Total 22 purchasing engineer job vacancies in Legal / Public / Security category in D02 Anson, Tanjong Pagar

Summary: As a Senior / Security Engineer, you will manage security incidents, conduct threat hunting with SIEM/SOAR tools, and support IT audits. You will oversee vulnerability assessments, security training, and IT security for vessels. You will also lead security projects, provide advisory for projects, and engage with external parties on cyber threats.

Reports to: Senior Security Manager

Role and Responsibilities:

Security Incidents

• Perform investigations of Security incidents.
• Perform threat hunting using SIEM and SOAR tools.
• SIEM/SOAR Tools: Hands-on experience with security monitoring tools like Microsoft Sentinel or other relevant SIEM and SOAR platforms.

Audit and Governance

• Participate in internal and external IT audits.
• Maintain Incident Response Plans and IT policies.
• Perform Vulnerability Assessment and Penetration Testing.
• Conduct Security awareness training for the organization.
• Conduct phishing campaigns.
• Design and review IT/Cyber security architectures.
• Works with external parties (eg; CSA, MPA) on the latest cyber threats and trends.
• Assist in vessel IT security setup, review, audit and remedial actions.

Projects

• Manages Security related projects.
• Acts as Security Advisory for all projects.
• Participate in Request for Proposal and Request for Quote process.

Requirements:

• Degree in Information Security, Computer Science or related disciplines with at least 3 years of relevant experience.
• Knowledgeable in IT Security, Cloud Security, and security standards such as NIST, ISO 27000 and IMO.
• Azure Cloud Security: Strong expertise in Azure Security Center, Microsoft Defender for Cloud, and Azure Policy for real-time cloud threat management and compliance.
• IT Security Management experience of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc will be an advantage.
• Knowledge managing network security devices (NextGen Firewalls, IDS, IPS, UTM, NAC, AV, etc.), Windows, Linux, and networking services will be an advantage.
• Preferred Certifications: CCSP (Certified Cloud Security Professional) and Azure Security Engineer Associate are highly preferred, in addition to other certifications such as CISSP, CISM, or CEH.
• Strong hands-on knowledge and experience with security architecture and implementation of Azure Cloud Computing (IaaS, Containers, AKS, DevOps, CI/CD) is mandatory.
• Proficiency in automating security workflows within CI/CD pipelines, focusing on Azure DevOps integration.
• Ideally completed 2 or more of the following certifications: SC-200, SC-300, AZ-500, MS-500 and SC-100.
• Knowledge of Vessel IT will be an advantage.
• Maritime Cybersecurity: Familiarity with maritime cybersecurity standards such as IMO guidelines and TMSA (Tanker Management and Self-Assessment) is a strong advantage for vessel IT security.

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

- Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)

- Guide IT managers of the group companies per the headquarters' directive.

- Effectively manage and analyze system logs on an ongoing basis.

- Remain updated about the latest security vulnerabilities and take immediate action if necessary.

- Collaborate with internal and external parties to ensure secure, smooth operations.

- Handle client inquiries about our proprietary applications.

- Automate redundant tasks using programming language skills.

- Regularly monitor and maintain system metrics dashboard and alerts.

- Educate colleagues and enhance company documentation about our IT infrastructure.

- Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

- At least 5 years of extensive experience in IT-related fields.

- Proficient reading and writing skills in Japanese.

- Exceptionally good communication and interpersonal skills.

- Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.

- Strong ability to configure SIEM and Power BI tools.

- In-depth familiarization with account management and data security.

- Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

- Proficiency in additional languages such as Chinese, Malay, or Thai.

- Proven experience with Cyber Incident Response Plan (CIRP).

- Expertise in vulnerability management, penetration testing, and implementing security incident response processes.

- Extensive experience in developing, implementing, and maintaining security policies.

- Knowledge of network security design and implementation.

- Experience in using vulnerability scanning tools and security tools.

- Proven record of enhancing cloud security through policy implementation and monitoring.

- Experience in promoting social engineering and phishing countermeasures.

