Total 708 quality assurance engineer job vacancies in Legal / Public / Security category in Singapore

This an awesome role for someone who has experience with DevSecOps, Cyber Security and specifically Software Applications Security who wants to use all of their skills and learn alot more.

Key Responsibilities:

• Ensure that software developed is free of security vulnerabilities.

• Manage application security program across multiple SDLCs.

• Review and understand code from both business logic and technical standpoint.

• Coordinate with developers to prioritize and remediate identified true positive vulnerabilities.

• Collaborate with software development and quality assurance teams to ensure code is free from security defects.

• Communicate cybersecurity standards applicable to technology and coding workflows.

• Working with Application Security Engineers, optimize security with existing technologies and processes.

• Review performance of controls such as threat modelling, SCA, SAST, DAST, IAST, RASP, Secrets Scanning, Container Scanning, Misconfiguration Identification, Secure Code Review, CI/CD Pipeline Security, Deployment Environment Security.

• Coordinate with software development leadership, operations leadership, IT leadership, and cybersecurity leadership to integrate application security practices across departments.

Experience Required:

• At least 5 years of total IT experience
• Cyber Security, Software Applications Security and DevSecOps experience
• Demonstrated experience working with technical and non-technical staff.
• Any experience with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure or other cloud platforms, with experience in developing and implementing software would be ideal.
• Experience developing software in various coding languages such as Java, C#, Python, PHP would be helpful
• Strong interpersonal skills with the ability to communicate effectively with guests and other team members of different backgrounds and levels of experience.
• Professional certifications in cyber security (CISSP, OSCP, etc) is highly desirable

Adam Davies

Partner

Technology 'recruitment & search'

Menrva Group

Registered Agent R1326604

Company EA License 19S9808

Company Registration 201900823K
MENRVA PTE. LTD.

Principal Security Management Engineer

Job Description:

1. Developing and implementing security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.

2. Leading the design and implementation of security controls, including firewalls, intrusion detection systems, endpoint protection, and security information and event management (SIEM) systems.

3. Conducting regular security assessments and vulnerability scans to identify potential risks and vulnerabilities.

4. Responding to and investigating security incidents and breaches, and implementing measures to prevent future occurrences.

5. Managing and monitoring security systems and tools to detect and respond to security events and threats.

6. Collaborating with other IT teams to ensure security best practices are followed during system and software development.

7. Providing guidance and support to junior security operations engineers and other team members.

8. Staying up-to-date with the latest security trends, threats, and technologies, and making recommendations for improvement

9. Participating in incident response and disaster recovery planning and testing

Collaborating with external vendors and partners to ensure the security of third-party systems and services.

Requirements:

· Bachelor's degree in Computer Science, Information Systems, or related field.

· Strong technical knowledge and experience in security operations, network and systems administration, and incident response

· Experience with programming languages (Rust is a plus), Embedded Systems, Hardware peripherals.

· Familiarity with Operating System Security (e.g. Linux, Windows).

· Excellent problem-solving and analytical skills.

· 6+ years of professional experience in hardware and firmware security.

· Chinese speaking to liaise with Chinese counterparts

Interested applicants, Kindly email your updated resume to yvonne.chai@quesscorp.sg and we regret that only shortlisted candidates will be notified

Yvonne Chai Cheng Man

(EA License: 23115356 | UEN: 201715683K)

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

Job Purpose

A Red Team operator is a member of the Information Security Assurance group driving security improvement through continuous assessment of our threat landscape. The Red Team is a globally dispersed “testing” team.

Team Duties

• Red Team Core (70%): primarily, as a Red Team operator, you will work closely with team members to deliver sophisticated engagements focusing on high priority, global security objectives. This will take the form of engagements that deliver chained exploits and a full kill-chain of specific recommendations, to demonstrate and explain security gaps in the context of other vulnerabilities. These engagements may include working with externally contracted red teams and exploring Artificial Intelligence based applications such as Large Language Models (LLMs).
• Threat Automation and Detection development (15%): you will be developing and recreating atomic red team tests (“TTPs”) not developed as part of Red Team Core duties. These will be used to improve our Blue Team detection and response capabilities.
• Infrastructure support and development (15%): you will run, support and maintain our red team-owned tools and infrastructure alongside other team members.

