Total 17 procurement engineer job vacancies in Legal / Public / Security category in Ang Mo Kio, North East

Responsibilities:

• Designing, implementing, and managing security solutions to protect against cyber threats while ensuring seamless IT Infrastructure, Servers and Applications performance.
• Continuously optimize existing IT Infrastructure, Servers and Applications security policies and models, monitor and respond to threat detection event alerts and response handling, and enhance overall detection levels and coverage.
• Be responsible for vulnerability management (CVE, CVSS, OWASP Top 10), container, network & systems security, as well as cloud security tools and services
• Design, configure, and maintain firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and other security devices.
• Monitor and analyze security events and logs to identify potential vulnerabilities and incidents.
• Threat Prevention & Incident Response: Identify, investigate, and resolve security breaches and incidents.
• Develop and implement strategies to mitigate identified risks and vulnerabilities.
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Conduct regular audits of IT Infrastructure, Servers and Applications security to ensure compliance with security policies.
• Maintain compliance with industry standards such as ISO 27001, GDPR, or SOC 2.
• Create and maintain detailed network diagrams and security documentation.
• Work closely with IT teams to ensure robust security integration across systems.
• Educate employees on security best practices and emerging threats.
• Manage tools like SIEM, antivirus solutions, IDS/IPS and DLP software.
• Stay updated with the latest technologies, trends, and vulnerabilities in cybersecurity.

Requirements:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Relevant certifications (e.g., CISSP, CEH, CCNP Security, Palo Alto PCNSA) are a plus but not mandatory.
• 7 to 12 years of experience in the designing, implementing, and managing of IT Infrastructure, Servers and Applications security according to industry standards such as ISO 27001, GDPR, or SOC 2.
• Expertise in one or more IT Security Engineering topics, such as Secure Browsing, PAM, PKI, or Multifactor Authentication.
• Proven ability to contribute to the development of architecture, concepts, and processes in IT security.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.), firewalls, VPNs, intrusion detection / prevention systems (IDS/IPS), vulnerability management (CVE, CVSS, OWASP Top 10) and etc.
• Proficiency in firewall technologies (e.g., Fortinet, Palo Alto, Cisco ASA).
• Experience with vulnerability scanning tools and penetration testing.
• Experienced with cloud environments and cloud security principles. Knowledge in AWS/Azure cloud security tools and services.

Role Description

AtomIT Networks Pte Ltd is seeking a highly skilled and motivated Cyber Security Engineer to join our team in Singapore. This is a full-time, on-site role requiring hands-on expertise in Cybersecurity operations and solutions delivery. The Cyber Security Engineer will play a pivotal role in safeguarding our clients' networks, systems, and data against sophisticated cyber threats and vulnerabilities. This position demands a dynamic professional capable of operating in a fast-paced environment with 24x7 standby responsibilities to respond to critical incidents and ensure uninterrupted security operations.

Key Responsibilities

• Design, implement, and manage robust cybersecurity measures to protect networks, applications, and systems.
• Regularly monitor latest cybersecurity news and proactively identify & mitigate potential security risks.
• Monitor and analyze network traffic, logs, and alerts to detect and respond to security incidents promptly.
• Collaborate with cross-functional teams to align security strategies with business objectives.
• Create and update detailed documentation, including implementation plan, procedures, and incident reports.
• Stay updated with emerging threats and security technologies to implement proactive defenses.
• Provide 24x7 standby duty support to address urgent security incidents and maintain system integrity.

Qualifications

• Proven expertise in Cybersecurity, Network Security, and Information Security.
• Proficiency in security technologies such as firewalls, SD-WAN, IDS/IPS, WAF, SIEM, ZTNA, SASE, EDR and etc.
• Familiarity with cloud security across platforms like AWS, Azure, or GCP.
• Relevant certifications such as Fortinet NSE, Cisco CCNP Security, CISSP, CEH, AWS & Azure Security Specialization, or equivalent are highly desirable.
• Strong analytical skills and the ability to troubleshoot complex security challenges.
• Excellent communication and collaboration skills with a proactive, detail-oriented mindset.
• Hands-on experience in Vulnerability Assessment, threat modeling, and risk analysis is a plus point.
• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• Priority will be given to Singapore Citizens and Permanent Residents.

