Total 702 purchasing engineer job vacancies in Legal / Public / Security category in Singapore

The TS Senior Security Engineer performs test activities and manages the internal or external customer independently. The Lead Technical Analyst is responsible for the customer satisfaction of the test deliverables and enables a smoothly running testing, validation or certification process. This includes using test automation tools, analyzing and validating test results and reporting to the customer. The Lead Technical Analyst participates in evaluating the security of IT products, such as network device, encryption software, mobile devices, payment terminals or e-Passports based on certain scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc. This will include the development document review, IT products analysis, the development and the realization of penetration test, the support and training of evaluation engineers.

Responsibilities for Internal Candidates

• Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations management.
• Conduct IT product security function evaluation work based on scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc..
• Customer code review when needed : due to stringent confidentiality and security requirements, it often requires traveling to customer premises.
• Based on the code review result, conduct a vulnerability analysis to determine if the customer product has any potential security weaknesses.
• Customer site audit when needed : normally traveling to customer premises, conduct remote audit in current Covid situation.
• Investigate possible logical attack scenarios. Provide support for the penetration tester in charge of product testing – by interpreting the code review findings and compliance checking result, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements.
• Delivery of customer projects on time.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
• Performs other duties as directed by supervisor.
• Maintains Laboratory accreditation and resolve scheme's mandated corrective action plans.

Qualifications for Internal Candidates

• Master or Bachelor level degree (or equivalent) in Information Technology, Computer Science or equivalent proving your analytical skills and technical approach.
• Minimum 5 to 8 years’ information security working experience, Common Criteria evaluation experience is the best and ISO 27001 auditing will be an advantage.
• Possess CISM / CISA Certification or related is an added advantage.
• COMMON CRITERIA SINGAPORE EVALUATOR (under SCCS) Certified is an added advantage.
• Comfortable in trying yourself in new areas without necessarily knowing everything and can figure out things as you go.
• Like working towards a larger goal and willing to take the initiative in your own hands.
• Good at communicating and can convey message to both technical and business audiences.
• Able to make decision independently under certain scenario, such as during site audit in customer site.
• Nice to have IT product development experience or penetration testing experience.

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Overview:

We are seeking a highly skilled and experienced Senior Security Engineer to join our team. This role focuses on significantly enhancing the security posture of our platform, ensuring a robust and resilient environment for our customers' financial data. The Senior Security Engineer will be responsible for implementing advanced security measures, conducting comprehensive security reviews, and performing thorough threat modeling and risk assessments.

Key Responsibilities:

• Security Tooling Enhancement:
  • Implement and configure industry-leading security tools to enhance the overall security infrastructure.
  • Continuously evaluate and integrate new security technologies to ensure state-of-the-art protection.
• Security Design Reviews:
  • Conduct detailed security design reviews of the platform's architecture and development processes.
  • Collaborate with development teams to incorporate security best practices and improve existing design methodologies.
• Threat Modeling and Risk Assessment:
  • Develop and maintain comprehensive threat models to identify potential security threats and vulnerabilities.
  • Perform risk assessments to evaluate the potential impact of identified threats and implement appropriate mitigation strategies.
• Third-Party Security Assessments:
  • Streamline and manage the process for conducting security assessments of third-party vendors and partners.
  • Ensure third-party integrations comply with the company’s security standards and policies.

Deliverables:

• Security Tooling Implementation:
  • Successful implementation and configuration of industry-leading security tools to enhance platform security.
• Improved Security Design Practices:
  • Establish and promote improved security design practices within the development process to ensure secure coding and architecture.
• Comprehensive Threat Models and Risk Assessments:
  • Develop and maintain detailed threat models and conduct risk assessments to identify and mitigate potential security risks.
• Streamlined Third-Party Security Assessments:
  • Create and manage a streamlined process for third-party security assessments, ensuring compliance and security of external partnerships.

Qualifications:

• Proven experience as a Security Engineer or similar role, with a focus on enhancing security postures for financial data platforms.
• Strong expertise in security tooling, design reviews, threat modeling, and risk assessment.
• Experience in conducting third-party security assessments and managing vendor security compliance.
• Excellent knowledge of security technologies, protocols, and best practices.
• Strong analytical and problem-solving skills, with the ability to identify and mitigate security threats effectively.
• Excellent communication and collaboration skills, with the ability to work closely with cross-functional teams.
• Bachelor’s degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are a plus.

