

We ensure our most valuable asset - our people - maintain a knowledge-driven approach when addressing your security needs, ensuring there is flexibility for customised security solutions while maintaining best-in-class standards and protocol.

An exciting opportunity has emerged for a Security Operations Manager position on a 6 months contract basis.

About the Role

Manages the security function for Southeast Asia under the guidance of the Regional Security Manager, ensuring alignment with overall organizational objectives.

Develops and implements daily operational plans and tactical security strategies with minimal supervision, focusing on risk reduction, incident response, and minimizing exposure to liabilities.

Takes ownership of leading and facilitating meetings with internal and external stakeholders, fostering strong partnerships to ensure the successful coordination and execution of a comprehensive security program across the region.

Responsibilities

Operational Security Management:

• Oversee day-to-day security operations across multiple locations in Southeast Asia.
• Develop, implement, and refine security protocols to address physical, operational, and workplace security needs.
• Monitor regional risks and incidents, ensuring swift responses and comprehensive reporting.

Event and Executive Security:

• Plan and coordinate security measures for events, talent visits, and executive protection requirements.
• Liaise with local security teams, vendors, and external agencies to ensure robust coverage.

Crisis and Risk Management:

• Lead crisis response efforts in the region, working with stakeholders to minimize impact.
• Conduct risk assessments and implement mitigation strategies for identified vulnerabilities.

Security Technology and Asset Protection:

• Oversee the installation, maintenance, and effectiveness of security systems, such as CCTV, access control, and alarm systems.
• Safeguard regional assets, including intellectual property, physical properties, and sensitive information.

Stakeholder Engagement and Partnerships:

• Work closely with internal teams and external agencies to align security initiatives with business goals.
• Build relationships with law enforcement, industry peers, and other stakeholders to strengthen the security ecosystem.

Requirements

• Bachelor’s degree or international equivalent.
• A minimum of 5 years of relevant experience in security operations, crisis management, or asset protection within a multinational environment.
• Experience managing high-profile events and executive protection requirements.
• Certifications such as CPP (Certified Protection Professional), PSP (Physical Security Professional), or equivalent is an advantage.
• Proven ability to work with, influence, manage, and/or lead others in a complex and diverse work environment.
• Basic knowledge of specific requirements imposed by government agencies, and ability to communicate those to LOB’s and personnel to mitigate security issues.
• Demonstrated ability to project manage programs.
• Demonstrated knowledge of security management concepts especially physical security, content security and crisis management/emergency preparedness.
• Highly ethical and professional, with demonstrated ability to handle sensitive/confidential information.
• Demonstrated presentation skills to business operations and management.
• Demonstrated ability to make sound, well considered decisions in stressful situations.
• Fluency in written and spoken English is required.

Role Description

This is a full-time on-site role for a SOC Team Lead located in Singapore. As a SOC Team Lead, you will be responsible to:

• Plan monthly duty roster for site team.
• Cover shift function if there are any shift resources are absent.
• Generate report dashboarding for technical analysis.
• Proficient in Microsoft excel/Power BI.
• Will run operation and work the SOP to ensure the 24X7 Security operations support services operate effectively.
• Responsible for site monthly report and documentations submissions.
• Onboarding/off boarding of manpower resources (1 month).
• Submit monthly timesheet and monthly service report as part of billing documentation timely.
• Work with Main Contractor to ensure security devices or apps are patched and firmware versions are upgraded in accordance with IM8 requirements.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

Role Description

This is a full-time on-site role for a SOC L1 Analyst located in Singapore.

Responsibilities:

• Monitoring and analyzing security events, identifying potential threats, conducting investigations, and responding to security incidents
• Work closely with the end client SOC team to ensure the timely and effective detection, containment, and mitigation of security incidents
• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure).
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits.
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to ensure compliance and regulatory requirements and industry standards.

Requirements:

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role.
• Independent and capable of working in a high-pressure environment.
• Willing to work in rotational shift environment (including weekends and night shift).

The Role

As Senior SOC Analyst (Tier-2), a threat hunter, you will work proactively to seek out weaknesses and stealthy attackers, conduct vulnerability assessments and deal with results. You will also remediate severe incidents from Security Analyst (Tier-1) to assess the impact and affected systems’ scope and collect data for further analysis.

