Key Responsibilities:

• Perform penetration testing on blockchain networks and smart contracts to identify potential vulnerabilities and exploitable weaknesses.
• Conduct code audits to ensure smart contracts and blockchain-based applications are secure and free from vulnerabilities.
• Use advanced techniques for vulnerability mining in blockchain environments, identifying zero-day vulnerabilities and emerging threats.
• Develop and execute comprehensive security auditing plans for blockchain platforms, including decentralized finance (DeFi) protocols and Layer 2 solutions.
• Lead the incident response process for security breaches, including root cause analysis, containment, eradication, and post-incident reporting.
• Implement vulnerability scanning tools to proactively identify security issues in both blockchain and traditional applications.
• Collaborate with development and engineering teams to define and implement effective risk mitigation strategies.
• Keep up to date with blockchain security trends, new attack vectors, and cutting-edge tools for identifying and defending against threats.
• Prepare and deliver detailed security reports, documenting vulnerabilities, attack simulations, and recommended security improvements.
• Train developers on secure coding practices in blockchain environments, ensuring best practices are followed throughout the development lifecycle.
• Engage with external security auditors and penetration testers as needed, managing the auditing process for continuous improvement.

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (Master’s degree or certifications such as OSCP, CEH, or CISSP preferred).
• 5+ years of experience in cybersecurity, with a focus on blockchain technology and security practices.
• Extensive experience with penetration testing, specifically in blockchain networks, smart contracts, and distributed applications (dApps).
• Strong background in vulnerability scanning, using tools like Nmap, Nessus, Metasploit, and OWASP ZAP.
• Proficiency in code auditing, with knowledge of blockchain-specific languages like Solidity, Rust, or Vyper.
• Familiarity with blockchain consensus algorithms, cryptography, and attack vectors such as Sybil attacks, 51% attacks, and front-running.
• Hands-on experience with incident response and security event management (SIEM tools such as Splunk or ELK).
• Strong understanding of security auditing frameworks and risk management methodologies.
• Knowledge of threat modeling techniques and experience with blockchain security tools like Mythril, Slither, and Remix IDE.
• Solid understanding of smart contract security vulnerabilities such as reentrancy, integer overflow, and denial of service.
• Experience in designing and implementing risk mitigation strategies, focusing on secure design and architecture for blockchain applications.
• Experience with Decentralized Finance (DeFi) protocols and Layer 2 scaling solutions.
• Familiarity with blockchain platforms such as Ethereum, Hyperledger, Polkadot, or Binance Smart Chain.
• Knowledge of Zero-Knowledge Proofs (ZKP), Multi-signature wallets, and other advanced cryptographic techniques.
• Familiarity with cloud security in AWS, Azure, or GCP, especially in blockchain-based deployments.
• Strong scripting skills in Python, Bash, or Go to automate security testing and incident response tasks.
• Certifications in blockchain security, such as Certified Blockchain Security Professional (CBSP) or Blockchain Security Expert.

Savita Rai

EA REG NO: R1873418

EA License No:23C2060

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

Principal Job Functions
1. Monitor developing cybersecurity events around the world, and escalate to L2 team if relevant events are observed
2. Performs monitoring, risk assessment and analysis on security tools such as Anomaly Detection systems, Firewalls, Antivirus systems, Proxy devices
3. Follow pre-defined actions to handle security alerts including escalating to L2 team and other support groups
4. Execute daily ad-hoc tasks or lead small projects as needed
5. Participate in daily and ad-hoc documentation related tasks
6. Create and maintain operational reports for Key Performance Indicators and weekly and Monthly Metrics
7. Perform assessment phase of Vulnerability & Threat Management process
8. Receive threat intelligence from feeds the Group subscribed to and update to Threat Intel knowledge base
9. Be ready to support any security incident response investigation in the Group regardless of location and environment
10. Work closely with Team Lead to review, provide feedback and take actions to improve the methodology use in the Security Operations
11. Responsible to ensure all tickets logged are closed correctly and timely
12. Ensure timely submission of routine reports on threats, vulnerabilities and incidents handled by the Security Operations Center
13. Keep the Security Operations Center runbooks and procedures updated

Recommended prerequisites:
1. 1+ years working in security operations, preferably with incident management experience
3. Familiar with security products and network devices
4. Extensive technical experience with network security practices including Intranet, Extranet and Internet access
5. Technical experience with UNIX, AIX, Linux, Windows
6. Knowledge of TCP/IP, DNS, web, wireless security architectures and enterprise-grade security solutions
7. Knowledge of encryption and authentication methods such as 2FA, DES/AES/RSA, Digital Certificates, SSL/TLS, IPSec and development of DMZ’s
8. Knowledge of intrusion detection (deep TCP/IP knowledge, and cybersecurity), various operating systems (Windows/UNIX), and web technologies (especially internet security)
9. Able to read and understand packet level data, handle Network/Host Security products (NIDS/NIPS, firewalls, HIPS, AV, scanners, etc.) and understand security events from these tools
10. Able to perform vulnerability assessment and manage such tools/processes, as well as application penetration testing or forensic analysis fields
Note: 24*7 Shift work required (working in 3 rotational shifts)