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.
• Key Requirements:
• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Job Description

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Skills Required

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.

EA Number: 11C4879

· Perform analysis, prioritization and classification of risk.

· Handle day-to-day security vulnerability assessments and operational request.

· Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.

· Proactive monitoring of remediation plans and progress.

· Schedule security checks in accordance with reporting schedules.

· Continuous enhancement of existing security vulnerability assessment process.

· Verifies security controls are implemented accordingly.

· Review security incident reports

· Evaluate the type and severity of security events

· Assist with establishing procedures for handling detected security events

· Create final incident report detailing the events of the incident

· Prepare periodic status reports for presentation to management

· At least 5 year working experience in vulnerability management and incident response.

· Familiar with at least one vulnerability scanner.

· Strong analytical skills and ability to work independently.

· Good team player as well as strong communications skills with stakeholders at all levels

· Possess QISP, CEH, CISSP and/or related security certification.

· Experience in healthcare industry is an added advantage.

· Degree in Computer Science, Engineering or equivalent.

Responsibilities:

1. Establish and Enhance Cloud Security Compliance:

• Build and improve the cloud security and compliance framework.
• Research industry security products and compliance practices and apply them to the company's cloud services.

2. Respond to Online Security Issues:

• Provide professional solutions and security recommendations to address online security incidents.
• Ensure timely resolution of security events.

3. Track Industry Security Cases:

• Study the technical principles behind industry security incidents.
• Internally share knowledge related to security cases.

4. Conduct Regular Security Audits:

• Engage in red team-blue team exercises with the testing team.
• Ensure the overall security of the system.

Requirements:

• Education: Bachelor's degree or higher.
• Relevant Majors: Background in Electronics, Telecommunications, Computer Science, Network Engineering, or Software Engineering.
• Programming Language Skills: Proficiency in at least one of Java, Python, or Go, ability to solve problems through programming.
• Security Experience: Prior experience in web application security, network security, container security, or data security is advantageous.
• Soft Skills: Strong logical thinking and rigorous problem-solving abilities, excellent learning capacity, communication skills, and teamwork spirit, passion for technology and a desire to contribute to technical advancements.
• Ability to speak and write in Chinese as the incumbent requires to liaise with the China HQ counterparts/personnel for work or project related matters

THE JOB:

The Security Systems Engineer reports to the Campus Security Manager and is responsible for the physical security technologies and systems within the DataCenter.

JOB RESPONSIBILITIES

• Management of physical security technologies and systems within the Datacenter. Includes physical access control, video surveillance, security networks, VHF/UHF Radio systems, hard key management systems, and perimeter entry systems.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Collection and maintenance of system information on the health of current security systems and report out of performance trends. Identification of system issues or failures and coordination with site personnel to drive and correct failures by collaborating with other internal and external service providers in weekly / biweekly meetings.
• Receive escalations/notifications of physical security and business impacting incidents/events and appropriately triage, ensuring that leadership is made initially and continuously aware when appropriate and that the appropriate personnel are managing the incident response effectively.
• Serve as a Subject Matter Expert (SME) for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Continuously improve the efficiency and maturity of the overall physical security program.
• Collaborate with peer teams and organizations to ensure their team is aligned with broader strategy and initiatives, fully supporting leadership priorities, being good partners, helping reduce costs, time burden, complexity, and being responsive trusted advisors.
• Continuously seek data and recommend strategies and ideas to reduce churn, optimize, implement a creative solution to a problem, scale, automate, and simplify.
• Confident and skilled in preparing and delivering presentations and briefings to customers, senior leaders, and executives.
• Any other ad-hoc task assigned.

JOB REQUIREMENTS:

• Diploma or BS or BA in physical security or related discipline, or equivalent experience preferred.
• With 5 years’ experience successfully managing security systems projects in a corporate, law enforcement or government operations program role.
• Must be Lenel Certified Professional in Access Control and Digital Video or to attain Lenel certification within 6 months from date of hire.
• Experience with or exposure to regulatory and industry compliance frameworks and audits (e.g. ISO27001, PCI, SOC).
• Experience with datacentres or other critical infrastructure facilities.
• Experience with HA and DR solutions such as SQL Clustering, NEC WAN Express.
• With more than 5 years of managing, configuring, and maintaining Microsoft SQL Servers and processes.
• Experience making and influencing good decisions that impact mission-critical, 24x7 operations environments.
• Strong work and compliance ethic, and the ability to effectively prioritize and execute tasks in a dynamic and high-pressure environment.
• Proficient in the use of Microsoft Office products for business.
• Analytical and process improvement skills to produce data driven insights and associated process changes.
• Thought leadership and subject matter expertise to deliver one or more large programs and services while increasing standardization, simplification, and automation.
• Ability to change plans, goals, actions, and priorities in response to an evolving business environment with awareness to operate as a champion for course corrections when necessary.