The AVP - Perimeter Security Build Engineer seats within the Perimeter Security Services Team, focusing on maintaining next generation, large scale perimeter security solutions for the enterprise globally. The purpose is to ensure the overall health and integrity of Citi’s network and perimeter defence.

In this role you will be responsible to work on various large scale security initiatives, establish and utilize processes for perimeter security lifecycle management, influence stakeholders and drive the general security posture along with various peer groups and organizations.

As an Perimeter Security Build Engineer you will

• Configure, deploy and integrate firewall and remote access infrastructure for Citi environment
• Work with aligned technology teams to ensure deployment and decommissioning of devices happen according to approved Citi standard build baselines
• Perform troubleshooting related to project rollouts
• Create and maintain documentation and reports for the configuration procedures & support checklists
• Perform process review, reengineering and standardization to ensure risk-free efficiency
• Work with perimeter security engineering and vendors on understanding and utilizing standard builds
• Participate in new product/solution testing and rollout

Ideal background

• 3+ years of experience with multiple security disciplines and understanding of perimeter security solutions and concepts
• Experience with Check Point, Juniper SSL and Palo Alto firewall solutions
• Unix / linux experience
• Advanced written and verbal English communications skills
• Stakeholder management skills, with ability to communicate with stakeholders of varying seniority across business and technical functions.
• University degree or certifications in a relevant cyber security / networking area

Benefits

• exposure to a broad range of investment technology businesses and products
• access to our world-class testing lab with physical hands on using hundreds of devices in the IT security ecosystem
• competitive compensation package
• access to Citi’s huge training database and subscription to external online trainings
• a socially active team and communities with diverse networking opportunities

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Summary

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other’s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It’s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you’ll do more than join something — you’ll add something. There is a lot that goes into building the most secure yet user-friendly devices in the world. We are a unique Software Development group with a charter to secure our platforms, which include iOS software, iOS Devices, and Mac. We build solutions that are used by our customers, engineering teams, and manufacturing environments. We are looking for a candidate who is passionate about both software and hardware security and enjoys highly technical, hands-on role in a dynamic and fast paced environment. This role will be responsible for testing and securing the Software Development Life Cycle, world-wide hardware manufacturing ecosystem and associated global IT infrastructure. As a member of our fast-paced group, you will have the unique and rewarding opportunity to shape and improve the software that allows our products to surprise and delight billions of Apple’s customers every day. If you’re excited by the idea of making a real impact, and joining a team where we pride ourselves in being one of the most diverse and inclusive companies in the world, a career with Apple will be your dream job.

Description

Our organisation provides security server-side solution to enable various Apple product security features. As part of security team in this organisation, we are looking for someone who can drive advancements in security practices, proactively identifying security vulnerabilities, fortifying our platforms against emerging threats and enabling continuous innovation. The existing scope of the work includes the following and will be expanded with emerging new technology and new business initiatives.

• Perform penetration testing and vulnerability assessments on software applications, API services, and infrastructure.
• Develop and execute new test plans, methodologies, and tools for assessing hardware and software security.
• Conduct static code analysis to identify and triage application security issues. Work closely with DevOps and engineering teams to remediate application security vulnerabilities and implement security best practices throughout the Software Development Life Cycle (SDLC).
• Perform reverse engineering and forensic analysis on software & hardware to identify security vulnerabilities and its exploitability.
• Rotate between red and blue functions and conduct simulated attacks & defence. Develop security strategies, frameworks, tools, and processes to assess and improve security posture of the organisation.
• Collaborate with hardware design teams to integrate security best practices during product development.
• Document findings, prepare comprehensive reports, and provide detailed security recommendations for remediation.
• Fulfil on-call responsibilities for handling security-related incidents.
• Continuous learning and conduct security research to stay updated on the latest threats, vulnerabilities, attack vectors, and mitigation techniques.

