Total 40 qa engineer job vacancies in Legal / Public / Security category in sgp singapore singapore 70 tuas west dr

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust as a global technology, defence and engineering group, spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructures, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance.

Join our team of highly motivated individuals in the engineering cutting edge solutions that unify both cybersecurity and productivity. As our Cyber Security Product Engineer, you will join a team of specialised engineers to deploy, configure and support our indigenous and robustness cybersecurity products.

Job Description

• Participate in the product and project implementation and coordinate new installations, designs and migrations for security technology and solutions.
• Understand customer’s requirements and transform to technical control & technical solution
• Install, configure and upgrade Cyber Security Products
• Troubleshooting, diagnosing and resolving hardware, software, and other network and system problems on the customer's site
• Liaise with vendors and internal team for resolution solutioning for problems encountered.
• Monitor compliance to applicable codes, best practices, security standards and specifications for the delivery of security technology and solutions.
• Work within established configuration and change management policies to ensure awareness, approval and success of changes made to the ICT infrastructure.
• Cooperate and communicate effectively with project manager and coordinate with other project participants to deliver functional solutions and provide assistance and technical support.
• Create and maintain technical documentation for reference and reporting.
• Create, oversee and test system integration and security requirements (e.g. system integration test plan, system security acceptance test plan).
• Review findings from vulnerability assessment and penetration testing.
• You will learn system and cyber security knowledge with the team.

Requirements

• Possess 5-7 years of similar experience
• Familiar with cyber security products and project implementation
• Possess networking knowledge
• Possess basic knowledge in Linux
• Soft skills – Problem Solving, Communication and Teamwork Skills
• Singaporean only
• Work location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Cyber Security Engineer (Shift)

Job Description:

• Perform remote standby during weekends, public holidays, and after office hours for Monday – Friday.
• Provide phone/email and on-site (if required) support, resolving, mitigation, troubleshooting and investigating issues pertaining to cybersecurity solutions the company has implemented for its clients.
• Log incidents (either via phone or email) into incident management system (ITSM).
• Track and handle all incidents within client’s SLA.
• Coordinate with stakeholders for service recovery and follow through all the necessary escalation to respective team(s).
• Follow up with client on pending tickets for closure.
• Provide daily handover report after each shift.
• Onsite training during office hours as part of onboarding process and occasional trainings to keep up to date with the product

Job Requirements:

• Professional certifications in Information Technology or related fields.
• Self-motivated, always keen to learn new technologies and able to work independently.
• Possess logical thinking process in solving technical problems.
• A well-natured team player with strong customer centric mindset.
• Good communication skills with clients and various stakeholders.
• Experience or knowledge in Microsoft Windows and Server, Microsoft SQL, Networking and Virtualisation is an added advantage.

Job Responsibilities:

• Design, implement and administer security infrastructure and measures to protect against potential threats
• Test and evaluate security products and solutions
• Monitor and investigate systems and infrastructure activities for signs of unauthorized access or malicious activities
• Lead or participate in internal and external security audits and risk assessments to identify vulnerabilities in existing systems, develop and implement remediation plan for closure
• Review the technical design and facilitate onboarding process for new systems to ensure security compliance
• Develop security policies and procedures and manage compliance
• Create incident response plans; lead and manage incident response
• Promote security awareness and conduct routine social engineering tests for end users

Job Requirements:

• Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related field.
• 4-7 years of experience in IT or cybersecurity roles.
• Fundamental knowledge on IP networking (e.g. TCP/IP, routing, etc.) and Firewalls (e.g. FortiGate).
• Strong analytical and problem-solving skills.
• EPP/EDR product certification such as Trellix ePO, Symantec Endpoint Protection is an advantage.
• Experience in implementing security products such as SIEM, NIPS, EDR System is an advantage.
• Security Certifications such as GISA, GSEC, CISSP, CISM is an advantage.
• Proficiency in network security and encryption technologies.
• Knowledge of security frameworks and industry best practices (ISO 27001, NIST Cybersecurity Framework, and PCI DSS).
• Experience with vulnerability assessment and penetration testing.
• Strong understanding of secure coding practices.
• Expertise in configuring and managing firewalls, intrusion detection systems, and other security devices.
• Effective communication and collaboration skills to work with cross-functional teams.

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Additional Description:

For this position, we are looking for an ICT Security Engineer proficient in Elastic Stack to assist one of our clients – a leading global investment bank.

 The team is looking for an ICT Security Engineering professional to increase its capability to improve the detection & reaction to Cyber Threats by:

• Deploying, maintaining and improving the new SIEM infrastructure

The new joiner will work in close collaboration with Production Infrastructure & Observability teams. Finally, the new joiner will fully be part of the Production CSIRT / SIEM Engg team with the opportunity to expand the scope of activities within the team.

Responsibilities:

• Install and administrate the servers of the SIEM Infrastructure
• Develop automation on the different tasks and self-service tool
• Participate to the integration of new technologies logs
• Support logs parsing using custom parser/GROK development
• Project management
• Be a full time member of the Production CSIRT / SIEM Engg team and participate to the various activities of the team
• Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System

• Production experience across the following technologies:
• Working knowledge of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics. (Mandatory)
• In-depth experience with Kafka
• Good working knowledge of Linux (RedHat/Ubuntu)
• Programming skills (Python or Bash) is appreciated.
• Experienced production support engineer
• Platform integration skills are a plus - Experience in installation, configuration, documentation and administration of multiple pre-production and production platforms in both virtual and physical environments.
• Experience & skills in automation tools (e.g. Ansible) & DevOps pipelines are appreciated.

Specific Requirements:

• Candidate must have a overall 7 or more years of experience with minimum 4-5 years on relevant scope ie. Expertise in handling ELK stack for large platform or architecture.

• Regular team buildings
• 18 leave days / year
• Insurance: Hospitalization, GP, Dental and Optical
• Annual bonus
• Working hours: from 9am to 6pm, Monday to Friday
• Training and certifications paths

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

 Responsibilities:

Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.

Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.

Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.

Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.

Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.

Stay connected with the latest security trends throughout various industry verticals.

Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Preferred Qualifications (PQs):

• At Least 7 years of security architecture and/or security engineering experience
• Hands on and deep knowledge of security principles.
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
• Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
• Strong practical experience securing Kubernetes and containerised workloads.

Requirements

The role requires handling of measurement and detection equipment for military and homeland security. The ideal candidate should possess strong IT skills including, software installation and configuration. The resposibilities includes managing sales product inquiries, overseeing post-sales equipment delivery, performing regular maintenance, and conducting diagnostic analyses for troubleshooting and repair. A keen learning attitude and strong problem-solving ability are essential in this position. The candidate will also be expected to prepare basic reports. Effective communication and interpersonal skills will be important for maintaining and strengthening existing customer relations.

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a video tour of our global network of 24/7 Security Operations Centers (SOCs).

 Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs).

 We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis.

 Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches.

 While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.

 Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within.

 SUMMARY

We are seeking an energetic Security Engineer II to serve as a technical resource and leader. This position has two components and supports both our team that Onboards new customers and our MSS team that manages security devices for our customers. 

Onboarding, 60% of this role:  this part of the position centers on security and availability of customer data as it is brought into the Proficio SIEM. The Security Engineer II will assist in working with new clients as they transition to our ProSOC service. This includes ensuring timely deployment of services, developing a personalized on-boarding strategy for each customer and auditing of systems reporting from the client to our Security Operation Center. 

MSS device configuration/maintenance, 40% of this role:  this part of the position will help ensure delivery of our Elastic Stack Managed Security Services to meet or exceed the defined service levels of our clients. The Security Engineer II will respond to customer requests and act as a trusted technical resource for our clients while striving to maintain high reliability and performance within our customer’s environments. This position also includes managing and optimizing overall IT infrastructure and systems used in the delivery of our Managed Security Services.

 Responsibilities

• Assist in the onboarding and implementation of ProSOC service and Managed Security Services solutions for Proficio clients across industries and geographic locations. 
• Act as a technical liaison between Proficio and its customers during the onboarding process.
• Review technical security posture (network, application, and database) for existing and newly acquired businesses or services.
• Perform security reviews and monitoring of the production environment. 
• Perform the installation and configuration of security monitoring tools in support of our ProSOC service.
• Use out of the box thinking as well as industry standard troubleshooting tools, such as, Wireshark, TCPDUMP, and other tools, to facilitate on-boarding of customer data sources.
• Work with senior staff to evaluate client security devices and make recommendations based on industry standards for security configurations.
• Assist Proficio engineering team with tasks related to the review and development of Managed Security Services related processes and procedures.
• Assist senior staff when they provide Subject Matter Expert (SME) services, engaging directly with clients to perform necessary research, answering questions and making recommendations based on industry standards and best practices.
• Participate in engineering team on-call rotation.

• A Bachelor’s degree in Information Systems, Business, Engineering, or a related field from an accredited institution OR equivalent experience
• 4-5+ years’ experience as a Network Engineer or Security Engineer working with a broad range of technologies
• Minimum 2+ years’ experience in Information Technology IT Security in a SOC or NOC environment working with a broad range of technologies highly preferred.
• Security certification required, such as, Security+ and Network+. Security certification such as SANS/GIAC, CISSP, CISA, CISM are a plus
• Basic Unix or Linux systems administration and command-line experience (Redhat/Linux, FreeBSD, Ubuntu, etc.).
• Experience with Windows Server security logs.
• Experience in the configuration and troubleshooting of IPSec VPN tunnels.
• Knowledge of network analysis tools, such as, Wireshark and TCPDump and SCP.

• Knowledge of UNIX and Windows environments as may pertain to Network and Security tasks including syslog, DNS, load balancers and BIND, BigIP command line on BSD, Windows Event Log.
• Hands-on experience installing, configuring and administering network and security devices, applications and systems
• General understanding of SIEM operations experience with Elasticsearch is a strong plus
• Managed Services experience preferred with a customer focused mindset that is willing to go above and beyond to satisfy a customer requirement absolutely required
• Experience performing vulnerability assessment and remediation using products such as Qualys, Nexpose or Nessus is a plus
• Proficient with Linux (scripting in Bash or Perl is required and Python is a plus)
• Vendor certifications from Palo Alto, Cisco, Juniper etc. are a plus
• Effective time task management skills.
• Strong communications skills, both written and oral
• Ability to participate in on-call rotation for after hours and weekend escalations

 At least 1 years’ experience configuring and/or using the following:

•  Security Management Systems (i.e. Tipping Point SMS, CheckPoint Security Management Server, Cisco Sourcefire Management Console, or JunosSpace)
• Firewalls (Cisco, Palo Alto, Checkpoint, Fortinet, Juniper SRX, or IPTables)
• IDS/IPS (Cisco AIP or Sourcefire, McAffee, Juniper or Tipping Point)
• Linux command line or similar operating system
• Experience with Vulnerability Management Tools
• Wireshark or other similar industry standard application
• Data Encryption using SSH, IPSEC VPN or TLS/HTTPS

• Opportunity to work in a progressive organization with structured training and roadmap for success

• Lunches and fun employee activities!
• Experience in one of the hottest IT industries today

Proficio is an EOE employer.

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security SIEM Use-Case Engineer to join our Cyber Intelligence and Response Centre (CIRC). This role is crucial for the engineering, development, and continuous improvement of threat detection use-cases within our SIEM . You will also be involved in the engineering and development of custom rules to detect potential threats swiftly and creating transparency to map existing detection capabilities to the MITRE ATT&CK framework.

Key Responsibilities:

• Proactively create, test, and tune new detection use-cases in the SIEM
• Review and enhance existing detection use-cases using Machine Learning or User & Entity Behaviour Analytics (UEBA).
• Map detection use-cases to the MITRE ATT&CK framework to assess SIEM monitoring coverage.
• Perform regularly updates to threat detection engineering playbooks, processes, and documentation.
• Collaborate closely with the SOC to challenge and improve detection and prevention capabilities.
• Identify and implement SIEM use-cases to address blind spots.
• Coordinate with the log onboarding team and SIEM architect to validate new log sources for compliance and improve SIEM backend performance.
• Collaboration with Service Operations team to address challenges, process fulfillment, documentations, and improvement of Service Operations Quality.
• Provide governance on topic which related to operational stability.

Join us to play a pivotal role in enhancing our cyber security measures and protecting our global operations.

QUALIFICATIONS

Specific Knowledge

• Intense knowledge in using Splunk Enterprise Security (ES)
• Intense knowledge in developing and tuning detection use-cases (Correlation Searches) in Splunk based on Data Models
• Experience in Machine Learning and Risk Based Monitoring in Splunk is an advantage
• Ability to analyse and interpret security logs and events to identify potential threats and attack patterns
• Experience in validating data source compliant using the common interface model (CIM)
• Experience of setting up and utilize data models in Splunk
• Deep understanding of cyber security concepts to create detection use-cases targeting various phases of attack lifecycle
• Understanding of MITRE ATT&CK framework and detections of various tactics and techniques
• Experience and capable of creating interactive dashboards, alerts, reports in Splunk

Experience

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• At least 3 years of experience with demonstrable skillsets in SIEM use-case engineering, with over 5 years of experience
  in cybersecurity
• Previous relevant experience working in a security operational role, ideally within a Corporate, Military, or Police environment; engaging with and responding to a diverse array of internal stakeholders, including senior management
• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision

This position is based in location Singapore. A valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. We regret to inform you that only shortlisted candidates will be notified.

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are looking for a SOC Engineer (Shift) to join us in our mission to enhance Singapore’s competitiveness as a trusted ICT hub for citizens and businesses. This role will be a 2-year rolling contract employment.

A brief summary of your job responsibility:

• Act as Incident first responder, reviewing and verifying system alerts
• Perform security incident discovery, triage, and remediation plan coordination.
• Daily analysis of SIEM events to identify malicious events and define use-cases to alert the operations team on threat events.
• Identified and onboarded assets into SIEM with all necessary use cases, dashboards, and reports.
• Monitoring of security procedures and practices; recommend optimizations and improvements when gaps are identified
• Provide support on IDS, SIEM, vulnerability management systems (VMS) and advanced endpoint detection/prevention.
• Escalate security incidents using established policies and procedures
• Any other ad-hoc duties as assigned by the SOC Manager

To succeed in this role, you will ideally have:

• Experience with analysis of server, network and web security events.
• Working experience with SIEM and VMS support tools.
• Security certifications like SSCP and CISSP will be an added advantage
• ITILV4 foundation certified is preferred.
• Strong interpersonal communication skills, verbal and written.
• A team player and can also work on own initiative.
• Willing to work on 12-hour shift pattern.

Join us and discover a challenging and rewarding career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now"

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

• Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
• We promote a learning culture and encourage you to grow and learn.
• A competency framework is in place to help you grow your career with us.
• Contract Staff enjoys the same benefits as Permanent Employees.

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Descriptions:

In this role, you will join a team of six members from Sopra Steria to support one of our government project. The scope of work includes:

1. Security Risk Assessment
2. Security Policies, Standards, Guidelines, And Procedures Review
3. Security Design
4. Application Security
5. Vulnerability assessment and
6. System Security Acceptance Testing

You will be an expert in the field of Cloud Security.

Responsibilities:

• Provide expertise in cloud security and be a trusted technical advisor and solve complex cloud security & compliance challenges.
• Design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment.
• Perform risk assessment for Cloud Computing Environment and Service
• Hands on and deep knowledge of security principles.
• Experience managing customer projects to completion, working with engineering teams, sales and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.

• Minimum of 3 years of experience in Cloud Security (AWS will be highly advantageous)
• Strong understanding of security frameworks
• Fluent in spoken and written English
• Ability to work closely with international team in a professional manner
• Excellent verbal and written communication skills, including ability to solve complex technical situation and explain it clearly
• Relevant certifications, such as AWS Certified Security – Specialty (SCS-C01), Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), are a plus.

• Regular team buildings
• 18 leave days / year
• HSBC Insurance, GP, Dental, Optical
• Annual bonus
• Working hours: from 9am to 6pm, Monday to Friday
• Training and certifications paths

Job Description

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors, client & authorities from inception to completion of projects
• Responsible for timely submission of design, plans and reports
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in Electrical/ Mechanical Engineering or relevant engineering recognized by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM etc
• Candidates with experiences in design of integrated electronic security systems (CCTV, access control system, intrusion detection system etc) or experience with a security specialist contractor / integrator would be advantageous
• Candidates with understanding of latest electronic security technologies would be advantageous
• Candidates with experiences in crash protection measures would be advantageous
• Critical thinking skill, good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges
• Candidates with more than 4 years of relevant experience would be considered for Senior Engineer position

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments and conformity assessments on Consumer, Industrial and Medical related products and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT/product-related technologies
• Cross-collaboration to ensure comprehensive service delivery.
• Develop and review documents according to guidelines and frameworks.
• Product knowledge and testing on any of the following requirements but not limited to:
• IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, etc.)
• OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
• Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.

As a Cyber Security Specialist at Jurong Port, you will be responsible for the daily administration and management of cyber security tools and systems. Your primary duties will include maintaining and optimizing security tools, monitoring system logs, conducting vulnerability assessments, and ensuring endpoint protection.

The Job:

• Oversee the daily operation and maintenance of security tools such as endpoint protection solutions, PAMS, WAF and vulnerability assessment tools.
• Review and investigate security logs from various systems and tools to identify and respond to potential security incidents and breaches.
• Conduct regular vulnerability assessments and penetration testing to identify and mitigate security weaknesses.
• Conduct cyber security training and exercise to test and improve staffs’ awareness and response
• Monitor and respond timely to security incidents and alerts, conducting thorough investigations and root cause analyses to minimize risk exposure.
• Work closely with IT and application team to ensure security compliance and best practices are integrated into all aspects of the organization's operations.
• Ensure regulatory compliance for cyber security matters.
• Develop and distribute security newsletters and advisories to educate staff on the latest security threats and best practices.
• Develop and maintain SOP documentation.
• Stay up to date with the latest security trends, threats, and technology solutions.

Job Requirement:

• Diploma or Degree in Computer Science, Information Technology, Cyber Security, or related field.
• At least 5 years of experience in cyber security or a related role.
• Minimum 2 years of experience in vendor management
• Strong knowledge of security principles, techniques, and technologies.
• Experience with security tools such as firewalls, endpoint protection, WAF, VA, SIEM and PAMS solutions.
• Good working knowledge of IT infrastructure (servers, networks, storages and endpoints).
• Relevant certifications such as CEH, CompTIA Security+, SSCP or any cyber security related certificate.

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Key Roles and Responsibilities:

• Ensures that email infrastructure at the client site is configured, installed, tested, and operational
• Performs necessary checks, apply monitoring tools and respond to alerts
• Identifies problems and errors prior to or when it occurs and logs all such incidents in a timely manner with the required level of detail
• Assists in analysing, assigning, and escalating support calls
• Investigates third line support calls assigned and identify the root cause of incidents and problems
• Reports and escalates issues to 3rd party vendors if necessary
• Provides continuous feedback to clients and affected parties and update all systems and/or portals as prescribed by NTT
• Proactively identifies opportunities for work optimization including opportunities for automation of work
• Coaches L2 teams for advance technical troubleshooting and behavioural skills
• May manage and implement projects within technology domain, delivering effectively and promptly per client agreed upon requirements and timelines
• May work on implementing and delivering Disaster Recovery functions and tests

Knowledge, Skills and Attributes:

• Hands on experience in managing enterprise email security solutions
• knowledge on Cisco email security solution - ESA (Email security appliance) , Threat Grid, Antimalware protection systems
• Ability to communicate and work across different cultures and social groups
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances
• Ability to maintain a positive outlook at work
• Ability to work well in a pressurized environment
• Ability to work hard and put in longer hours when it is necessary
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information,and refraining from interrupting
• Ability to adapt to changing circumstances
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey

Academic Qualifications and Certifications:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience)
• Certifications relevant to mail hygiene security such as Cisco email security or equivalent

Required Experience:

• Minimum 5 years IT experience with 2 years experience in supporting large scale email security environment.
• Seasoned working knowledge of ITIL processes
• Seasoned experience working with vendors and/or 3rd parties

We are seeking a highly skilled Security Engineer with extensive experience in managing, configuring, and upgrading a wide range of security technologies. The ideal candidate will possess strong technical expertise and excellent communication skills. This role requires a proactive individual who can effectively manage security incidents and ensure adherence to security policies and best practices.

Responsibilities:

· Manage, configure, and upgrade a diverse range of security technologies.

· Respond to fault alerts and customer escalations for managed security technologies.

· Troubleshoot product-specific technical issues within SLA, collaborating with internal teams and external vendors to resolve them.

· Escalate incidents and problems within SLA to internal technical teams or external product vendors.

· Prepare and submit incident reports for high-severity incidents.

· Respond to inbound Change Requests (CRs), Service Requests (SRs), and other queries within SLA.

· Perform regular configuration backups on managed security products.

· Plan and coordinate maintenance windows with clients for necessary software patching and version upgrades.

· Create and update technical documentation on managed security technologies.

· Generate monthly reports according to service scope requirements.

· Adhere to organizational and project security policies, procedures, and best practices.

· Serve as the primary point of contact to assist and advise clients on ICT security-related matters.

· Lead and support customers in security incident response and resolution.

· Demonstrate strong teamwork and leadership qualities.

· Maintain a customer-focused approach with excellent interpersonal skills.

· Bachelor’s degree / Polytechnic Diploma in Cyber Security, Computer Science, Information Technology, or Information Systems.

· Minimum of 5 years’ experience in IT infrastructure operation and/or support.

· Strong fundamental knowledge of IP networking (e.g., TCP/IP, routing) and operating systems (e.g., Windows, Linux).

· Excellent critical thinking and problem-solving skills with a passion for information security.

· Fluent in both written and spoken English, with strong interpersonal skills.

About Us

LiquidX Studio is a high-conviction, high-touch venture studio focused on building application layer companies within web3.

Pixelmon is One of the largest market-cap NFT collections in the gaming category. We are building out the first truly decentralised IP, first with games but moving to animation and other distribution channels. Innovative tokenomics, including fractionalised IP ownership and royalty sharing model.

We are based in Singapore and Malaysia with many of our team collaborating remotely from countries like New Zealand, Spain, Indonesia, and Brazil. With large backing from our recently raised funding round, we aim to create a unique experience with immersive gameplay and extensive lore that will wow all gamers.

These include, but are not limited to:

1. Building our IP through Non-Fungible Tokens (NFTs) and Fungible Tokens (FTs)
2. Creating engaging and innovative technology products to engage and support our Pixelmon community
3. Developing the web3 integration layer between our upcoming games and NFTs

About the Role

We are looking for a Senior Data & Security Engineer to join our dynamic team. The ideal candidate will assist in implementing and maintaining data security measures across our systems. This role involves working closely with senior engineers to ensure data protection, integrity, and availability.

What You Will Do

• Assist in implementing data security policies and procedures.
• Monitor and analyse security incidents and threats.
• Conduct vulnerability assessments and penetration testing.
• Participate in the development of security solutions and protocols.
• Provide support for data backup and recovery processes.
• Collaborate with other teams to ensure data privacy and compliance.

What You Will Bring

• Bachelor’s or Master’s degree in Information Security, Computer Science, or related field.
• 5+ years of experience in data security roles.
• Expertise in security tools and technologies (SIEM, DLP, IAM).
• Knowledge of regulatory requirements (GDPR, HIPAA, etc.).
• Experience with cloud security (AWS, Azure, GCP).
• Certifications such as CISSP, CISM, or GIAC are a plus.
• Solid understanding of networking concepts (TCP/IP, routing, switching, VPNs)
• Excellent analytical, problem-solving, and communication skills.

Who You Are

1. You thrive in a highly collaborative environment and can own complex projects, taking them from inception to completion.
2. You believe in supporting and guiding fellow and junior engineers through mentorship and coaching positively and encouragingly.
3. You love to learn and pick up new technologies and build production-grade products quickly.
4. You are familiar and comfortable with the fast-paced world of startups.
5. You are logical and able to communicate tradeoffs between technical options.
6. You are open-minded and willing to listen and distil different perspectives.
7. Plus Point: You have a demonstrable interest in crypto and DeFi 
8. Plus Point: You love and are actively gaming

Benefits and Why You’ll Love Working With Us

• We Listen. Your voice, ideas, and suggestions matters to us, as we continuously evolve 
• Our People. You’ll be working with a diverse, multicultural, international, talented, fun, supportive, and innovative people and teams. We are people you can be proud to work with
• On The Edge of Innovation. Working on the latest technological, social and financial trends that is web3 and blockchain
• Flat Organisation. our team is a community, we work together as a team from all levels in true decentralised spirit

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust as a global technology, defence and engineering group, spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Collaboration is key to our success. We prioritize open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructure, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

Job Description

• Best to have formal experience in pre-sales, post sales, delivery team and highly familiar in the project methodologies such as Planning, Design, and relevant Technologies in order to develop proposal for the tenders/bids.
• Experience in overall design for network and security solutions
• Propose technical solutions and oversee the selection of technologies and work with subject matter partners to develop the proposed solutions to meet customer’s requirements.
• Propose technical solutions and oversee the selection of technologies and work with subject matter partners to develop the proposed solutions to meet customer’s requirements.
• Articulate alternatives in terms of cost, benefit and risk where multiple solutions exist.
• Actively participate in identifying opportunities, generate proposals, and support sales efforts
• Increase organization effectiveness by identifying opportunities to leverage solutions to other engagements
• Take ownership and responsibility for customers’ risks and issues.

Requirement

• At least 3 – 5 years of working experience with in-depth knowledge of pre-sales solutioning and is in abreast with evolving technology capabilities
• Possess in-depth knowledge of current technologies, tools, methodologies and industry trends, Government guidelines
• Strong problem resolution, judgment and decision making skills
• Fosters proactive and cooperative relationships within own team and other individuals/groups that interface with the team.
• Excellent interpersonal and group dynamic skills.
• Highly developed analytical and problem solving skills.
• Ability to deal with the ambiguity associated with working in a fast paced and changing environment
• Any other ad-hoc duties as required or assigned
• Possess relevant professional certification like CISSP, CCIE would be an added advantage
• Familiar with regularity compliance like IM8, AIAS, CSA Security by Design, MAS TRM
• Work Location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Job Responsibilities:

· Drive the fortification and optimization of the wallet security system, including but not limited to security policies, patching vulnerabilities, and monitoring unusual activities.

· Responsible for the daily operational maintenance of the wallet system, including but not limited to node deployment, on-chain data synchronization, and system backup, etc.

· Provide reasonable and effective suggestions for the existing wallet system framework, assist in upgrading the security organizational framework, participate in the design and implementation of security policies, to ensure the security of the exchange wallet system.

· Design and collaborate on the development of a security framework with rational security logic.

· Enrich and optimize existing rules, participate in the emergency response to daily security incidents, as well as the maintenance of security systems.

· Continuously track the latest technologies and threats in the field of blockchain and digital asset security, providing professional advice and guidance to the team.

· Proactively identify and resolve potential system risks, improving the overall security awareness and capabilities of the team.

Qualification Requirements:

· Have a sense of infrastructure security, familiar with common security vulnerabilities and attack methods.

· Capable of independently developing, writing, and maintaining a security framework.

· Familiar with common Linux commands and tools, penetration testing processes and tools.

· Familiar with security risk management, security node upgrades.

· Familiar with WEB3 development technology, with priority given to those who have experience in Solidity smart contract development.

· Have a deep understanding of blockchain technology and digital assets, familiar with the application skills of common scenarios on the chain.

· Good communication and written expression abilities, able to effectively communicate and cooperate with colleagues in different positions.

Bonus Points:

· Experience in security framework design.

· Experience in handling security incidents & offensive and defensive real-world experiences.

· Priority given to those with practical project or tool development experience.

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments on Consumer, Industrial and Medical related products and systems.
• Evaluate and perform attack surface analysis on IoT products and respective network and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems.
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT technologies
• Collaboration across various teams to ensure comprehensive service delivery.
• Product conformity testing on any of the following requirements but not limited to:

1. IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, IMDA TS RG-SEC, etc.)
2. OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
3. Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc.)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.
• On the job training will be provided as required

Roles & Responsibilities：

• Site Leadership Teams Serve as a knowledgeable resource to the Site Leadership Teams (SLT’s) providing support and direction pertaining to IT-OT Foundational Infrastructure and ICS Security.

• Work with the ICS Security Team, OT admin to implement and support an IT-OT Foundational Infrastructure, integrated with Manufacturing Application Services

• Monitor Vulnerabilities and work with OT Admin / Asset Leaders to mitigate potential impacts and take corrective actions

• Improve the ability to resist, detect, respond to, and contain cyber attacks

• Work with technical resources, architects to plan and implement cyber security activities appropriate for all Purdue Levels (PCN Core, PCN DMZ, and PCN Services, PCN Access, within the Manufacturing Site)

• Perform compliance audits of security policies, standards, processes, procedures, guidelines and regulatory requirements

• Assist in IT/OT security and network setup and implementation

• Network Infrastructure and Firewall Services Support

• Provide Network Infrastructure and Firewall Services Support Provide

• Incident Management and Response

Competencies Required：

• Demonstrated ability to serve as a knowledgeable resource to the Site Leadership Team (SLT) providing support and direction

• Evidence of the ability to practice a high level of confidentiality

• Excellent organizational management skills

• Ability to work effectively across a diverse technical team

• Self-motivated requiring minimal supervision

• Demonstrated ability to work in a fast pace environment with many changes

• Effectively prioritize resources against workload demand

• Bachelor’s degree in a technical discipline (or equivalent work experience) : process control, automation; process safety;

• Minimum of 5 years experience in IT or OT within Manufacturing Industry

• Outstanding interpersonal relationship building and employee coaching and development skills

• Excellent written and spoken communication skills

• Knowledge of the functions, operation and mission of Manufacturing Operations

• Process Automation / Control Background in the Chemical Area

• Fundamental knowledge of various industrial network solution providers to include Cisco, Fortinet, Palo Alto, Tofino, Hirschman, Nozomi, Claroty, CyberX, and Armis.

• Fundamental knowledge of various technologies and their integration into an ICS enterprise

• Experience with multiple operational technologies such as Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) software, Distributed Control Systems (DCS), and Safety Instrumented Systems (SIS).

• Knowledge about functional Safety

• Knowledge in Remote Access, Remote Operation

Technical Specifications:

• Good in providing solution by investigating and post-mortem analysis to resolve security violations.
• Experience in Information Security
• CISSP or Global Information Assurance Certification (GIAC) or equivalent.
• Performed asset and network discovery activities to ensure full coverage of vulnerability discovery.
• Good Experience in system and application vulnerability testing for Web servers, DB servers, Network devices Etc. using Nessus or Nexpose or other vulnerability Manager Tools.
• Good in monitoring security vulnerability information from vendors and third parties applications.
• Good in implementing policy audit for servers and workstations
• Prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets.
• Research threats and vulnerabilities and, where appropriate, take action to mitigate threats and remediate vulnerabilities.
• In-depth knowledge of security systems and applications and a strong foundation in core area of security (e.g. OS hardening, Active Directory, DLP, network and perimeter).
• Good experience in configuring hardening guidelines and helped in maintaining baseline standards.
• Good experience in configuring CIS benchmarks on (Servers, Desktop & Network Devices)
• Configuring and monitoring of operational security infrastructure
• Good exposure to industry standards such as ISO 27001, PCI-DSS, with Audit experience in large enterprise/Service provider environment.
• Have good knowledge in web application security testing.
• Have a very good understanding about life cycle of Information Security Audit / VA
• Recommend, scheduled the security patches and other measures required in the event of a security breach.
• Monitor system logs, SIEM tools and network traffic for unusual or suspicious activity. Interpret such activity and make recommendations for resolution.
• Experienced in investigate and resolve security violations by providing post-mortem analysis to illuminate the issues and possible solutions.
• Good knowledge of Application exploitations and configuring alerts on SIEM
• Worked on installation, configuration management of security systems and applications, includes policy assessment, compliance tools, network security appliances and host-based security systems.
• ·Worked on monthly management reports, dashboards, documentation for security systems and procedures.
• Good in reporting unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
• Good in training, mentoring and guiding for team members to use of security tools and resolve issues.
• Good in evaluating, implementing information security solutions to protect against potential threats for security violations
• Worked on incident response and architecture review processes.
• Managed and supported Endpoint Security/ ePolicy Orchestrator, Virus scan Enterprise, Data Loss Prevention, Host Intrusion Prevention and Endpoint Encryption.
• Have good knowledge on Data loss prevention and Endpoint Encryption tools.

Cloud Security Engineer is responsible:

• • Design, implement, and manage security measures for cloud environments.
• • Conduct regular security assessments and audits of cloud infrastructure.
• • Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• • Monitor and respond to security incidents, ensuring timely resolution.
• • Implement and maintain access controls, encryption, and other security features.
• • Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• • Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• • Bachelor’s degree in Computer Science, Information Security, or related field.
• • Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• • Excellent communication skills and the ability to collaborate with diverse teams.
• • Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• • Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• • Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• • Good knowledge in security
• • Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• • Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• • Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc