Vulnerability Assessment Security Engineer | $ 6500

The key responsibilities:

1. Review and Analyze test report provided by the Authority
2. Provide recommendations for vulnerability remediation
3. Work with technical teams to implement fixes and improvements
4. Conduct follow-up tests to verify remediation for closure
5. Update report with remediation and or waiver justification
6. Analyze periodic security alert updates and reply
7. Work with Vendor to conduct VAPT

We looking for candidate with knowledge on

1. Proficiency in vulnerability scanning tools such as Nessus
2. Familiarity with programming/scripting languages such as Python
3. Strong analytical skills to assess risks and vulnerabilities
4. Our project environment is using Windows and good if candidate has experience and independent.

Interested candidates, please send your CVs on [email protected]

Regret to inform that only shortlisted candidates will be notified.

CEI: R1988671

EA License: 14C7275

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

• Salary Range: $2.4k - $2.8k
• Working Days: 4 days
• Working Hours: 12-hr rotating shift, 7.30am-7.30pm, 7.30pm-7.30am
• Location: Toh Guan Road

Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement:

• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

If you are interested to apply, kindly WhatsApp me your updated resume in DOC file and allow our Consultant to match you with our Clients.

Whatsapp: +65 8525 2419

Email: [email protected]

Tan Man Ee Reg No: R22108289

The Supreme Hr Advisory Pte Ltd EA No: 14C7279

Area Description
Google Cloud provides organizations with leading infrastructure, platform capabilities and industry solutions. We deliver enterprise-grade cloud solutions that leverage Google’s cutting-edge technology to help companies operate more efficiently and adapt to changing needs, giving customers a foundation for the future. Customers in more than 150 countries turn to Google Cloud as their trusted partner to solve their most critical business problems.

Role Description (About the job)
As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities
We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on Google Cloud. The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team.
● Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
● Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.
● Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
● Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
● Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.
● Stay connected with the latest security trends throughout various industry verticals.
● Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Minimum Qualifications (MQs)
● Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience.
● Coding experience in one or more general purpose languages.
● Experience managing customer projects to completion, working with engineering teams, sales and partners.
● Experience architecting, developing, or maintaining secure cloud solutions.
● Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications (PQs)
● At Least 7 years of security architecture and/or security engineering experience
● Hands on and deep knowledge of security principles.
● Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
● Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
● Strong practical experience securing Kubernetes and containerised workloads.

The job description is for a Security Operations Vice President within the Cybersecurity Insider Threat Content Engineering team at JPMorgan Chase. The role involves protecting the organization's digital assets and infrastructure, detecting and responding to threats, vulnerabilities, and security incidents, and collaborating with cross-functional teams to develop a unified approach to security. The candidate will need advanced analytical, technical, and problem-solving skills to promote operational excellence and devise innovative solutions to complex security challenges. They will also need to stay updated with industry best practices, policies, and procedures to maintain a secure digital environment and foster continuous improvement.

Job Responsibilities

• Execute and influence the design of comprehensive security strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets and infrastructure from cybersecurity threats

• Monitor and analyze complex data and systems proactively to identify indicators of vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response

• Use effective communication skills to present findings and solutions for existing and emerging insider threats to senior leaders and stakeholders.

• Evaluate and enhance the organization's security posture by staying current with industry trends, emerging threats, and regulatory requirements, driving innovation and process improvements.

• Contribute to a great team and a winning culture through sharing of expertise and supporting growth opportunities for junior members of the team.