We are seeking a highly motivated security analyst to join our Global Security Operations Centre (GSOC). You will be responsible for performing security monitoring and investigation, incident response, threat research and hunting for our global infrastructure, encompassing both cloud-based and enterprise environments.

The ideal candidate will be well-versed in security methodologies and technologies, with a passion for protecting systems and data from cyber threats.

Responsibilities:

• Perform security monitoring on global infrastructures, leveraging variety of analytic tools and techniques to detect incidents from security-relevant datasets.
• Detect incidents through daily monitoring and hunting efforts, work with cross-functional teams for remediation.
• Thoroughly document cybersecurity activities, thinking of ways to improving detection capabilities.
• Help maintain security appaliance rulesets, generate false/true positive statistics on exsiting rules, engage respective engineers to tune false rules.
• Assist the development of incident response plans, playbooks, and SOPs to improve the incident handling processes.

Requirements:

• Minimum 3 years of work experience in cybersecurity operations or engineering field; the candidate should possess a strong background in addressing security threats within both enterprise network settings and cloud-based environments.
• Able to perform deep dive analysis in endpoints incidents, so you need have strong knowledge in Windows, Mac OS and Linux operating systems.
• Deep understanding of network/endpoints defense principles, common attack vectors; have a good understanding in MITRE ATT&CK’s tactics and techniques.
• Well versed in data analysis and be able to locate anomaly through large datasets.
• Good understanding of principles in common security vulnerabilities. Those who submit vulnerabilities with good grades on major security platforms are preferred.
• Have a certain level of programming knowledge, such as: Python, Java, R, Go etc.
• Experience with the following technologies or concepts:
• SIEM or other security/log management platforms
• EDR/XDR/CNAPP/CSPM
• Basic host-based forensics analysis
• NTA, SOAR, WAF, Cloud

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Role Overview

Security Subject Matter Expert (SME) is responsible for designing, implementing, and managing security solutions to protect the company's information systems, networks, and data from potential threats and cyber-attacks.

The primary role is to provide expert guidance, support, and leadership in all matters related to security within an organization. This role will require strong analytical and collaboration skills, detailed working knowledge of current and emerging security technologies, as well as the ability to correlate events to identify abnormal behavior.

Responsibilities

• Serve as a Subject Matter Expert (SME) for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Investigate any security incidents and provide insights to internal/external business users.
• Develop processes and procedures and fine-tune alerts as part of ongoing improvisation of security operations.
• Develop cloud/hybrid and cloud platform-specific security policies, standards, and procedures on cloud providers (Azure, AWS) and cloud-native platforms (PCF, Docker, Kubernetes, etc.).
• Identify and deliver appropriate cloud security controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business risk and cloud-native threats.
• Conduct integration of supported Cloud-based Security Products such as Web Application Firewall (WAF), Web Security Proxy, etc.
• Conduct detailed & comprehensive investigations and triage on a wide variety of security events.
• Recommend and implement remediation processes.
• Stay up-to-date with the latest security threats, vulnerabilities, and mitigation techniques.
• Collaborate with cross-functional teams to implement security measures and address security requirements.
• Communicate security risks, recommendations, and status updates to stakeholders, management, and team members.
• Identify opportunities to improve processes and/or tools to ensure the highest level of quality, including documentation, mentoring, and training sessions.
• Own the technical components of a customer integration project including but not limited to configuration, debugging, documentation, testing, and go-live support.
• Identify and mitigate potential security threats and vulnerabilities.
• Provide relevant recommendations to improve the overall security posture of customers.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Assist in any ad-hoc tasks when necessary.