---------------------------

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

Responsibilities

• Developing and implementing security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.
• Leading the design and implementation of security controls, including firewalls, intrusion detection systems, endpoint protection, and security information and event management (SIEM) systems.
• Conducting regular security assessments and vulnerability scans to identify potential risks and vulnerabilities.
• Responding to and investigating security incidents and breaches, and implementing measures to prevent future occurrences.
• Managing and monitoring security systems and tools to detect and respond to security events and threats.
• Collaborating with other IT teams to ensure security best practices are followed during system and software development.
• Providing guidance and support to junior security operations engineers and other team members.
• Staying up-to-date with the latest security trends, threats, and technologies, and making recommendations for improvement.
• Participating in incident response and disaster recovery planning and testing.
• Collaborating with external vendors and partners to ensure the security of third-party systems and services.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or related field.
• Strong technical knowledge and experience in security operations, network and systems administration, and incident response
• Experience with programming languages (Rust is a plus), Embedded Systems, Hardware peripherals.
• Familiarity with Operating System Security (e.g. Linux, Windows).
• Excellent problem-solving and analytical skills.
• 6+ years of professional experience in hardware and firmware security.
• Chinese speaking to liaise with Chinese counterparts

Benefits

• Up to 20 days Annual Leave
• Shift Allowance
• Festive Gifts
• Overtime Meal and Transport Benefits
• Employee Growth Fund
• Group Insurance
• Regular Employee Bonding Events
• Attractive Annual Variable Bonus AND Quarterly Performance Incentives

Culture

• We foster our core values through active listening, caring, and supporting continuous improvement for all our staff members
• Experience the energetic working environment with multicultural staff members with varied skills and experiences

Reporting to the Team Lead of the Security Operations Center, the candidate will be responsible for monitoring and responding to any potential security related risk targeting the Group. It is essential for the candidate to have the background and knowledge to discuss incident response activities internally and support security incident investigations. This is a 24-by-7 shift work including graveyard shifts.

Principal Job Functions

1. Monitor developing cybersecurity events around the world, and escalate to L2 team if relevant events are observed
2. Performs monitoring, risk assessment and analysis on security tools such as Anomaly Detection systems, Firewalls, Antivirus systems, Proxy devices
3. Follow pre-defined actions to handle security alerts including escalating to L2 team and other support groups
4. Execute daily ad-hoc tasks or lead small projects as needed
5. Participate in daily and ad-hoc documentation related tasks
6. Create and maintain operational reports for Key Performance Indicators and weekly and Monthly Metrics
7. Perform assessment phase of Vulnerability & Threat Management process
8. Receive threat intelligence from feeds the Group subscribed to and update to Threat Intel knowledge base
9. Be ready to support any security incident response investigation in the Group regardless of location and environment
10. Work closely with Team Lead to review, provide feedback and take actions to improve the methodology use in the Security Operations
11. Responsible to ensure all tickets logged are closed correctly and timely
12. Ensure timely submission of routine reports on threats, vulnerabilities and incidents handled by the Security Operations Center
13. Keep the Security Operations Center runbooks and procedures updated


Recommended prerequisites:
1. 3+ years working in security operations, preferably with incident management experience
2. Experience in the Banking industry will be an advantage
3. Familiar with security products and network devices
4. Extensive technical experience with network security practices including Intranet, Extranet and Internet access
5. Technical experience with UNIX, AIX, Linux, Windows
6. Knowledge of TCP/IP, DNS, web, wireless security architectures and enterprise-grade security solutions
7. Knowledge of encryption and authentication methods such as 2FA, DES/AES/RSA, Digital Certificates, SSL/TLS, IPSec and development of DMZ’s
8. Knowledge of intrusion detection (deep TCP/IP knowledge, and cybersecurity), various operating systems (Windows/UNIX), and web technologies (especially internet security)
9. Able to read and understand packet level data, handle Network/Host Security products (NIDS/NIPS, firewalls, HIPS, AV, scanners, etc.) and understand security events from these tools
10. Able to perform vulnerability assessment and manage such tools/processes, as well as application penetration testing or forensic analysis fields
11. Certifications from EC-Council, GIAC, (ISC)² are preferred [CISSP, CEH, GCIA, CCNA].
12. People Skills:
i. Be performance oriented; always try to excel past achievements
ii. Able to work under pressure during critical situations
iii. Able to work in a collaborative manner with peers
13. Communication Skills:
i. Can communicate effectively with peers in discussions/meetComments for Vendors:This is a 24-by-7 shift work including graveyard shifts.