Required qualifications, capabilities, and skills

• Formal training or certification on cybersecurity concepts and 5+ years applied experience in cybersecurity operations, network security with a focus on threat detection, incident response, and security infrastructure management

• Bachelor's Degree in Computer Science or equivalent

• Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, and security architecture and design, with proficiency in using Security Information and Event Management (SIEM) tools and advanced analytics techniques

• Advanced knowledge of network and infrastructure configuration/security, including experience in designing and implementing security solutions for on-prem, cloud, or hybrid environments

• Possess excellent grasp of the Splunk SPL language – significant expertise in the development of efficient and effective Splunk searches, macros, dashboards and other knowledge objects and integrations with Splunk. Proven ability to create powerful, reliable, and efficient interactive dashboards in Splunk

• Possess excellent analytical and problem-solving skills with the ability to translate complex technical concepts into practical solutions based on risk assessment and risk appetite

• Possess excellent command of cybersecurity organization practices, insider threats, data loss prevention concepts, security incident triage, operations risk management principles and processes, architectural requirements, emerging threats and vulnerabilities, and incident response methodologies

• Possess excellent verbal and written communication skills with the ability to communicate complex technical concepts, recommendations and solutions to senior leadership and key stakeholders

Preferred qualifications, capabilities, and skills

• Possess recognized industry certifications (such as CISSP, CISM, CISA, CCSP, CSX-S, CSX-E)

• Previous cybersecurity operations experience within a large multi-national financial services organization is preferred

• Experience with Security Orchestration, Automation and Response (SOAR), Endpoint Detection & Response (EDR) or other tools used for security monitoring, detection, and response

• Experience with agile methodology and the ability to work with at least one of the common frameworks with knowledge of tools like Confluence, JIRA and ServiceNow

• Knowledge of scripting skills such as Python, PowerShell, etc

• Possess a good understanding of national and international laws, regulations, policies, and ethics related to financial industry cybersecurity and foundational knowledge of computer forensics; legal, government and jurisprudence as they relate to cybersecurity; operating systems; and methods for intelligence gathering and sharing

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=c9ffa9a60e5dd6dddc68f06ed9889339

We are seeking a proactive and experienced Vulnerability Assessment & Penetration Testing (VAPT) Engineer to join our security team. The ideal candidate will have a strong technical background, excellent problem-solving skills, and a deep understanding of vulnerability management processes. You will play a critical role in helping to ensure the security of our systems and applications by working closely with internal teams and external vendors to address vulnerabilities and implement solutions.

Key Responsibilities:

• Review and analyze vulnerability assessment and penetration testing (VAPT) reports provided by external parties.
• Provide detailed recommendations for remediation of identified vulnerabilities and work with technical teams to implement the necessary fixes.
• Conduct follow-up testing to validate remediation efforts and confirm closure of identified vulnerabilities.
• Maintain accurate and up-to-date documentation, including reports on remediation actions and any waiver justifications.
• Monitor and analyze security alerts, providing timely and appropriate responses.
• Collaborate with external vendors to coordinate and execute VAPT activities as required.

Required Skills & Experience:

• Strong hands-on experience with security tools such as Nessus, Wireshark, and proficiency in Python scripting for security purposes.
• Excellent analytical skills to assess security risks and vulnerabilities effectively.
• Ability to communicate technical issues clearly and collaborate with technical teams to resolve security concerns.
• Experience working in a Windows environment with the capability to work independently and handle multiple tasks simultaneously.
• Prior experience in coordinating with third-party vendors to manage and conduct VAPT projects.
• Familiarity with industry best practices in vulnerability management and security assessments.

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Descriptions:

In this role, you will join a team of six members from Sopra Steria to support one of our government project. The scope of work includes:

1. Security Risk Assessment
2. Security Policies, Standards, Guidelines, And Procedures Review
3. Security Design
4. Application Security
5. Vulnerability assessment and
6. System Security Acceptance Testing

You will be an expert in the field of Cloud Security.

Responsibilities:

• Provide expertise in cloud security and be a trusted technical advisor and solve complex cloud security & compliance challenges.
• Design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment.
• Perform risk assessment for Cloud Computing Environment and Service
• Hands on and deep knowledge of security principles.
• Experience managing customer projects to completion, working with engineering teams, sales and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.