Requirements

• Over 5 years of experience in Information Security or engineering.
• At least 2 years of direct experience in one of the public cloud platforms, such as AWS or Azure with strong knowledge of their security features.
• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).
• Ability to identify and drive remediation of public and hybrid cloud risks.
• Experience in general security technologies, processes, and concepts.
• Experience with web security concepts and technologies such as web application firewalls, and proxy.
• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel.
• Working experience with common security operations systems, Intrusion Detection Systems(IDS/IPS), Security Incident Event Management systems(SIEM), anti-virus log collection systems, etc.
• Working knowledge of security systems and programs.
• Sound fundamental knowledge of Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10, and web servers (e.g. Apache, IIS, Nginx, etc.).
• Familiarity with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, and Open-source tools like Jenkins, DefectDojo, and OWASP Glue will be an added advantage.
• Strong analytical and problem-solving skills, with the ability to identify and address security risks and Vulnerabilities.
• Ability to analyze and develop innovative recommendations and solutions.
• Excellent verbal and written communication skills.
• Independent and results-oriented.
• Willing to work on a flexible schedule depending on business need.

Job Summary:

Join our client as a dynamic team as a Senior Cyber Security Engineer, focusing on privileged access management within the banking sector. This role is essential for enhancing the security posture of our bank by providing innovative solutions and aligning with industry trends.

Responsibilities:

• Provides vision for privileged access management, enables innovation, and aligns with industry trends and continuous improvements that enhances the security posture of the bank with regards to privileged access.
• Responsible for budgeting, project management, deployment and operations support of new initiatives in the privileged access management space.
• Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.
• Responsible for the day-to-day support, monitoring, upgrades, patching, configuration, and management of privileged access infrastructure.
• Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements:

• Bachelor’s degree in computer science, Information Systems, or Engineering (or similar) OR combination of relevant professional experience and education, such as CyberArk certifications
• Requires 4 or more years of related technical experience in CyberArk, including deployment, configuration, management, and support of all CyberArk infrastructure components. This includes regional support and integration of CyberArk via APIs. CyberArk certifications are preferred.
• Able to write PowerShell scripts and SQL statements to develop management reports on the usage and operations management of privileged accounts.
• Experience with Tableau data visualization tool for dashboarding.
• Strong understanding of enterprise privileged access management, risk management, compliance, governance, and control.
• Strong understanding of key platform OS/databases e.g., Windows, Unix, MSSQL, MariaDB. Prior experience in administering such key platforms is preferred.
• Experience in working in banking environment is preferred.
• Hands-on, well organised, risk and compliance focused, and self-driven.
• Comfortable operating in a fast-paced and highly technical environment.
• Able to prioritize tasks, responsiveness, along with excellent verbal and written communication skills.

EA License No. 01C4394 • RCB No. 200007268E • Lim Jia Jie EA Registration No. R22108969

By sending us your personal data and CV, you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for account creation in GO and the purposes set out in the Privacy Policy https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with GO’s Terms of Use https://go.persolkelly.com/Tacand the Privacy Policy. If you wish to withdraw your consent, please email us at [email protected]. Please feel free to contact us if you have any queries.

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

About EPAM

EPAM is a leading global provider of digital platform engineering and development services. EPAM has been expanding in Singapore since 2013 and delivering the best solutions to our customers. As a recognized leader, EPAM Singapore achieved Great Place to Work® Certification in 2023 and is committed to providing our team with inspiring careers.

You will have the opportunity to work with fellow talented technologists and accelerate your career by participating in our numerous upskilling, training, and certification programs. That is why EPAM Singapore was awarded Gold for Best In-House Certification Programmes in the Employee Experience Awards 2023 and Silver in the SkillsFuture Employers Awards 2022 for our efforts in championing employees' skills development and building a lifelong learning culture at the workplace. You can also look forward to developing holistically with the multiracial festivals and various wellness and cultural activities organized by our passionate colleagues here.

Why EPAM?

• By choosing EPAM, you're getting a job at one of the most loved workplaces according to Newsweek 2022 & 2023.
• Employee ideas are the main driver of our business. We have a very supportive environment where your voice matters.
• You will be challenged while working side-by-side with the best talent globally. We work with top-notch technologies, constantly seeking new industry trends and best practices.
• We offer a transparent career path and an individual roadmap to engineer your future & accelerate your journey.
• At EPAM, you can find vast opportunities for self-development: online courses and libraries, mentoring programs, partial grants of certification, and experience exchange with colleagues around the world. You will learn, contribute, and grow with us.