Responsibilities
Seniority is determined by experience and demonstration of exceptional competencies including:

• Documenting and effectively publishing technology guidance and repeatable processes
• Mentoring peers in groups and individually
• Improving processes and incorporating advanced methodologies into engagements
• Taking initiative to learn business goals, liaise with other departments, and identify ways to increase productivity in other ICE groups and offices

Knowledge and Experience

• University degree in Mathematics, Computer Science, Engineering, or related discipline
• 4 years or more direct penetration testing and red teaming experience.
• Scripting - python, bash, Go etc, software engineering, and system administration
• Offensive Security Certified Expert (OSCE) or CREST CCT qualification
• Artificial Intelligence background is a plus

Schedule

This role offers work from home flexibility of one day per week.

Intercontinental Exchange, Inc. is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin or ancestry, age, disability or veteran status, or other protected status.

Cyber Security Operations and Support Engineer

Responsibilities:

• Maintain the IT security infrastructure components such as firewalls, servers, intrusion prevention / detection systems, end-point protection system, VMware systems, SIEM, PAM, etc.
• Manage problem resolution process and solve technical issues with hardware and software using various diagnostic tools.
• Work well with OEM/ product vendor to keep customer infrastructure in good shape.
• Handle patching process and look after the IT security components, e.g. monitor, evaluate, test, and apply critical patches to operating systems, applications, firmware, network switches, etc.
• Technically proficient in networking technologies.
• Able to perform hardening, vulnerabilities assessment and findings resolution.
• Ready to be on 24x7 standby (rare activation).

Requirements:

• Degree / Diploma in Information Technology, Information Systems, IT Security, Computer Science or equivalent
• Good working knowledge in Windows and Red Hat Linux OS
• Good working knowledge of virtualization, end-point security and network security
• Basic knowledge in Nessus scan, PAM and SIEM is preferred.
• Good troubleshooting and problem-solving skill.
• Independent with little supervision
• Relevant work experience in servers & network management and maintenance
• Certification in Cybersecurity or networking has an advantage.
• Mainly in Changi Naval Base, occasionally at AMK or Tuas Naval base (transport reimbursement provided)

Maestro HR

damien lee tian hong

R1106726

16C8462

We are looking for an experienced Senior Cloud Security Engineer to join the Cyber Security Operations team. This is a 12 months contract role to start with a potential to extend / convert based on the performance and business needs.

Roles and Responsibilities:

• The ideal candidate must have deep knowledge of security controls, tools, features, and operations for AWS / Azure. Candidate should be able to demonstrate relevant experience with implementing and enhancing detective capabilities in a fully managed AWS / Azure environment.
• The candidate should be intellectually curious about technology and the evolving threat landscape.
  This role will help to build a detection engineering process and culture for a SIEM platform covering on-prem and multi-cloud environments while serving as a technical subject matter expert for the AWS / Azure environment.
• It will partner with teams across Global Information Security to design, develop, tune, and maintain detection content to protect the and support the information security policies and/or procedures.

Skills and Experience

• Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or related field.
• Eight (8) or more years relevant Cyber Security experience with at least five (5) years in Cloud SOC and/or Purple Team roles.
• Highly organized and motivated self-starter who can deliver results with minimal direction.
• Experience writing and tuning detections.
• Experience with SIEM tools.
• Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS.
• Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Experience with a range of AWS . Azure native services and tools (i.e. Guard Duty, Security Hub)
• Understanding of threat frameworks, such as MITRE ATTCK for Cloud and D3FEND.
• Understanding of Risk Management principles.
• Experience in building, configuring, operating and/or securing cloud infrastructure and applications in AWS / Azure with either native cloud service provider capabilities or 3rd party vendor tools.
• Ability to independently assess risks and identify vulnerabilities in infrastructure with an eagerness to suggest new processes, policies, and overall improvements to internal security controls.
• Experience partnering with incident response teams, threat intelligence researchers, Red/Purple teams, and/or HUNT researchers.
• Familiarity with common Information Security and data protection frameworks and standards (i.e. CIS, NIST, HIPAA, GDPR, PCI DSSS, ISO 270001).
• Ability to navigate and collaborate effectively within a geographically complex and dispersed global corporation.
• Excellent verbal and written communication skills with ability to distill key data points and effectively present information.
• Preferable Certifications
  CCSP / CCSK
  CISSP / CISM / Security +

Argyll Scott Consulting Pte Ltd

Your new company

This is a multinational investment bank.