Minimum Qualifications

• Understanding of fundamental IT domains including Networking, Operating Systems, Security Principles, Secure Coding Practices, Cryptography and System Administration.
• Hands-on experience in security penetration testing, red team exercises, Capture The Flag (CTF) competitions or security related hackathons.
• Understanding of software development and secure coding best practices.
• Respect diversity and inclusiveness in a global organisation with ability to collaborate and communicate effectively
• Ability to analyse complex problems, explore the greenfield and devise creative solutions.
• Willingness and ability to travel internationally (up to 1 weeks at a time).
• Strong team player with adaptability

Preferred Qualifications

• Knowledge in reverse engineering and exploit development.
• Understanding of cryptographic algorithms, secure boot, secure firmware update mechanisms is a plus.
• Understanding of hardware architecture, microcontrollers, processors, and firmware development and have knowledge in hardware security tools and techniques (e.g., JTAG, oscilloscopes.) is a plus.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services,

and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you

could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems,

and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything

we create is the result of people in different roles and teams working together to make each other’s ideas

stronger. That same passion for innovation that goes into our products also applies to our practices,

strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the

Threat Analysis and Incident Response function. A successful candidate will possess a proven technical

background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You

will work with a global team of security professionals on a follow-the-sun model with a primary focus on the

identification, containment, and mitigation of security incidents. This role is an integral part of the security controls

Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology

and processes with global reach. Apple is an Equal Opportunity Employer that is committed to inclusion and

diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants,

including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or

retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job

application or interview process, to perform essential job functions, and to receive other benefits and privileges of

employment. Please contact us to request accommodation.

Minimum Qualifications

More than 7 years of experience in Information Security with a focus on Incident Response, Security

Engineering, and/or Intrusion Detection

Proficient understanding of incident response automation strategies, with demonstrated ability to implement

them

Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors

Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues

In-depth technical knowledge of macOS or Linux Operating Systems

Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze

endpoint, network, and application logs

Proficient in one or more programming/scripting languages

Excellent verbal and written communication skills

Preferred Qualifications

Experience with disk and memory forensic tools

Experience writing and tuning IDS signatures

Experience triaging malware

About ST Engineering

ST Engineering is a global technology, defence, and engineering group with offices across Asia, Europe, the Middle East, and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence, and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Our history spans more than 50 years, and our strategy is underpinned by our core values – Integrity, Value Creation, Courage, Commitment and Compassion. These 5 core values guide every aspect of our business and are embedded in our ST Engineering culture – from the people we hire, to working with each other, to our partners and customers.

About our Line of Business – Mission Software & Services

Our Mission Software & Services business provides leading-edge mission critical command, control, and communications (C3) systems with secured IT infrastructure and managed services. We support our client’s innovation journey through design thinking, analytics, and AI-enabled decision support with our full suite of cloud computing solutions. We provide intelligent, actionable insights and sustainable solutions to our valued partners in diverse industries including defence, government, and commercial sectors.

Together, We Can Make A Significant Impact

The Security Engineer will participate in the development and implementation of secure system architectures. He/ She understands security principles in carrying out the assigned tasks to mitigate the risks posed by new technologies and business practices. He/ She contributes to the development of artefacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture. He/ She performs routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.

Be Part of Our Success

• Collaborate in the design of security controls and systems in alignment with security guidelines
• Assist in the testing and evaluation of new security technologies and controls
• Document the design, operation, use, and expected outputs of new systems
• Participate in the Implementation of new enterprise security architecture, technologies and enhancements
• Resolve issues that arise in implementation of new security systems
• Monitor security systems for strengths and weaknesses and propose improvements to address weaknesses
• Involve in the maintenance of security systems, platforms and associated software
• Collaborate in the development and implementation of custom disaster recovery drills and simulation tests on existing systems
• Assist in the resolution of identified problems and incidents

Qualities We Value

• Familiar with modern security architectures and cloud architecture design best practices
• Knowledge of Python is an advantage
• A good team player who can contribute and work effectively in a collaborative team environment.
• Candidates with critical thinking, analytical and creative problem-solving skills is highly desired.
• Attention to detail and quality is a desired attribute.