Job Responsibilities

• Lead proactive hunting and analysis against the dataset (e.g., alerts, logs, etc.) and reverse engineering as needed to support Security Operation Centre (SOC) investigations and proactive threat detection and prevention.
• Coordinate and facilitates in-depth analysis, trending, and root cause analysis of security events/incidents while creating and maintaining processes and procedures.
• Perform advanced research on threats, vulnerabilities and potential threat vectors and work with multi-disciplines to improve prevention and detection methods.
• Act as the technical subject-matter-expert for SOC related topics or during incidents,
• Develops and documents the SOC procedures and processes based on industry best practices and internal requirements.
• Support or lead projects to improve SOC effectiveness, advancing technical capabilities on pace with the latest threats.
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed.
• Perform other essential duties as assigned.

Job Requirements

• Bachelor’s degree in IT or equivalent with min. 5 years of working experience and has 3 years of experience leading a SOC team.
• Strong knowledge in networking / major internet protocols and security concepts
• Min. 3 years of experience in cyber incident response and/or Security Operations center in an enterprise environment.
• Min. 2 years of experience with standard enterprise security tools (e.g., Database Activity Monitoring, Zero Trust Segmentation, Security Information & Event Management, Intrusion Detection Prevention System, Endpoint Detection & Response, etc)
• Min. 2 years of operational experience with Splunk or similar log aggregation/analysis platforms
• Expert execution of investigative concepts for escalated incidents to determine the impact and root cause.
• Strong foundation in security threat and attack countermeasure.
• Possess analytical and problem-solving skills, with the ability to manage multiple tasks in a fast-paced environment.
• Hands-on experience in SIEM and intrusion detection analysis as well as application layer protocols.
• Have experience in security related areas. Especially experience and expertise in security incident detection and threat intelligence are proven to be extremely useful.
• Advanced understanding of various operating systems and web technologies with professional security certifications would be a plus.
• Experience in multiple domains within IT or Information Security (e.g. Identity and access management, IT infrastructure operations, Key management, system administration etc.)
• Meticulous, team player, flexible, proactive and positive attitude
• Strong sense of responsibility and initiative.
• Excellent communication and interpersonal skills.
• Work Location: One@ChangiCity

Join a Leading Manufacturing firm as a Cyber Security Engineer / Researcher to develop and improve business cyber security posture. This role is pivotal in ensuring the security and operational effectiveness of the organization

Your New Role:

• Enhance threat detection capabilities and validate SIEM configurations through rigorous testing
• Design, implement, and maintain new technologies and methods to identify and remediate security vulnerabilities
• Create and execute realistic threat scenarios (e.g., malware attacks, insider threats, and data exfiltration) to evaluate SIEM detection rules and correlation capabilities.
• Analyze and interpret logs from various sources (e.g., firewalls, IDS/IPS, endpoints) to identify gaps in coverage and improve detection use cases.
• Develop and implement automated scripts and tools to streamline SIEM testing processes and threat simulations.
• Stay updated on the latest cybersecurity threats, attack techniques, and best practices to enhance test cases and detection capabilities

What You Will Need

• Bachelor’s or Master;s degree in Computer Science, Cyber / Information Security, or a related field (or equivalent experience).
• Strong hands-on experience with implementation and developement of SIEM tools and platforms (e.g., Splunk, ArcSight, QRadar, LogRhythm, ELK and more).
• Strong understanding of cybersecurity frameworks, mitigration strategies and vulnerabilities (e.g., MITRE ATT&CK, NIST, CIS).
• Proficiency in log management, correlation rule creation, and incident detection and incident response best practices
• Experience with scripting languages (e.g., Python, PowerShell, Bash) for automation.
• Certifications such as CISSP, OSCP are highly advantageous

If this interests you, or you know of someone who might fit the bill, please click apply to submit an application or email your updated CV to [email protected].

EA registration No.: R1987315

Employment Agency License No.: 18C9146

Job Description:

• In Charge of designing, deploying, and managing security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Responsible for conducting security audits, compliance checks such as vulnerability assessments with risk analysis
• Taking charge of the development and enforcement of security policies, procedures and controls
• In charge of integrating security measures into new and existing IT systems and applications.
• Responsible in ensuring that applications are securely configured, including hardening default settings, securing APIs, and restricting file permissions.
• Conducting of initial investigations of security violations/incidents, and escalate as necessary
• Collaborating with other IT teams to ensure security is integrated across all systems and processes.
• Work with other contractors where required for delivery of network services
• Any other IT duties as assigned.