Your new role

• Develop and implement a comprehensive cloud DLP security strategy that aligns with the organization's goals and compliance requirements.
• Design and architect secure cloud solutions, considering aspects such as network security, identity and access management (IAM), encryption, and data protection.
• Guide implementation of proactive measures to address security concerns effectively.
• Ensure that cloud security practices adhere to industry standards and regulatory compliance, such as GDPR, HIPAA, or SOC 2.

What you'll need to succeed

• Minimum of 10 years of experience in information security, with at least 5 years focused on cloud security. Prior experience as a Security Architect or similar role is highly desirable.
• Experience with developing performance baselines for DLP tools.
• Proficiency in cloud platforms such as AWS, Azure, or Google Cloud, including knowledge of their security services and best practices.
• Certified Cloud Security Professional (CCSP) preferred.

What you'll get in return

• Challenging yet fulfilling career with an equal opportunity employer.
• Various opportunities to learn and upgrade your skill sets
• Competitive remuneration package and benefits

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email [email protected] for a confidential discussion.

Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D

About the client

Our client is a prominent global trading platform, established in Australia, and serving millions of users worldwide. They specialize in delivering an integrated digital service platform designed for investors. Their offerings include market data, news, analysis, and comprehensive trading services, all within a user-centric fintech ecosystem.

About the role

The role involves planning, creating frameworks, roadmaps, processes, and controls, as well as coordinating across business and technical stakeholders to monitor and detect security threats and respond to security incidents.

• Develop and implement the company’s cyber/info-security efforts to ensure compliance with information security requirements stipulated by financial services regulators. Plan and construct the company's cybersecurity and protection systems, continuously enhancing cybersecurity management and environment to ensure network system security and availability.
• Manage the company’s response to and relationship with info-security-related audits/compliance matters and inquiries from regulators or appointed auditors. This includes overseeing security compliance activities such as PCI/GDPR audits and IT security compliance related to financial regulations.
• Conduct daily security checks, analyze and detect potential security threats and vulnerabilities in the company's business systems and internal office environment. Conduct security audits and provide employee security awareness training.
• Oversee safety inspections in the company's R&D process and optimize related processes.
• Manage internal and external network attacks, phishing attacks, virus infections, intrusion defense, and other security incidents. Provide monitoring, early warning, response, and emergency response.

Skills and Experience requirements

• 5 years or more of experience in information security/cybersecurity.
• Familiarity with OWASP Top 10 and DDoS attack principles and protection.
• Proficiency in information security/cybersecurity skills such as offensive and defensive tactics, penetration testing, and vulnerability assessment.
• Familiarity with commonly used security tools and products.
• Experience with one or more public cloud security products.
• Understanding of TCP/IP principles.

Interested candidates who wish to apply for the advertised position, please click on "Apply Now". We regret that only shortlisted candidates will be notified.

Job Code: ANNH

EA License: 01C4394, R1872517 (Ho Hsien Ni)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates to collect, use and disclose your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services, complying with Government’s health advisories and such other purposes stated in our privacy policy. Our full privacy policy is available at https://www.persolkelly.com.sg/policies . If you wish to withdraw your consent, please drop us an email to let us know. Please feel free to contact us if you have any queries.

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

The TS Senior Security Engineer performs test activities and manages the internal or external customer independently. The Lead Technical Analyst is responsible for the customer satisfaction of the test deliverables and enables a smoothly running testing, validation or certification process. This includes using test automation tools, analyzing and validating test results and reporting to the customer. The Lead Technical Analyst participates in evaluating the security of IT products, such as network device, encryption software, mobile devices, payment terminals or e-Passports based on certain scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc. This will include the development document review, IT products analysis, the development and the realization of penetration test, the support and training of evaluation engineers.

Responsibilities for Internal Candidates

• Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations management.
• Conduct IT product security function evaluation work based on scheme requirement, such as Common Criteria, Cybersecurity Labelling Scheme, Common.SECC etc..
• Customer code review when needed : due to stringent confidentiality and security requirements, it often requires traveling to customer premises.
• Based on the code review result, conduct a vulnerability analysis to determine if the customer product has any potential security weaknesses.
• Customer site audit when needed : normally traveling to customer premises, conduct remote audit in current Covid situation.
• Investigate possible logical attack scenarios. Provide support for the penetration tester in charge of product testing – by interpreting the code review findings and compliance checking result, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements.
• Delivery of customer projects on time.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
• Performs other duties as directed by supervisor.
• Maintains Laboratory accreditation and resolve scheme's mandated corrective action plans.

Qualifications for Internal Candidates

• Master or Bachelor level degree (or equivalent) in Information Technology, Computer Science or equivalent proving your analytical skills and technical approach.
• Minimum 5 to 8 years’ information security working experience, Common Criteria evaluation experience is the best and ISO 27001 auditing will be an advantage.
• Possess CISM / CISA Certification or related is an added advantage.
• COMMON CRITERIA SINGAPORE EVALUATOR (under SCCS) Certified is an added advantage.
• Comfortable in trying yourself in new areas without necessarily knowing everything and can figure out things as you go.
• Like working towards a larger goal and willing to take the initiative in your own hands.
• Good at communicating and can convey message to both technical and business audiences.
• Able to make decision independently under certain scenario, such as during site audit in customer site.
• Nice to have IT product development experience or penetration testing experience.

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Overview:

We are seeking a highly skilled and experienced Senior Security Engineer to join our team. This role focuses on significantly enhancing the security posture of our platform, ensuring a robust and resilient environment for our customers' financial data. The Senior Security Engineer will be responsible for implementing advanced security measures, conducting comprehensive security reviews, and performing thorough threat modeling and risk assessments.

Key Responsibilities:

• Security Tooling Enhancement:
  • Implement and configure industry-leading security tools to enhance the overall security infrastructure.
  • Continuously evaluate and integrate new security technologies to ensure state-of-the-art protection.
• Security Design Reviews:
  • Conduct detailed security design reviews of the platform's architecture and development processes.
  • Collaborate with development teams to incorporate security best practices and improve existing design methodologies.
• Threat Modeling and Risk Assessment:
  • Develop and maintain comprehensive threat models to identify potential security threats and vulnerabilities.
  • Perform risk assessments to evaluate the potential impact of identified threats and implement appropriate mitigation strategies.
• Third-Party Security Assessments:
  • Streamline and manage the process for conducting security assessments of third-party vendors and partners.
  • Ensure third-party integrations comply with the company’s security standards and policies.

Deliverables:

• Security Tooling Implementation:
  • Successful implementation and configuration of industry-leading security tools to enhance platform security.
• Improved Security Design Practices:
  • Establish and promote improved security design practices within the development process to ensure secure coding and architecture.
• Comprehensive Threat Models and Risk Assessments:
  • Develop and maintain detailed threat models and conduct risk assessments to identify and mitigate potential security risks.
• Streamlined Third-Party Security Assessments:
  • Create and manage a streamlined process for third-party security assessments, ensuring compliance and security of external partnerships.

Qualifications:

• Proven experience as a Security Engineer or similar role, with a focus on enhancing security postures for financial data platforms.
• Strong expertise in security tooling, design reviews, threat modeling, and risk assessment.
• Experience in conducting third-party security assessments and managing vendor security compliance.
• Excellent knowledge of security technologies, protocols, and best practices.
• Strong analytical and problem-solving skills, with the ability to identify and mitigate security threats effectively.
• Excellent communication and collaboration skills, with the ability to work closely with cross-functional teams.
• Bachelor’s degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are a plus.

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.
• Key Requirements:
• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Job Description

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Skills Required

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.

EA Number: 11C4879

· Perform analysis, prioritization and classification of risk.

· Handle day-to-day security vulnerability assessments and operational request.

· Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.

· Proactive monitoring of remediation plans and progress.

· Schedule security checks in accordance with reporting schedules.

· Continuous enhancement of existing security vulnerability assessment process.

· Verifies security controls are implemented accordingly.

· Review security incident reports

· Evaluate the type and severity of security events

· Assist with establishing procedures for handling detected security events

· Create final incident report detailing the events of the incident

· Prepare periodic status reports for presentation to management

· At least 5 year working experience in vulnerability management and incident response.

· Familiar with at least one vulnerability scanner.

· Strong analytical skills and ability to work independently.

· Good team player as well as strong communications skills with stakeholders at all levels

· Possess QISP, CEH, CISSP and/or related security certification.

· Experience in healthcare industry is an added advantage.

· Degree in Computer Science, Engineering or equivalent.

Responsibilities:

1. Establish and Enhance Cloud Security Compliance:

• Build and improve the cloud security and compliance framework.
• Research industry security products and compliance practices and apply them to the company's cloud services.

2. Respond to Online Security Issues:

• Provide professional solutions and security recommendations to address online security incidents.
• Ensure timely resolution of security events.

3. Track Industry Security Cases:

• Study the technical principles behind industry security incidents.
• Internally share knowledge related to security cases.

4. Conduct Regular Security Audits:

• Engage in red team-blue team exercises with the testing team.
• Ensure the overall security of the system.

Requirements:

• Education: Bachelor's degree or higher.
• Relevant Majors: Background in Electronics, Telecommunications, Computer Science, Network Engineering, or Software Engineering.
• Programming Language Skills: Proficiency in at least one of Java, Python, or Go, ability to solve problems through programming.
• Security Experience: Prior experience in web application security, network security, container security, or data security is advantageous.
• Soft Skills: Strong logical thinking and rigorous problem-solving abilities, excellent learning capacity, communication skills, and teamwork spirit, passion for technology and a desire to contribute to technical advancements.
• Ability to speak and write in Chinese as the incumbent requires to liaise with the China HQ counterparts/personnel for work or project related matters

THE JOB:

The Security Systems Engineer reports to the Campus Security Manager and is responsible for the physical security technologies and systems within the DataCenter.

JOB RESPONSIBILITIES

• Management of physical security technologies and systems within the Datacenter. Includes physical access control, video surveillance, security networks, VHF/UHF Radio systems, hard key management systems, and perimeter entry systems.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Collection and maintenance of system information on the health of current security systems and report out of performance trends. Identification of system issues or failures and coordination with site personnel to drive and correct failures by collaborating with other internal and external service providers in weekly / biweekly meetings.
• Receive escalations/notifications of physical security and business impacting incidents/events and appropriately triage, ensuring that leadership is made initially and continuously aware when appropriate and that the appropriate personnel are managing the incident response effectively.
• Serve as a Subject Matter Expert (SME) for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Continuously improve the efficiency and maturity of the overall physical security program.
• Collaborate with peer teams and organizations to ensure their team is aligned with broader strategy and initiatives, fully supporting leadership priorities, being good partners, helping reduce costs, time burden, complexity, and being responsive trusted advisors.
• Continuously seek data and recommend strategies and ideas to reduce churn, optimize, implement a creative solution to a problem, scale, automate, and simplify.
• Confident and skilled in preparing and delivering presentations and briefings to customers, senior leaders, and executives.
• Any other ad-hoc task assigned.

JOB REQUIREMENTS:

• Diploma or BS or BA in physical security or related discipline, or equivalent experience preferred.
• With 5 years’ experience successfully managing security systems projects in a corporate, law enforcement or government operations program role.
• Must be Lenel Certified Professional in Access Control and Digital Video or to attain Lenel certification within 6 months from date of hire.
• Experience with or exposure to regulatory and industry compliance frameworks and audits (e.g. ISO27001, PCI, SOC).
• Experience with datacentres or other critical infrastructure facilities.
• Experience with HA and DR solutions such as SQL Clustering, NEC WAN Express.
• With more than 5 years of managing, configuring, and maintaining Microsoft SQL Servers and processes.
• Experience making and influencing good decisions that impact mission-critical, 24x7 operations environments.
• Strong work and compliance ethic, and the ability to effectively prioritize and execute tasks in a dynamic and high-pressure environment.
• Proficient in the use of Microsoft Office products for business.
• Analytical and process improvement skills to produce data driven insights and associated process changes.
• Thought leadership and subject matter expertise to deliver one or more large programs and services while increasing standardization, simplification, and automation.
• Ability to change plans, goals, actions, and priorities in response to an evolving business environment with awareness to operate as a champion for course corrections when necessary.

