Total 674 procurement engineer job vacancies in Legal / Public / Security category in Singapore

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Job Responsibilities:

· Drive the fortification and optimization of the wallet security system, including but not limited to security policies, patching vulnerabilities, and monitoring unusual activities.

· Responsible for the daily operational maintenance of the wallet system, including but not limited to node deployment, on-chain data synchronization, and system backup, etc.

· Provide reasonable and effective suggestions for the existing wallet system framework, assist in upgrading the security organizational framework, participate in the design and implementation of security policies, to ensure the security of the exchange wallet system.

· Design and collaborate on the development of a security framework with rational security logic.

· Enrich and optimize existing rules, participate in the emergency response to daily security incidents, as well as the maintenance of security systems.

· Continuously track the latest technologies and threats in the field of blockchain and digital asset security, providing professional advice and guidance to the team.

· Proactively identify and resolve potential system risks, improving the overall security awareness and capabilities of the team.

Qualification Requirements:

· Have a sense of infrastructure security, familiar with common security vulnerabilities and attack methods.

· Capable of independently developing, writing, and maintaining a security framework.

· Familiar with common Linux commands and tools, penetration testing processes and tools.

· Familiar with security risk management, security node upgrades.

· Familiar with WEB3 development technology, with priority given to those who have experience in Solidity smart contract development.

· Have a deep understanding of blockchain technology and digital assets, familiar with the application skills of common scenarios on the chain.

· Good communication and written expression abilities, able to effectively communicate and cooperate with colleagues in different positions.

Bonus Points:

· Experience in security framework design.

· Experience in handling security incidents & offensive and defensive real-world experiences.

· Priority given to those with practical project or tool development experience.

About Starlite Systems Technologies Pte Ltd:

Starlite Systems Technologies Pte Ltd is a leading security solution provider company dedicated to delivering cutting-edge security systems to our clients. We specialize in designing, implementing, and maintaining security solutions tailored to meet the unique needs of our clients across various industries.

Position Overview:

We are currently seeking a skilled and experienced Security Systems Engineer to join our dynamic team. The ideal candidate will possess a combination of technical expertise in mechanical and electrical engineering, along with hands-on experience in security systems such as VSS, access control, alarm systems, and network systems.

Responsibilities:

• Design, install, configure, and maintain security systems including VSS, access control, alarm systems, and network systems.
• Conduct site surveys and assessments to determine security system requirements.
• Collaborate with clients and internal teams to develop customized security solutions.
• Troubleshoot and resolve technical issues related to security systems.
• Provide training and technical support to clients and internal stakeholders.
• Stay updated with the latest advancements and best practices in security systems technology.

Requirements:

1. Diploma in Mechanical or Electrical Engineering is a must.
2. Class 3 driving license is a must.
3. Proven experience in designing, implementing, and maintaining security systems.
4. Proficiency in VSS, access control, alarm systems, and network systems.
5. Strong problem-solving skills and attention to detail.
6. Excellent communication and interpersonal skills.
7. Ability to work independently and as part of a team.

Company Description:

Trie Group is a reputable cybersecurity solutions provider dedicated to delivering cutting-edge security services to businesses worldwide. With a focus on innovation and customer satisfaction, we strive to empower organizations with robust cybersecurity solutions to safeguard their digital assets effectively.

Job Description:

We are seeking a motivated and enthusiastic Junior Post-Sales Cybersecurity Engineer to join our team. In this role, you will be responsible for implementing and supporting various cybersecurity solutions, including Privilege Access Management (PAM) solutions, Proxy and Data Loss Prevention (DLP) systems, and Vulnerability Management security solutions. Additionally, you will be expected to have a solid understanding of proxy implementation.

Key Responsibilities:

* Collaborate closely with clients to understand their cybersecurity requirements and objectives.

* Implement Privilege Access Management (PAM) solutions to enhance security posture and control access to critical resources.

* Deploy and configure proxy and Data Loss Prevention (DLP) systems to monitor and control network traffic, ensuring data protection and compliance.