Primary Location: Singapore, Changi

Internal ref: 9188

Regards,

Lini

Recruitment Consultant

R22108463

• Collaborate closely with the technical manager or team lead to meet project SLA (Service Level Agreement) objectives.
• Responsible for the installation, configuration, and providing post-sale support for IT security solutions.

Requirements:

• Diploma and above.
• At least 2 years of experience in an IT security environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

• Salary Range: $2.4k - $2.8k
• Working Days: 4 days
• Working Hours: 12-hr rotating shift, 7.30am-7.30pm, 7.30pm-7.30am
• Location: Toh Guan Road

Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement:

• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

If you are interested to apply, kindly WhatsApp me your updated resume in DOC file and allow our Consultant to match you with our Clients.

Whatsapp: +65 8525 2419

Email: [email protected]

Tan Man Ee Reg No: R22108289

The Supreme Hr Advisory Pte Ltd EA No: 14C7279

Area Description
Google Cloud provides organizations with leading infrastructure, platform capabilities and industry solutions. We deliver enterprise-grade cloud solutions that leverage Google’s cutting-edge technology to help companies operate more efficiently and adapt to changing needs, giving customers a foundation for the future. Customers in more than 150 countries turn to Google Cloud as their trusted partner to solve their most critical business problems.

Role Description (About the job)
As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities
We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on Google Cloud. The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team.
● Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
● Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.
● Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
● Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
● Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.
● Stay connected with the latest security trends throughout various industry verticals.
● Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Minimum Qualifications (MQs)
● Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience.
● Coding experience in one or more general purpose languages.
● Experience managing customer projects to completion, working with engineering teams, sales and partners.
● Experience architecting, developing, or maintaining secure cloud solutions.
● Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications (PQs)
● At Least 7 years of security architecture and/or security engineering experience
● Hands on and deep knowledge of security principles.
● Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
● Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
● Strong practical experience securing Kubernetes and containerised workloads.

Cyber Security Roles in Singapore
Job Posting by Belle Lim, Section Manager at Hays Singapore
[email protected]

Cloud Security Engineer

Cyber Security jobs in Singapore
ACTIVELY HIRING NOW

Hi Everyone,

An established leading technology software company with strong APAC presence is looking for a Cloud Security Engineer to join them. This individual will be responsible for delivering and managing cloud security and endpoint security services. This position focuses on engineering secure methods of utilizing cloud infrastructure services and software to improve the overall security posture and enhance the security of cloud-based environment.

Your new role

· Protects system by defining access privileges, control structures, and resources.

· Safeguards information system assets by identifying and solving potential and actual security problems.

· Determines security violations and inefficiencies by conducting periodic audits.

· Consolidate root cause analysis of past pentest results.

· Upgrades system by implementing and maintaining security controls.

What you’ll need to succeed

· At least 3 years of experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector etc

· Hands-on experience with AWS, Kubernetes, and web application security

· Strong understanding of SSDLC and security frameworks.

· Knowledge in OWASP Security Standards.

· In-depth knowledge of architecture, engineering, and operations of at least one enterprise IDS/IPS/SIEM platform.

· Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security.

What you’ll get in return

· Attractive Career Development / Growth

· Attractive Remuneration Package

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to [email protected]. If this job isn't quite right for you but you are looking for a new position, please contact me for a confidential discussion on your career.

Apply now or refer a friend (Get rewarded with $200 CapitaStar Gift voucher upon a successful friend referral!)

At Hays, we value diversity and are passionate about placing people in a role where they can flourish and succeed. We actively encourage people from diverse backgrounds to apply.

EA License Number: 07C3924 l Registration Number: R21100438 l Company Registration ID No.: 200609504D

Vulnerability Assessment Security Engineer | $ 6500

The key responsibilities:

1. Review and Analyze test report provided by the Authority
2. Provide recommendations for vulnerability remediation
3. Work with technical teams to implement fixes and improvements
4. Conduct follow-up tests to verify remediation for closure
5. Update report with remediation and or waiver justification
6. Analyze periodic security alert updates and reply
7. Work with Vendor to conduct VAPT

We looking for candidate with knowledge on

1. Proficiency in vulnerability scanning tools such as Nessus
2. Familiarity with programming/scripting languages such as Python
3. Strong analytical skills to assess risks and vulnerabilities
4. Our project environment is using Windows and good if candidate has experience and independent.

Interested candidates, please send your CVs on [email protected]

Regret to inform that only shortlisted candidates will be notified.

CEI: R1988671

EA License: 14C7275

The job description is for a Security Operations Vice President within the Cybersecurity Insider Threat Content Engineering team at JPMorgan Chase. The role involves protecting the organization's digital assets and infrastructure, detecting and responding to threats, vulnerabilities, and security incidents, and collaborating with cross-functional teams to develop a unified approach to security. The candidate will need advanced analytical, technical, and problem-solving skills to promote operational excellence and devise innovative solutions to complex security challenges. They will also need to stay updated with industry best practices, policies, and procedures to maintain a secure digital environment and foster continuous improvement.

Job Responsibilities

• Execute and influence the design of comprehensive security strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets and infrastructure from cybersecurity threats

• Monitor and analyze complex data and systems proactively to identify indicators of vulnerabilities and compromises, utilizing advanced tools and techniques to detect anomalies and contribute to the development of strategies for security investigation, threat mitigation, and incident response

• Use effective communication skills to present findings and solutions for existing and emerging insider threats to senior leaders and stakeholders.

• Evaluate and enhance the organization's security posture by staying current with industry trends, emerging threats, and regulatory requirements, driving innovation and process improvements.

• Contribute to a great team and a winning culture through sharing of expertise and supporting growth opportunities for junior members of the team.

Required qualifications, capabilities, and skills

• Formal training or certification on cybersecurity concepts and 5+ years applied experience in cybersecurity operations, network security with a focus on threat detection, incident response, and security infrastructure management

• Bachelor's Degree in Computer Science or equivalent

• Demonstrated expertise in multiple security domains, including network security, malware analysis, threat hunting, and security architecture and design, with proficiency in using Security Information and Event Management (SIEM) tools and advanced analytics techniques

• Advanced knowledge of network and infrastructure configuration/security, including experience in designing and implementing security solutions for on-prem, cloud, or hybrid environments

• Possess excellent grasp of the Splunk SPL language – significant expertise in the development of efficient and effective Splunk searches, macros, dashboards and other knowledge objects and integrations with Splunk. Proven ability to create powerful, reliable, and efficient interactive dashboards in Splunk

• Possess excellent analytical and problem-solving skills with the ability to translate complex technical concepts into practical solutions based on risk assessment and risk appetite

• Possess excellent command of cybersecurity organization practices, insider threats, data loss prevention concepts, security incident triage, operations risk management principles and processes, architectural requirements, emerging threats and vulnerabilities, and incident response methodologies

• Possess excellent verbal and written communication skills with the ability to communicate complex technical concepts, recommendations and solutions to senior leadership and key stakeholders

Preferred qualifications, capabilities, and skills

• Possess recognized industry certifications (such as CISSP, CISM, CISA, CCSP, CSX-S, CSX-E)

• Previous cybersecurity operations experience within a large multi-national financial services organization is preferred

• Experience with Security Orchestration, Automation and Response (SOAR), Endpoint Detection & Response (EDR) or other tools used for security monitoring, detection, and response

• Experience with agile methodology and the ability to work with at least one of the common frameworks with knowledge of tools like Confluence, JIRA and ServiceNow

• Knowledge of scripting skills such as Python, PowerShell, etc

• Possess a good understanding of national and international laws, regulations, policies, and ethics related to financial industry cybersecurity and foundational knowledge of computer forensics; legal, government and jurisprudence as they relate to cybersecurity; operating systems; and methods for intelligence gathering and sharing

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=c9ffa9a60e5dd6dddc68f06ed9889339

We are seeking a proactive and experienced Vulnerability Assessment & Penetration Testing (VAPT) Engineer to join our security team. The ideal candidate will have a strong technical background, excellent problem-solving skills, and a deep understanding of vulnerability management processes. You will play a critical role in helping to ensure the security of our systems and applications by working closely with internal teams and external vendors to address vulnerabilities and implement solutions.

Key Responsibilities:

• Review and analyze vulnerability assessment and penetration testing (VAPT) reports provided by external parties.
• Provide detailed recommendations for remediation of identified vulnerabilities and work with technical teams to implement the necessary fixes.
• Conduct follow-up testing to validate remediation efforts and confirm closure of identified vulnerabilities.
• Maintain accurate and up-to-date documentation, including reports on remediation actions and any waiver justifications.
• Monitor and analyze security alerts, providing timely and appropriate responses.
• Collaborate with external vendors to coordinate and execute VAPT activities as required.

Required Skills & Experience:

• Strong hands-on experience with security tools such as Nessus, Wireshark, and proficiency in Python scripting for security purposes.
• Excellent analytical skills to assess security risks and vulnerabilities effectively.
• Ability to communicate technical issues clearly and collaborate with technical teams to resolve security concerns.
• Experience working in a Windows environment with the capability to work independently and handle multiple tasks simultaneously.
• Prior experience in coordinating with third-party vendors to manage and conduct VAPT projects.
• Familiarity with industry best practices in vulnerability management and security assessments.

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Descriptions:

In this role, you will join a team of six members from Sopra Steria to support one of our government project. The scope of work includes:

1. Security Risk Assessment
2. Security Policies, Standards, Guidelines, And Procedures Review
3. Security Design
4. Application Security
5. Vulnerability assessment and
6. System Security Acceptance Testing

You will be an expert in the field of Cloud Security.