Requirements:

• Min Degree in Information Technology, Computer/ Network Engineering or equivalent.
• Minimum 5 years of experience in firewall administration, encryption technologies, and network protocols, designing and implementing security architectures.
• Advanced technical knowledge of security technologies and systems.
• Experience in designing and implementing security architectures.
• Proficiency in vulnerability assessment tools and penetration testing methodologies.
• Possess relevant certifications such as CISSP, CCSP, CEH, or advanced security certifications

Key Responsibilities:

• Professional Deployment and Services: Execute and manage the implementation and upgrading of cybersecurity solutions distributed by the company. Occasionally coordinate with customers and manage project timelines.
• Customized Solutions: Develop and recommend tailored solutions or alternatives to meet specific customer requirements.
• Product Training: Deliver training sessions on company products for customers, partners, and internal teams.
• Installation and Configuration: Perform independent installation and configuration tasks by following product manuals and guidelines.
• Skill Development and Certification: Continuously enhance technical skills by acquiring certifications relevant to the products or technologies managed.
• Domain Expertise: Build subject matter expertise to facilitate knowledge transfer and skill-sharing with the maintenance team, improving customer support capabilities.
• Technical Support: Collaborate with sales and support teams to address technical challenges, including product feature explanations, implementation planning, tender compliance, and ad-hoc technical queries.

Job Requirements:

• Professional Attitude: Maintain a positive and professional approach to work.
• Teamwork and Independence: Able to work both independently and collaboratively within a team.
• Adaptability: Perform effectively under pressure, meet tight deadlines, and thrive in a dynamic environment.
• Educational Background: Possess a Nitec/Higher Nitec certificate, Diploma, or Degree in IT, Information Security, Cybersecurity, or related fields.
• Experience: At least 2 years of experience in IT, Information Security, or Cybersecurity is preferred. Entry-level candidates may be considered for an Associate Engineer position.
• Technical Knowledge: Strong familiarity with technology infrastructures, including but not limited to:Firewalls, VPNs, DLP, IDS/IPS, Web Proxies, DNS, Email Security, Log Management, SIEM
  Virtualization, Containers, AWS, Azure, Google Cloud
  DevOps/DevSecOps, Privileged Account Security, Identity Access Management, Endpoint Security, and CyberArk Conjur
  
• Troubleshooting Skills: Proficient in diagnosing and resolving network and system issues, including:Routing, NAT, VLAN, Multicast, TCP/IP, OSPF, BGP, Active Directory (AD), LDAP, RADIUS, SNMP, Syslog, SMTP, TLS, SSH
  
• Cybersecurity Awareness: Demonstrate a keen interest in staying informed about cybersecurity trends and hacking techniques.
• Certifications (Preferred): Possession of certifications such as Cisco CCNA/CCNP, Check Point CCSE/CCSM, Thales, CyberArk CDE, Trellix, ArcSight ESM/Logger, ITOM, SailPoint, CISSP, CREST, or OSCP is advantageous.
• Programming Proficiency: Knowledge of programming languages such as Python, C++, Java, JavaScript, Ruby, Bash scripting, and PowerShell is a plus.
• Compliance: Adhere to company Information Security Standards.

Job Description:

- To implement and deploy solutions like SIEM, EDR, and NMS:

o Splunk

o QRadar

o Carbon Black EDR

o SolarWinds NMS

o Other new onboarded products or solutions

- To manage and work/liaise with product vendors, partners, and customers in terms of schedule, expectation, and requirements

- To be able to research and stage test environment for project preparation

- To provide consistent and clear communication to external and internal stakeholders

- To provide informal training to partners and customers

Requirements:

- Diploma/Degree in Computer Engineering, Computer Science, Information Systems or equivalent

- Minimum 2 years of relevant work experience in IT security implementation and deployment

- Minimum 1 year of relevant work experience with relevant product deployment

- Good understanding of operating system technology, such as Unix, Linux, and Windows Server

- Good networking & scripting knowledge

- Technically inclined and hands-on

- Good interpersonal skills, independent, proactive and a team player

- Good communication, presentation, and writing skills

- Able to work independently

- Preferably from a System-Integrator or Distributor background

Job Responsibilities:

• Security solution implementation (Products such as SIEM, SOAR, Threat Intel, EDR, BAS, ASM).
• Documentation for project requirements.
• Follow project implementation lifecycle.
• After sales support such as product incident escalation and technical support (24x7 SLA).
• Conduct user training and knowledge transfer session.
• Integration and customization of security solutions.
• Keen in cyber security domain.