* Implement vulnerability management security solutions to identify, prioritize, and remediate security vulnerabilities across the client's IT infrastructure.

* Provide technical expertise and guidance to clients during the implementation process, ensuring smooth deployment and integration of cybersecurity solutions.

* Collaborate with internal teams and external vendors to resolve technical issues and optimize the performance of deployed solutions.

* Provide training and support to clients to facilitate the adoption and usage of implemented cybersecurity solutions.

* Document all aspects of the implementation process, including configurations, procedures, and troubleshooting steps, for knowledge sharing and future reference.

* Stay updated on the latest cybersecurity trends, best practices, and emerging technologies to continually enhance knowledge and skills.

* Perform system upgrades, patches, and backups to ensure security systems are up-to-date and efficient.

Qualifications:

* Diploma in Computer Science, Information Technology, Cybersecurity, or related field.

* Knowledge of cybersecurity principles, concepts, and best practices.

* Familiarity with Privilege Access Management (PAM) solutions, Proxy and Data Loss Prevention (DLP) systems, and Vulnerability Management security solutions.

* Understanding of proxy implementation and configuration.

* Experience with cybersecurity implementation projects is a plus.

* Strong analytical and problem-solving skills.

* Excellent communication and interpersonal skills, with the ability to effectively communicate technical concepts to non-technical stakeholders.

* Ability to work independently and collaboratively in a team environment.

* Certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or relevant vendor certifications are a plus.

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments on Consumer, Industrial and Medical related products and systems.
• Evaluate and perform attack surface analysis on IoT products and respective network and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems.
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT technologies
• Collaboration across various teams to ensure comprehensive service delivery.
• Product conformity testing on any of the following requirements but not limited to:

1. IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, IMDA TS RG-SEC, etc.)
2. OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
3. Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc.)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.
• On the job training will be provided as required

If you are a cheerful, self-initiated, holds strong integrity values and who likes to meet new people and are able to contribute by fulfilling clients’ needs, join us!

Job Description:

• To manage and ensure that the systems, servers and infrastructure is installed in accordance to the prescribed design document and/or requirements
• Understanding the scope of works and the needs of the clients and implement the appropriate output to the best of your ability or to the requirements
• To design the network architecture and configure in accordance to the requirements
• Configure, Test and Hand over the required systems and provide Training to client
• Ensure the highest standard of system and infrastructure availability
• To liaise with various parties such as system manufacturers or cybersecurity vendors to resolve issues and problems
• Attend new product trainings

Requirements:

• Applicants need to be able to work overtime/Night Shift.
• Bilingual (English and Chinese Mandarin) in writing and speaking
• Required Skill(s): Communication skills, Analytical skills, Decision making, Organizational skills, Attention to details, Patience and Knowledge of Systems engineering software tools
• Min 3 years of relevant hands-on experiences
• Familiar with Security Systems such as ISMS, CCTV, ACS and VA systems will be advantageous
• Familiar with Networking systems (eg. Routing, VLAN, VPN, Wireless AP) will be advantageous
• Familiar with IT Security (eg. firewall, IPSEC, SSL, hardening) will be advantageous
• Able to work independently with minimum guidance, monitoring and a good team player
• Valid Class 3 driving license has an added advantage

Other Information:

• Location: Kaki Bukit or as needed
• Working hours: 9am to 6pm
• Salary (commensurate with experience): Basic Salary + Variable Bonus

Resumes please INCLUDE:

• Personal particulars
• Education background
• Work experiences in point forms
• All reasons for leaving
• Current and expected salary
• Date of availability / Notice Period

Interested applicants are invited to send your updated resume in MS Word format via Apply Now. We regret that only shortlisted applicants will be notified.

Grant Thornton is a global professional service network of over 68,000 people in over 130 countries. Our team in Singapore is growing rapidly and we know this success is made possible by our people. That’s why we make sure our people have the right tools and environment to thrive.