Our Commitment That Goes Beyond the Norm

• An environment where you will be working on cutting-edge technologies and architectures.
• Safe space where diverse perspectives are valued, and everyone’s unique contributions are celebrated.
• Meaningful work and projects that make a difference in people’s lives.
• A fun, passionate and collaborative workplace.
• Competitive remuneration and comprehensive benefits.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems, and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything we create is the result of people in different roles and teams working together to make each other’s ideas stronger. That same passion for innovation that goes into our products also applies to our practices, strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the Threat Analysis and Incident Response function. A successful candidate will possess a proven technical background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You will work with a global team of security professionals on a follow-the-sun model with a primary focus on the identification, containment, and mitigation of security incidents. This role is an integral part of the security controls Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology and processes with global reach.

Minimum Qualifications

• More than 7 years of experience in Information Security with a focus on Incident Response, Security Engineering, and/or Intrusion Detection
• Proficient understanding of incident response automation strategies, with demonstrated ability to implement them
• Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors
• Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues
• In-depth technical knowledge of macOS or Linux Operating Systems
• Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze endpoint, network, and application logs
• Proficient in one or more programming/scripting languages
• Excellent verbal and written communication skills

Preferred Qualifications

• Experience with disk and memory forensic tools
• Experience writing and tuning IDS signatures
• Experience triaging malware

Apple is an Equal Opportunity Employer that is committed to inclusion and diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants, including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Job Descriptions

• Maintain systems plus controls to protect unauthorized access, disclosure, modification and deletion of information through resources and computer networks.
• Support logs, categorizes, prioritizes, tracks, and routes:

1. Incidents reported by users or
2. Alarms raised by monitoring tools

• Interact directly with business technical specialist to guide on authentication, authorization and encryption solutions.
• Investigate known and suspected information security events and develop related reports.
• Conduct hardware and software security alerts as available.
• Resolve issues through responding IT threats and vulnerabilities.
• Conduct routine security risk analysis, evaluate business needs against collision, vulnerabilities and search resulting risks.
• Implement Change Request and Service Request.
• Perform patching on security equipment.
• To implement change request and service request.
• Apprised of the current state of computer security in place in the organization
• Technically proficient and up-to-date in basic computer security policies and practices
• Proactive in preventing Cyber-Security Incidenti.
• To perform technical security assessment for IT & Network components:

1. Vulnerability assessment,Penetration testing, Opportunistic Hacking, Web application security testing, Security source code review etc.
2. To monitor and track the identified vulnerability, issues and fix detected vulnerabilities to maintain a high-security standard.
3. Be familiar with browser, Web service, cloud security, mobile applications security, and operating system security conceptsiv. Understanding of leading vulnerability scoring standards and ability to translate vulnerability severity as security risk

• Perform forensic investigation if required
• Review all security logs.

Job Requirements

• Minimum 2 to 4 years IT relevant experience on security and 1-year experience in cyber security
• Preferably with Certifications such as CREST, OSCP and CISSP.
• With PenTest, Vulnerability Assessment & Risk Assessment experience
• Strong in technical skill
• Able to handle demanding service response and recovery turnaround
• Able to manage daily support tasks to meet stringent SLA requirements
• Excellent scheduling and multitasking skills
• Meticulous and process-oriented
• Good, hard-working attitude with ability to work well under pressure
• Good communication skills English (written, spoken)
• Good analytical skills with ability to work with others to resolve problems.
• Good organization skills, with ability to properly document and track information.
• Dynamic, customer oriented, experience working in a fast paced environment.
• Good Knowledge of following product will be advantageous:- Splunk, FireEye and Nessus Manage

Responsibilities

• Bachelor’s degree in computer science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Cyber Security, Associate Engineer

Salary: up to $4000+

Responsible in maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Assist in the development of information security policies, processes / procedures and guidelines on an ongoing basis.

• Work with vendor to conduct security assessments and penetration tests.

• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.

• Standardize and refine security incident response and escalation processes.

• Mitigate and contain threats when detected.

• Escalate security incidents and non-compliances on a timely basis.

• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM.

• Monitor information security alerts triage, mitigate, and escalate issues as needed.

• Conduct information security awareness training.

• Provide security advisory to end users on regular basis.