Job requirements:

• Strong analytical, problem solving, communication and interpersonal skills.
• Computer Science/Computer Engineering/Information Engineering or equivalent discipline.
• At least 1-2 years’ experience in security system integrator environment.
• Knowledge in programming
• Basic knowledge on networking such as TCP/IP, firewall, switching and routing.
• Working knowledge on various operating system.
• Working knowledge in Database Platform.
• Basic knowledge in PCI/MAS TRM/IM8 compliance (Good to have).
• Working Knowledge in Coding/scripting (YARA-L, Python, Powershell, YAML, XML, etc).
• Basic knowledge in Cloud Services (AWS/AZURE/GCP) with knowledge on containers, stacks, Kubernetes, Dockers (Good to have).
• Senior Role will only be given to relevant experience in this field .

Join a team where you can play a crucial role in shaping the future of a world-renowned company and make a direct and meaningful impact in a space designed for top performers.

As a Senior Lead Security Engineer at JPMorgan Chase within the Cybersecurity & Tech Controls, you are an integral part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

Job responsibilities

• Executes creative security solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions and break down technical problems

• Develops secure and high-quality production code and reviews and debugs code written by others.

• Implement complex business logic in languages such as Python and scripting languages like Bash.

• Executes on key deliverables in the security engineering space, designs and develops production deployments with the ability to think beyond routine or conventional approaches in order to deliver technology solutions for key stakeholders.

• Experienced with systems engineering, systems integrations, and systems administration.

• Has good working knowledge of Windows and Linux systems internals Defines and implements infrastructure as Code (IaC) and automation tooling to deploy third party security software in an enterprise environment.

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science or related disciplines

• Formal training or certification on software engineering concepts and 5+ years applied experience.

• Commanding knowledge of a programming/scripting language such as Python and scripting languages like Bash for automation, integration, and other tasks.

• Proficient in maintaining and managing Splunk application deployed in AWS ensuring high availability, performance and security.

• Extensive experience using Terraform to deploy , manage and scale infrastructure with AWS environment.

• Proficient in all aspects of the Software Development Life Cycle.

• Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.

Preferred qualifications, capabilities, and skills

• Experience effectively communicating with senior business leaders

• In-depth knowledge of the financial services industry and their IT systems

• Experience working within a large-scale or global enterprise

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=e0d8ae6d80a0fab8d7e6aef8defbd100

Role & Responsibilities:

• Develop, implement, and manage security controls to block and mitigate security threats across the IT infrastructure.
• Understanding of perimeter and endpoint security solutions and able to create policies based on requirements.
• Evaluate and perform analysis of the business risks and control environment to identify weaknesses and design the control to operate effectively.
• Regularly review and fine-tune existing policies to ensure they remain effective and up to date with the evolving latest security threats and best practices.
• Collaborate with other teams to ensure policies are aligned with organizational goals and compliance requirements.
• Troubleshooting policies if they are not working as intended.
• Monitor and Analyze Security Events: Continuously monitor security events and alerts, analyze potential threats, and take appropriate actions to prevent security incidents.
• Policy Development: Develop and maintain security policies, procedures, and guidelines to ensure compliance with industry standards and best practices.
• Incident Response: Collaborate with the incident response team to investigate and respond to security incidents, providing expertise on security controls and mitigation strategies.
• Reporting and Documentation: Maintain detailed documentation of security controls, configurations, and incidents. Prepare regular reports on the effectiveness of security controls.
• Training and Awareness: Provide training and guidance to other team members and stakeholders on security controls and best practices.

Skillset (Must have)

• Experience: Work experience in cybersecurity, with a focus on policy creation, monitoring, and incident response.
• Technical Skill: Skilled in managing NDR, EDR, WAF, email security, and DLP policies. Strong understanding of endpoint/network security, threat detection, and incident response. Proficient in SIEM data querying and analysis.
• Analytical Skill: Excellent analytical and problem-solving skills, with the ability to analyze complex security issues and develop effective solutions.
• Communication Skill: Strong written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders.
• Team Player: Ability to work collaboratively with cross-functional teams and build strong working relationships.
• Accountability and Responsibility: Take ownership of assigned tasks and projects, ensuring they are completed on time and to the highest standards. Proactively identify areas for improvement and take the initiative to address them.
• Critical Thinking: Apply critical thinking skills to analyze complex security issues, evaluate potential solutions, and make well-informed decisions.
• Independently perform tasks and responsibilities with minimal dependency and guidance, while continuously learning and adapting to evolving technologies.