Each individual at Grant Thornton Singapore is empowered to be themselves within an inclusive team. Our supportive structure gives our people the autonomy to shape their careers and drive positive change in the firm. It’s an exciting time to join us as we grow with organisations of all sizes and industries in Singapore, across the region and in the world.

The role

• Develop, execute and track the performance of security measures to protect information and network infrastructure and computer systems
• Identify, define and document system security requirements and recommend solutions to management
• Configure, troubleshoot and maintain security infrastructure software and hardware
• Monitor systems for irregular behavior and set up preventive measures
• Execute IT Risk Assessment and Incident Response Exercise
• Educate and train staff on information system security best practices
• Responsibilities for this role include maintaining the security posture, identifying, and remediating vulnerabilities by using a variety of security tools, implementing threat protection, and responding to security incident escalations
• Provide overall Office 365 security expertise including strong knowledge of Azure Active Directory, Microsoft cloud app security, Azure Information Protection, Data loss prevention, Information Rights Management, Intune (Conditional access/ MDM), and related technologies (including Microsoft Enterprise Mobility + Security)
• Monitoring and remediation of risks events from Azure and office 365 security and compliance dashboards
• Deliver O365 Security related training sessions at main offices and key project sites

Qualifications and requirements

• At least 2 to 5 years of relevant experience in Microsoft Office 365
• Must have IT security knowledge
• Possess good personal integrity, patient, and able to manage user expectation
• Able to work independently, good analytical skill, multi-task, and a team player
• Good communication and learning skills

We are proud to be an equal opportunity firm where we celebrate what makes each individual unique. We are committed to nurturing our inclusive workplace. So, no matter where you are from, we invite you to discover more about us.

Responsibilities:

• Provide Presales support on cybersecurity & PKI security products/ solutions to clients and partners.
• Execute post-sales installation, technical support (L1-L3) and maintenance services of cybersecurity & PKI products/solutions.
• Troubleshoot reported issues and collaborate with technology vendors for escalation when required.
• Ensure the completion and follow-up of daily operations and tasks.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Requirements:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• 1-2 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:
• Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
• Microsoft based Certificate Authority, Prime Key EJBCA
• Window/Linux/UNIX OS environments
• Hardware Security Module (HSM)
• Key Management System (KMS)
• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is advantageous.
• Professional certifications in cyber security or networking will be advantageous.
• Initiative with a positive working attitude.
• Hardworking and eager to learn new technologies and skills.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to [email protected] or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

CCTV / Security System Sales Engineer | Class 3 | Jurong East

5.5 days
9am - 6pm / 9am - 1pm
$ 2400 - $ 3200
Toh Guan Centre

Job Responsibilities

• Manage and coordinate with multiple vendors, for Security and IT systems such IP Surveillance, Card Access,
• Execution and supervision of project activities such as drawings, submittals, design, estimation, follow-ups, installation, commissioning, handing over, training, etc
• Coordinates with Client / Consultant’s representatives for system requirement, any site instructions, assign targets for accomplishments and ensure targets are met on Daily / Weekly basis.
• Submits site reports, inspection requests, estimates and all applicable monitoring reports on regular basis or as required (for engineer)
• Supports the Project Manager in accomplishing all the goals and targets for the groups at site.
• Perform onsite troubleshooting and technical support. After which to propose security solutions to customer in various sectors.
• Project management and documentation
• Perform test, configuration & commissioning of IP Cameras, VMS, SQL and network switches Requirements
• Prepare and follow up on quotation for Sales leads through technical specification provided in tenders and / or site surveys
• Presentation of products and services to potential clients
• Recommendation of effective solutions for customers’ requirements
• Account management to build and maintain good relationship with customers
• Other ad-hoc duties assigned

Job Requirements

• At least one year of relevant working experience
• Knowledge of MS Windows Server and basic PC hardware structure
• Knowledge of TCP / IP, Network Structure, Firewall, LAN and VLAN
• Advantage if Milestone VMS Certified
• Professional experience in a system administration role supporting multiple platforms and applications
• Good to have experience with anti-virus software, intrusion detection, firewalls and content filtering
• Ability to communicate network / applications security issues to peers and management
• Self-motivated to driving individual sales KPI
• Class 3 driving license will be in advantage

The Supreme HR Advisory Pte Ltd | 14C7279

Ong Boon Kiet (Travys) | R22104769

Senior Recruitment Consultant

About the role

The position is part of our Cyber Fusion Center’s managed support and operations team and is responsible for day-to-day support and operations of assigned cybersecurity solutions and platforms.