Responsibilities:

• Provide expertise in cloud security and be a trusted technical advisor and solve complex cloud security & compliance challenges.
• Design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment.
• Perform risk assessment for Cloud Computing Environment and Service
• Hands on and deep knowledge of security principles.
• Experience managing customer projects to completion, working with engineering teams, sales and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.

Requirements:

• Minimum of 3 years of experience in Cloud Security (AWS will be highly advantageous)
• Strong understanding of security frameworks
• Fluent in spoken and written English
• Ability to work closely with international team in a professional manner
• Excellent verbal and written communication skills, including ability to solve complex technical situation and explain it clearly
• Relevant certifications, such as AWS Certified Security – Specialty (SCS-C01), Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), are a plus.

Benefits:

• Regular team buildings
• 18 leave days / year
• Health, Dental and Optical Insurance
• Annual bonus
• Working hours: from 8:30am to 6pm, Monday to Friday
• Trainings and certifications bonus

Job Description

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors, client & authorities from inception to completion of projects
• Responsible for timely submission of design, plans and reports
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in Electrical/ Mechanical Engineering or relevant engineering recognized by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM etc
• Candidates with experiences in design of integrated electronic security systems (CCTV, access control system, intrusion detection system etc) or experience with a security specialist contractor / integrator would be advantageous
• Candidates with understanding of latest electronic security technologies would be advantageous
• Candidates with experiences in crash protection measures would be advantageous
• Critical thinking skill, good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges
• Candidates with more than 4 years of relevant experience would be considered for Senior Engineer position

Role Overview

Security SME(Subject Matter Expert) Engineer is responsible for designing, implementing, and managing security solutions to protect the company's information systems, networks, and data from potential threats and cyber-attacks.

The primary role is to provide expert guidance, support, and leadership in all matters related to security within an organization. This role will require strong analytical and collaboration skills, detailed working knowledge of current and emerging security technologies, as well as the ability to correlate events to identify abnormal behavior.

Responsibilities

• Serve as a SME for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Investigate any security incidents and provide insights to internal/external business users.
• Develop processes and procedures and fine-tune alerts as part of ongoing improvisation of security operations.
• Develop cloud/hybrid and cloud platform-specific security policies, standards, and procedures on cloud providers (Azure, AWS) and cloud-native platforms (PCF, Docker, Kubernetes, etc.).
• Identify and deliver appropriate cloud security controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business risk and cloud-native threats.
• Conduct integration of supported Cloud-based Security Products such as Web Application Firewall (WAF), Web Security Proxy, etc.
• Conduct detailed & comprehensive investigations and triage on a wide variety of security events.
• Recommend and implement remediation processes.
• Stay up-to-date with the latest security threats, vulnerabilities, and mitigation techniques.
• Collaborate with cross-functional teams to implement security measures and address security requirements.Communicate security risks, recommendations, and status updates to stakeholders, management, and team members.
• Identify opportunities to improve processes and/or tools to ensure the highest level of quality, including documentation, mentoring, and training sessions.
• Own the technical components of a customer integration project including but not limited to configuration, debugging, documentation, testing, and go-live support.
• Identify and mitigate potential security threats and vulnerabilities.
• Provide relevant recommendations to improve the overall security posture of customers.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Assist in any ad-hoc tasks when necessary.

Requirements:

• Over 5 years of experience in Information Security or engineering.
• At least 2 years of direct experience in one of the public cloud platforms, such as AWS or Azure with strong knowledge of their security features.
• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).
• Ability to identify and drive remediation of public and hybrid cloud risks.
• Experience in general security technologies, processes, and concepts.
• Experience with web security concepts and technologies such as web application firewalls, and proxy.
• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel.
• Working experience with common security operations systems, Intrusion Detection Systems(IDS/IPS), Security Incident Event Management systems(SIEM), anti-virus log collection systems, etc.
• Working knowledge of security systems and programs.
• Sound fundamental knowledge of Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10, and web servers (e.g. Apache, IIS, Nginx, etc.).
• Familiarity with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, and Open-source tools like Jenkins, DefectDojo, and OWASP Glue will be an added advantage.
• Strong analytical and problem-solving skills, with the ability to identify and address security risks and Vulnerabilities.
• Ability to analyze and develop innovative recommendations and solutions.
• Excellent verbal and written communication skills.
• Independent and results-oriented.
• Willing to work on a flexible schedule depending on business need.

Our client is a global law firm. The IS Security Engineer will oversee and manage the firm's security systems and practices in line with established policies and procedures.

Key Responsibilities:

• Review and analyse security system reports for suspicious activities and trends across various platforms.
• Configure and maintain security products, including firewalls, web proxies, and encryption systems.
• Respond to alerts and incidents as part of the Incident Response Team, minimising asset exposure.
• Troubleshoot IS security issues and collaborate with vendors for solutions.
• Conduct risk and security reviews of products as directed by management.
• Configure access control systems and assign user rights appropriately.
• Recommend security controls to align with the overall information security strategy.
• Monitor security metrics, manage patch status, and assess system vulnerabilities for remediation.

