Total 60 Senior Executive purchasing engineer job vacancies in Legal / Public / Security category in Singapore

Summary: As a Senior / Security Engineer, you will manage security incidents, conduct threat hunting with SIEM/SOAR tools, and support IT audits. You will oversee vulnerability assessments, security training, and IT security for vessels. You will also lead security projects, provide advisory for projects, and engage with external parties on cyber threats.

Reports to: Senior Security Manager

Role and Responsibilities:

Security Incidents

• Perform investigations of Security incidents.
• Perform threat hunting using SIEM and SOAR tools.
• SIEM/SOAR Tools: Hands-on experience with security monitoring tools like Microsoft Sentinel or other relevant SIEM and SOAR platforms.

Audit and Governance

• Participate in internal and external IT audits.
• Maintain Incident Response Plans and IT policies.
• Perform Vulnerability Assessment and Penetration Testing.
• Conduct Security awareness training for the organization.
• Conduct phishing campaigns.
• Design and review IT/Cyber security architectures.
• Works with external parties (eg; CSA, MPA) on the latest cyber threats and trends.
• Assist in vessel IT security setup, review, audit and remedial actions.

Projects

• Manages Security related projects.
• Acts as Security Advisory for all projects.
• Participate in Request for Proposal and Request for Quote process.

Requirements:

• Degree in Information Security, Computer Science or related disciplines with at least 3 years of relevant experience.
• Knowledgeable in IT Security, Cloud Security, and security standards such as NIST, ISO 27000 and IMO.
• Azure Cloud Security: Strong expertise in Azure Security Center, Microsoft Defender for Cloud, and Azure Policy for real-time cloud threat management and compliance.
• IT Security Management experience of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc will be an advantage.
• Knowledge managing network security devices (NextGen Firewalls, IDS, IPS, UTM, NAC, AV, etc.), Windows, Linux, and networking services will be an advantage.
• Preferred Certifications: CCSP (Certified Cloud Security Professional) and Azure Security Engineer Associate are highly preferred, in addition to other certifications such as CISSP, CISM, or CEH.
• Strong hands-on knowledge and experience with security architecture and implementation of Azure Cloud Computing (IaaS, Containers, AKS, DevOps, CI/CD) is mandatory.
• Proficiency in automating security workflows within CI/CD pipelines, focusing on Azure DevOps integration.
• Ideally completed 2 or more of the following certifications: SC-200, SC-300, AZ-500, MS-500 and SC-100.
• Knowledge of Vessel IT will be an advantage.
• Maritime Cybersecurity: Familiarity with maritime cybersecurity standards such as IMO guidelines and TMSA (Tanker Management and Self-Assessment) is a strong advantage for vessel IT security.

Job Highlights

• In-house R&D and manufacturer with > 25 years of international track records
• Career development and overseas travel opportunities
• Performance bonus and special benefits
• 5 days work week (8.30 am to 6.00 pm)
• Near to Ubi MRT

Job Description

• Be part of our sales team to market the company's products and services to key CHANNEL partners and CORPORATE customers locally and overseas with some travelling
• Build solid customer relationships with key accounts and/or key channel partners
• Participate in marketing events such as seminars, trade shows, and telemarketing events

Job Requirements

• Candidate must possess at least Diploma/ Advanced/ Graduate Diploma/ Degree in Engineering (Computer/Telecommunication), Engineering (Electrical/ Electronic), Business Studies or equivalent.
• At least 2 Year(s) of working experience in the related field is required for this position.
• Required Skill(s): Access Control, CCTV, Integrated IP Solutions, Selling, Marketing
• Preferably Executive specialized in Sales/Support - Engineering/Technical/IT or equivalent for SALES ENGINEER position

All resumes are treated with the strictest confidence. We regret that only shortlisted candidates will be notified.