• IT Security Management of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

• To perform daily monitoring of logs and review of security notifications and alerts, and assist on the assessment and reporting weekly trends, incidents and security events. Abnormalities found in the review of security events must be reported to the Cyber Security Manager.

• To provide daily technical support in terms of Cyber Security operations for Sophos Endpoint Protection, Cisco FTD Firewall, Advanced Email Threat Protection, Web Application Firewall, Cisco Email Security, DG DLP, Tenable SCCV, Splunk, Cisco Umbrella, etc.

• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree/ Diploma with min 2 years related work experience in cybersecurity management in Singapore.

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

• Good command of written and spoken English.

• Excellent interpersonal and communication skills.

• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.

Company Overview

Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content. To this end, we created a platform that delivers content governance, compliance, and protection to customers. The platform unifies, tracks, controls, and secures sensitive content moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all sensitive content communication. Kiteworks is carrying its bold vision forward while maintaining strong profitability and growth. This is a perfect time to join the company as it moved into a high growth phase and there are many opportunities to make a meaningful contribution to its future.

The Role

We are looking for a highly driven, talented, and self-motivated Senior Applications Security Engineer to be part of our growing application security team. You will be part of a team that is up to date on emerging security vulnerabilities and threats, and works toward improving the security of our products and our CI/CD environment and process.

Key Responsibilities:

• Develop automation and security tools to enhance the security posture.
• Research, evaluate, and integrate new security technologies/tools within CI pipelines.
• Perform STRIDE threat modeling before each product release.
• Provide consultation in design and security reviews for new features.
• Conduct product code reviews with a security-focused lens.
• Execute white box security scans and implement system/application hardening measures.
• Document security fixes and support customer service with security advisories.
• Maintain comprehensive documentation and handle CVE filings.
• Analyze reported vulnerabilities, assess risks using CVSS methods, and determine impact.

Job Requirements:

• Bachelor’s or master’s degree in computer science or computer engineering, specializing in cybersecurity.
• at least 2 years of hands-on experience in cybersecurity roles.
• In-depth knowledge of common web application vulnerabilities and mitigation strategies.
• Proven ability to validate and implement security fixes; manage bug bounty reports effectively.

Key Skills and Experiences:

• Demonstrated expertise in integrating security measures into CI/CD pipelines using Jenkins, GitLab, etc.
• Proficiency in executing and interpreting results from SAST and DAST tools.
• Strong background in Linux system hardening and implementing CIS security standards.
• Proficiency in PHP and Python for security-related tasks.
• Hands-on experience with blue team responsibilities like DFIR and security hardening.
• Familiarity with AWS and Azure; additional experience considered advantageous.
• Security certifications (e.g., SANS) are highly valued.

Desired Attributes:

• Exceptional analytical skills coupled with a meticulous problem-solving approach.
• Excellent written and verbal communication skills.
• Proven ability to convey complex technical concepts to diverse audiences.
• Passionate about Kitework’s domain and mission.

Compensation/Perks

You will be rewarded with a competitive compensation package, including excellent benefits and stock options. Other benefits include: medical, dental, and 18-21 days annual leave

LGA Telecom Pte Ltd an established Infocomm Service Provider, since 1995 and an industry pioneer that has helped shape Singapore’s Internet ecosystem. In the past two decades, LGA has been delivering resilient enterprise solutions that ensure un-interrupted business operations. Today LGA offers comprehensive managed security services and solutions that identify, alert and mitigate technological vulnerabilities, threats and potential breaches to the network and systems. Enterprises and government agencies rely and trust LGA for their security needs beyond connectivity.

Security Engineer or Analyst

Responsibilities:-

As an Security Engineer, you will learn how to work with cutting edge SIEM platform to monitor security events, prioritize alerts, investigate & remediate incidents and how to help our customers by identifying security threats and preventing breaches.

Security Engineer have opportunities for mentorship from more senior members of the team and involvement with maturing procedures, evaluating new security technologies, incident response, and the freedom to try out new ideas and technologies to improve the SOC.