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Descriptions:

In this role, you will join a team of six members from Sopra Steria to support one of our government project. The scope of work includes:

1. Security Risk Assessment

2. Security Policies, Standards, Guidelines, And Procedures Review

3. Security Design

4. Application Security

5. Vulnerability assessment and

6. System Security Acceptance Testing

You will be an expert in the field of Cloud Security.

Responsibilities:

• Be a subject matter expert on cloud and cyber security risks.
• Provide expertise in cloud security and be a trusted technical advisor and solve complex cloud security & compliance challenges.
• Support on their cloud transformation journey by helping to design and build secure and compliant cloud solutions. Leveraging various industry standards and frameworks (e.g., CSA CSM, NIST CSF, ISO 27001, CIS), regulatory guidelines.
• Advise on designing more effective, efficient cloud security capabilities across a range of areas such as identity and access management, incident response, cryptographic key management, backup & recovery, third-party risk management, and others.
• Perform risk assessment for Cloud Computing Environment and Service.
• Hands on and deep knowledge of security principles.
• Experience managing customer projects to completion, working with engineering teams, and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.

Requirements

• Minimum of 3 years of experience in Cloud Security (AWS will be highly advantageous)
• Strong understanding of security frameworks
• Fluent in spoken and written English
• Ability to work closely with international team in a professional manner
• Excellent verbal and written communication skills, including ability to solve complex technical situation and explain it clearly
• Relevant certifications, such as AWS Certified Security – Specialty (SCS-C01), Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), are a plus.

Benefits

• Regular team buildings
• 18 leave days / year
• Insurance: GP, Hospitalisation, Dental and Optical
• Annual bonus
• Working hours: from 8:30am to 6pm, Monday to Friday
• Training and certifications paths

About the role

The position is part of our Cyber Fusion Center’s SOC team and is responsible for real time security event monitoring and security incident investigation.

Job Responsibilities:

• Investigate and review computer intrusions focusing on initial infection vector determination, identification of new indicators of compromise (IOC), and tactics, techniques, and procedures in support of threat detection and remediation.
• Continuously monitor security alerts queue and perform initial triage to identify any false positives and initiate improvement as necessary.
• Monitors health of security sensors and managed security infrastructure, and provide necessary support, including root cause analysis, and prepare incident reports.
• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
• Collects data, evidence, and context necessary for Level 2 escalation.
• Works closely with Level 2 & Level 3 team towards the continuous improvement of the service.
• Ensure that daily operations and tasks are properly completed or followed up.
• Escalate issues and liaise with subject matter experts as required to resolve issues.
• Able to work in day and night rotational shift covering weekend/public holiday.
• Prepare scheduled and ad-hoc security summary report.

Job requirements:

• Diploma/Degree in Computer Science/Computer Engineering/Information Engineering/Cybersecurity or equivalent.
• At least 2 years of knowledge experience with security solutions and tools such as Firewall, Router, Proxy, EDR, PAM, IDS/IPS, SIEM.
• Basic understanding of common networking protocols and system infrastructure.
• Strong analytical, problem solving and interpersonal skills.
• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Java, Yara, Regular expression etc) will be a plus.
• Relevant certification e.g., Certified Ethical Hacker (CEH) or Security+ will be a plus.
• Ability to work independently, under the general guidance.
• Working experience and knowledge on system infrastructure with interest of exploring into security domain also welcome to apply.
• Fresh graduates are also welcomed to apply.

Key Responsibilities:

• Manage and optimize cybersecurity solutions including IDS/IPS, email defenses, EPP, DLP, vulnerability management, PAM (Cyberark, Beyondtrust), IAM/IGA, DAM, proxy, and NGFW.
• Oversee daily operations and security solution design, implementation, and documentation.
• Implement and refine cybersecurity solutions; ensure secure-by-design principles are followed.
• Support security incident response, containment, and recovery; conduct cybersecurity awareness training.
• Stay updated on industry trends and support team and cross-department needs as required.