Senior Security Engineer

We are looking for an experienced and proactive Senior Security Engineer for one of our clients. Reporting to the Senior Security Manager, the Senior Security Engineer will manage security incidents, conduct threat hunting with SIEM/SOAR tools, and support IT audits. You’ll oversee vulnerability assessments, security training, and IT security for vessels. Additionally, you lead security projects, provide advisory for projects, and engage with external parties on cyber threats.

The ideal candidates would have at least 3-5 years of relevant experience in IT and Cloud Security. He/she will have good communication skills, be resourceful, self-organized and a good team player.

Responsibilities

· Security Incidents

o Perform investigations of Security incidents.

o Perform threat hunting using SIEM and SOAR tools.

o SIEM/SOAR Tools: Hands-on experience with security monitoring tools like Microsoft

Sentinel or other relevant SIEM and SOAR platforms.

· Audit and Governance

o Participate in internal and external IT audits.

o Maintain Incident Response Plans and IT policies.

o Perform Vulnerability Assessment and Penetration Testing.

o Conduct Security awareness training for the organization.

o Conduct phishing campaigns.

o Design and review IT/Cyber security architectures.

o Works with external parties (eg; CSA, MPA) on the latest cyber threats and trends.

o Assist in vessel IT security setup, review, audit and remedial actions.

· Projects

o Manages Security related projects.

o Acts as Security Advisory for all projects.

o Participate in Request for Proposal and Request for Quote process.

Requirements

Education & Knowledge

· Degree in Information Security, Computer Science or related disciplines with at least 3 years of relevant experience.

· Knowledgeable in IT Security, Cloud Security, and security standards such as NIST, ISO 27000 and IMO.

· Azure Cloud Security: Strong expertise in Azure Security Center, Microsoft Defender for Cloud, and Azure Policy for real-time cloud threat management and compliance.

· IT Security Management experience of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc will be an advantage.

· Knowledge managing network security devices (NextGen Firewalls, IDS, IPS, UTM, NAC, AV, etc.), Windows, Linux, and networking service will be an advantage.

· Preferred Certifications: CCSP (Certified Cloud Security Professional) and Azure Security Engineer Associate are highly preferred, in addition to other certifications such as CISSP, CISM, or CEH.

· Strong hands-on knowledge and experience with security architecture and implementation of Azure Cloud Computing (IaaS, Containers, AKS, DevOps, CI/CD) is mandatory.

· Proficiency in automating security workflows within CI/CD pipelines, focusing on Azure DevOps integration.

· Ideally completed 2 or more of the following certifications: SC-200, SC-300, AZ-500, MS-500 and SC-100.

· Knowledge of Vessel IT will be an advantage.

· Maritime Cybersecurity: Familiarity with maritime cybersecurity standards such as IMO guidelines and TMSA (Tanker Management and Self-Assessment) is a strong advantage for vessel IT security.

Others

• UK MNC and good corporate culture

• 5-day work week (Centralised location)

To apply, please send your CV to [email protected]

We regret that only shortlisted candidates will be notified.

Summary

The OT Cyber Security Engineers is working in billion-dollar scale projects to safely and securely deliver the Digitalisation Strategy for our FPSO Facilities. Digital innovation requires operational technology (OT) systems to interact more and more with information technology (IT) systems. With the convergence of OT and IT Systems and network components comes increased Cyber security threats requiring focused attention and management.

You will be focusing on implementing and maintaining a defence in depth security posture and securely connecting previously isolated Systems and Equipment within OT networks to the Enterprise IT environment.

Additionally, to the OT integration piece, you will assist with the development and sustainment of robust processes and methodologies for data handling, which in-turn assists the management of tactical and strategic interactions between Technology & Autonomy and other business units across the organization.

MODEC is a part of the Mitsui Group, with 5000+ employees from 25 countries. Following the successful launch of digital capability in Brazil (https://www.modec.com/news/2020/20200115_pr_MV29-Lighthouse.html), our Singapore office commenced building digital team and promote Digital Transformation in 2021. You will work in this new “start-up” team in the professional, multinational work environment.

Our Singapore office occupies the top floors of The Metropolis Tower building, which provides scenic views of the city, and is located right next to the Buona Vista MRT station.