Requirements:

• Bachelor’s Degree in Information Technology or Information Systems.
• At least 2 years of relevant working experience in information security.
• Knowledge of Cisco networking, Active Directory, and NTFS necessary.
• Familiarity with security technologies, including firewalls, IDS/IPS, antivirus systems, and web filtering.
• Experience with encryption methods, patch management, vulnerability scanning, and forensic tools.
• CISSP or equivalent certifications will be a plus.
• Ability to participate in a 24/7 on-call rotation for security incidents and support.

If you have what it takes, please send your resume to [email protected] or click APPLY NOW.

Data provided is for recruitment purposes only. Regrettably, only shortlisted candidates will be notified.
Business Reg No : 200611680D | Licence No : 10C5117 | EA Reg No : R2199023

Responsibilities:

• Manage and oversee z/OS Unix (Mainframe Access Management operations and audits).
• Drive and operationalize z/OS initiatives such as MFA (Multi-Factor Authentication) and STIG (Security Technical Implementation Guide).
• Write scripts/JCL to automate tasks and improve processes.
• Manage identity and access management processes, standards, and procedures to ensure control effectiveness and service quality.

Requirements:

• Bachelor’s Degree in Information Technology or a related field.
• At least 3–4 years of experience in Mainframe Security (RACF) administration/operations.
• Solid understanding of zSecure Admin and zSecure Audit modules.
• Good working knowledge of the Access Management lifecycle and processes.
• Excellent stakeholder management skills.

Interested Applicants, please email your resume to [email protected] (R1441955), stating the position as the subject title in the email. All Applications will be handled with strict confidentiality.

Job Description Summary:

This offensive security engineer will lead and execute security engagements that combine both red team and purple team methodologies. Your role will involve designing and executing sophisticated cyberattacks, simulating advanced persistent threats and collaborating closely with the defense (blue) teams to improve detection, response, and overall security posture. You will work to challenge, assess, and enhance the organization’s security operations, ensuring that defenses are robust and responsive to current and evolving threats.

Job Description:

Key Responsibilities:

Red Team:

• Execute adversarial simulations mimicking real-world threat actors (APTs, insider threats, etc.).
• Research and simulate evolving cyber threats, vulnerabilities, and tactics, techniques, and procedures (TTPs) of adversaries.
• Develop custom scripts, tools, and payloads to bypass security controls and detection.
• Identify security weaknesses and vulnerabilities across systems, networks, and applications.
• Evade detection while conducting stealthy operations to assess the maturity of monitoring capabilities.

Purple Team:

• Collaborate with the blue team to optimize detection and response mechanisms.
• Facilitate knowledge sharing and training during real-time testing engagements, emphasizing skill development across red, blue, and purple teams.
• Test the effectiveness of existing security controls, offer insights for enhancement, and assist in adjusting strategies.
• Provide real-time attack/defense simulations to measure the accuracy and effectiveness of the blue team’s response.

Reporting and Documentation:

• Prepare detailed, actionable reports that communicate findings, risks, and remediation recommendations to both technical and non-technical stakeholders.
• Work with leadership to develop strategic security roadmaps based on testing results.

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience.
• 5+ years of experience in offensive security (Red Teaming, Penetration Testing, or related fields).
• Deep understanding of adversary tactics, techniques, and procedures (TTPs), such as those outlined by MITRE ATT&CK.
• Strong proficiency with offensive security tools (e.g., Cobalt Strike, Metasploit, Burp Suite, BloodHound, Mimikatz).
• Advanced experience in network and application penetration testing.
• Knowledge of both Windows and Linux operating systems, scripting (e.g., Python, PowerShell, Bash), and familiarity with cloud environments (AWS, Azure, GCP).
• Experience working collaboratively in a purple team environment with a focus on improving defensive capabilities.
• Strong analytical and problem-solving skills, with a proactive and collaborative mindset.
• Industry certifications such as OSCP, OSCE, CRTO, CRTP, CRTE, CEH, GPEN,GXPN or similar.

Preferred Qualifications:

• Experience conducting stealth red team engagements, including lateral movement, persistence, and data exfiltration.
• Proficiency in attack automation and tool development.
• Familiarity with blue team operations and defensive security technologies (SIEMs, EDR, IDS/IPS).
• Contributions to open-source security tools or published research on offensive security topics.