Requirements:

• Degree/Diploma in Computer Science, Engineering, or Information Security.
• Experience administering solutions like Cyberark, Beyondtrust, Trendmicro, Tenable, and IMPERVA; strong knowledge of Linux, Unix, and Windows.
• Familiarity with scripting (Python, PowerShell) and AWS security operations; security and product certifications (e.g., GSEC, GCIA) are advantageous.
• Understanding of regulatory standards (MAS Cyber Hygiene, Technology Risk Management) and cybersecurity practices.
• Strong problem-solving, communication, and project management skills.

We are looking for a skilled IT Security Engineer to join our client for a 1-year direct contract. The successful candidate will bring strong expertise in information security and hands-on experience managing security projects from start to finish.

Responsibilities:

• Lead and execute security projects across various domains, including endpoint, network, and application security.
• Implement and manage security tools, such as Web Proxy, Endpoint Protection, Email Security, and Vulnerability Scanners.
• Assess system security through threat modeling and propose effective solutions.
• Explore and integrate emerging security technologies to strengthen the organization’s security posture.
• Collaborate with teams to ensure secure deployment and operation of cloud environments.

Requirements:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related field.
• 5 years experience in IT Security, with deep expertise in one or more security domains.
• 3 years hands-on experience in end-to-end IT security projects or project delivery.
• Familiarity with security tools and frameworks.
• Security certifications (CISSP, CISM, AWS Certified Security, etc.) are highly desirable.
• Experience with cloud security is an added advantage.
• Thrives in fast-paced and demanding environments.

This role is a great opportunity to work on impactful security projects in a dynamic environment.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will assist in the end to end implementation of security solutions for our clients and support our clients in their desire to protect the business.

The Opportunity

This is a role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between developing security strategies, advising stakeholders, providing workshops and supporting business development. If you’re flexible and ready to adapt to a constantly changing environment, there’s no better place to develop your skills. Since you’ll be working directly with clients, some travel will be required.

Your Key Responsibilities

As a Cyber Security Operations consultant, you will be part of the team to assess, design, build, implement and manage security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

Skills and Attributes for Success

• Familiarity with Security Information and Event Management (SIEM) solutions.
• Experience with network security monitoring and incident response activities.
• Ability to process impacts of activities and be able to collaborate with IT operations and Cybersecurity teams on mitigations and remediations.
• Ability to apply cybersecurity and privacy principles to organizational requirements.
• Ability to create standard operating procedures and other similar documentation.

To Qualify for the role, you must have

• A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology or equivalent
• At least 3 years of relevant experience. Preferably with a year experience in business consulting role in a leading consultancy firm
• Strong interest in the field of information security
• Creative, independent with good problem-solving skills
• Excellent communicator with strong analytical, interpersonal and writing skills

Ideally, you’ll also have

• Industry related certification preferred (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL).
• Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience.

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply now.

At BandLab Technologies, we are committed to delivering innovative solutions that prioritize security and user trust. As we expand our product offerings, we recognize the critical importance of safeguarding our cloud infrastructure. We are seeking a Cloud Security Engineer to join our backend team and lead our cloud security initiatives.

In this role, you will focus exclusively on securing our products and development processes, ensuring they remain resilient against evolving security threats. This is not an IT security role; it does not involve managing organizational devices, corporate accounts, or office networks. Instead, you will contribute to impactful projects that protect the core of our business, working within a collaborative environment that values innovation, knowledge-sharing, and professional growth. If you’re ready to make a tangible difference and grow alongside a supportive team, we’d love to hear from you.

Key Responsibilities

Security risk management

• Identify and assess security risks and vulnerabilities across our multi-cloud environments (AWS, Azure, GCP).
• Develop and implement strategies to mitigate identified risks.

Security enhancement projects

• Plan, coordinate, and execute security enhancement projects from initiation to completion.
• Collaborate with engineering teams to integrate security best practices into the development lifecycle.

Infrastructure security

• Utilize Infrastructure as Code (IaC) methodologies to design and maintain secure cloud infrastructure.
• Develop tools and procedures for managing permissions and access controls.

Vulnerability management

• Conduct Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Perform penetration testing and configuration assessments to identify security weaknesses.
• Review vulnerability reports and guide remediation efforts.

Incident response

• Monitor systems for security breaches and respond to incidents promptly.
• Configure and manage Security Information and Event Management (SIEM) systems.
• Develop strategies to prevent future security incidents.