Requirements:

• Minimum of 3 years of experience in Cloud Security (AWS will be highly advantageous)
• Strong understanding of security frameworks
• Fluent in spoken and written English
• Ability to work closely with international team in a professional manner
• Excellent verbal and written communication skills, including ability to solve complex technical situation and explain it clearly
• Relevant certifications, such as AWS Certified Security – Specialty (SCS-C01), Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), are a plus.

Benefits:

• Regular team buildings
• 18 leave days / year
• Health, Dental and Optical Insurance
• Annual bonus
• Working hours: from 8:30am to 6pm, Monday to Friday
• Trainings and certifications bonus

Job Description

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors, client & authorities from inception to completion of projects
• Responsible for timely submission of design, plans and reports
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in Electrical/ Mechanical Engineering or relevant engineering recognized by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM etc
• Candidates with experiences in design of integrated electronic security systems (CCTV, access control system, intrusion detection system etc) or experience with a security specialist contractor / integrator would be advantageous
• Candidates with understanding of latest electronic security technologies would be advantageous
• Candidates with experiences in crash protection measures would be advantageous
• Critical thinking skill, good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges
• Candidates with more than 4 years of relevant experience would be considered for Senior Engineer position

Role Overview

Security SME(Subject Matter Expert) Engineer is responsible for designing, implementing, and managing security solutions to protect the company's information systems, networks, and data from potential threats and cyber-attacks.

The primary role is to provide expert guidance, support, and leadership in all matters related to security within an organization. This role will require strong analytical and collaboration skills, detailed working knowledge of current and emerging security technologies, as well as the ability to correlate events to identify abnormal behavior.

Responsibilities

• Serve as a SME for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Investigate any security incidents and provide insights to internal/external business users.
• Develop processes and procedures and fine-tune alerts as part of ongoing improvisation of security operations.
• Develop cloud/hybrid and cloud platform-specific security policies, standards, and procedures on cloud providers (Azure, AWS) and cloud-native platforms (PCF, Docker, Kubernetes, etc.).
• Identify and deliver appropriate cloud security controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business risk and cloud-native threats.
• Conduct integration of supported Cloud-based Security Products such as Web Application Firewall (WAF), Web Security Proxy, etc.
• Conduct detailed & comprehensive investigations and triage on a wide variety of security events.
• Recommend and implement remediation processes.
• Stay up-to-date with the latest security threats, vulnerabilities, and mitigation techniques.
• Collaborate with cross-functional teams to implement security measures and address security requirements.Communicate security risks, recommendations, and status updates to stakeholders, management, and team members.
• Identify opportunities to improve processes and/or tools to ensure the highest level of quality, including documentation, mentoring, and training sessions.
• Own the technical components of a customer integration project including but not limited to configuration, debugging, documentation, testing, and go-live support.
• Identify and mitigate potential security threats and vulnerabilities.
• Provide relevant recommendations to improve the overall security posture of customers.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Assist in any ad-hoc tasks when necessary.

Requirements:

• Over 5 years of experience in Information Security or engineering.
• At least 2 years of direct experience in one of the public cloud platforms, such as AWS or Azure with strong knowledge of their security features.
• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).
• Ability to identify and drive remediation of public and hybrid cloud risks.
• Experience in general security technologies, processes, and concepts.
• Experience with web security concepts and technologies such as web application firewalls, and proxy.
• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel.
• Working experience with common security operations systems, Intrusion Detection Systems(IDS/IPS), Security Incident Event Management systems(SIEM), anti-virus log collection systems, etc.
• Working knowledge of security systems and programs.
• Sound fundamental knowledge of Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10, and web servers (e.g. Apache, IIS, Nginx, etc.).
• Familiarity with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, and Open-source tools like Jenkins, DefectDojo, and OWASP Glue will be an added advantage.
• Strong analytical and problem-solving skills, with the ability to identify and address security risks and Vulnerabilities.
• Ability to analyze and develop innovative recommendations and solutions.
• Excellent verbal and written communication skills.
• Independent and results-oriented.
• Willing to work on a flexible schedule depending on business need.