Job Description

1. Required to Carry out security governance and compliance checks and enforcement

2. Required to Communicate agency’s and Government’s policies and directives as required

3. Required to Conduct preliminary gap analysis on emerging policies such as IM8 new requirements and provide advice/assistance to project teams

4. Required to Perform incident reporting, incident investigating, and closure with all internal and external parties.

5. Required to Track and monitor incidents and work with project teams to ensure closure and timely reporting

6. Required to Facilitate and track closure of VDP, VA and PT reported findings

7. Required to Perform verification of scorecard submission and carry out reporting

8. Facilitate GOI/GSTI information dissemination, and perform tracking and reporting to Client on required polls

9. Assist project teams to identify ICT security risks and implement security measures and to meet compliance with MCCY and IM8 security policies

10. Assist in the dissemination of IT Advisory or security eDMs

11. Perform analysis of phishing recalcitrant and conduct training/briefing when required

12. Perform security briefings, DLP assessments to detect anomalies and to report to CIO/CDO, when required.

Job Description Summary:

As a Cyber Defense Engineer at PayPal's Cybersecurity Defense Center, you'll play a vital role in fortifying our security measures. You'll monitor and respond to security events, collaborating with cross-functional teams to provide valuable insights and guidance. Proactively hunting for threats, you'll identify vulnerabilities and mitigate risks. Your expertise will contribute to robust incident response capabilities and resilient architectures. Staying informed about emerging threats, you'll drive innovation in cyber defense techniques. By safeguarding our digital assets and users' data, you'll help maintain trust and enable secure online transactions.

Join our dynamic and highly skilled team at the PayPal Cybersecurity Defense Center. By We are seeking individuals who are passionate about cybersecurity and are eager to make a difference in protecting our systems and data. As a member of our team, you will have the opportunity to continuously enhance your skills through ongoing training and professional development. With access to cutting-edge technologies and resources, you will stay at the forefront of the ever-evolving cyber threat landscape. Your contributions will directly impact our ability to safeguard our infrastructure and ensure the privacy of our customers' information. Join us in our mission to create a secure digital environment and be part of a team that is committed to excellence in cyber defense. Together, we will defend against emerging threats and build a resilient security foundation.

Job Description:

Your way to impact

• Take ownership of enhancing our security posture and protecting our infrastructure, systems, and data from cyber threats.
• Provide guidance and recommendations to cross-functional teams, assisting them in implementing effective security measures.
• Collaborate closely with teams across the PayPal, ensuring seamless security experiences and operational efficiency.
• Drive continuous improvement in security operations by identifying opportunities for process optimization, automation, and integration of security technologies.
• Assume centralized ownership of key cybersecurity applications/tools, setting the vision and driving towards a best-in-class future state.
• Engage in incident response readiness exercises, conducting simulations and tabletop exercises to strengthen the PayPal's ability to respond swiftly and effectively to security incidents.
• Foster a culture of proactive security through knowledge sharing, training sessions, and promoting security awareness across the PayPal.

Your day to day

• Monitor security alerts and events from various sources and respond promptly to security incidents, following the established incident management plan.
• Collaborate with the security teams to conduct in-depth analysis of security events and incidents, utilizing advanced threat intelligence and security tools.
• Document and track security incidents, maintaining accurate incident records and providing regular updates to stakeholders.
• Build and nurture influential partnerships with key stakeholders, acting as a conduit between cybersecurity and cross-functional teams.
• Participate in tabletop exercises and simulations to enhance the PayPal's incident response preparedness and identify areas for improvement.
• Proactively review and refine the incident management plan based on emerging threats and evolving cybersecurity landscape.
• Stay updated on industry trends, best practices, and our business strategy to enable the achievement of cybersecurity objectives.

What you need to bring

• Demonstrate proven experience in security incident handling and security operations.
• Possess an in-depth understanding of network protocols, systems, and infrastructure security principles.
• Exhibit proficiency in analyzing business and employee needs, recommending, and designing end-to-end security solutions.
• Display strong incident management skills, effectively managing multiple incidents and driving results.
• Stay abreast of emerging threats, vulnerabilities, and attack techniques through continuous monitoring of threat intelligence sources and participation in security communities and forums.
• Participate in cross-functional security projects and initiatives, providing security expertise and guidance to ensure the secure implementation of new technologies and systems.
• Possess excellent communication skills to collaborate with cross-functional teams and convey complex security concepts effectively.

#NEW# Information Security Engineer - 12 months (Rolling)

Join Our Team of Security Experts!

We are seeking a skilled Information Security Engineer with fluency in Mandarin (spoken, written, and reading in both Simplified and Traditional Chinese) to support users primarily in Hong Kong and mainland China. This role requires effective communication with users who may not speak English, ensuring clear understanding and compliance with security measures. Experience working in a legal or law firm environment is a strong advantage.

Key Responsibilities:

• Monitor and analyze security reports, detecting suspicious activities and patterns.
• Configure and manage firewalls, web proxies, and data loss prevention systems.
• Respond to security incidents and collaborate with the Incident Response Team.
• Conduct security risk assessments and internal forensic investigations.
• Administer access control systems and recommend security improvements.
• Support troubleshooting and participate in IS security-related projects.
• Ensure compliance with security policies and address audit findings.