Responsibilities In EPCI Project

• Advocate, integrate and improve on existing technology change management process.
• Focal Point for Project related OT Cyber Security matters
• Research, design, and implements cyber security solutions for OT systems and products
• Contribute to Project Cyber Security Detailed Risk Assessment/s
• Establish and define Cyber Security Requirement Specification/s for FPSO Project’s
• Provide Cyber Security and Network Engineering requirements to Contractors, Vendors and suppliers
• Review and verify Contractors/Vendors/Suppliers design and deliveries
• Assist with Scoping, Development and Management of OT projects.
• Assist with Hardware Lifecycle planning and standardization.
• Liaising with key stakeholders
• Participates in project design reviews to ensure consistency with required business outcomes.

In Digital & Analytics Department

• Contribute to relevant Company policies/strategies/philosophies
• Analyse Operation Technology (OT) and Information Technology (IT) networks for opportunities to improve integration, network architecture and security.
• Provide architectural advice and oversight and input into selected Operational Application implementation projects
• Design, document and deliver technical Cyber Security solutions for OT within company and client enterprise architectures.
• Communicate effectively with, and between the immediate team, business subject matter experts, developers, analysts, engineers, end users of systems and management.
• Assists in responding to audits, penetration tests and vulnerability assessments

Key Skills

Domain Expertise – can be flexible

• Broad understanding of Technology Infrastructure and Applications that support FPSO Operations.
• Excellent communication skills with a strong technology focus.
• Ability to understand complex and detailed business processes.
• Bachelor’s or Master’s degree in relevant field of Engineering (With a strong knowledge of Industrial Automation Systems and Operational Technology)
• Understanding of Cyber Security standards (IEC, ISO, NIST or equivalent). Certified competencies highly regarded.
• Understanding of Network design and infrastructure used in both OT and IT realms
• Understanding of Industrial Communications protocols
• Understanding of Operational Challenges for Integrating and managing OT systems
• Understanding of Virtualisation, Server equipment and SAN Solutions (either in Use, Management or Design)
• Strong knowledge of common vulnerabilities and exploitation techniques
• Technical knowledge in Industrial network security; For example, firewall configuration, network monitoring, intrusion detection, etc.
• Strong problem-solving and trouble-shooting skills
• Good knowledge of System’s Engineering approaches, tools and their application

Individual Skills

• Has the ability to interface with, and gain the respect of, stakeholders at all levels and roles in the company
• Is a confident, energetic self-starter, with strong interpersonal skills
• Has good judgment, a sense of urgency and has demonstrated commitment to high standards of ethics, regulatory compliance, customer service and business integrity
• Instinctive and creative
• Self-motivated and possessing of a high sense of urgency and personal integrity
• Highest ethical standards and values

Ref ID: JT

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

• Develop low level design document for the project delivery detailing the scope with the sensible technology write up.
• Participate in Internal/Customer meetings to develop the LLD document.
• In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.
• Prepare UAT document and perform UAT as per document.
• Understanding of Windows Active Directory and Integration with NAC Solutions
• Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.
• Ability to deliver MFA Solutions for specific use case requirements.
• Assist in reviewing Technical Design Specifications (TDS) document for security projects
• Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

• Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).
• Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.
• Hands on experience Cisco FirePower NGIPS.
• Basic understanding of Networking – Routing and Switching Protocols.
• Ability to manage medium to large size project and ensure completion within the projected timeline.
• Build customer relationship to manage the projects in a congenial way.
• Team Player highly spirited, sharing project experience with peers.
• Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

The VP, Senior Security Engineer (AS400) role will lead the AS400 security strategy and technical governance, product configuration standards definition and security engineering advisory.

As a member of the Infrastructure Security Engineering team, the selected candidate will be part of the product lifecycle management for the Group Information Security (GIS) technical capabilities. This includes product implementation, solution architecture, engineering, production support and service delivery/management, and provide security configuration standards definition and technical security assurance over AS400 and Mainframes managed by the infrastructure and platform team.