Responsibilities:

• Provide support for assigned security platforms, including onsite troubleshooting, root cause analysis, prepare and present incident reports.

• Provide security knowledge in security architecture recommendation and perform the necessary best configuration.

• Provide collaboration efforts in assisting the SOC teams in incident investigation.

• Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.

• Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.

• Ensure that daily operations and tasks are properly completed and followed up.

• Escalate issues and liaise with subject matter experts as required to resolve issues.

• Support after-office hours activities and standby requirements as necessary.

• Support shift rotation as necessary.

• Prepare activities report and work documentation.

Candidate requirements:

• Educational background in Information Systems, Cybersecurity or related disciplines.

• 2-5 years of hands-on engineering, support or operations experience in Infrastructure, Network or Security Tools

• Broad understanding of systems, network infrastructure; working experience with databases, LDAP and directory services, application servers, operating systems, and network infrastructure.

• Proficiency in one or more general-purpose programming languages (Perl, Python, PHP, Shell, PowerShell, Windows Scripting, Windows console programs, .Net, Yara, Regular expression) will be a plus.

• Certificates such as ITIL Foundations, Microsoft MCSA, CISA, CISSP will be a plus.

• Ability to work independently, under the general guidance.

• Support after office hour and during weekend/public holiday

We are looking for an experienced IT Security Engineer for one of our global clients who is an established and leading Maritime service provider. This person will be responsible for providing day-to-day IT Security support for internal stakeholders within the organization. The ideal candidate would have at least 2 years of hands-on experience working in a security operation, incident response, vulnerability management or related field. Work experience for AWS and Oracle Cloud Infrastructure will be an advantage.

Responsibilities:

· Manage communications and working relationships between IT and other departments within the organization as well as multiple outside IT service providers.

· Design, develop, implement, and coordinate policies and procedures for all areas of information technology to assure data accuracy, security, legal and regulatory compliance; assure compliance with Standard.

· Implement, maintain, and ensure maximum uptime for IT systems and user support.

· Hands-on experience on IT supports and perform the hardware and software installation and maintenance.

· Support the IT infrastructure with a focus on Cloud server and in-house server in office.

· Maintain the telecommunication and data communication links, network routing and switching, firewall and security, SAN storage, server virtualization and OS maintenance, database management, end-point protections.

· Maintain IT Operations & system/network appliance, IT Administration & Resource Planning.

· Business Recovery, Security Risk & Operational Risk, Project Management, PDPA policy,
Documentation & Work Procedure Manual to ensure compliance and regulatory requirements and industry standards.

· Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring
dashboard for any abnormalities.

· Carry out any additional responsibilities assigned by the Supervisor.

Job Requirement:

· Diploma/degree in computer studies

· 2 years of experience working in a security operation, incident response, vulnerability management or related field.

· Demonstrated experience in network security, server security, endpoint security, web security etc.

· Technical knowledge Network switches, servers, PCs, printers, and other equipment all fall under the IT infrastructure engineers purview.

· Have the knowledge to manage VLANs on wired/wireless networks.

· Strong knowledge of security principles, technologies, and industry best practices.

· Experience with log analysis, malware analysis, and network traffic analysis.

· Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues, and develop effective solutions.

· Work experience for Oracle Cloud Infrastructure and AWS would be advantageous.

· Have teamwork spirit, weekend support are required when needed.

· Be fluent in English listening, speaking, reading, and writing.

Interested applicants, please send your CV to [email protected]

We regret that only shortlisted candidates will be notified.

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

About the role

The position is part of part of our managed operations team and is responsible for day-to-day management and operations of assigned cybersecurity solutions and platforms in Privilege Access Management.