- Ability to provide in-house security training.

- Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.

Job scopes

• Implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with.
• Define the process, provisioning, interfaces, provide recommendations.
• Securing at scale enterprise BigData Architectures with role-based access controls, DLP tools, monitoring tools to ensure proper data usage & reporting & prevention activities.
• Engage and execute Security Vulnerability Scanning activities ( HCR/NVA/Pen Test/ SAST/DAST activities etc) & resolve findings.
• Familiar with operational security processes
  o OS level patching
  o Application-level patching
  o Operational housekeeping and archival.
  o Server and application hardening procedure & steps
  o IM8 policy

Job requirement

• Bachelor’s degree in Computer science or equivalent
• Minimum 5+ years of experience as a Security Solution Architect
• Familiar with implementing HSM, EDRs, DLP , enterprise antivirus product implementation & operationalization.
• Familiar with container orchestration security (either OpenShift/CloudFoundation/Kubernetes), Securing containers, monitoring traffic. Container repository security, secure images.
• Must have a specialization in 1-2 areas of Cyber domains such as Identity Access Management, Cloud Security, Container orchestration platform security with a broad understanding of other areas.
• Familiar with Gov standard of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with cloud security tools & environment.
• Good to have experience with Thales CipherTrust & HSM., DigitalGuardian DLP Product Suite, vmWare CarbonBlack EDR, TrendMicro DeepSecurity Product Suite, Tenable Nessus, Burp Suite Enterprise
• Must have CISSP/CCSP/CCSK certification or its equivalent

Thank you for your interest!

We respect your privacy and all communication will be treated with confidentiality. If you wish to know more about this position or explore other roles, please prepare your updated profile and get in touch with our consultant at [email protected]

Cristina Malabuyoc Malijan EA License No. 02C3423 Personnel Registration No. R1111547

Please note that your response to this advertisement and communications with us pursuant to this advertisement will constitute informed consent to the collection, use and/or disclosure of personal data by ManpowerGroup Singapore for the purpose of carrying out its business, in compliance with the relevant provisions of the Personal Data Protection Act 2012. To learn more about ManpowerGroup's Global Privacy Policy, please visit https://www.manpower.com.sg/privacy-policy

Location: Singapore / Jakarta , Indonesia / Manila, Philippines / Flexible Working Arrangement
(No visa sponsorship)

Company Overview
A leading digital insurance firm committed to transforming the insurance landscape through innovative technology and customer-centric solutions. The organization is dedicated to maintaining the highest standards of security and compliance in an increasingly digital world.

Position Overview
We are seeking a skilled professional to join the Group IT Office as Security Engineer. The successful candidate will oversee daily operational activities related to various security tools and systems, ensuring adherence to an optimal security policy framework that aligns with organizational standards. This role involves close collaboration with multiple business units across the region, including Singapore, Philippines, Indonesia etc..

Key Responsibilities

• Responsible for security technology operations, maintaining and supporting all relevant security systems and tools.
• Collaborate with broader IT teams and focused on areas such as endpoint protection, data loss prevention, email security, network security, vulnerability scanning, encryption, and key management.
• Manage rule configurations, workflows, and system operations for each security tool/system.
• Ensure that all security rules are implemented in compliance with established standards, including necessary reviews and approvals for whitelisting and exclusions.
• Uphold baseline security standards for configuration management across all tools/systems.
• Develop and implement request, review, and approval workflows to ensure consistent handling and visibility across all security tools/systems.
• Oversee system administration tasks such as access approvals, patch verification, key rotations, and other operational changes.
• Establish service level agreements based on request severity to guarantee timely responses and resolutions.
• Address escalations for each security product to identify gaps or defects and propose effective workarounds or mitigation strategies.
• Facilitate knowledge sharing within the team to enhance operational expertise and ensure continuity in managing each security tool/system.
• Standardize operational documentation for procedures and playbooks into a centralized repository for consistency.
• Work collaboratively with cross-functional teams within the technology department to manage risks associated with security tools/systems.