Key Responsibilities:

• To perform and identify opportunities to automate AS400 System & Security Administration
• To work with Business and Systems services teams for infrastructure and application requirements for interfacing to security solutions managed by GIS
• Manage a team of AS400 and zOS (IBM Mainframe OS, preferable) SMEs.
• Develop and maintain the AS400 and Mainframe security roadmaps and plan for future enhancements and capabilities as party of continuous improvement process
• Product lifecycle management for the GIS technical capabilities over AS400 security solutions which includes but is not limited to anti-virus, anti-malware, exit point security, MFA and other relevant technologies
• Production support and monitoring to ensure control efficacy and solution reliability & stability
• Product research and define requirements for new projects, perform product evaluation and technical Proof of Concept
• Support of the development of AS400 security policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices
• Provide support for all audit and regulatory requests

Education:

• Diploma/Degree in Engineering/Computer Science/IT/Cyber Security from a recognized education institution
• Professional security related qualifications (e.g., CISSP, CISA, CISM, etc.) will be favorable although not mandatory

Technical Skills:

• At least 5 years of relevant experience in performing AS400 Security Administration and/or management of AS400 Application systems, with strong analytical and problem solving skills
• Experience in managing projects (preferably AS400 related projects)
• Hands on experience with AS400-related programming langua
• Proven experience leading relevant security programs in large organizations
• Strong understanding of regulatory requirements such as MAS TRM, PCI DSS, etc.

Soft Skills:

• Excellent communication, leadership, and collaboration skills
• Process aware mindset
• Strong analytical and problem-solving skills
• Effective time management and organizational skills
• Team management experience
• Team player, including ability to establish and maintain effective working relationships within and across the organization

Requirements

The role requires handling of measurement and detection equipment for military and homeland security. The ideal candidate should possess strong IT skills including, software installation and configuration. The resposibilities includes managing sales product inquiries, overseeing post-sales equipment delivery, performing regular maintenance, and conducting diagnostic analyses for troubleshooting and repair. A keen learning attitude and strong problem-solving ability are essential in this position. The candidate will also be expected to prepare basic reports. Effective communication and interpersonal skills will be important for maintaining and strengthening existing customer relations.

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 4 to 5 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

Senior Security Engineer

We are looking for an experienced and proactive Senior Security Engineer for one of our clients. Reporting to the Senior Security Manager, the Senior Security Engineer will manage security incidents, conduct threat hunting with SIEM/SOAR tools, and support IT audits. You’ll oversee vulnerability assessments, security training, and IT security for vessels. Additionally, you lead security projects, provide advisory for projects, and engage with external parties on cyber threats.

The ideal candidates would have at least 3-5 years of relevant experience in IT and Cloud Security. He/she will have good communication skills, be resourceful, self-organized and a good team player.

Responsibilities

· Security Incidents

o Perform investigations of Security incidents.

o Perform threat hunting using SIEM and SOAR tools.

o SIEM/SOAR Tools: Hands-on experience with security monitoring tools like Microsoft

Sentinel or other relevant SIEM and SOAR platforms.

· Audit and Governance

o Participate in internal and external IT audits.

o Maintain Incident Response Plans and IT policies.

o Perform Vulnerability Assessment and Penetration Testing.

o Conduct Security awareness training for the organization.

o Conduct phishing campaigns.

o Design and review IT/Cyber security architectures.

o Works with external parties (eg; CSA, MPA) on the latest cyber threats and trends.

o Assist in vessel IT security setup, review, audit and remedial actions.

· Projects

o Manages Security related projects.

o Acts as Security Advisory for all projects.

o Participate in Request for Proposal and Request for Quote process.

Requirements

Education & Knowledge

· Degree in Information Security, Computer Science or related disciplines with at least 3 years of relevant experience.

· Knowledgeable in IT Security, Cloud Security, and security standards such as NIST, ISO 27000 and IMO.

