Total 674 qc engineer job vacancies in Legal / Public / Security category in Singapore

Position: Cloud Security Engineer

Summary:

The Cloud Security Engineer plays a pivotal role in ensuring the secure operation of cloud security architectures, with a primary focus on safeguarding Personally Identifiable Information (PII) and Protected Health Information (PHI) data across various cloud systems. This position directly contributes to the secure operation of the Edison cloud platform where the security of sensitive data and regulatory compliance, such as HIPAA and GDPK are paramount. The Cloud Security Engineer collaborates closely with vendors, program teams, and the Information Security and Infrastructure organization to maintain the security, integrity,, and compliance of the Edison cloud environment.

Key Responsibilities:

• Edison Cloud Security Operations: Oversee and manage security operations for the Edison Cloud, ensuring the highest levels of security for all cloud deployments. Implement robust security measures, protocols, and tools to protect sensitive data.
• Collaborative Focal Point Act as the key liaison between Engineering teams. Product Security, and Security Operations for Edison Cloud, facilitating effective communication, collaboration, and security awareness.
• Vendor Security Leadership: Lead and manage the Vendor Security Operations team, ensuring vendors align with security standards and practices. Conduct security assessments and audits as necessary.
• Security Advisory: Provide expert guidance to Engineering teams on security architectures and best practices, ensuring secure development and deployment of cloud-based solutions. Promote a security-first mindset and culture.
• Ownership of Key Processes: Take ownership of critical processes, including Edison Cloud Vulnerability Management, Non-Conformance Management, Cyber Incident Management, and Access Management. Implement these processes effectively to enhance security and compliance.

Desired Qualifications:

• Cloud Security Expertise: Possess a strong understanding of security architectures for cloud and hybrid systems, with experience in operating multiple cloud environments securely. Demonstrate expertise in data protection and regulatory compliance.
• Security Collaboration: Capable of providing valuable input and feedback on product security architectures and requirements, contributing to the development of secure solutions.
• AWS Proficiency: Have a solid understanding of Amazon Web Services (AWS), including its offerings and capabilities, and preferably hold an AWS Certified Security certificate. Proficiency in other cloud platforms is a plus.
• Security Management: Familiarity with vulnerability management, cyber incident management and the ability to effectively address security incidents and vulnerabilities.
• Cloud Architecture: Represent Security Operations in the development and implementation of the overall cloud architecture, ensuring security is integrated seamlessly.
• Security Framework Knowledge: Experience with any security framework (e.g., ISO 27001, HITRUST CSF, NIST) is a plus. Provide examples of how these frameworks are relevant to the role.

Qualifications:

• Educational Background: Hold a college degree or equivalent and have a minimum of 5 years of related work experience.
• Security Experience: Possess 2-4 years of experience in Security Architecture and/or Engineering roles, including incident response and mitigation.
• AWS Expertise:: Have 2-3 years of experience with AWS, preferably holding an AWS Certified Security certificate. Demonstrate proficiency in various AWS services, including but not limited to VPC Networking, IAM, KMS, Cloud Formation, EC2, API Gateway, Kubernetes, SQS, SNS, Kinesis, RDS, DynamoDB, and Lambdas or equivalent.
• Scripting Skills: Proficiency in scripting programming languages such as Python, JSON, Ruby, Powershell, and YAML.
• Cloud Security Tools: Experience working with cloud security and governance tools to enhance security measures.
• Technical Communication: Ability to represent technical viewpoints effectively to diverse audiences and make informed technical risk decisions.
• Interpersonal Skills: Strong interpersonal and communication skills, with the ability to collaborate effectively in a team environment.
• Self-Motivated: Ability to work independently with minimal direction, displaying a proactive and self-starting attitude.

Interested candidates may apply through the application system. We regret to inform only Shortlisted candidates will be notified.

EA License No. 01C4394 • RCB No. 200007268E •Derrick Tiew Yong Han EA Registration No. R1877971

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Background

Thales people architect solutions that are relied upon to deliver operational advantage at every decisive moment throughout the mission. Defence and armed forces customers rely on us to deliver the full range of defensive systems for land, sea, and air. From early warning, to threat neutralisation, our platforms cover all levels from very short-range systems, to extended protection across the entire battle-space including Airspace Mobility Solutions, Vehicles and Tactical Systems and Missile Defence, Optronics, and Radar.

Air Mobility Solutions provides leading edge airspace control and security solutions for the commercial and defence sectors.

Thales's advanced LORADS air traffic management system ensures the safety of operators and passengers at a time when soaring growth in air traffic poses a range of complex technical challenges.

Technologies supplied by the Air Mobility Solutions global centre of excellence, based in Singapore, are currently deployed in Singapore and across Asia and the Pacific region.

Thales Australia's air traffic control systems are in use in over 50 countries including Australia, Mexico, South Africa, China, Singapore and Thailand.

Purpose:

The Cyber Security Engineering position is within Airspace Mobility Solutions in Singapore to contribute, but not limited to the LORADS and Topsky-ATC HE projects managed and supported from Singapore.

The position includes the following main responsibilities:

• To undertake security engineering and architecture activities as per budget and aligned with contract and strategy set by the System Cyber Security Engineering Lead.
• To define security solution and associated estimates for specific work packages and bids activities, for example in relation to Contract Change Proposal and Engineering Change Requests/Proposals.
• To provide technical leadership on security solution for the LORADS System and the impact on suppliers’ sub-systems and security components (e.g. other business lines).
• To define security solutions cooperatively with supplier solution teams, engineers and the cyber security design authority.
• To develop security engineering artefacts such as the statement of applicability to the targeted version of the applicable security standards, and other applicable CDRLs as directed by the lead cyber security engineer.
• To lead the vulnerability management service activities to Asian customers.
• To lead security audit and cyber health check service activities to Asian customers.
• To interface with other business lines (e.g. CDS) for the delivery of other cyber security services to Asian customers.
• Contribute to the security risk management by identifying and characterising security risk to the customer context.
• To contribute to customer meetings in relation to the cyber security tasks that you are implementing.
• To contribute to other security tasks from the AMS Business Line like for instance incident response and crisis exercises.
• To support other project or service initiatives when required.

KEY ACTIVITIES AND RESPONSIBILITIES

As the Cyber Security Engineer, you are accountable for:

• Lead, tailor, and support the Security strategy as per Engineering Plans.
• Plan, execute and manage the delivery and the Customer approval of Security deliverables;
• Plan, execute and manage the delivery of the security component with appropriate artefacts.
• Manage the technical risks relevant to Security activities to contribute to program risk management.
• Lead Security Architecture Design as per project needs.
• Lead the vulnerability management service activities to Asian customers.
• Lead security audit and cyber health check service activities to Asian customers.
• Contribute to the response of cyber incident and crisis events.
• Select, specify, and deploy methodologies (including metrics), tools/platforms necessary for Security Engineering activities in line with company policies.
• Manage and prioritize defects correction and evolutions in accordance with the project sprint strategy.
• Support Bids and Engineering Change Proposal evaluation;
• Providing collaborative support to the other members of the Project team.
• Support and contribute to the definition of the Security solution and Policies for the Products (Topsky-HE, Topsky-One, LORADS ATC).

Interactions:

• Works closely with the head Cyber Engineering Manager and the Cyber System team in country and Australia, the cyber sub-system team and solution engineering teams from the various sub-systems, including the legacy LORADS ATC and the future Topsky-One.
• Works closely with Cyber Head of Discipline, Security Authority and Solution Architects.
• Works with Subcontractors and suppliers to ensure they are aligned with the Security Program and comply with the defined security baseline.
• To establish trusted relationship with the Customers and Subcontractors (including CDS).
• Strong internal and external stakeholder management skills.

Challenges:

• Complex stakeholder community with different requirements and cultural approaches to the Delivery Process.
• High level of Customer and Senior Thales Management scrutiny and audit.
• Re-establishing a robust and rigorous discipline of weekly/monthly reporting and tracking of Project issues (cost/risk/schedule etc).
• Working in a multicultural and multisite environment.
• This position requires the capacity to understand and handle resistance to change, to engage cross functional, diverse stakeholders.

KEY KNOWLEDGE AND EXPERIENCE

To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:

• Experience in the life cycle of software/system development including processes and responsibilities at each stage of the cycle.
• Delivery of engineering/management services to tight timelines.
• Understanding of Security System Engineering processes and FBL/ABL/PBL management
• Working with a multi-skilled team of engineers: 2+ years
• Knowledge of Security Standards (NIST, ISO27001, Singapore security standards)
• Understanding of System accreditation and impact on project streams (sub-systems).
• Proven problem identification and analysis skills and system requirements analysis skills.
• Selecting, specifying and deploying methodologies including metrics, tools/platforms (e.g. DOORS).
• Producing appropriate artefacts leading to Customer acceptance and final accreditation.
• Contributing to Cost Models.
• Contributor to Risks & Opportunity management.
• Contribution to the management of subcontractors.
• Providing coaching/mentoring of less experienced staff.
• Challenge status-quo by being creative and innovative.
• Capability to delegate and supervise work performance.
• Excellent written and oral communications skills.
• Ability to manage Work Packages.

• Dynamic and Flexible Work Environment
• Opportunities for Growth and Development

About Our Client

Our client is a well-established service provider within the financial industry, looking to on-board a Cyber Security Engineer (Digital Forensics) to their highly skilled team.

Job Description

As a Cyber Engineer, your responsibilities include:

• Investigating cybersecurity incidents that may involve digital forensic analysis, malware analysis and log analysis
• Able to provide strong technical guidance on investigation and threat assessments
• Carrying out forensic investigations, both within and outside the organization
• Conducting forensic examinations on electronic gadgets, such as laptops, desktop computers, servers, and mobile devices; safeguarding and scrutinizing data acquired from these examinations.

The Successful Applicant

As a successful candidate, you will have a Bachelor's Degree in Computer Science or a relevant field with excellent communication skills. You will have at least 2 years of Digital Forensic working experience. You will have good working knowledge of current cyber threat actors, cyber-crimes and fraudulent activities targeting various industries Knowledge of industry-recognized analysis frameworks (Kill Chain, STRIDE and MITRE ATT&CK framework). You will have relevant certifications such as GCFA, GCIH or OSCP.

What's on Offer

• Good Working Culture
• Hybrid working

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

• Conducting maintenance service, commissioning of alarm systems
• Address to customer request on alarm and card access systems

Requirements:

• Basic Security certified
• At least 2 years of working experience
• Possess valid class 3 driving license

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Job description (In Detail):

Responsibilities:

• Sitting within Data & Technology Architecture Dept, the Cloud Security Engineer is responsible:
• Design, implement and manage security measures for cloud environments.
• Conduct regular security assessments and audits of cloud infrastructure.
• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• Monitor and respond to security incidents, ensuring timely resolution.
• Implement and maintain access controls, encryption, and other security features.
• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organized, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organizational process and governance.
• Minimum five years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerization.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc.

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

Job description (In Detail):

Responsibilities:

• Sitting within Data & Technology Architecture Dept, the Cloud Security Engineer is responsible:
• Design, implement, and manage security measures for cloud environments.
• Conduct regular security assessments and audits of cloud infrastructure.
• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• Monitor and respond to security incidents, ensuring timely resolution.
• Implement and maintain access controls, encryption, and other security features.
• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organized, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organizational process and governance.
• Minimum five years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerization.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc.

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

Role Overview:

Our technologies are at the heart of modern applications that are enabling digital transformation across the globe! We give the world’s largest businesses, service providers, governments, and consumer brands the ability to securely deliver every app, anywhere—with confidence. We do this by working collaboratively in an innovative environment, helping each other succeed. We take extraordinary pride in being trusted advisers to our customers, offering the best solutions for their interests. If our mission and culture excite you, we would love to talk with you!

We are seeking a Distributed Cloud Support Engineer who is hardworking and committed to customer success. You are comfortable in both the Support and Engineering environments, translating internal Engineering communications into clear, concise directions for customers and partners. You are passionate about helping our customers tackle problems. You will provide support via phone, email, Slack and web portal. Support requests range in complexity from "how to" questions through involved debugging and forensic efforts when prioritizing operational issues. Visualizing problems remotely is key to being successful in this role along with excellent analytic and troubleshooting skills. You will have a significant career growth opportunity within a fast-paced SaaS company.

Sounds interesting? Read on!

What You’ll Do:

• Fix reported issues and advocate for the customer.
• Collaborate with sales and engineering teams to provide support to resellers, service provider and enterprise customers, as well as end users via telephone, e-mail, Slack and the web portal.
• Issue reproduction and concise documentation of solutions provided through technical notes, case studies and knowledge base articles.
• Critical issue management and customer assurance when handling reported issues.
• Coordinate fixes by engineering or Site Reliability Engineers (SREs) when required and relay appropriate information to our partners and customers.
• Provide recommendations on how to improve supportability, reliability, availability, and serviceability based on lessons learned through issue resolution.
• Training and enabling our service partners to ensure that they can sufficiently support customer issues.

What You’ll Bring:

• Bachelor’s degree in engineering or equivalent practical experience such as having 2 or more years of experience working in an operations environment or background in customer service/support and IT, network, or IT security incident management.
• Strong understanding of Networking and Layer 7 Protocols as well as experience in security product/solutions experience is preferred.
• Familiarity with Container technologies (Docker and Kubernetes) as well as public cloud experience with Amazon Web Services (AWS), Google Cloud Platform (GCP) and/or Microsoft Azure is preferred.
• Ability to read different scripting and automation (Python, Shell and Ansible).
• Knowledge of Data Representation types (XML, JSON and YAML) and Virtualization technologies.
• Phenomenal communicator with English, independent, collaborative and possess strong troubleshooting skills with the ability to prioritize and multitask when leading sophisticated technical issues.
• This role requires availability outside normal business hours with some travel may be required (less than 10%) to align with the distributed team or to respond to critical security events.

What You’ll Get:

• Hybrid working mode
• Career growth and development opportunities
• Recognitions and Rewards
• Employee Assistance Program
• Competitive pay, comprehensive benefits, and cool perks
• Culture of Giving Back
• Dynamic Diversity & Inclusion Interest Groups

Apply if you believe your own unique capabilities can contribute to the success of this role and our organization!

#LI-BH1

The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.

Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Yello/Workday (ending with f5.com or @myworkday.com).

Equal Employment Opportunity

It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination. F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting [email protected].

Cloud Security Engineer is responsible:

• • Design, implement, and manage security measures for cloud environments.
• • Conduct regular security assessments and audits of cloud infrastructure.
• • Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• • Monitor and respond to security incidents, ensuring timely resolution.
• • Implement and maintain access controls, encryption, and other security features.
• • Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• • Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• • Bachelor’s degree in Computer Science, Information Security, or related field.
• • Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• • Excellent communication skills and the ability to collaborate with diverse teams.
• • Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• • Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• • Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• • Good knowledge in security
• • Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• • Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• • Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Responsibilities:

• Manage and operate the IT Security Protection System which includes liaising with Maintenance Contractor to address technical & security issues and Health Checks.
• Manage and investigate Events of Interests and security vulnerabilities to identify early indicators and work with the respective team to address them.
• Ability to deploy, configure and fine-tune security policies as well as performing threat hunting to proactively response to potential cyber threats.
• Review and enhance IT security policies, procedure and documentations with respect to industry standards and best practices.
• Facilitate and support (internal and external parties) on Cyber Security Incident management and response.
• Assist in all internal & external IT audits. Follow-up with the respective Risk Owners to remediate audit findings.
• Be on standby for any critical security alerts and incident management after office hours.

Requirements:

• Degree in Information Technology or Information Security or related discipline.
• 3 years of working experience in Cyber Security. Having good Knowledge in Cyber Security Management, IT Compliance and/or Risk Management.
• Hands-on experience with Windows or Linux OS.
• Experience on Microsoft Azure Cloud Security technologies (MS Sentinel, MS Defender...etc) as well as other Enterprise Security Appliances; such as Privileged Access management & Vulnerability Management tools.
• Familiar with modernised A.I and SecOps tools.
• Familiar with ISO27001 and/or PCI Data Security Standards.
• Security Screening will be required for potential candidates.

To apply, please visit www.gmprecruit.com and search for Job Reference: 23838

To learn more about this opportunity, please contact Yingying at [email protected]

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239

Lead Associate, Cyber Security Engineer with a prominent financial company. This role will focus on cybersecurity operations in the AWS environment.

Requirements:

• At least 2 years of technical hands-on experience in AWS cybersecurity operations
• Experience in AWS projects in both build and run phases
• Hands-on experience operating & managing of at least one of the following products: Vulnerability Assessment Solutions, PAM Solutions, NGFW
• Relevant AWS certifications is a plus
• Effective communication, problem-solving skills, and a degree or diploma in Computer Science or related fields are required.

Business Reg No : 200611680D | Licence No : 10C5117 | EA Reg No : R2199023

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Assurance Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604

About the Department

The Cloudflare Customer Support Team solves complicated problems and answers technical questions via phone, email, chat and social media. Whether it is a Wordpress blogger using our services for free or a global Enterprise business with petabytes of web traffic, we are always eager to assist. We are the eyes and ears of Cloudflare, acting as the real-time voice of the customer to help communicate their needs and real-world use cases back to the rest of the company - for better service and future product development.

Description

Security Operations Center Engineers provide premium-level support for Cloudflare’s security products and features. Our largest and most technically sophisticated customers will contact Support for assistance and intelligence in dealing with threats or attacks on their infrastructure at OSI Layers 3, 4, and 7. This will span the range of Cloudflare security products from Magic Transit Infrastructure Protection, DDoS mitigation and Network Firewall, to using the Web Application firewall (WAF), Spectrum, Bot Management and Rate Limiting to help customers.

Security Operations Center Engineers analyze threats, make detailed and informed suggestions for mitigation and may need to implement mitigation strategies directly on behalf of the customer. The team also provides attack reporting beyond Cloudflare’s self-service reports.

Responsibilities

• Monitor and investigate the alerts to identify attacks
• Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation, when applicable
• Work with Engineering and Product teams to improve the products and tools
• Communicate with customers via chat, email, and phone
• Review the latest alerts to determine relevancy and urgency. Create new tracking tickets for alerts that signal an incident and require review or escalation
• Configure / Manager security monitoring rules and contribute to tool improvements
• Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
• DDoS mitigation for OSI layers 3,4, & 7: filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blacklisting, whitelisting, and/or rate limiting.

Key skill sets

• Modern internet protocols like UDP, TCP, etc.
• Advanced understanding of iptables
• Analysis of traffic for attack anomaly detection and creation of mitigation rules
• Experience in handling attack mitigation and thorough knowledge of various attacks (L3/4 and L7)
• Knowledge of Cloudflare Security Products & Features
• Technical Support experience
• Good communication skills with high-value VIP customers under attack
• Computer Networking fundamentals
• Command line / Bash shell
• Sysadmin skills (Linux/Mac/Windows) & Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, Git etc.)
• Security skills and certifications: CISSP, GCIA GCIH, GCFA, GCFE, etc.
• Calm under pressure

Cloud Security Engineer is responsible:

• • Design, implement, and manage security measures for cloud environments.
• • Conduct regular security assessments and audits of cloud infrastructure.
• • Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• • Monitor and respond to security incidents, ensuring timely resolution.
• • Implement and maintain access controls, encryption, and other security features.
• • Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• • Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• • Bachelor’s degree in Computer Science, Information Security, or related field.
• • Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• • Excellent communication skills and the ability to collaborate with diverse teams.
• • Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• • Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• • Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• • Good knowledge in security
• • Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• • Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• • Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Job Responsibilities: Cyber Security Division ( CySD)
Sitting within Data & Technology Architecture Dept, the Cloud Security Engineer is responsible:

• Design, implement, and manage security measures for cloud environments.
• Conduct regular security assessments and audits of cloud infrastructure.
• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• Monitor and respond to security incidents, ensuring timely resolution.
• Implement and maintain access controls, encryption, and other security features.
• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• Bachelor's degree in Computer Science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Key Responsibilities:

• Develop and implement advanced cyber security architectures and solutions.
• Analyze and evaluate system security requirements to design secure networks.
• Collaborate with cross-functional teams to integrate security practices into all facets of the business.
• Conduct risk assessments and provide recommendations for enhancing system security.
• Stay updated with the latest cyber security threats and technologies.
• Develop technical solutions and tools to help mitigate security vulnerabilities.
• Provide technical guidance and support to other team members.
• Document and maintain records of security architectures and processes.

MUST HAVE:

• Bachelor’s degree in Computer Science or Information Technology or Cyber Security, or related field.
• Minimum of 3-5 years of experience in a cyber security architect or engineering role.
• Proven experience in designing and implementing secure network architectures.
• Strong background in network security, system security, and cloud security.
• Experience with common cyber security tools, standards, and protocols.
• Familiarity with industrial control systems and operational technology (OT) security is a plus.

WE VALUE:

• Strong technical skills in network and system security.
• Knowledge of current cyber security trends and threats.
• Excellent problem-solving and analytical abilities.
• Proficient in security technologies such as firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, etc.
• Good communication and collaboration skills.
• Ability to work independently and as part of a team.

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.