Responsibilities:

Lead and drive PAM operations, providing support for assigned projects, including onsite troubleshooting, root cause analysis, incident reports etc.

Provide guidance to team members, and be responsible in knowledge transfer and training

Ensure adherence to Security Controls, Policies and Standards in place

Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.

Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.

Ensure that daily operations and tasks are properly completed or followed up.

Engagement and communication with stakeholders across departments/units to ensure PAM operational effectiveness.

Escalate issues and liaise with subject matter experts as required to resolve issues.

Support After-office hours activities and standby requirements as necessary.

Prepare activities report and documentation.

Requirement:

Educational background in Information Systems, Cybersecurity or related disciplines.

At least 3 years of hands-on engineering or operations experience with Privilege Identity Management (PAM)

Broad understanding of systems, network infrastructure; working experience with databases, LDAP and directory services, application servers, operating systems, and network infrastructure.

Knowledge in one or more general-purpose programming languages (Perl, Python, PHP, Shell, PowerShell, Windows Scripting, Windows console programs, .Net or Java) will be a plus.

Certificates such as ITIL Foundations, Microsoft MCSA, CISA, CISSP will be a plus.

Ability to work independently, under the general guidance.

Support after office hour and during weekend/public holiday.

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

About the role: We are currently seeking a highly skilled and experienced Healthcare Cyber Security Risk Engineer to join our Global Transformation Company. As a Cyber Security Risk Engineer, you will play a critical role in ensuring the safety and security of our organization's digital assets and sensitive information. You will be responsible for identifying potential security risks, implementing effective strategies to mitigate these risks, and ensuring compliance with industry best practices and regulations. If you are a proactive and detail-oriented individual with a solid understanding of cyber security principles and risk management, we encourage you to apply today.

Responsibilities:

• Conduct regular assessments and audits to identify potential security risks and vulnerabilities within the organization's network infrastructure and systems.
• Develop and implement strategic plans and policies to mitigate cyber security risks.
• Monitor and analyse security incidents, and respond promptly to security breaches or violations.
• Collaborate with cross-functional teams to assess and address risks associated with new projects and technologies.
• Stay up-to-date with the latest industry trends, threats, and best practices in cyber security risk management.
• Conduct trainings and workshops to raise awareness and promote good cyber security practices within the organization.
• Provide technical guidance and support to other teams and departments on cyber security matters.

Qualifications & Experience:

• Bachelor's degree in Computer Science, Information Technology, or a related field
• Professional certifications such as CISSP, CISM, or CRISC are strongly preferred
• Proven experience in conducting risk assessments and implementing risk management strategies in a cyber security role
• Strong knowledge of network security technologies and tools, such as firewalls, intrusion detection systems, and SIEM solutions
• Familiarity with relevant cyber security frameworks, such as NIST, ISO 27001, or HIPAA
• Excellent analytical and problem-solving skills, with the ability to think creatively and strategically
• Strong communication and collaboration skills, with the ability to effectively interact with stakeholders at all levels of the organization
• Ability to prioritize and manage multiple projects and tasks in a fast-paced environment

Skills:

• Outstanding interpersonal and communication skills.
• Strong planning, organization, and time management skills.
• Proficiency in Clinical Information Systems
• Demonstrable success in stakeholder interactions, delivering aligned solutions.
• Familiarity with clinical environments and terminology.
• Strong values of integrity, commitment, and self-improvement.
• A methodical, thorough yet flexible approach.
• Process-driven mindset.

Job Responsibilities:

• Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
• Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
• Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
• Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
• Enforce IT Security Policy compliance which includes assessment of security posture of the organisation’s IT assets as well as recommending appropriate measures and controls to mitigate security threats within the organisation.
• Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
• Facilitate, plan and conduct Cyber Security Awareness Training, including Cyber Security Exercises.
• Be on standby for any critical security alerts and incident management after office hours.