What You’ll Do

• Design, implement, and manage security measures for cloud environments
• Conduct regular security assessments and audits of cloud infrastructure
• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services
• Monitor and respond to security incidents, ensuring timely resolution
• Implement and maintain access controls, encryption, and other security features
• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities
• Develop and document security policies, procedures, and guidelines for cloud environments

What Will Make You Shine

• Bachelor’s degree in computer science, Information Security, or a related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus
• Minimum five (5) years of relevant IT experience in deploying and managing applications and services on the cloud, including the design, development, implementation and/or management of the solution
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge of security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud
• Proficient in security concepts related to infrastructure as code (IaC) and containerization
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

How We Hire

Here, we summarize the typical journey to finding a job within EPAM:

• Apply and tell us about yourself
• Go through some standard interviews:

1. General interview with a recruiter
2. Technical interview with our technology experts
3. Manager interview or Offer interview with a hiring manager

• Get ready to join the team

Not sure if you meet all the requirements? No problem. Let’s talk anyway and find out more.

It takes 1 min of application to start the journey with us. Apply now!

Cyber Security Engineer

A Cyber Security firm is expanding their operations in Singapore and are actively seeking for qualified cyber security engineers to join their growth.

Training will be provided by leading security providers to get up to speed on current projects.

The Opportunity:

The Cyber Security Engineer will have the opportunity to work on high-profile projects. You will gain valuable hands-on exposure to various security solutions across various businesses.

What we look for:

• Degree or Diploma in Computer Science, Information Technology, Information Security, Computer Engineering or equivalent
• Demonstrate a good level of understanding of cyber security operations
• Can show an ability to resolve technical problems
• Gained at least 1-Security Certifications (i.e. CISA, OSCP, CREST, CISSP, CEH, CISM etc) would be an advantage
• Ability to provide solutions and recommendations on projects
• Can demonstrate working knowledge on any security solutions including Network Security, Endpoint Protection, Security Management, Server Security, Data Protection & Encryption, Security Analytics, Server Security, Web Security
• An ability to manage and execute requirements such as the implementation, integration and upgrade of security solutions
• Experience in managing, setup advanced configuration and fine tuning of the solutions
• Ability to work independently on projects, project management, problem solving and ability to communicate well
• Singapore based

What is on offer:

• High-profile projects
• Full-time opportunity
• Comprehensive training provided to joiners
• Competitive remuneration and benefits

What’s next:

If you are interested to join this Cyber Security firm and to be an integral part of their growth then we would like to hear from you.

Full support and training will be provided to meet your career objectives.

Please reply directly to this posting with your CV or send us your details to [email protected]

We apologise that due to the high volume of applicants we may be unable to respond to everyone. Should you not hear from us, please assume your application was unsuccessful for this time round and good luck for the next.

Engage Group Cyber (Singapore)

[email protected]

Engage Group Pte.Ltd is a licensed business under the Ministry of Manpower: (EA: 18C9316)

Cyber Security - Offensive Security Engineer

An expanding cybersecurity firm dedicated to protecting top-tier organisations from digital threats are seeking for Cyber Security engineers for offensive security roles.

The Opportunity

As an Offensive Cybersecurity Engineer, you will play a crucial role within cybersecurity operations by simulating and executing attacks against systems.

You will identify vulnerabilities, weaknesses, and potential entry points that malicious actors could exploit. Your work will directly contribute to enhance defensive capabilities and strengthen the cybersecurity posture.

What we look for:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Advanced certifications (e.g., OSCP, OSWE, CEH, CREST etc) are highly desirable.
• Proven experience in offensive cybersecurity roles, including penetration testing, exploit development, and red teaming.
• Experience with ethical hacking frameworks and tools
• Proficiency in scripting and programming languages (e.g., Python, Bash, PowerShell).
• Deep understanding of network protocols, operating systems, and cybersecurity principles.
• Understanding of MITRE ATT&CK framework, Red and Purple team frameworks
• Conduct comprehensive penetration tests on systems, networks, and applications to identify vulnerabilities and potential security gaps.
• Develop custom exploits and proof-of-concept attacks to demonstrate vulnerabilities and their potential impact.
• Experience in red team exercises to simulate real-world attacks and assess the overall effectiveness of defensive measures.
• Conducting Vulnerability Research and up to date with latest cybersecurity threats, trends, and vulnerabilities; conduct research and analysis to anticipate emerging risks.
• Document findings, prepare detailed reports, and provide actionable recommendations to stakeholders, including technical teams and management.
• Collaborate and work closely with defensive cybersecurity teams to prioritize and remediate identified vulnerabilities and weaknesses.