Compliance and documentation

• Ensure adherence to relevant security regulations and standards.
• Maintain and update security policies and procedures.
• Prepare for and facilitate security audits.

Required Skills, Knowledge and Expertise

Experience
Minimum of 3 years in cloud security roles, with hands-on experience in architecting and implementing security solutions in at least one major cloud provider environment.

Analytical skills
Ability to define risks, identify threats, and develop actionable mitigation plans.

Adaptability
Comfortable working with various tech stacks and tools.

Technical proficiency

• Strong understanding of networking, client-server communication, and authentication protocols (e.g., OAuth/OpenID, SAML, SSO).
• Proficiency in Infrastructure as Code (IaC) tools and methodologies.
• Programming skills in languages such as Python, JavaScript/TypeScript, Java, C#, or Go.
• Experience with cloud monitoring and logging tools like Azure Log Analytics (Kusto), Google BigQuery (SQL), or AWS CloudWatch Logs Insights.
• Experience with serverless architectures and related technologies.
• Familiarity with containerization and orchestration tools, such as Kubernetes.
• Knowledge of cloud-native security services like AWS GuardDuty, Microsoft Defender, or GCP Security Command Center, Wazuh.

Job Responsibility:

• Strong knowledge of cryptographic concepts, Hardware Security Module's, and key management.
• Hands-on experience in implementing and operating Thales SafeNet HSMs.
• Hands-on experience in designing and implementing key management solutions for enterprises.
• Knowledge of networking and network security concepts.
• Experience working on PKI / key management solutions.
• Programming knowledge in C / C++ (preferred), Java, .NET.
• Experience integrating cryptographic libraries and HSMs with applications.
• Understanding of Information Security Architecture and ecosystem technologies and concepts required like firewalls, monitoring tools, encryption, web proxies, and identity & access management.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Experience with Thales HSM or similar cryptographic solutions.
• Strong understanding of cryptographic algorithms and protocols.
• Familiarity with compliance standards (e.g., PCI-DSS, GDPR).
• Excellent problem-solving skills and attention to detail.

Interested applicants please send your resume to [email protected]

Venessa Goh Wee Ni

R24124686

Recruit Express Pte Ltd

EA License No: 99C4599

RCB No.: 199601303W

We regret that only shortlisted candidates will be contacted.

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

- Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)

- Guide IT managers of the group companies per the headquarters' directive.

- Effectively manage and analyze system logs on an ongoing basis.

- Remain updated about the latest security vulnerabilities and take immediate action if necessary.

- Collaborate with internal and external parties to ensure secure, smooth operations.

- Handle client inquiries about our proprietary applications.

- Automate redundant tasks using programming language skills.

- Regularly monitor and maintain system metrics dashboard and alerts.

- Educate colleagues and enhance company documentation about our IT infrastructure.

- Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

- At least 5 years of extensive experience in IT-related fields.

- Proficient reading and writing skills in Japanese.

- Exceptionally good communication and interpersonal skills.

- Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.

- Strong ability to configure SIEM and Power BI tools.

- In-depth familiarization with account management and data security.

- Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

- Proficiency in additional languages such as Chinese, Malay, or Thai.

- Proven experience with Cyber Incident Response Plan (CIRP).

- Expertise in vulnerability management, penetration testing, and implementing security incident response processes.

- Extensive experience in developing, implementing, and maintaining security policies.

- Knowledge of network security design and implementation.

- Experience in using vulnerability scanning tools and security tools.

- Proven record of enhancing cloud security through policy implementation and monitoring.

- Experience in promoting social engineering and phishing countermeasures.

- Ability to provide in-house security training.

- Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.

Endpoint Security Engineer - Cyber Threat.

Job Responsibilities:

• Develop, implement, and manage security controls to block and mitigate security threats across the IT infrastructure.
• Understand perimeter and endpoint security solutions and create policies based on specific requirements.
• Evaluate business risks and the control environment to identify weaknesses, then design effective controls.
• Regularly review and adjust existing policies to ensure they remain effective and aligned with the latest security threats and best practices.
• Troubleshoot security policies that are not functioning as expected.
• Monitor and analyze security events and alerts, taking appropriate action to prevent security incidents.
• Develop and maintain security policies, procedures, and guidelines to ensure compliance with industry standards and best practices.
• Work with the incident response team to investigate and respond to security incidents, offering expertise on security controls and mitigation strategies.
• Document and maintain detailed records of security controls, configurations, and incidents, while preparing regular reports on the effectiveness of security controls.