Job Requirements:

• Degree in Information Technology or Information Security or related discipline
• Minimum 3 years of working experience in Cyber Security field.
• Good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Familiar with ISO27001 and/or PCI Data Security Standards.
• Hands-on experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.
• Familiar with modernised A.I and SecOps tools.
• Possess good project management and report writing skills.
• Security Screening will be required for potential candidates.

To apply, please visit www.gmprecruit.com and search for Job Reference: 24131

To learn more about this opportunity, please contact Yi Fang at [email protected]

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Law Yi Fang | Registration No: R1113115

Funding Societies | Modalku is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs), which is crowdfunded by individual and institutional investors. And here at Funding Societies | Modalku we live by our core values:

• Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
• Grow Relentlessly: Strive to become our best, most authentic selves.
• Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
• Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
• Focus on Impact: Create impact through bias for action and tangible results.

As a (Senior) Security Operations Engineer you will lead efforts to identify, analyse, evaluate, and act upon security risks and threats. The Engineer will carry out security threat identification, analysis, and remediation to ensure efficient and timely mitigation of the threats, as well as understand the threats' risks and potential business impacts. The engineer will act as an incident handler and manage the end-to-end workflow of security incidents based on the defined process. The engineer will also be involved in Splunk Cloud Administration (integrations, use case creation, health check) and the development of the team’s processes and continuous service improvement.

What will you do:

Incident Response

• Monitor and analyse security alerts and incidents to identify potential threats.
• Investigate security incidents promptly, utilising various tools and technologies.
• Coordinate and execute incident response activities in collaboration with cross-functional teams.
• Contain and mitigate security incidents to minimise impact and prevent further compromise.
• Develop and implement incident response plans to enhance organisational resilience.
• Create incident report in a timely manner for applicable incidents.

Log management and Integrations

• Configure and integrate log sources into splunk cloud and create dashboards for various use cases.
• Develop and maintain log management strategies to ensure the collection and indexing of relevant data.
• Troubleshoot and optimise log sources to enhance data accuracy and completeness.
• Integrate Splunk into the needed log sources, if needed.
• Collaborate with Managed Security Service Provider (MSSP) and other internal security teams to develop and finetune correlation rules and alerts.
• Implement best practices to enhance search and reporting capabilities.

Threat Intelligence

• Stay current with the latest cybersecurity threats and vulnerabilities.
• Review threat intelligence reports and perform the necessary follow-up actions.

Collaboration

• Collaborate with internal teams and external partners to share notable incidents and improvements.
• Participate in cross-functional training exercises and simulations.
• Mentor other team members about Security Operations work.

What we are looking for:

• Strong understanding of behavioural aspects of cybersecurity incidents.
• Excellent interpersonal, communication, and presentation skills.
• Professional working habits and quality-oriented.
• Willing to work with and report under the Security Operations Manager.
• Relevant certifications related to Splunk and Incident Response are a plus.

· Perform analysis, prioritization and classification of risk.

· Handle day-to-day security vulnerability assessments and operational request.

· Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.

· Proactive monitoring of remediation plans and progress.

· Schedule security checks in accordance with reporting schedules.

· Continuous enhancement of existing security vulnerability assessment process.

· Verifies security controls are implemented accordingly.

· Review security incident reports

· Evaluate the type and severity of security events

· Assist with establishing procedures for handling detected security events

· Create final incident report detailing the events of the incident

· Prepare periodic status reports for presentation to management

· At least 5 year working experience in vulnerability management and incident response.

· Familiar with at least one vulnerability scanner.

· Strong analytical skills and ability to work independently.

· Good team player as well as strong communications skills with stakeholders at all levels

· Possess QISP, CEH, CISSP and/or related security certification.

· Experience in healthcare industry is an added advantage.

· Degree in Computer Science, Engineering or equivalent.

Funding Societies | Modalku is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs), which is crowdfunded by individual and institutional investors. And here at Funding Societies | Modalku we live by our core values:

• Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
• Grow Relentlessly: Strive to become our best, most authentic selves.
• Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
• Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
• Focus on Impact: Create impact through bias for action and tangible results.