Required Qualifications

• Strong skills in managing stakeholder expectations across business, technical, and operational teams.
• Demonstrated end-to-end ownership in various security domains to effectively resolve issues.
• Solid understanding of general technology concepts including servers, endpoints, databases, networking, applications, middleware, and cloud environments.

Education & Experience

• A Bachelor’s Degree in Information Security, Computing Engineering or a related field is required.
• At least 7 years of experience across several security domains such as endpoint protection, data loss prevention, email security, network security, vulnerability scanning, encryption, and key management is preferred.
• Experience within large organizations with regional exposure is desirable; prior experience in the financial services sector is an advantage.
• Relevant information security certifications (e.g., CISSP, CCSP, CompTIA Security+, CISA, CRISC) are beneficial.

If you are passionate about enhancing security operations and meet the qualifications outlined above, we encourage you to apply for this opportunity.


BeathChapman Pte Ltd

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

- Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)

- Guide IT managers of the group companies per the headquarters' directive.

- Effectively manage and analyze system logs on an ongoing basis.

- Remain updated about the latest security vulnerabilities and take immediate action if necessary.

- Collaborate with internal and external parties to ensure secure, smooth operations.

- Handle client inquiries about our proprietary applications.

- Automate redundant tasks using programming language skills.

- Regularly monitor and maintain system metrics dashboard and alerts.

- Educate colleagues and enhance company documentation about our IT infrastructure.

- Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

- At least 5 years of extensive experience in IT-related fields.

- Proficient reading and writing skills in Japanese.

- Exceptionally good communication and interpersonal skills.

- Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.

- Strong ability to configure SIEM and Power BI tools.

- In-depth familiarization with account management and data security.

- Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

- Proficiency in additional languages such as Chinese, Malay, or Thai.

- Proven experience with Cyber Incident Response Plan (CIRP).

- Expertise in vulnerability management, penetration testing, and implementing security incident response processes.

- Extensive experience in developing, implementing, and maintaining security policies.

- Knowledge of network security design and implementation.

- Experience in using vulnerability scanning tools and security tools.

- Proven record of enhancing cloud security through policy implementation and monitoring.

- Experience in promoting social engineering and phishing countermeasures.

- Ability to provide in-house security training.

- Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.

• CCNA/CCSA certification is preferred
• At least 1-2 years relevant experience is required.
• Good exposure and training is provided.

Responsibilities:

• Be responsible for Post-sales activities of Cybersecurity or Network Performance Monitoring products.
• Involve in Large-scale (Local & Regional) Project Implementation.
• Provide on-site implementation services including testing, deployment & documentation.
• Provide technical support in ensuring customer satisfaction.
• Analyse and clarify customer queries though troubleshooting and researching existing knowledgebase articles/known issues.
• Be on routine standby to support 24×7 maintenance support calls.
• Requires the ability to communicate issues clearly and concisely.
• Excellent written and verbal communication skills are a necessary part of the job.

Requirements:

• Bachelor’s degree or Diploma in Cyber Security, Computer Science, Computer Engineering or related field.
• At least 1-2 years relevant experience in IT industry providing network support and administration.
• Equip with knowledge & experience in networking such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Analytical and possess good troubleshooting skills.
• Willing to work extended hours and on standby duty.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to [email protected] or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Responsibilities:

• Manage and oversee z/OS Unix (Mainframe Access Management operations and audits).
• Drive and operationalize z/OS initiatives such as MFA (Multi-Factor Authentication) and STIG (Security Technical Implementation Guide).
• Write scripts/JCL to automate tasks and improve processes.
• Manage identity and access management processes, standards, and procedures to ensure control effectiveness and service quality.

Requirements:

• Bachelor’s Degree in Information Technology or a related field.
• At least 3–4 years of experience in Mainframe Security (RACF) administration/operations.
• Solid understanding of zSecure Admin and zSecure Audit modules.
• Good working knowledge of the Access Management lifecycle and processes.
• Excellent stakeholder management skills.