Requirements:

• Degree in Computer Science, Information Technology, or related fields.
• Experience in cybersecurity with a focus on policy creation, monitoring, and incident response.
• Skilled in managing NDR, EDR, WAF, email security, and DLP policies.
• Strong understanding of Endpoint and Network security, Threat Detection, and incident response (IR)
• Proficiency in SIEM data querying and analysis.

Advantageous:

• Experience with scripting languages, particularly PowerShell or Python for automating security tasks and improving processes.
• Familiarity with cloud security principles and practices, including securing cloud environments and managing cloud-based security tools

Highlight:

• Homeland Security Domain Provider
• Permanent job opportunity
• Great remuneration & benefits
• Great career progression
• Location: East

Responsibilities:

• Stay up-to-date of the current threat landscape and cybersecurity events, continuous knowledge improvement in tools and best practices in Cyber Security Protection.
• Communicate across internal divisions, customers, vendors and partners.
• Write technical proposal, communicate and present the solution.
• Deliver the project by coordinating with project team members to deliver project deliverables and complete project milestones.
• Review security architectures, designs to ensure the adoption of various security practices, baselines and standards.
• Conduct and perform various security tests, reviews and audits.
• Articulate clearly on the cybersecurity risks and mitigation measures to stakeholders.
• Evaluate security products and conduct Proof of Concept (POC) to verify the effectiveness of each security measures, and to make certain that the security measures will continue to be effective after implementation.
• Provide guidance and consultancy to stakeholders to remediate security risks or recommend risk mitigations.
• Provide guidance and consultancy to stakeholders to ensure secure lifecycle aligned to baselines and standards

Requirements:

• Degree in Cyber Security or related field or attained Cyber Security professional qualification (e.g. CISSP or equivalent).
• Minimum 2 years of experience in in cyber security domain with relevant experience on security governance, design and architecture.
• Experienced in turn-key development, implementation and maintenance of large-scale, multi-platform, multi-vendor systems in the IT and engineering domain.
• Familiar with typical enterprise security solutions, such as Endpoint Security, Identity & Access Control solutions, Network Security, Analytics solutions, Data Loss Prevention or Vulnerability and Compliance.
• Familiar with the conduct of a typical project lifecycle in terms of the various milestones and deliverables.
• Sound understanding of network and server infrastructure.
• Good presentation skills, communication, negotiation, interpersonal skills and customerservice orientation.
• Hands on, self-directed executive who plans, prepares and executes professionally along with management of tight deadlines

HOW TO APPLY:

Interested applicants, please send your latest resume to [email protected] or click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason of leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Lim Dick Sern (Dick Sern)

EA Personnel Reg No: R22106832

Job Responsibilities:

• Design, implement and administer security infrastructure and measures to protect against potential threats
• Test and evaluate security products and solutions
• Monitor and investigate systems and infrastructure activities for signs of unauthorized access or malicious activities
• Lead or participate in internal and external security audits and risk assessments to identify vulnerabilities in existing systems, develop and implement remediation plan for closure
• Review the technical design and facilitate onboarding process for new systems to ensure security compliance
• Develop security policies and procedures and manage compliance
• Create incident response plans; lead and manage incident response
• Promote security awareness and conduct routine social engineering tests for end users

Job Requirements:

• Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related field.
• 4-7 years of experience in IT or cybersecurity roles.
• Fundamental knowledge on IP networking (e.g. TCP/IP, routing, etc.) and Firewalls (e.g. FortiGate).
• Strong analytical and problem-solving skills.
• EPP/EDR product certification such as Trellix ePO, Symantec Endpoint Protection is an advantage.
• Experience in implementing security products such as SIEM, NIPS, EDR System is an advantage.
• Security Certifications such as GISA, GSEC, CISSP, CISM is an advantage.
• Proficiency in network security and encryption technologies.
• Knowledge of security frameworks and industry best practices (ISO 27001, NIST Cybersecurity Framework, and PCI DSS).
• Experience with vulnerability assessment and penetration testing.
• Strong understanding of secure coding practices.
• Expertise in configuring and managing firewalls, intrusion detection systems, and other security devices.
• Effective communication and collaboration skills to work with cross-functional teams.