Our client is a global law firm. The IS Security Engineer will oversee and manage the firm's security systems and practices in line with established policies and procedures.

Key Responsibilities:

• Review and analyse security system reports for suspicious activities and trends across various platforms.
• Configure and maintain security products, including firewalls, web proxies, and encryption systems.
• Respond to alerts and incidents as part of the Incident Response Team, minimising asset exposure.
• Troubleshoot IS security issues and collaborate with vendors for solutions.
• Conduct risk and security reviews of products as directed by management.
• Configure access control systems and assign user rights appropriately.
• Recommend security controls to align with the overall information security strategy.
• Monitor security metrics, manage patch status, and assess system vulnerabilities for remediation.

Requirements:

• Bachelor’s Degree in Information Technology or Information Systems.
• At least 2 years of relevant working experience in information security.
• Knowledge of Cisco networking, Active Directory, and NTFS necessary.
• Familiarity with security technologies, including firewalls, IDS/IPS, antivirus systems, and web filtering.
• Experience with encryption methods, patch management, vulnerability scanning, and forensic tools.
• CISSP or equivalent certifications will be a plus.
• Ability to participate in a 24/7 on-call rotation for security incidents and support.

If you have what it takes, please send your resume to [email protected] or click APPLY NOW.

Data provided is for recruitment purposes only. Regrettably, only shortlisted candidates will be notified.
Business Reg No : 200611680D | Licence No : 10C5117 | EA Reg No : R2199023

Responsibilities:

• Manage and oversee z/OS Unix (Mainframe Access Management operations and audits).
• Drive and operationalize z/OS initiatives such as MFA (Multi-Factor Authentication) and STIG (Security Technical Implementation Guide).
• Write scripts/JCL to automate tasks and improve processes.
• Manage identity and access management processes, standards, and procedures to ensure control effectiveness and service quality.

Requirements:

• Bachelor’s Degree in Information Technology or a related field.
• At least 3–4 years of experience in Mainframe Security (RACF) administration/operations.
• Solid understanding of zSecure Admin and zSecure Audit modules.
• Good working knowledge of the Access Management lifecycle and processes.
• Excellent stakeholder management skills.

Interested Applicants, please email your resume to [email protected] (R1441955), stating the position as the subject title in the email. All Applications will be handled with strict confidentiality.

Job Description Summary:

This offensive security engineer will lead and execute security engagements that combine both red team and purple team methodologies. Your role will involve designing and executing sophisticated cyberattacks, simulating advanced persistent threats and collaborating closely with the defense (blue) teams to improve detection, response, and overall security posture. You will work to challenge, assess, and enhance the organization’s security operations, ensuring that defenses are robust and responsive to current and evolving threats.

Job Description:

Key Responsibilities:

Red Team:

• Execute adversarial simulations mimicking real-world threat actors (APTs, insider threats, etc.).
• Research and simulate evolving cyber threats, vulnerabilities, and tactics, techniques, and procedures (TTPs) of adversaries.
• Develop custom scripts, tools, and payloads to bypass security controls and detection.
• Identify security weaknesses and vulnerabilities across systems, networks, and applications.
• Evade detection while conducting stealthy operations to assess the maturity of monitoring capabilities.

Purple Team:

• Collaborate with the blue team to optimize detection and response mechanisms.
• Facilitate knowledge sharing and training during real-time testing engagements, emphasizing skill development across red, blue, and purple teams.
• Test the effectiveness of existing security controls, offer insights for enhancement, and assist in adjusting strategies.
• Provide real-time attack/defense simulations to measure the accuracy and effectiveness of the blue team’s response.

Reporting and Documentation:

• Prepare detailed, actionable reports that communicate findings, risks, and remediation recommendations to both technical and non-technical stakeholders.
• Work with leadership to develop strategic security roadmaps based on testing results.

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience.
• 5+ years of experience in offensive security (Red Teaming, Penetration Testing, or related fields).
• Deep understanding of adversary tactics, techniques, and procedures (TTPs), such as those outlined by MITRE ATT&CK.
• Strong proficiency with offensive security tools (e.g., Cobalt Strike, Metasploit, Burp Suite, BloodHound, Mimikatz).
• Advanced experience in network and application penetration testing.
• Knowledge of both Windows and Linux operating systems, scripting (e.g., Python, PowerShell, Bash), and familiarity with cloud environments (AWS, Azure, GCP).
• Experience working collaboratively in a purple team environment with a focus on improving defensive capabilities.
• Strong analytical and problem-solving skills, with a proactive and collaborative mindset.
• Industry certifications such as OSCP, OSCE, CRTO, CRTP, CRTE, CEH, GPEN,GXPN or similar.

Preferred Qualifications:

• Experience conducting stealth red team engagements, including lateral movement, persistence, and data exfiltration.
• Proficiency in attack automation and tool development.
• Familiarity with blue team operations and defensive security technologies (SIEMs, EDR, IDS/IPS).
• Contributions to open-source security tools or published research on offensive security topics.

Job Description

1. Required to Carry out security governance and compliance checks and enforcement

2. Required to Communicate agency’s and Government’s policies and directives as required

3. Required to Conduct preliminary gap analysis on emerging policies such as IM8 new requirements and provide advice/assistance to project teams

4. Required to Perform incident reporting, incident investigating, and closure with all internal and external parties.

5. Required to Track and monitor incidents and work with project teams to ensure closure and timely reporting

6. Required to Facilitate and track closure of VDP, VA and PT reported findings

7. Required to Perform verification of scorecard submission and carry out reporting

8. Facilitate GOI/GSTI information dissemination, and perform tracking and reporting to Client on required polls

9. Assist project teams to identify ICT security risks and implement security measures and to meet compliance with MCCY and IM8 security policies

10. Assist in the dissemination of IT Advisory or security eDMs

11. Perform analysis of phishing recalcitrant and conduct training/briefing when required

12. Perform security briefings, DLP assessments to detect anomalies and to report to CIO/CDO, when required.

Job Description Summary:

As a Cyber Defense Engineer at PayPal's Cybersecurity Defense Center, you'll play a vital role in fortifying our security measures. You'll monitor and respond to security events, collaborating with cross-functional teams to provide valuable insights and guidance. Proactively hunting for threats, you'll identify vulnerabilities and mitigate risks. Your expertise will contribute to robust incident response capabilities and resilient architectures. Staying informed about emerging threats, you'll drive innovation in cyber defense techniques. By safeguarding our digital assets and users' data, you'll help maintain trust and enable secure online transactions.

Join our dynamic and highly skilled team at the PayPal Cybersecurity Defense Center. By We are seeking individuals who are passionate about cybersecurity and are eager to make a difference in protecting our systems and data. As a member of our team, you will have the opportunity to continuously enhance your skills through ongoing training and professional development. With access to cutting-edge technologies and resources, you will stay at the forefront of the ever-evolving cyber threat landscape. Your contributions will directly impact our ability to safeguard our infrastructure and ensure the privacy of our customers' information. Join us in our mission to create a secure digital environment and be part of a team that is committed to excellence in cyber defense. Together, we will defend against emerging threats and build a resilient security foundation.

Job Description:

Your way to impact

• Take ownership of enhancing our security posture and protecting our infrastructure, systems, and data from cyber threats.
• Provide guidance and recommendations to cross-functional teams, assisting them in implementing effective security measures.
• Collaborate closely with teams across the PayPal, ensuring seamless security experiences and operational efficiency.
• Drive continuous improvement in security operations by identifying opportunities for process optimization, automation, and integration of security technologies.
• Assume centralized ownership of key cybersecurity applications/tools, setting the vision and driving towards a best-in-class future state.
• Engage in incident response readiness exercises, conducting simulations and tabletop exercises to strengthen the PayPal's ability to respond swiftly and effectively to security incidents.
• Foster a culture of proactive security through knowledge sharing, training sessions, and promoting security awareness across the PayPal.

Your day to day

• Monitor security alerts and events from various sources and respond promptly to security incidents, following the established incident management plan.
• Collaborate with the security teams to conduct in-depth analysis of security events and incidents, utilizing advanced threat intelligence and security tools.
• Document and track security incidents, maintaining accurate incident records and providing regular updates to stakeholders.
• Build and nurture influential partnerships with key stakeholders, acting as a conduit between cybersecurity and cross-functional teams.
• Participate in tabletop exercises and simulations to enhance the PayPal's incident response preparedness and identify areas for improvement.
• Proactively review and refine the incident management plan based on emerging threats and evolving cybersecurity landscape.
• Stay updated on industry trends, best practices, and our business strategy to enable the achievement of cybersecurity objectives.

What you need to bring

• Demonstrate proven experience in security incident handling and security operations.
• Possess an in-depth understanding of network protocols, systems, and infrastructure security principles.
• Exhibit proficiency in analyzing business and employee needs, recommending, and designing end-to-end security solutions.
• Display strong incident management skills, effectively managing multiple incidents and driving results.
• Stay abreast of emerging threats, vulnerabilities, and attack techniques through continuous monitoring of threat intelligence sources and participation in security communities and forums.
• Participate in cross-functional security projects and initiatives, providing security expertise and guidance to ensure the secure implementation of new technologies and systems.
• Possess excellent communication skills to collaborate with cross-functional teams and convey complex security concepts effectively.

#NEW# Information Security Engineer - 12 months (Rolling)

Join Our Team of Security Experts!

We are seeking a skilled Information Security Engineer with fluency in Mandarin (spoken, written, and reading in both Simplified and Traditional Chinese) to support users primarily in Hong Kong and mainland China. This role requires effective communication with users who may not speak English, ensuring clear understanding and compliance with security measures. Experience working in a legal or law firm environment is a strong advantage.

Key Responsibilities:

• Monitor and analyze security reports, detecting suspicious activities and patterns.
• Configure and manage firewalls, web proxies, and data loss prevention systems.
• Respond to security incidents and collaborate with the Incident Response Team.
• Conduct security risk assessments and internal forensic investigations.
• Administer access control systems and recommend security improvements.
• Support troubleshooting and participate in IS security-related projects.
• Ensure compliance with security policies and address audit findings.

Qualifications:

• Fluency in Mandarin (spoken, written, and reading in both Simplified and Traditional Chinese) is essential for supporting non-English-speaking users.
• 2+ years of relevant experience in information security.
• Cisco routing and switching equipment
• Active Directory and NTFS
• Firewalls and Intrusion Detection/Prevention Systems (IDS/IPS)
• Antivirus solutions and management consoles
• Web filtering and proxy technologies
• Encryption (whole disk, email, and data at rest)
• Patch management systems (Microsoft SCCM and third-party solutions)
• Vulnerability scanners
• Forensic and penetration testing tools
• Data Loss Prevention (DLP)
• Email gateways and anti-spam services
• Mobile Device Management (MDM)
• Privileged account management systems
• Security Information and Event Management (SIEM) systems
• Two-factor authentication systems
• Cloud plat forms: AWS and Azure

KEY NOTE :Candidates must be willing to participate in a 24/7 on-call rotation to address critical security incidents.

Preferred Qualifications:

• Bachelor’s Degree in Information Technology or Computer Information Systems.

Experience working with leading security tools and platforms, such as:

• Palo Alto Networks Firewalls & Prisma Access
• Microsoft SCCM
• Tenable Vulnerability Scanner
• VMWare
• Cyberhaven Data Loss Prevention
• Proofpoint Email Gateway and Anti-Spam
• MobileIron
• Delina Secret Server
• Crowdstrike
• Exabeam Fusion SIEM
• Two-factor authentication technologies
• Additional security certifications are highly desirable.

If you are a experiened information security professional with expertise in both Simplified and Traditional Chinese and have experience in law firm environments, apply today to advance your career!

Please contact [email protected] for more information

Business Registration Number : 200611680D | Licence Number : 10C5117 | EA Registration Number : R1768258

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments and conformity assessments on Consumer, Industrial and Medical related products and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT/product-related technologies
• Cross-collaboration to ensure comprehensive service delivery.
• Develop and review documents according to guidelines and frameworks.
• Product knowledge and testing on any of the following requirements but not limited to:
• IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, etc.)
• OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
• Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.

• Handle overall security operations and work with partner IT vendors and internal departments.
• Maintain infrastructure tools implemented in the company
• Monitor and assess the IT security aspects and impact
• Handle cyber incident response and perform vulnerability assessment on platform and implement countermeasure

Job Requirements

• Bachelor degree in computer science, information systems or equivalent
• Min 3 years of experience in cyber security and infrastructure fields
• Experience in security tool implementation and operational experience
• Certified Information Systems Security Professional Certifications (CISSP) will be preferred

For interested applicant, click 'apply'

EA Reg no: R1328476
EA License No: 16C8443
EA Personnel Name: Melody
EA Personnel No: R2095899

We are seeking an experienced DLP Cloud Security Engineer to join our clients Cyber Security team on a 12-month contract. This role has a with potential for extension or conversion based on performance and business needs.

Overview:

As a DLP Cloud Security Engineer, you will play a critical role in designing, implementing, and maintaining robust DLP (Data Loss Prevention) security measures within cloud environments. Your primary responsibility will be safeguarding the organization’s digital assets and data through collaboration with cross-functional teams. You are required to handle AWS Incidents and Training.

Key Responsibilities:

• Develop and execute a comprehensive cloud DLP security strategy aligned with organizational goals and compliance requirements.
• Architect and design secure cloud solutions, focusing on network security, IAM (Identity and Access Management), encryption, and data protection.
• Continuously monitor cloud environments for security threats, vulnerabilities, and anomalies. Implement proactive measures to mitigate risks effectively.
• Ensure cloud security practices adhere to industry standards and regulatory compliance (e.g., GDPR, HIPAA, SOC 2).
• Establish reporting frameworks to track and communicate the execution of long-term security strategies.
• Collaborate with control owners to develop and maintain complete and repeatable control processes, including documentation and metrics.
• Prepare high-level presentations tailored for executive stakeholders.

Required Skills:

• Minimum of 5 years of experience in information security.
• At least recent 3 years focused and expertise on cloud security, specifically infrastructure platforms such as AWS and Azure, and common enterprise SaaS applications. Prior hands-on experience of cloud incident response is highly desirable.
• Exposure to security incident response, specifically incidents involving AWS and Azure cloud infrastructure is essential.
• Experience with developing performance baselines for DLP tools
• Proficiency in cloud platforms such as AWS, Azure, or Google Cloud, including knowledge of their security services and best practices.
• Strong understanding of security principles, protocols, and technologies, with expertise in areas like network security, DLP, and encryption.
• Exceptional analytical and problem-solving abilities, along with the ability to assess complex security risks and devise effective solutions (e.g., you should be comfortable working on problems that have a fair amount of ambiguity at the onset).
• Understanding of technical and organizational security vulnerabilities, threats, and risks
• Exceptional communication skills and the ability to explain yourself concisely and accurately.
• Ability to troubleshoot and solve complex problems rapidly.
• Certified Cloud Security Professional (CCSP) preferred or ability to obtain within 3 months.

Desired Skills:

• Experience operating and tuning DLP technologies
• Experience with CASB solutions, Microsoft Purview, Proofpoint, M365
• Cloud platform familiarity as it relates to DLP solutions (AWS, Azure)
• Operating Systems (Windows/Mac/Linux)
• Basic Networking - VPN, TCP/UDP protocols
• Basic Encryption - SSL, AES, IPsec, Key Management, Certificates
• Ancillary Services - DNS, Web Server, LDAP/AD, Database technologies
• Intermediate Level Scripting - e.g., Python, PowerShell

Argyll Scott Consulting Pte Ltd

US Data Centre

• Design and implement advanced security architectures for IT and OT environments against emerging threats.
• Take lead in development and integration of custom security solutions to both digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of both IT and OT systems.
• Develop and refine incident response strategies in respond to and recover from security breaches promptly and effectively.
• Collaborate with IT and OT teams to ensure the seamless integration of security technologies across all platforms.
• Technical lead for all projects involving cybersecurity technologies while meeting industry standards and compliance requirements.
• Stay update to date on the latest cybersecurity technologies and trends
• Mentor junior engineers and analysts,
• Prepare and present detailed technical reports and security briefings to senior management, making strategic recommendations

Requirement

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO27001, NIST, SOC2, and others relevant to IT and OT cybersecurity.
• Exceptional problem-solving skills and the ability to make critical decisions under pressure.
• Excellent communication skills, capable of articulating complex security issues to stakeholders at all levels within the organization.

Responsibilities:

- Design and implement integration solutions for various physical security systems, including access control, video surveillance, intrusion detection, video analytics and alarm systems

- Ability to understand and address customer requirements and translate them into technical solutions

- Collaborate with product teams to address specific customer needs and feedback

- Design and propose security technology solutions tailored to different verticals

- Collaborate with cross-functional teams to gather requirements and define project scope

- Conduct site surveys and assessments to determine integration needs and best practices

- Conduct POC, demo, testing and setup of security system and video analytics

- Manage and execute projects with strong project management skills

- Develop documentation, including system specifications, integration plans, and user manuals

- Stay updated on industry trends, technologies, and best practices related to physical security

Requirements:

- Bachelor’s degree in Computer Science, Engineering, or a related subject

- Programming skills in Python, C++ and/or Javascript

- Fullstack experience is strongly preferred

- Strong understanding of networking, database management, and software integration

- Familiarity with industry standards and protocols (e.g., ONVIF, BACnet, etc.)

Nice to have:

- Professional experience working with VMS systems and integrating 3rd party solutions

- B2B (Business-to-Business) experience in physical security

- Technical security system certifications (I.e., Gallagher, Genetec, BICSI, Milestone) and/or related IT (i.e., CCNA) certifications preferred

- Possess market knowledge in physical security industry for verticals ie. transportation, commercial building, hospitality, etc.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems, and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything we create is the result of people in different roles and teams working together to make each other’s ideas stronger. That same passion for innovation that goes into our products also applies to our practices, strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the Threat Analysis and Incident Response function. A successful candidate will possess a proven technical background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You will work with a global team of security professionals on a follow-the-sun model with a primary focus on the identification, containment, and mitigation of security incidents. This role is an integral part of the security controls Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology and processes with global reach.

Minimum Qualifications

• More than 7 years of experience in Information Security with a focus on Incident Response, Security Engineering, and/or Intrusion Detection
• Proficient understanding of incident response automation strategies, with demonstrated ability to implement them
• Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors
• Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues
• In-depth technical knowledge of macOS or Linux Operating Systems
• Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze endpoint, network, and application logs
• Proficient in one or more programming/scripting languages
• Excellent verbal and written communication skills

Preferred Qualifications

• Experience with disk and memory forensic tools
• Experience writing and tuning IDS signatures
• Experience triaging malware

Apple is an Equal Opportunity Employer that is committed to inclusion and diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants, including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.


Responsibilities

• Stay current on cybersecurity trends and events.
• Effective communication with internal teams and stakeholders.
• Develop technical proposals and present solutions.
• Coordinate project teams for timely delivery.
• Review and ensure adherence to security standards.
• Conduct security tests, audits, and risk assessments.
• Articulate cybersecurity risks and mitigation strategies.
• Evaluate and implement security products.
• Provide guidance for risk mitigation and secure lifecycle.

Requirements

• Minimum 2 years of cyber security experience.

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996