As a (Senior) Security Operations Engineer you will lead efforts to identify, analyse, evaluate, and act upon security risks and threats. The Engineer will carry out security threat identification, analysis, and remediation to ensure efficient and timely mitigation of the threats, as well as understand the threats' risks and potential business impacts. The engineer will act as an incident handler and manage the end-to-end workflow of security incidents based on the defined process. The engineer will also be involved in Splunk Cloud Administration (integrations, use case creation, health check) and the development of the team’s processes and continuous service improvement.

What will you do:

Incident Response

• Monitor and analyse security alerts and incidents to identify potential threats.
• Investigate security incidents promptly, utilising various tools and technologies.
• Coordinate and execute incident response activities in collaboration with cross-functional teams.
• Contain and mitigate security incidents to minimise impact and prevent further compromise.
• Develop and implement incident response plans to enhance organisational resilience.
• Create incident report in a timely manner for applicable incidents.

Log management and Integrations

• Configure and integrate log sources into splunk cloud and create dashboards for various use cases.
• Develop and maintain log management strategies to ensure the collection and indexing of relevant data.
• Troubleshoot and optimise log sources to enhance data accuracy and completeness.
• Integrate Splunk into the needed log sources, if needed.
• Collaborate with Managed Security Service Provider (MSSP) and other internal security teams to develop and finetune correlation rules and alerts.
• Implement best practices to enhance search and reporting capabilities.

Threat Intelligence

• Stay current with the latest cybersecurity threats and vulnerabilities.
• Review threat intelligence reports and perform the necessary follow-up actions.

Collaboration

• Collaborate with internal teams and external partners to share notable incidents and improvements.
• Participate in cross-functional training exercises and simulations.
• Mentor other team members about Security Operations work.

What we are looking for:

• Strong understanding of behavioural aspects of cybersecurity incidents.
• Excellent interpersonal, communication, and presentation skills.
• Professional working habits and quality-oriented.
• Willing to work with and report under the Security Operations Manager.
• Relevant certifications related to Splunk and Incident Response are a plus.

Representing a tech giant who is currently looking for a Security Application Engineer. You will manage and implement security measures in cloud environments. This role will be reporting directly to the Director of Security and Director of Engineering.

Responsibilities:

• Proficiency in C# and Ruby on Rails to comprehend and fortify the company's codebase.
• Creation and implementation of secure infrastructure on cloud platforms, emphasizing network configurations and access controls.
• Configuration and management of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools.
• Analysis of penetration test findings and collaboration with developers to enact corrective actions.
• Promotion of security-driven changes across the engineering team utilizing JIRA and scrum methodologies.
• Integration of security principles into design through the development of design patterns and shared libraries for engineers.
• Establishment of a comprehensive Security Software Development LifeCycle (SSDLC).
• Cooperation with development teams to integrate security seamlessly into the development process.
• Adoption of a DevSecOps approach to encourage collaboration among development, operations, and security teams. Additionally, providing guidance and training to engineers on security standards and internal security protocols.

Job Requirements:

• Min 5 to 8 years of relevant experience in rolling out secure coding practices and security engineering on cloud platforms.
• Possession of certifications such as CISSP, CEH, AWS Security Specialist, or OSCP.
• Proficiency in security frameworks like CIS v8 and security coding methodologies such as OWASP.
• Demonstrated experience in the implementation or maintenance of CIS v8 controls.
• Established track record in a security engineering capacity, specializing in cloud security and secure coding practices.
• Familiarity with C# and Ruby on Rails.
• Proficiency in both Windows and Linux operating systems.

If you're interested in this role, click 'apply now' ,or email [email protected] for a confidential discussion.