Interested Applicants, please email your resume to [email protected] (R1441955), stating the position as the subject title in the email. All Applications will be handled with strict confidentiality.

We are looking for a dedicated Security Engineer to join our Cybersecurity Department. This role is pivotal in enhancing our security architecture and engineering efforts, requiring an individual who can serve as a subject matter expert (SME) in various security systems and solutions, particularly in Application Security.

Key Responsibilities:

• Security System Expertise: Serve as the SME in architecture and engineering for security systems managed by the Information Security Team; this is NOT a security operations position
• Design and Implementation: Plan, assess, design, operationalize, and maintain a range of security software and hardware solutions tailored to our enterprise needs.
• Risk Management: Identify, evaluate, and mitigate cyber risks within our IT infrastructure while staying updated on emerging threats and vulnerabilities associated with new technologies.
• Vendor Collaboration: Prepare requests for quotations (RFQs) and establish evaluation criteria, conducting proof of concept (POC) assessments during product evaluations in collaboration with vendors.
• Consultancy and Guidance: Provide expert consultancy and technical guidance on security best practices, advising infrastructure teams on relevant security design principles.
• Continuous Improvement: Recommend and drive initiatives aimed at enhancing the organization’s cyber security posture through innovative solutions.
• Project Management: Manage individual project priorities, deadlines, and deliverables with minimal supervision while fulfilling any relevant ad-hoc duties.

Requirements:

• Educational Background: A degree in Computer Science or a related field, complemented by at least 5 years of experience in information security, particularly in application security – as architect / engineer (NOT security operations).
• Certifications: Professional certifications such as CISSP, CSSLP, or CEH are preferred.
• Technical Proficiency: Demonstrated experience with security products and security technologies including EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, and network security tools; ability to review firewall requests is essential.
• Knowledge Base: Strong understanding of common web/mobile application vulnerabilities along with experience in vulnerability management is advantageous. Familiarity with cyber threats and exploit methods is also required.
• Communication Skills: Excellent verbal and written communication skills are crucial for articulating complex concepts clearly.
• Proactive Attitude: A positive mindset with a strong sense of urgency in addressing high-priority issues is essential. The ability to work both independently and collaboratively within a team environment is highly valued.

If you are interested in the above cybersecurity job or other security engineering opportunities, please apply with your updated CV or send to Shannagh Wu at [email protected]

Reg No. R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Our client is a leading fintech who is looking to onboard an Infosec Engineer to be part of their cyber fusion centre.

Responsibilities:

• Configure, troubleshoot, and maintain security infrastructure hardware and software.
• Develop and implement effective security measures to protect company data and network infrastructure.
• Regularly track and report on the performance of these security measures.
• Deep understanding of comprehensive cybersecurity architectures.
• Develop and update the company’s information security strategy, ensuring it aligns with industry best practices and business objectives.
• Identify, define, and document system security requirements.
• Prepare and maintain technical documentation.
• Recommend solutions to management based on these requirements.
• Install and manage software for monitoring systems and networks for security breaches and intrusions
• Establish and enforce preventive measures to mitigate potential security threats.
• Educate and train staff on information system security best practices.
• Foster a security-aware culture within the organization.

Experience:

• Preferable to have 3+ years of relevant experience
• Knowledge in managing security solution stated above.
• Strong understanding of cybersecurity principles, practices, and solutions.
• Effective communication and analytical abilities.
• Ability to analyze complex security systems and identify vulnerabilities and solution.
• Expertise in computer programming and scripting languages.
• CISSP, or any related vendor certification (preferred)
• Proficient in managing a range of security devices, including but not limited to:

· Email Security

· IDPS

· Attack Surface Monitoring

· Anti-Malware Solution

· Web Application Firewall

· Certificate Management System (CMS)

• Partner closely with CISO of a front-running FinTech in digital banking space
• Cloud environment with direction in automation; high growth environment

Responsibilities:

• Partner closely with infrastructure dpt on security matters and solutions; end-to-end lifecycle
• Security patch rollouts across cloud platforms, data centre systems
• Maintain and formulate cloud security policies, including cloud desktop security policies
• Oversee, implement and administer all infrastructure related security solutions; including but not limited to firewall, Web Application Firewall (WAF), Mobile Device Management (MDM), IAM systems, Key Management Systems (KMS), Hardware Security Modules (HSM)
• Security Posture management and engagement, especially in cloud environment
• Resolve and troubleshoot incidents in security systems and device outages with respective IT teams and vendors
• Comply with MAS and regulator security requirements and ensure the bank is up to industry security standards

Requirements:

• BS/MS in Computer Science/Cybersecurity with 5+ years experience in network security, endpoints security, and identity access management.
• Experience with cloud-based security systems and services implementation and operation; understanding of cloud computing, OS, networking, and their security aspects.
• Knowledge of technical security controls aligned with frameworks like NIST CSF, MAS TRMG, MAS Cloud Advisory.
• Experience deploying and automating security systems; comfortable with handling configurations
• Proficiency in English and Chinese for communication with regional stakeholders for internal & external communications and engagement

If you are interested in the above job or other related cyber security positions, please send your updated CV to [email protected]

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

• Join a global level team with agile, culturally inclusive culture
• Exposure and active work on a large range of security technologies and domains, from DLP, network security, endpoint protection, email security, engagement etc.
• Front-running technology enhancement mindset, and ready for highly efficient operational role

Your role & responsibilities:

• Maintain and support in-scope security systems and tools.
• Work with a team of security professionals covering various security domains.
• Manage rule, configuration, workflow, and system management for each tool/system.
• Ensure security rule implementation aligns with group standards and undergoes appropriate reviews.
• Govern system administration including access approvals, patch verification, and key rotation.
• Establish service level agreements for request handling.
• Address gaps or defects in security products through escalation and proposing mitigation controls.
• Conduct knowledge sharing to ensure security business continuity.
• Standardize operational documentation for consistency.
• Collaborate with cross-functional teams to manage security tools/systems.

Requirements:

• Bachelor’s Degree in Information Security, Computing Engineering, or equivalent.
• 6+ years of experience in security domains such as data loss prevention (DLP), endpoint protection etc.
• Experience in organizations with regional exposure, preferably in the fintech / financial services / technology industries.
• Strong sense of ownership in various security domains, strong understanding in technology concepts ; end-to-end, including codes reviews
• Agile, inquisitive, proactive, and strong skills in problem solving and analysis

If you are interested in the above job or other information security opportunities, please send your updated CV to [email protected]

Reg No. R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Responsibilities:

• Provide Presales support on cybersecurity & PKI security products/ solutions to clients and partners.
• Execute post-sales installation, technical support (L1-L3) and maintenance services of cybersecurity & PKI products/solutions.
• Troubleshoot reported issues and collaborate with technology vendors for escalation when required.
• Ensure the completion and follow-up of daily operations and tasks.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Requirements:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• 1-2 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:
• Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
• Microsoft based Certificate Authority, Prime Key EJBCA
• Window/Linux/UNIX OS environments
• Hardware Security Module (HSM)
• Key Management System (KMS)
• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is advantageous.
• Professional certifications in cyber security or networking will be advantageous.
• Initiative with a positive working attitude.
• Hardworking and eager to learn new technologies and skills.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to [email protected] or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Responsibilities:

• Provide Presales support on cybersecurity & PKI security products/ solutions to clients and partners.
• Execute post-sales installation, technical support (L1-L3) and maintenance services of cybersecurity & PKI products/solutions.
• Troubleshoot reported issues and collaborate with technology vendors for escalation when required.
• Ensure the completion and follow-up of daily operations and tasks.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Requirements:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• 1-2 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:
• Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
• Microsoft based Certificate Authority, Prime Key EJBCA
• Window/Linux/UNIX OS environments
• Hardware Security Module (HSM)
• Key Management System (KMS)
• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is advantageous.
• Professional certifications in cyber security or networking will be advantageous.
• Initiative with a positive working attitude.
• Hardworking and eager to learn new technologies and skills.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to [email protected] or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Job description