· Azure Cloud Security: Strong expertise in Azure Security Center, Microsoft Defender for Cloud, and Azure Policy for real-time cloud threat management and compliance.

· IT Security Management experience of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc will be an advantage.

· Knowledge managing network security devices (NextGen Firewalls, IDS, IPS, UTM, NAC, AV, etc.), Windows, Linux, and networking service will be an advantage.

· Preferred Certifications: CCSP (Certified Cloud Security Professional) and Azure Security Engineer Associate are highly preferred, in addition to other certifications such as CISSP, CISM, or CEH.

· Strong hands-on knowledge and experience with security architecture and implementation of Azure Cloud Computing (IaaS, Containers, AKS, DevOps, CI/CD) is mandatory.

· Proficiency in automating security workflows within CI/CD pipelines, focusing on Azure DevOps integration.

· Ideally completed 2 or more of the following certifications: SC-200, SC-300, AZ-500, MS-500 and SC-100.

· Knowledge of Vessel IT will be an advantage.

· Maritime Cybersecurity: Familiarity with maritime cybersecurity standards such as IMO guidelines and TMSA (Tanker Management and Self-Assessment) is a strong advantage for vessel IT security.

Others

• UK MNC and good corporate culture

• 5-day work week (Centralised location)

To apply, please send your CV to [email protected]

We regret that only shortlisted candidates will be notified.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

1. Responsible for the security construction of ByteDance's overseas cloud products and infrastructure.

2. Continuously mitigate operational, configuration, and exposure risks for overseas cloud products and infrastructure, systematically enhancing the security level of business lines.

3. Liaise with overseas business lines to manage security risk assessments, incident response, security training, and more.

Minimum Qualifications

1. Familiarity with common risks, including their principles, attack and defense strategies, and systematic governance and construction approaches.

2. Proficiency in at least one of the following programming languages: Golang, Python, Java, or NodeJS, with the ability to conduct code review and development.

3. Knowledge of cloud-native and infrastructure technologies, such as network access, large models, big data, storage, cloud computing, microservices, and zero trust.

4. Strong communication and collaboration skills, a good sense of professional ethics, keen risk awareness, and a results-oriented mindset with a desire for long-term development in this field.

Preferred Qualifications

1. Candidates who have reported high-impact vulnerabilities or won major security competitions are preferred.

2. Experience in leading or participating in large-scale project governance, architecture, or design is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Job Description

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors, client & authorities from inception to completion of projects
• Responsible for timely submission of design, plans and reports
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in Electrical/ Mechanical Engineering or relevant engineering recognized by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM etc
• Candidates with experiences in design of integrated electronic security systems (CCTV, access control system, intrusion detection system etc) or experience with a security specialist contractor / integrator would be advantageous
• Candidates with understanding of latest electronic security technologies would be advantageous
• Candidates with experiences in crash protection measures would be advantageous
• Critical thinking skill, good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges
• Candidates with more than 4 years of relevant experience would be considered for Senior Engineer position

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems, and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything we create is the result of people in different roles and teams working together to make each other’s ideas stronger. That same passion for innovation that goes into our products also applies to our practices, strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the Threat Analysis and Incident Response function. A successful candidate will possess a proven technical background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You will work with a global team of security professionals on a follow-the-sun model with a primary focus on the identification, containment, and mitigation of security incidents. This role is an integral part of the security controls Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology and processes with global reach.

Minimum Qualifications

• More than 7 years of experience in Information Security with a focus on Incident Response, Security Engineering, and/or Intrusion Detection
• Proficient understanding of incident response automation strategies, with demonstrated ability to implement them
• Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors
• Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues
• In-depth technical knowledge of macOS or Linux Operating Systems
• Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze endpoint, network, and application logs
• Proficient in one or more programming/scripting languages
• Excellent verbal and written communication skills

Preferred Qualifications

• Experience with disk and memory forensic tools
• Experience writing and tuning IDS signatures
• Experience triaging malware

Apple is an Equal Opportunity Employer that is committed to inclusion and diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants, including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.


Responsibilities

• Stay current on cybersecurity trends and events.
• Effective communication with internal teams and stakeholders.
• Develop technical proposals and present solutions.
• Coordinate project teams for timely delivery.
• Review and ensure adherence to security standards.
• Conduct security tests, audits, and risk assessments.
• Articulate cybersecurity risks and mitigation strategies.
• Evaluate and implement security products.
• Provide guidance for risk mitigation and secure lifecycle.

Requirements

• Minimum 2 years of cyber security experience.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Job Highlights

• In-house R&D and manufacturer with > 20 years of international track records
• Career development and overseas travel opportunities
• Performance bonus and special benefits
• 5 days work week (8.30 am to 6.00 pm)
• Near to Ubi MRT

Job Description

• Be part of our sales team to market the company's products and services to key CHANNEL partners and CORPORATE customers locally and overseas with some travelling
• Build solid customer relationships with key accounts and/or key channel partners
• Participate in marketing events such as seminars, trade shows, and telemarketing events

Job Requirements

• Candidate must possess at least Diploma/ Advanced/ Graduate Diploma/ Degree in Engineering (Computer/Telecommunication), Engineering (Electrical/ Electronic), Business Studies or equivalent.
• At least 2 Year(s) of working experience in the related field is required for this position.
• Required Skill(s): Access Control, CCTV, Integrated IP Solutions, Selling, Marketing
• Preferably Executive specialized in Sales/Support - Engineering/Technical/IT or equivalent for SALES ENGINEER position

All resumes are treated with the strictest confidence. We regret that only shortlisted candidates will be notified.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.


Responsibilities

• Stay current on cybersecurity trends and events.
• Effective communication with internal teams and stakeholders.
• Develop technical proposals and present solutions.
• Coordinate project teams for timely delivery.
• Review and ensure adherence to security standards.
• Conduct security tests, audits, and risk assessments.
• Articulate cybersecurity risks and mitigation strategies.
• Evaluate and implement security products.
• Provide guidance for risk mitigation and secure lifecycle.

Requirements

• Minimum 2 years of cyber security experience.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.


Responsibilities

• Stay current on cybersecurity trends and events.
• Effective communication with internal teams and stakeholders.
• Develop technical proposals and present solutions.
• Coordinate project teams for timely delivery.
• Review and ensure adherence to security standards.
• Conduct security tests, audits, and risk assessments.
• Articulate cybersecurity risks and mitigation strategies.
• Evaluate and implement security products.
• Provide guidance for risk mitigation and secure lifecycle.

Requirements

• Minimum 2 years of cyber security experience.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

We are looking for a dedicated Security Engineer to join our Cybersecurity Department. This role is pivotal in enhancing our security architecture and engineering efforts, requiring an individual who can serve as a subject matter expert (SME) in various security systems and solutions, particularly in Application Security.

Key Responsibilities:

• Security System Expertise: Serve as the SME in architecture and engineering for security systems managed by the Information Security Team; this is NOT a security operations position
• Design and Implementation: Plan, assess, design, operationalize, and maintain a range of security software and hardware solutions tailored to our enterprise needs.
• Risk Management: Identify, evaluate, and mitigate cyber risks within our IT infrastructure while staying updated on emerging threats and vulnerabilities associated with new technologies.
• Vendor Collaboration: Prepare requests for quotations (RFQs) and establish evaluation criteria, conducting proof of concept (POC) assessments during product evaluations in collaboration with vendors.
• Consultancy and Guidance: Provide expert consultancy and technical guidance on security best practices, advising infrastructure teams on relevant security design principles.
• Continuous Improvement: Recommend and drive initiatives aimed at enhancing the organization’s cyber security posture through innovative solutions.
• Project Management: Manage individual project priorities, deadlines, and deliverables with minimal supervision while fulfilling any relevant ad-hoc duties.