Job Highlights:

• Professional Growth
• Collaborative Environment
• Positive Company Culture

Job Descriptions:

• Plan, test and implement advanced software security techniques in compliance with technical reference architecture.
• Organize on-going security testing and code review to improve software security.
• Detect, troubleshoot and debug issues that arise.
• Prepare and maintain technical documentation.
• Provide help and consulting to team members on secure coding practices.
• Stay informed about new tools and best practices of the industry.
• Experiment with AI security tools such as Microsoft Security Copilot to help with threat analysis.
• Create, implement, and manage software security policies across all information systems in the company.
• Create, implement, and manage monitoring policies and ensure that all notifications are shared across company.
• Work with users to implement policies that continue to support their operations, and provide the security required to ensure integrity of the work done and data involved.
• Conduct routine checks to discover and respond to security breaches and incidents for cloud-based systems and services.
• Provide routine reports on security notifications and breaches.
• Perform tasks assigned by direct supervisor.
• Conduct security testing and vulnerability assessments, including penetration testing, vulnerability scanning, and code reviews.
• Develop and maintain incident response plans, including incident response testing and training.

Requirements:

• Degree in Information Technology, Computer Science, or equivalent relevant experience
• 3 years experience of working on a Software Security position, including experience in secure software development practices, threat modeling, and vulnerability assessments
• Experience with Security Best Practices, implementing enterprise-grade security solutions
• Profound experience with techniques, standards and methods for authentication and authorization, applied cryptography, security vulnerabilities and remediation
• Experience with security testing tools and techniques, including penetration testing, vulnerability scanning, and code reviews
• Experience with cloud deployment and management technologies, such as AWS,
• Experience with incident response planning, testing, and training
• Good understanding of all aspects of security research and development
• Strong understanding of security frameworks
• Relevant certifications, such as AWS Certified Security – Specialty (SCS-C01), Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH), are a plus.

Company Overview

Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content. To this end, we created a platform that delivers content governance, compliance, and protection to customers. The platform unifies, tracks, controls, and secures sensitive content moving within, into, and out of their organization, significantly improving risk management and ensuring regulatory compliance on all sensitive content communication. Kiteworks is carrying its bold vision forward while maintaining strong profitability and growth. This is a perfect time to join the company as it moved into a high growth phase and there are many opportunities to make a meaningful contribution to its future.

The Role

We are looking for a highly driven, talented, and self-motivated Senior Applications Security Engineer to be part of our growing application security team. You will be part of a team that is up to date on emerging security vulnerabilities and threats, and works toward improving the security of our products and our CI/CD environment and process.

Key Responsibilities:

• Develop automation and security tools to enhance the security posture.
• Research, evaluate, and integrate new security technologies/tools within CI pipelines.
• Perform STRIDE threat modeling before each product release.
• Provide consultation in design and security reviews for new features.
• Conduct product code reviews with a security-focused lens.
• Execute white box security scans and implement system/application hardening measures.
• Document security fixes and support customer service with security advisories.
• Maintain comprehensive documentation and handle CVE filings.
• Analyze reported vulnerabilities, assess risks using CVSS methods, and determine impact.

Job Requirements:

• Bachelor’s or master’s degree in computer science or computer engineering, specializing in cybersecurity.
• at least 2 years of hands-on experience in cybersecurity roles.
• In-depth knowledge of common web application vulnerabilities and mitigation strategies.
• Proven ability to validate and implement security fixes; manage bug bounty reports effectively.

Key Skills and Experiences:

• Demonstrated expertise in integrating security measures into CI/CD pipelines using Jenkins, GitLab, etc.
• Proficiency in executing and interpreting results from SAST and DAST tools.
• Strong background in Linux system hardening and implementing CIS security standards.
• Proficiency in PHP and Python for security-related tasks.
• Hands-on experience with blue team responsibilities like DFIR and security hardening.
• Familiarity with AWS and Azure; additional experience considered advantageous.
• Security certifications (e.g., SANS) are highly valued.

Desired Attributes:

• Exceptional analytical skills coupled with a meticulous problem-solving approach.
• Excellent written and verbal communication skills.
• Proven ability to convey complex technical concepts to diverse audiences.
• Passionate about Kitework’s domain and mission.

Compensation/Perks

You will be rewarded with a competitive compensation package, including excellent benefits and stock options. Other benefits include: medical, dental, and 18-21 days annual leave