• Front-running digital bank with strong presence in Asia
• Exposure in application security & vul mgt with a digital / virtual banking platform
• Openings for junior and mid-level professionals
  

Responsibilities:

Conduct vulnerability assessments, source code reviews, and internal penetration tests on web and mobile applications to identify security risks.
Enhance the bank’s vulnerability management process, including identifying, tracking, and remedying vulnerabilities.
Coordinate with external pentest teams for independent penetration tests, manage security findings, and oversee remediation efforts.
Participate in security reviews during system design and architecture stages of business projects.
Collaborate with development and DevOps teams to integrate security into the software development lifecycle (SDLC) and advise on vulnerability mitigation.
Improve security controls integration into CI/CD pipelines.
Provide secure coding training and guidance to development teams.
Ensure applications follow standard security principles and respond to security incidents related to application security.
Manage the bank’s application security systems and uphold security policies and operational procedures.

Requirements:

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or Cybersecurity
• 5+ years of experience in cyber security; supervisory / management experience will be a bonus
• Coming from banking, fintech, digital banking, virtual banking industries will be a bonus!
• Proficiency in conducting application and infrastructure security assessments.
• Familiarity with application security and vulnerability assessment tools such as Burp Suite, Kali Linux, Fortify,Nessus, and NMAP.
• Strong analytical and communication skills for real-time problem-solving.
• Ability to learn quickly and stay updated on vulnerability management and penetration test technology.
• Relevant certifications such as OSCP and CISSP are advantageous.
• Proficiency in English and Mandarin for communication with Mandarin-speaking stakeholders.

If you are interested in the above or other cyber security positions, please kindly send your updated CV to [email protected]

Reg No.R1981018

BeathChapman Pte Ltd

Licence no. 16S8112

We are seeking for skilled IT Security engineer - Cybersecurity with 2 - 4 years of experience or fresh graduates encouraged to apply

• Senior Cybersecurity Engineer (min with 4-year experience)
• Cybersecurity Engineer (min with 2-year experience)

Job Requirements:

Operating Hours:

Mon – Thu: 8.30am – 6pm

Fri: 8.30am – 5.30pm

Note: Engineer is expected to standby to work after office hours, weekends, and public holiday.

Scope of Work:

For Security & Vulnerabilities Assessment and Remediations Management

• Engineer shall perform vulnerabilities assessment based on the vulnerabilities identified by Customer Cyber Security team and any other security vendors.
• Engineer shall work closely with Customer Cyber Security team and/or any other security vendors to provide the remediation and/or workaround solution to close the vulnerabilities.
• Engineer shall test the remediation and/or workaround solution in the development environment first before deploying the remediation

to production.

• Engineer shall prioritise and resolve all the vulnerabilities according to customer remediation timeline.
• Engineer shall perform the necessary coordination with various parties for impact analysis, schedule for downtime, patching and any other related.
• Engineer is required to provide the necessary documentation on vulnerabilities remediation before implementation on production.
• Engineer is required to provide the necessary fall-back plan if the implementation fail on production.
• Engineer is required to raise the necessary ticket for implementation and schedule for downtime.
• Engineer is required to provide the necessary monthly report on vulnerabilities assessment, remediation schedule, status etc.
• The software products within the scope are as follows:

i. Solaris OS

ii. Linux OS (Oracle Linux, RedHat Linux, other Linux variations)

iii. Windows OS

iv. Hypervisor such as Nutanix, VMware Esxi, Vxrail, Microsoft Hyper-V and Azure, Oracle VM for x86 and Sparc

v. Web Server (Apache and IIS)