We are seeking a highly motivated security analyst to join our Global Security Operations Centre (GSOC). You will be responsible for performing security monitoring and investigation, incident response, threat research and hunting for our global infrastructure, encompassing both cloud-based and enterprise environments.

The ideal candidate will be well-versed in security methodologies and technologies, with a passion for protecting systems and data from cyber threats.

Responsibilities:

• Perform security monitoring on global infrastructures, leveraging variety of analytic tools and techniques to detect incidents from security-relevant datasets.
• Detect incidents through daily monitoring and hunting efforts, work with cross-functional teams for remediation.
• Thoroughly document cybersecurity activities, thinking of ways to improving detection capabilities.
• Help maintain security appaliance rulesets, generate false/true positive statistics on exsiting rules, engage respective engineers to tune false rules.
• Assist the development of incident response plans, playbooks, and SOPs to improve the incident handling processes.

Requirements:

• Minimum 3 years of work experience in cybersecurity operations or engineering field; the candidate should possess a strong background in addressing security threats within both enterprise network settings and cloud-based environments.
• Able to perform deep dive analysis in endpoints incidents, so you need have strong knowledge in Windows, Mac OS and Linux operating systems.
• Deep understanding of network/endpoints defense principles, common attack vectors; have a good understanding in MITRE ATT&CK’s tactics and techniques.
• Well versed in data analysis and be able to locate anomaly through large datasets.
• Good understanding of principles in common security vulnerabilities. Those who submit vulnerabilities with good grades on major security platforms are preferred.
• Have a certain level of programming knowledge, such as: Python, Java, R, Go etc.
• Experience with the following technologies or concepts:
• SIEM or other security/log management platforms
• EDR/XDR/CNAPP/CSPM
• Basic host-based forensics analysis
• NTA, SOAR, WAF, Cloud

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Job Description Summary

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as Endpoint Protection, Endpoint Detection and Response (EDR), SIEM, SOAR, Threat Intel Platform, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security solution platforms.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Develop and maintain automation infrastructure for build and maintenance of security solutions
• Managing of security solutions, including patch management such security solutions.
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the security solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge based articles and sharing sessions with fellow peers in the team.
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Reviewing and finetuning firewall rules and IPS signatures for enhanced security controls
• Test and update Endpoint Protection and EDR signatures
• Extracting quarantined malware for reverse engineering
• Creating and maintaining EDR blacklist
• Onboarding new log sources to SIEM and Data Lake
• Crating and maintaining log parsers / data flow for onboarded logs

Requirements

• At least 3 years of experience in providing technical support and administration of the security solutions (Endpoint Protection, EDR, SIEM, SOAR, Threat Intel Platform, etc)
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, equivalent or more.
• Professional training or certificates in Splunk, McAfee, Carbon Black, Anomali, RSA SecurID will be an added advantage
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications

Role Overview

Security Subject Matter Expert (SME) is responsible for designing, implementing, and managing security solutions to protect the company's information systems, networks, and data from potential threats and cyber-attacks.

The primary role is to provide expert guidance, support, and leadership in all matters related to security within an organization. This role will require strong analytical and collaboration skills, detailed working knowledge of current and emerging security technologies, as well as the ability to correlate events to identify abnormal behavior.