Requirements:

• Educational Background: A degree in Computer Science or a related field, complemented by at least 5 years of experience in information security, particularly in application security – as architect / engineer (NOT security operations).
• Certifications: Professional certifications such as CISSP, CSSLP, or CEH are preferred.
• Technical Proficiency: Demonstrated experience with security products and security technologies including EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, and network security tools; ability to review firewall requests is essential.
• Knowledge Base: Strong understanding of common web/mobile application vulnerabilities along with experience in vulnerability management is advantageous. Familiarity with cyber threats and exploit methods is also required.
• Communication Skills: Excellent verbal and written communication skills are crucial for articulating complex concepts clearly.
• Proactive Attitude: A positive mindset with a strong sense of urgency in addressing high-priority issues is essential. The ability to work both independently and collaboratively within a team environment is highly valued.

If you are interested in the above cybersecurity job or other security engineering opportunities, please apply with your updated CV or send to Shannagh Wu at [email protected]

Reg No. R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.


Responsibilities

• Stay current on cybersecurity trends and events.
• Effective communication with internal teams and stakeholders.
• Develop technical proposals and present solutions.
• Coordinate project teams for timely delivery.
• Review and ensure adherence to security standards.
• Conduct security tests, audits, and risk assessments.
• Articulate cybersecurity risks and mitigation strategies.
• Evaluate and implement security products.
• Provide guidance for risk mitigation and secure lifecycle.

Requirements

• Minimum 2 years of cyber security experience.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Interested Applicants
Please WA Bryan Tay @ 97559161
Shortlisted Candidates will be notified

Bryan Tay Reg No. R23112463
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.


Responsibilities

• Stay current on cybersecurity trends and events.
• Effective communication with internal teams and stakeholders.
• Develop technical proposals and present solutions.
• Coordinate project teams for timely delivery.
• Review and ensure adherence to security standards.
• Conduct security tests, audits, and risk assessments.
• Articulate cybersecurity risks and mitigation strategies.
• Evaluate and implement security products.
• Provide guidance for risk mitigation and secure lifecycle.

Requirements

• Minimum 2 years of cyber security experience.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

#HOT#Senior Cloud Security Engineer - Rolling Contract

- Global Bank

- Long term , can covert to perm

- Singapore Based

Are you a seasoned cloud security expert with a passion for enhancing security operations? We’re looking for a Senior Cloud Security Engineer to join our client's Cyber Security Operations team. In this role, you will leverage your deep knowledge of AWS and Azure to build and refine detection engineering processes and contribute to our SIEM platform. If you’re intellectually curious and adept at navigating the evolving threat landscape, this role is for you.

Key Responsibilities:

• Detection Engineering: Build and enhance detection capabilities within fully managed AWS and Azure environments. Serve as a technical subject matter expert for cloud environments.
• SIEM Development: Partner with Global Information Security teams to design, develop, and maintain detection content for on-premises and multi-cloud environments.
• Technical Solutions: Design and implement technical solutions to boost visibility, alerting capabilities, and risk reduction in AWS and Azure.
• Risk Assessment: Review applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Collaboration: Work closely with incident response teams, threat intelligence researchers, and other security professionals to improve internal security controls and processes.
• Communication: Present key data points and security findings effectively to stakeholders.

Required Skills:

• Education: Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or a related field.
• Experience: At least 8 years of relevant cyber security experience, with a minimum of 5 years in Cloud SOC or Purple Team roles.
• Security Controls: Deep understanding of security controls, tools, and operations for AWS and Azure.
• Detection Writing: Experience writing and tuning detections for cloud environments.
• SIEM Tools: Proficiency with SIEM tools and related technologies.
• Cloud Services: Hands-on experience with AWS and Azure native services and tools, such as Guard Duty and Security Hub.
• Threat Frameworks: Knowledge of threat frameworks like MITRE ATT&CK for Cloud and D3FEND.
• Risk Management: Understanding of risk management principles and practices.
• Security Frameworks: Familiarity with common information security and data protection frameworks (e.g., CIS, NIST, HIPAA, GDPR, PCI DSS, ISO 27001).
• Communication Skills: Excellent verbal and written communication skills with the ability to distill complex data and present it effectively.