vi. OpenSSL

ICT Infrastructure Project Delivery and System Administration

• Engineer shall ensure smooth rollout of customers projects.
• Engineer to provide technical support for the project coordination, implementation, and rollout work of all customer projects.
• Engineer to provide IT consultancy services which includes but not limited to providing technical advice for the infrastructure services required for the setup, configuration, and commissioning of the customer projects.
• Engineer shall ensure all systems are well maintained.
• Engineer is expected to function as part of customer team in providing 24x7 operation support for system implementations arising from system changes, patches and security vulnerabilities fixes.
• To ensure the reliability and good working condition of the systems, the Engineer is expected and not limited to perform the following maintenance tasks.
• Periodic OS/firmware evaluation and recommendation exercises to recommend standard versions of OS/firmware for various intranet hardware platforms; quarterly for extranet and internet hardware platforms. The exercises shall cover security aspects, availability aspects, as well as pitfalls on operational aspects.
• Prepare, coordinate and execute the OS/firmware patching/upgrading of computer devices in accordance to the schedule and frequency stipulated by customer.
• Perform basic housekeeping tasks such as server configuration, backup, daily syslog/alert monitoring, health check, ORCA trend charts monitoring, etc.
• Monitor server performance via customer’s existing monitoring tools or scripts.
• Engineer assigned shall undertake to collect/review relevant statistics that may facilitate troubleshooting, capacity planning and performance tuning. Such statisticsshall be made available to customer either on a monthly or on a per-need basis should exceptions arise. The proactive measures that apply and are not limited to are as follows:
• Network performance indicators – network load, utilization etc.
• Hardware resource performance indicators – CPU, memory, etc.
• Continual assessment on overall performance & network health collectively to identify potential bottlenecks by looking at resource and traffic profiles.
• Performance indicators shall be reflected in a section within the monthly reports for ease of reference and discussions.
• Reviews of server setup to support Capacity Planning purposes shall be carried out every 6 months.
• Condition of current server performance
• Proposal to enhance or tune the server for better performance
• Updates of firmware and hardware releases that may affect the eventual performance and upgrade path of the components – such information as imminent obsolescence, End-of-Sales and End-of-Support status must be communicated to customer.

Requirement:

• Degree/Diploma in Information Technology/Computer Science or equivalent
• Working experience in Network Security
• Knowledge of Networking, firewall and other security technology.

Job Responsibilities:

• Provide Presales support such as product sharing, demo and POC testing on cybersecurity solutions (DLP and PKI Security) to clients and partners.
• Provide implementation and technical support services for cybersecurity solutions.
• Work with technology vendors to propose suitable solutions to our partners’ and customers’ requirements.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Qualifications:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• Minimum 2-3 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:

1. Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
2. Microsoft based Certificate Authority, Prime Key EJBCA
3. Window/Linux/UNIX OS environments
4. Hardware Security Module (HSM)
5. Key Management System (KMS)

• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is an advantage.

Interested candidates, please forward a detailed resume as MS Word format and email to [email protected]

Tempserv Pte Ltd

License No: 06C3745

Consultant: Daniel Lee / EA Personnel No: R1989151

Roles and Responsibility

• Monitoring & Management of Network Security Solutions (8*5 on weekdays)
• Implement hardware, install patches and perform periodical upgrades
• Configure, maintain and manage IPSec and SSL Virtual Private Networks environments
• Support Tufin tool for incident management and reporting
• Implement Approved Policy Changes
• Create Certificates, Check the Partition and Issues New certificates
• Troubleshoot NAC Related Issues & Operations Support
• Add / Modify / Delete – Switch / Router / Wireless device to respective Plugin’s
• Continuity & Incident Mgmt. Coordination
• Implement Approved Plugins & upgrades

Must Have

• Palo alto Firewall
• Checkpoint Firewall
• Device installtion & Upgrade

Good to have

• Firewall policy management and troubleshooting
• VPN troubleshooting
• Network & Incident management

Responsibilities:

• Design, implement, and manage security measures for cloud environments.
• Conduct regular security assessments and audits of cloud infrastructure.
• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• Monitor and respond to security incidents, ensuring timely resolution.
• Implement and maintain access controls, encryption, and other security features.
• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• Develop and document security policies, procedures, and guidelines for cloud environments.