Benefits:

• Competitive remuneration.
• Comprehensive healthcare benefits package.
• Opportunities for professional development and certification.
• Flexible work environment and remote work options.
• Dynamic and challenging work with industry-leading clients and projects.

What’s next:

To apply, please submit a resume, cover letter, and any relevant certifications to [email protected].

We look forward to reviewing your application and discussing how your skills can contribute to a dynamic cybersecurity future.

We apologise that due to the high volume of applicants we may be unable to respond to everyone. Should you not hear from us, please assume your application was unsuccessful for this time round and good luck for the next.

Engage Cyber Security (Singapore)

[email protected]

Engage Group Pte.Ltd is a licensed business under the Ministry of Manpower: (EA: 18C9316)

Responsibilities:

1. Administer day-to-day IT Infrastructure security operations in alignment with established security frameworks and requirements.

2. Implement security controls, conduct patching, and enforce hardening measures for infrastructure components.

3. Assess the business and operational impact of security remediation activities before making changes to the IT Infrastructure environment.

4. Document and escalate security findings that require attention beyond standard remediation procedures.

5. Continuously evaluate Azure and AWS cloud resources for security vulnerabilities, prioritize responses, and implement necessary measures.

6. Apply Azure and AWS cloud hardening practices following industry benchmarks and company security frameworks.

7. Monitor and optimize the patching status of the entire IT Infrastructure, ensuring timely application of patches.

8. Remediate infrastructure vulnerabilities based on severity and internal risk assessments.

9. Take corrective actions based on insights from Azure Defender, AWS Security Hub, and vulnerability assessment tools.

10. Perform Azure Active Directory administration, including managing access control policies and whitelisting/blacklisting.

11. Administer email filtering processes, analyze spam and phishing attempts, and conduct investigations as needed.

12. Integrate IT assets into SIEM security dashboards, addressing any gaps in asset discovery.

13. Collaborate with IT security officers, managers, and support teams to analyze and investigate SIEM events.

14. Serve as a subject matter expert in IT Infrastructure security, actively participating in IT infrastructure and operations meetings.

15. Attend weekly IT security meetings and respond to ad hoc IT security inquiries.

Qualifications:

a. Proven experience in IT Infrastructure security administration.

b. Familiarity with Azure and AWS cloud environments.

c. Strong understanding of security frameworks and best practices.

d. Ability to assess and prioritize security risks.

e. Proficiency in applying security measures to cloud resources.

f. Experience with vulnerability assessment tools.

g. Knowledge of Azure Active Directory and email filtering.

h. Familiarity with SIEM security dashboards.

i. Excellent collaboration and communication skills.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.


Responsibilities

• Stay current on cybersecurity trends and events.
• Effective communication with internal teams and stakeholders.
• Develop technical proposals and present solutions.
• Coordinate project teams for timely delivery.
• Review and ensure adherence to security standards.
• Conduct security tests, audits, and risk assessments.
• Articulate cybersecurity risks and mitigation strategies.
• Evaluate and implement security products.
• Provide guidance for risk mitigation and secure lifecycle.

Requirements

• Minimum 2 years of cyber security experience.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Interested Applicants
Please WA Bryan Tay @ 97559161
Shortlisted Candidates will be notified

Bryan Tay Reg No. R23112463
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Security Engineer | Up to $2.8k | 4Days | Jurong East

Salary Range: $2.4k - $2.8k
Working Days: 4 days
Working Hours: 12-hr rotating shift, 7.30am-7.30pm, 7.30pm-7.30am
Location: Toh Guan Road

Responsibilities

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement

• Possess at least a Higher Nitec
• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

The Supreme HR Advisory Pte Ltd | 14C7279

Ong Boon Kiet (Travys) | R22104769

Senior Recruitment Consultant

Security Engineer

Salary Range: $2.4k - $2.8k
Working Days: 4 days
Working Hours: 12-hr rotating shift, 7.30am-7.30pm, 7.30pm-7.30am
Location: Toh Guan Road

Responsibilities

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement

• Possess at least a Higher Nitec
• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

The Supreme HR Advisory Pte Ltd || 14C7279

R22111009 Cheng Kai Ling

Job Descriptions

• Maintain systems plus controls to protect unauthorized access, disclosure, modification and deletion of information through resources and computer networks.
• Support logs, categorizes, prioritizes, tracks, and routes:

1. Incidents reported by users or
2. Alarms raised by monitoring tools

• Interact directly with business technical specialist to guide on authentication, authorization and encryption solutions.
• Investigate known and suspected information security events and develop related reports.
• Conduct hardware and software security alerts as available.
• Resolve issues through responding IT threats and vulnerabilities.
• Conduct routine security risk analysis, evaluate business needs against collision, vulnerabilities and search resulting risks.
• Implement Change Request and Service Request.
• Perform patching on security equipment.
• To implement change request and service request.
• Apprised of the current state of computer security in place in the organization
• Technically proficient and up-to-date in basic computer security policies and practices
• Proactive in preventing Cyber-Security Incidenti.
• To perform technical security assessment for IT & Network components:

1. Vulnerability assessment,Penetration testing, Opportunistic Hacking, Web application security testing, Security source code review etc.
2. To monitor and track the identified vulnerability, issues and fix detected vulnerabilities to maintain a high-security standard.
3. Be familiar with browser, Web service, cloud security, mobile applications security, and operating system security conceptsiv. Understanding of leading vulnerability scoring standards and ability to translate vulnerability severity as security risk

• Perform forensic investigation if required
• Review all security logs.

Job Requirements

• Minimum 2 to 4 years IT relevant experience on security and 1-year experience in cyber security
• Preferably with Certifications such as CREST, OSCP and CISSP.
• With PenTest, Vulnerability Assessment & Risk Assessment experience
• Strong in technical skill
• Able to handle demanding service response and recovery turnaround
• Able to manage daily support tasks to meet stringent SLA requirements
• Excellent scheduling and multitasking skills
• Meticulous and process-oriented
• Good, hard-working attitude with ability to work well under pressure
• Good communication skills English (written, spoken)
• Good analytical skills with ability to work with others to resolve problems.
• Good organization skills, with ability to properly document and track information.
• Dynamic, customer oriented, experience working in a fast paced environment.
• Good Knowledge of following product will be advantageous:- Splunk, FireEye and Nessus Manage

1. Provide support for assigned security platforms, including onsite troubleshooting, root cause analysis, incident reports etc.
2. Manage ticket queue and take ownership and responsibility of tickets assigned, within agreed SLA.
3. Perform change requests activities per change window allocated, including planning, review, tracking & verification and documentation.
4. Ensure that daily operations and tasks are properly completed or followed up.
5. Escalate issues and liaise with subject matter experts as required to resolve issues.
6. Support After-office hours activities and standby requirements as necessary.
7. Prepare activities report and documentation.

Key Roles and Responsibilities:

• Ensures that email infrastructure at the client site is configured, installed, tested, and operational
• Performs necessary checks, apply monitoring tools and respond to alerts
• Identifies problems and errors prior to or when it occurs and logs all such incidents in a timely manner with the required level of detail
• Assists in analysing, assigning, and escalating support calls
• Investigates third line support calls assigned and identify the root cause of incidents and problems
• Reports and escalates issues to 3rd party vendors if necessary
• Provides continuous feedback to clients and affected parties and update all systems and/or portals as prescribed by NTT
• Proactively identifies opportunities for work optimization including opportunities for automation of work
• Coaches L2 teams for advance technical troubleshooting and behavioural skills
• May manage and implement projects within technology domain, delivering effectively and promptly per client agreed upon requirements and timelines
• May work on implementing and delivering Disaster Recovery functions and tests

Knowledge, Skills and Attributes:

• Hands on experience in managing enterprise email security solutions
• knowledge on Cisco email security solution - ESA (Email security appliance) , Threat Grid, Antimalware protection systems
• Ability to communicate and work across different cultures and social groups
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances
• Ability to maintain a positive outlook at work
• Ability to work well in a pressurized environment
• Ability to work hard and put in longer hours when it is necessary
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information,and refraining from interrupting
• Ability to adapt to changing circumstances
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey

Academic Qualifications and Certifications:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience)
• Certifications relevant to mail hygiene security such as Cisco email security or equivalent

Required Experience:

• Minimum 5 years IT experience with 2 years experience in supporting large scale email security environment.
• Seasoned working knowledge of ITIL processes
• Seasoned experience working with vendors and/or 3rd parties