Responsibilities

• Serve as a Subject Matter Expert (SME) for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Investigate any security incidents and provide insights to internal/external business users.
• Develop processes and procedures and fine-tune alerts as part of ongoing improvisation of security operations.
• Develop cloud/hybrid and cloud platform-specific security policies, standards, and procedures on cloud providers (Azure, AWS) and cloud-native platforms (PCF, Docker, Kubernetes, etc.).
• Identify and deliver appropriate cloud security controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business risk and cloud-native threats.
• Conduct integration of supported Cloud-based Security Products such as Web Application Firewall (WAF), Web Security Proxy, etc.
• Conduct detailed & comprehensive investigations and triage on a wide variety of security events.
• Recommend and implement remediation processes.
• Stay up-to-date with the latest security threats, vulnerabilities, and mitigation techniques.
• Collaborate with cross-functional teams to implement security measures and address security requirements.
• Communicate security risks, recommendations, and status updates to stakeholders, management, and team members.
• Identify opportunities to improve processes and/or tools to ensure the highest level of quality, including documentation, mentoring, and training sessions.
• Own the technical components of a customer integration project including but not limited to configuration, debugging, documentation, testing, and go-live support.
• Identify and mitigate potential security threats and vulnerabilities.
• Provide relevant recommendations to improve the overall security posture of customers.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Assist in any ad-hoc tasks when necessary.

Requirements

• Over 5 years of experience in Information Security or engineering.
• At least 2 years of direct experience in one of the public cloud platforms, such as AWS or Azure with strong knowledge of their security features.
• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).
• Ability to identify and drive remediation of public and hybrid cloud risks.
• Experience in general security technologies, processes, and concepts.
• Experience with web security concepts and technologies such as web application firewalls, and proxy.
• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel.
• Working experience with common security operations systems, Intrusion Detection Systems(IDS/IPS), Security Incident Event Management systems(SIEM), anti-virus log collection systems, etc.
• Working knowledge of security systems and programs.
• Sound fundamental knowledge of Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10, and web servers (e.g. Apache, IIS, Nginx, etc.).
• Familiarity with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, and Open-source tools like Jenkins, DefectDojo, and OWASP Glue will be an added advantage.
• Strong analytical and problem-solving skills, with the ability to identify and address security risks and Vulnerabilities.
• Ability to analyze and develop innovative recommendations and solutions.
• Excellent verbal and written communication skills.
• Independent and results-oriented.
• Willing to work on a flexible schedule depending on business need.

Job Summary:

Join our client as a dynamic team as a Senior Cyber Security Engineer, focusing on privileged access management within the banking sector. This role is essential for enhancing the security posture of our bank by providing innovative solutions and aligning with industry trends.

Responsibilities:

• Provides vision for privileged access management, enables innovation, and aligns with industry trends and continuous improvements that enhances the security posture of the bank with regards to privileged access.
• Responsible for budgeting, project management, deployment and operations support of new initiatives in the privileged access management space.
• Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.
• Responsible for the day-to-day support, monitoring, upgrades, patching, configuration, and management of privileged access infrastructure.
• Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements:

• Bachelor’s degree in computer science, Information Systems, or Engineering (or similar) OR combination of relevant professional experience and education, such as CyberArk certifications
• Requires 4 or more years of related technical experience in CyberArk, including deployment, configuration, management, and support of all CyberArk infrastructure components. This includes regional support and integration of CyberArk via APIs. CyberArk certifications are preferred.
• Able to write PowerShell scripts and SQL statements to develop management reports on the usage and operations management of privileged accounts.
• Experience with Tableau data visualization tool for dashboarding.
• Strong understanding of enterprise privileged access management, risk management, compliance, governance, and control.
• Strong understanding of key platform OS/databases e.g., Windows, Unix, MSSQL, MariaDB. Prior experience in administering such key platforms is preferred.
• Experience in working in banking environment is preferred.
• Hands-on, well organised, risk and compliance focused, and self-driven.
• Comfortable operating in a fast-paced and highly technical environment.
• Able to prioritize tasks, responsiveness, along with excellent verbal and written communication skills.

EA License No. 01C4394 • RCB No. 200007268E • Lim Jia Jie EA Registration No. R22108969

By sending us your personal data and CV, you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for account creation in GO and the purposes set out in the Privacy Policy https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with GO’s Terms of Use https://go.persolkelly.com/Tacand the Privacy Policy. If you wish to withdraw your consent, please email us at [email protected]. Please feel free to contact us if you have any queries.

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R22111604