Requirements:

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing applications and services on the cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge of security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Interested candidates may send their resumes to [email protected], or apply through the application system. Shortlisted candidates will be contacted.

Flamingo Recruitment Pte Ltd

EA License : 21C0588

Job Responsibilities:

• Provide Presales support such as product sharing, demo and POC testing on cybersecurity solutions (DLP and PKI Security) to clients and partners.
• Provide implementation and technical support services for cybersecurity solutions.
• Work with technology vendors to propose suitable solutions to our partners’ and customers’ requirements.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Qualifications:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• Minimum 2-3 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:

1. Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
2. Microsoft based Certificate Authority, Prime Key EJBCA
3. Window/Linux/UNIX OS environments
4. Hardware Security Module (HSM)
5. Key Management System (KMS)

• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is an advantage.

Interested candidates, please forward a detailed resume as MS Word format and email to [email protected]

Tempserv Pte Ltd

License No: 06C3745

Consultant: Daniel Lee / EA Personnel No: R1989151

Responsibilities:

• Provide Presales support on cybersecurity & PKI security products/ solutions to clients and partners.
• Execute post-sales installation, technical support (L1-L3) and maintenance services of cybersecurity & PKI products/solutions.
• Troubleshoot reported issues and collaborate with technology vendors for escalation when required.
• Ensure the completion and follow-up of daily operations and tasks.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Requirements:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• 1-2 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:
• Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
• Microsoft based Certificate Authority, Prime Key EJBCA
• Window/Linux/UNIX OS environments
• Hardware Security Module (HSM)
• Key Management System (KMS)
• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is advantageous.
• Professional certifications in cyber security or networking will be advantageous.
• Initiative with a positive working attitude.
• Hardworking and eager to learn new technologies and skills.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to [email protected] or please click on “Apply Now” and provide the below details in your resume.

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Job Responsibilities:

• Provide Presales support such as product sharing, demo and POC testing on cybersecurity solutions (DLP and PKI Security) to clients and partners.
• Provide implementation and technical support services for cybersecurity solutions.
• Work with technology vendors to propose suitable solutions to our partners’ and customers’ requirements.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Qualifications:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• Minimum 2-3 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:

1. Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
2. Microsoft based Certificate Authority, Prime Key EJBCA
3. Window/Linux/UNIX OS environments
4. Hardware Security Module (HSM)
5. Key Management System (KMS)

• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is an advantage.

Interested candidates, please forward a detailed resume as MS Word format and email to [email protected]

Tempserv Pte Ltd

License No: 06C3745

Consultant: Daniel Lee / EA Personnel No: R1989151

Roles and Responsibilities

• Protects system by defining access privileges, control structures, and resources.

• Safeguards information system assets by identifying and solving potential and actual security problems.

• Recognizes problems by identifying abnormalities; reporting violations.

• Determines security violations and inefficiencies by conducting periodic audits.

• Consolidate root cause analysis of past pentest results.

• Upgrades system by implementing and maintaining security controls.

• Require periodic after-hours/weekend support.

• Any other duties assigned by the Team Lead/Solution Architect.

Requirements

• 3 years experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector, etc.

• Strong understanding of SSDLC and security frameworks.

• Knowledge in OWASP Security Standards.

• In-depth knowledge of architecture, engineering, and operations of at least one enterprise IDS/IPS/SIEM platform.

• Hands on experience with vulnerability scanning and pentesting tools.

• Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations.

• Experience with identity and access management architectures and solutions including AD, RBAC, SSO, identity lifecycle management.

• Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security

• Experience with Linux administration, shell scripting, and open-source security tools.

• Knowledge of security best practices in hardening and protecting cloud environments, networks, servers, endpoints, applications, and databases.

• Certifications in OSCP / CISSP / SANS / Other relevant security certifications.

• Excellent interpersonal skills, team player and independent worker.

• Ability to operate in a fast-paced work environment and deliver under pressure.

• AWS certification will be an added advantage.