Job Requirements:

• Diploma/Degree in Information System, Computer Engineering or other security related discipline
• CEH and other security certification is a plus.
• Knowledge of Microsoft Windows OS and Linux
• Excellent communication with strong analytical and writing skill

Key Responsibilities:

• Develop and implement advanced cyber security architectures and solutions.
• Analyze and evaluate system security requirements to design secure networks.
• Collaborate with cross-functional teams to integrate security practices into all facets of the business.
• Conduct risk assessments and provide recommendations for enhancing system security.
• Stay updated with the latest cyber security threats and technologies.
• Develop technical solutions and tools to help mitigate security vulnerabilities.
• Provide technical guidance and support to other team members.
• Document and maintain records of security architectures and processes.

MUST HAVE:

• Bachelor’s degree in Computer Science or Information Technology or Cyber Security, or related field.
• Minimum of 3-5 years of experience in a cyber security architect or engineering role.
• Proven experience in designing and implementing secure network architectures.
• Strong background in network security, system security, and cloud security.
• Experience with common cyber security tools, standards, and protocols.
• Familiarity with industrial control systems and operational technology (OT) security is a plus.

WE VALUE:

• Strong technical skills in network and system security.
• Knowledge of current cyber security trends and threats.
• Excellent problem-solving and analytical abilities.
• Proficient in security technologies such as firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, etc.
• Good communication and collaboration skills.
• Ability to work independently and as part of a team.

• Bachelor’s degree in Computer Science, Information Security, or related field.

• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.

• Excellent communication skills and the ability to collaborate with diverse teams.

• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.

• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.

• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services

• Good knowledge in security

• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.

• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.

• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Key Responsibilities:

• Develop and implement advanced cyber security architectures and solutions.
• Analyze and evaluate system security requirements to design secure networks.
• Collaborate with cross-functional teams to integrate security practices into all facets of the business.
• Conduct risk assessments and provide recommendations for enhancing system security.
• Stay updated with the latest cyber security threats and technologies.
• Develop technical solutions and tools to help mitigate security vulnerabilities.
• Provide technical guidance and support to other team members.
• Document and maintain records of security architectures and processes.

MUST HAVE:

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or related field.
• Advanced degrees (Master’s, PhD) or professional certifications (CISSP, CISM, CEH, etc.) in cyber security are highly desirable. Minimum of 3-5 years of experience in a cyber security architect or engineering role.
• Proven experience in designing and implementing secure network architectures.
• Strong background in network security, system security, and cloud security.
• Experience with common cyber security tools, standards, and protocols.
• Familiarity with industrial control systems and operational technology (OT) security is a plus.

WE VALUE:

• Strong technical skills in network and system security.
• Knowledge of current cyber security trends and threats.
• Excellent problem-solving and analytical abilities.
• Proficient in security technologies such as firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, etc.
• Good communication and collaboration skills.
• Ability to work independently and as part of a team.

Summary:

As a IT Security Engineer, you will provide IT security and vulnerability management support for a suite of business applications. You will support Corporate Business Systems, used by over 6,000 users to fulfill the agency’s mission to protect the nation’s Digital Way of Life and defend Singapore’s Critical Information Infrastructure (CII) to ensure the continuous delivery of essential services to all Singapore residents. You will be part of a 20+ person full-service application delivery team.

Job Description:

• Responsible for IT Security portfolio of a for large scale IT infrastructure implementation project. Develop, implement, integrate, administer, maintain, and enhance enterprise security services, technologies, and platforms. This includes, but is not limited to Vulnerabilities Assessment, Penetration Testing, Privileged Access Management, Dynamic Access Management, Identity Governance & Administration, Endpoint Detection and Response, and etc.
• Building of policies to enforce controls to meet business use cases
• Develop and communicate policies, procedures, standards, and controls to enhance the user experience, manage risk, and to ensure compliance with legal, regulatory, and contractual requirements;
• Develop automation scripts for patching or automating security administration, monitoring or reporting tasks using Perl, Python, etc
• Conduct tracking of patch management activities from initial reporting of vulnerabilities / availabilities of patches to successful remediation for servers and network routers/switches.
• Perform Daily Check/Schedule of weekly/monthly automated or ad-hoc MVMS vulnerability scan of Applications, Servers and Network routers/switches status. Troubleshooting and re-activation/re-scheduling of scanning if fail.
• Ongoing maintenance of Tenable MVMS asset inventory management for onboarding of new target systems and offboarding of existing targets systems to be scanned by MVMS.
• Perform signature update, Faults/Performance monitoring of the Nessus application.
• Test and update Endpoint Protection and EDR signatures. Extracting quarantined malware for reverse engineering. Creating and maintaining EDR blacklist.
• Conduct ad-hoc Malware IOC scan for servers upon emerging threat.
• Provide post go-live support i.e. maintain, troubleshoot, patch and update various security tools and scanners.
• Escalate issue to Principal Security Engineer for follow-up for severity 1, 2, 3 security vulnerabilities and configuration compliance.
• Conduct monthly/ad-hoc compliance audit scan for servers and routers/switches.
• Produce security reports and SOP documentation (Track vulnerabilities, produce security metrics reports, operating procedures, continuity documents and support Tactics, Techniques, Procedures updates).
• Present management reporting and dashboarding to stakeholders, with analysis of data and trends, and recommend next steps.

Requirements:

• At least Bachelor’s degree in Science or Engineering and 5 years’ relevant working experience in IT Security or Cyber Security, or equivalent experience; Working knowledge of several of the following areas is required: Understanding of business security practices and procedures; knowledge of current security tools available; hardware/software security implementation; different communication protocols; encryption techniques/tools; familiarity with commercial products, and current Cloud Technologies.
• At least one or two of the followings Professional and technical security certifications such as CEH, GIAC, CISSP, CISM, CCNA Security, GICSP, GSEC, SSCP and/or specific technology platform certifications e.g. CyberArk, Splunk, Carbon Black, Guardium, Imperva, SolarWinds and etc is preferred.
• Strong fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Familiar in at least any THREE (3) of the followings - Penetration Testing, Vulnerability Assessments, Compliance Scanning, Secure Code Review, DevOps/DevSecOps, cyber exercises, security awareness programmes.
• Familiarity with scripting for automating tasks using Perl, Python, etc.
• Hands on experience in operating and maintaining enterprise security tools such as Tenable Nessus vulnerability scanner.
• Experience with web application compliance scanning (BURP preferred).
• Familiarity with Privilege Access Management (PAM) tools such as BeyondTrust, SailPoint, ForgeRock, CyberArk, and etc. Familiarity with Dynamic Access Management (DAM) tools such as IBM Guardium, Imperva SecureSphere DAM and etc.
• 3+ years of hands-on experience in the PAM and DAM environment responsible for design, architecture, installation, and configuration of Base platform configuration, configuration of user onboarding and permission/role mapping, setup of folders and templates for various platforms, setup of Auto-Discovery functions, rules, and automation of account/secret placement, configuration of secret autorotation, check out/in, and JIT workflows, configuration of session proxying and recording, and migration of secrets from other platforms into the PAM & DAM solution.
• Advanced knowledge of security controls, audits, and configurations including Endpoint Detection and Response EDR tools such as VMware Carbon Black Endpoint, Crowdstrike Falcon and etc.
• Experience with Windows OS security setting/STIG reviews.
• Demonstrable experience with modern computing infrastructures such as AWS, Azure, GCP, OpenStack, etc. Familiarity with security testing on cloud environments is advantageous.

Job Description & Requirements

• Troubleshooting security and network problems.
• Testing and identifying network and system vulnerabilities.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

Requirements

• Diploma/ Bachelor's Degree in IT/Computer Science/Cyber Security or Engineering related fields.
• Professional Certification and at least 5 years’ hands on experience in routing & switching preferred CCNP.
• Strong analytical, problem-solving, and decision-making skills.
• Understanding of network protocols and troubleshooting.
• Ability to manage multiple priorities and work effectively under pressure
• Hands on experience on one or more of the following skills as below:-
• Routing & Switching - Cisco / FortiSwitch / HP
• Firewall - Sophos / Fortigate / Palo Alto / Forcepoint
• WIFI AP - Ruckus / Aruba / Ubiquiti
• Willing to learn Work endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.