Qualifications:

• Fluency in Mandarin (spoken, written, and reading in both Simplified and Traditional Chinese) is essential for supporting non-English-speaking users.
• 2+ years of relevant experience in information security.
• Cisco routing and switching equipment
• Active Directory and NTFS
• Firewalls and Intrusion Detection/Prevention Systems (IDS/IPS)
• Antivirus solutions and management consoles
• Web filtering and proxy technologies
• Encryption (whole disk, email, and data at rest)
• Patch management systems (Microsoft SCCM and third-party solutions)
• Vulnerability scanners
• Forensic and penetration testing tools
• Data Loss Prevention (DLP)
• Email gateways and anti-spam services
• Mobile Device Management (MDM)
• Privileged account management systems
• Security Information and Event Management (SIEM) systems
• Two-factor authentication systems
• Cloud plat forms: AWS and Azure

KEY NOTE :Candidates must be willing to participate in a 24/7 on-call rotation to address critical security incidents.

Preferred Qualifications:

• Bachelor’s Degree in Information Technology or Computer Information Systems.

Experience working with leading security tools and platforms, such as:

• Palo Alto Networks Firewalls & Prisma Access
• Microsoft SCCM
• Tenable Vulnerability Scanner
• VMWare
• Cyberhaven Data Loss Prevention
• Proofpoint Email Gateway and Anti-Spam
• MobileIron
• Delina Secret Server
• Crowdstrike
• Exabeam Fusion SIEM
• Two-factor authentication technologies
• Additional security certifications are highly desirable.

If you are a experiened information security professional with expertise in both Simplified and Traditional Chinese and have experience in law firm environments, apply today to advance your career!

Please contact [email protected] for more information

Business Registration Number : 200611680D | Licence Number : 10C5117 | EA Registration Number : R1768258

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments and conformity assessments on Consumer, Industrial and Medical related products and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT/product-related technologies
• Cross-collaboration to ensure comprehensive service delivery.
• Develop and review documents according to guidelines and frameworks.
• Product knowledge and testing on any of the following requirements but not limited to:
• IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, etc.)
• OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
• Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.

We are seeking an experienced DLP Cloud Security Engineer to join our clients Cyber Security team on a 12-month contract. This role has a with potential for extension or conversion based on performance and business needs.

Overview:

As a DLP Cloud Security Engineer, you will play a critical role in designing, implementing, and maintaining robust DLP (Data Loss Prevention) security measures within cloud environments. Your primary responsibility will be safeguarding the organization’s digital assets and data through collaboration with cross-functional teams. You are required to handle AWS Incidents and Training.

Key Responsibilities:

• Develop and execute a comprehensive cloud DLP security strategy aligned with organizational goals and compliance requirements.
• Architect and design secure cloud solutions, focusing on network security, IAM (Identity and Access Management), encryption, and data protection.
• Continuously monitor cloud environments for security threats, vulnerabilities, and anomalies. Implement proactive measures to mitigate risks effectively.
• Ensure cloud security practices adhere to industry standards and regulatory compliance (e.g., GDPR, HIPAA, SOC 2).
• Establish reporting frameworks to track and communicate the execution of long-term security strategies.
• Collaborate with control owners to develop and maintain complete and repeatable control processes, including documentation and metrics.
• Prepare high-level presentations tailored for executive stakeholders.

Required Skills:

• Minimum of 5 years of experience in information security.
• At least recent 3 years focused and expertise on cloud security, specifically infrastructure platforms such as AWS and Azure, and common enterprise SaaS applications. Prior hands-on experience of cloud incident response is highly desirable.
• Exposure to security incident response, specifically incidents involving AWS and Azure cloud infrastructure is essential.
• Experience with developing performance baselines for DLP tools
• Proficiency in cloud platforms such as AWS, Azure, or Google Cloud, including knowledge of their security services and best practices.
• Strong understanding of security principles, protocols, and technologies, with expertise in areas like network security, DLP, and encryption.
• Exceptional analytical and problem-solving abilities, along with the ability to assess complex security risks and devise effective solutions (e.g., you should be comfortable working on problems that have a fair amount of ambiguity at the onset).
• Understanding of technical and organizational security vulnerabilities, threats, and risks
• Exceptional communication skills and the ability to explain yourself concisely and accurately.
• Ability to troubleshoot and solve complex problems rapidly.
• Certified Cloud Security Professional (CCSP) preferred or ability to obtain within 3 months.

Desired Skills:

• Experience operating and tuning DLP technologies
• Experience with CASB solutions, Microsoft Purview, Proofpoint, M365
• Cloud platform familiarity as it relates to DLP solutions (AWS, Azure)
• Operating Systems (Windows/Mac/Linux)
• Basic Networking - VPN, TCP/UDP protocols
• Basic Encryption - SSL, AES, IPsec, Key Management, Certificates
• Ancillary Services - DNS, Web Server, LDAP/AD, Database technologies
• Intermediate Level Scripting - e.g., Python, PowerShell

Argyll Scott Consulting Pte Ltd