Preferred Certifications:

• CCSP / CCSK
• CISSP / CISM / Security+

Why Join Us?

At Global Bank, you’ll be at the forefront of security innovation within a supportive and collaborative environment. We offer competitive compensation, opportunities for professional growth, and a chance to work with cutting-edge technology. If you’re a motivated self-starter with a knack for cloud security, we’d love to hear from you.

Interested applicants please send your resume in MS Words format to [email protected] and attn it to Co Co (R1768258)

Short listed candidates will be notified

www.ambition.com.sg
EA Registration Number: R1104661
Data provided is for recruitment purposes only
Business Registration Number: 200611680D. Licence Number: 10C5117

Job Purpose

A Red Team operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed “testing” team.

Team Duties

• Red Team Core (70%): primarily, as a Red Team operator, you will work closely with team members to deliver sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring Artificial Intelligence based applications such as Large Language Models (LLMs).
• Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests (“TTPs”) not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.
• Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Responsibilities
Seniority is determined by experience and demonstration of exceptional competencies including:

• Documenting and effectively publishing technology guidance and repeatable processes
• Mentoring peers in groups and individually
• Improving processes and incorporating advanced methodologies into engagements
• Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices

Knowledge and Experience

• University degree in Mathematics, Computer Science, Engineering, or related discipline
• 4 years or more direct penetration testing and red teaming experience.
• Scripting - python, bash, Go etc, software engineering, and system administration
• Offensive Security Certified Expert (OSCE) or CREST CCT qualification
• Artificial Intelligence background is a plus

Schedule

This role offers work from home flexibility of one day per week.

Intercontinental Exchange, Inc. is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin or ancestry, age, disability or veteran status, or other protected status.

We are looking for an experienced Senior Cloud Security Engineer to join the Cyber Security Operations team. This is a 12 months contract role to start with a potential to extend / convert based on the performance and business needs.

Roles and Responsibilities:

• The ideal candidate must have deep knowledge of security controls, tools, features, and operations for AWS / Azure. Candidate should be able to demonstrate relevant experience with implementing and enhancing detective capabilities in a fully managed AWS / Azure environment.
• The candidate should be intellectually curious about technology and the evolving threat landscape.
  This role will help to build a detection engineering process and culture for a SIEM platform covering on-prem and multi-cloud environments while serving as a technical subject matter expert for the AWS / Azure environment.
• It will partner with teams across Global Information Security to design, develop, tune, and maintain detection content to protect the and support the information security policies and/or procedures.

Skills and Experience

• Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or related field.
• Eight (8) or more years relevant Cyber Security experience with at least five (5) years in Cloud SOC and/or Purple Team roles.
• Highly organized and motivated self-starter who can deliver results with minimal direction.
• Experience writing and tuning detections.
• Experience with SIEM tools.
• Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS.
• Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Experience with a range of AWS . Azure native services and tools (i.e. Guard Duty, Security Hub)
• Understanding of threat frameworks, such as MITRE ATTCK for Cloud and D3FEND.
• Understanding of Risk Management principles.
• Experience in building, configuring, operating and/or securing cloud infrastructure and applications in AWS / Azure with either native cloud service provider capabilities or 3rd party vendor tools.
• Ability to independently assess risks and identify vulnerabilities in infrastructure with an eagerness to suggest new processes, policies, and overall improvements to internal security controls.
• Experience partnering with incident response teams, threat intelligence researchers, Red/Purple teams, and/or HUNT researchers.
• Familiarity with common Information Security and data protection frameworks and standards (i.e. CIS, NIST, HIPAA, GDPR, PCI DSSS, ISO 270001).
• Ability to navigate and collaborate effectively within a geographically complex and dispersed global corporation.
• Excellent verbal and written communication skills with ability to distill key data points and effectively present information.
• Preferable Certifications
  CCSP / CCSK
  CISSP / CISM / Security +

Argyll Scott Consulting Pte Ltd

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred