Total 31 quality control engineer job vacancies in Legal / Public / Security category in woodlands tuas north west

Requirements

The role requires handling of measurement and detection equipment for military and homeland security. The ideal candidate should possess strong IT skills including, software installation and configuration. The resposibilities includes managing sales product inquiries, overseeing post-sales equipment delivery, performing regular maintenance, and conducting diagnostic analyses for troubleshooting and repair. A keen learning attitude and strong problem-solving ability are essential in this position. The candidate will also be expected to prepare basic reports. Effective communication and interpersonal skills will be important for maintaining and strengthening existing customer relations.

About GlobalFoundries
GlobalFoundries is a leading full-service semiconductor foundry providing a unique combination of design, development, and fabrication services to some of the world’s most inspired technology companies. With a global manufacturing footprint spanning three continents, GlobalFoundries makes possible the technologies and systems that transform industries and give customers the power to shape their markets. For more information, visit www.gf.com.

Job Scope

Protects Company's People, Assets, and Intellectual Property.
Typically performs one or more of the following in capacity of either an individual contributor (as directed and/or independently), or as a manager:
Develops and deploys Security Measures and Timely and Accurate Intelligence across APAC region.
Lead Security Risk Assessments Program in a complex semiconductor environment with many regional offices.
Empowers risk-based and collaborative decisions in support of current and future business opportunities and operations
Protects the organization's employees, properties and all items of value on premises from any preventable harm or danger
Develops security policies and procedures that comply with government guidelines and standards
Conducts investigations to protect organization assets
Responds to contingency events, including but not limited to bomb threats, sabotage and severe weather conditions through on-site security force or with the assistance of government law enforcement agencies
Manage security manpower services contracts, systems and control across APAC region.
Perform all activities in a safe and responsible manner and support all Environmental, Health, Safety & Security requirements and programs.
Must be able cohesively work and collaborate with internal and external shareholders on projects and or assignments as needed.
Exhibits leadership qualities that could include mentorship of junior colleagues as well as direct management of other Security Professionals
Mentor colleagues with guidance to support them in operational roles potentially including future management responsibilities within the Principal Engineer Position.
Implements best practices from local and global best Security practices through internal and external sources.
Utilize Security networking across the industry to implement best practices through technology improvements to bring GF Security to the leading edge of Semiconductor Foundries.
Uphold GlobalFoundries Integrity and Ethics standards in all actions and decisions
See description for career level for general proficiency levels pertaining to Job Complexity, Accountability, Relationship Focus, and Knowledge, Skills & Abilities. These proficiency levels apply to all career levels. Some requirements may vary locally.

Job Complexity
Shows mastery of many aspects within one technical discipline, with group-wide recognition as a senior member of a technical team.
Initiative and creativity result in significant changes to existing processes and methods, leads development and implementation.
Solves complex, novel and non-recurring problems.
Contributing inventor on a few patents
Contributes to conference or journal publications

Accountability
Works on small projects or on sets of tasks of large projects and assignments.
Trains and guides others in the own work area on technical skills as needed; ability to break down information for internal and external customers in a systematic and communicable manner.
Participates in and/or leads (project) teams

Relationship Focus
Limited and supervised contact at engineering level.
Maintains awareness of industry trends.
Actively engages with suppliers (demos, in-house work).
Attends consortia technical reviews.

Knowledge, Skills & Abilities
Specialized knowledge, imaginative thinking and sophisticated analytical techniques.
Requires a technical (University) degree.
BS + 4-5 years of experience or
MS + 2-4 years
PhD + 1-2 year

GlobalFoundries is an equal opportunity employer, cultivating a diverse and inclusive workforce. We believe having a multicultural workplace enhances productivity, efficiency and innovation whilst our employees feel truly respected, valued and heard.
As an affirmative employer, all qualified applicants are considered for employment regardless of age, ethnicity, marital status, citizenship, race, religion, political affiliation, gender, sexual orientation and medical and/or physical abilities.
All offers of employment with GlobalFoundries are conditioned upon the successful completion of background checks, medical screenings as applicable and subject to the respective local laws and regulations.

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security SIEM Use-Case Engineer to join our Cyber Intelligence and Response Centre (CIRC). This role is crucial for the engineering, development, and continuous improvement of threat detection use-cases within our SIEM . You will also be involved in the engineering and development of custom rules to detect potential threats swiftly and creating transparency to map existing detection capabilities to the MITRE ATT&CK framework.

Key Responsibilities:

• Proactively create, test, and tune new detection use-cases in the SIEM
• Review and enhance existing detection use-cases using Machine Learning or User & Entity Behaviour Analytics (UEBA).
• Map detection use-cases to the MITRE ATT&CK framework to assess SIEM monitoring coverage.
• Perform regularly updates to threat detection engineering playbooks, processes, and documentation.
• Collaborate closely with the SOC to challenge and improve detection and prevention capabilities.
• Identify and implement SIEM use-cases to address blind spots.
• Coordinate with the log onboarding team and SIEM architect to validate new log sources for compliance and improve SIEM backend performance.
• Collaboration with Service Operations team to address challenges, process fulfillment, documentations, and improvement of Service Operations Quality.
• Provide governance on topic which related to operational stability.

Join us to play a pivotal role in enhancing our cyber security measures and protecting our global operations.

QUALIFICATIONS

Specific Knowledge

• Intense knowledge in using Splunk Enterprise Security (ES)
• Intense knowledge in developing and tuning detection use-cases (Correlation Searches) in Splunk based on Data Models
• Experience in Machine Learning and Risk Based Monitoring in Splunk is an advantage
• Ability to analyse and interpret security logs and events to identify potential threats and attack patterns
• Experience in validating data source compliant using the common interface model (CIM)
• Experience of setting up and utilize data models in Splunk
• Deep understanding of cyber security concepts to create detection use-cases targeting various phases of attack lifecycle
• Understanding of MITRE ATT&CK framework and detections of various tactics and techniques
• Experience and capable of creating interactive dashboards, alerts, reports in Splunk

Experience

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• At least 3 years of experience with demonstrable skillsets in SIEM use-case engineering, with over 5 years of experience
  in cybersecurity
• Previous relevant experience working in a security operational role, ideally within a Corporate, Military, or Police environment; engaging with and responding to a diverse array of internal stakeholders, including senior management
• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision

This position is based in location Singapore. A valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. We regret to inform you that only shortlisted candidates will be notified.

Job Description

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors, client & authorities from inception to completion of projects
• Responsible for timely submission of design, plans and reports
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in Electrical/ Mechanical Engineering or relevant engineering recognized by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM etc
• Candidates with experiences in design of integrated electronic security systems (CCTV, access control system, intrusion detection system etc) or experience with a security specialist contractor / integrator would be advantageous
• Candidates with understanding of latest electronic security technologies would be advantageous
• Candidates with experiences in crash protection measures would be advantageous
• Critical thinking skill, good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges
• Candidates with more than 4 years of relevant experience would be considered for Senior Engineer position

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments and conformity assessments on Consumer, Industrial and Medical related products and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT/product-related technologies
• Cross-collaboration to ensure comprehensive service delivery.
• Develop and review documents according to guidelines and frameworks.
• Product knowledge and testing on any of the following requirements but not limited to:
• IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, etc.)
• OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
• Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.

As a Cyber Security Specialist at Jurong Port, you will be responsible for the daily administration and management of cyber security tools and systems. Your primary duties will include maintaining and optimizing security tools, monitoring system logs, conducting vulnerability assessments, and ensuring endpoint protection.

The Job:

• Oversee the daily operation and maintenance of security tools such as endpoint protection solutions, PAMS, WAF and vulnerability assessment tools.
• Review and investigate security logs from various systems and tools to identify and respond to potential security incidents and breaches.
• Conduct regular vulnerability assessments and penetration testing to identify and mitigate security weaknesses.
• Conduct cyber security training and exercise to test and improve staffs’ awareness and response
• Monitor and respond timely to security incidents and alerts, conducting thorough investigations and root cause analyses to minimize risk exposure.
• Work closely with IT and application team to ensure security compliance and best practices are integrated into all aspects of the organization's operations.
• Ensure regulatory compliance for cyber security matters.
• Develop and distribute security newsletters and advisories to educate staff on the latest security threats and best practices.
• Develop and maintain SOP documentation.
• Stay up to date with the latest security trends, threats, and technology solutions.

Job Requirement:

• Diploma or Degree in Computer Science, Information Technology, Cyber Security, or related field.
• At least 5 years of experience in cyber security or a related role.
• Minimum 2 years of experience in vendor management
• Strong knowledge of security principles, techniques, and technologies.
• Experience with security tools such as firewalls, endpoint protection, WAF, VA, SIEM and PAMS solutions.
• Good working knowledge of IT infrastructure (servers, networks, storages and endpoints).
• Relevant certifications such as CEH, CompTIA Security+, SSCP or any cyber security related certificate.

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Key Roles and Responsibilities:

• Ensures that email infrastructure at the client site is configured, installed, tested, and operational
• Performs necessary checks, apply monitoring tools and respond to alerts
• Identifies problems and errors prior to or when it occurs and logs all such incidents in a timely manner with the required level of detail
• Assists in analysing, assigning, and escalating support calls
• Investigates third line support calls assigned and identify the root cause of incidents and problems
• Reports and escalates issues to 3rd party vendors if necessary
• Provides continuous feedback to clients and affected parties and update all systems and/or portals as prescribed by NTT
• Proactively identifies opportunities for work optimization including opportunities for automation of work
• Coaches L2 teams for advance technical troubleshooting and behavioural skills
• May manage and implement projects within technology domain, delivering effectively and promptly per client agreed upon requirements and timelines
• May work on implementing and delivering Disaster Recovery functions and tests

Knowledge, Skills and Attributes:

• Hands on experience in managing enterprise email security solutions
• knowledge on Cisco email security solution - ESA (Email security appliance) , Threat Grid, Antimalware protection systems
• Ability to communicate and work across different cultures and social groups
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances
• Ability to maintain a positive outlook at work
• Ability to work well in a pressurized environment
• Ability to work hard and put in longer hours when it is necessary
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information,and refraining from interrupting
• Ability to adapt to changing circumstances
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey

Academic Qualifications and Certifications:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience)
• Certifications relevant to mail hygiene security such as Cisco email security or equivalent

Required Experience:

• Minimum 5 years IT experience with 2 years experience in supporting large scale email security environment.
• Seasoned working knowledge of ITIL processes
• Seasoned experience working with vendors and/or 3rd parties

When you’re part of the team at Thermo Fisher Scientific, you’ll do important work. Surrounded by collaborative colleagues, you’ll have the support and opportunities that only a global leader can give you. Our respected, growing organization has an outstanding strategy for the near term and beyond. Take your place on our strong team, and help us make significant contributions to the world.

The Sr Product Security Researcher, Product Security has global responsibility for the security associated with the company’s Product Security program. They will perform research, testing and validation of a product and its associated platforms, and guide integration of solutions within the overarching CIS program. This includes policy, security awareness & education, application and vulnerability assessments, technological security controls and risk evaluation. The solutioning activities must support relevant Thermo Fisher products (such as instruments, devices, equipment, and other electronic and/or connected devices) and infrastructure.

Key Responsibilities:

• Work closely with key product development leaders to ensure security is incorporated in all product offerings.
• Support efforts to inject security into all levels of the product development process.
• Drive secure development and integration of security features into all phases of product, firmware and software design and development.
• Lead programs to ensure continuous development and improvement of security integration into the product development lifecycle.
• Partner with architecture and development teams to develop shared security frameworks to enable consistent application of secure coding standard methodologies across the enterprise.
• Build working relationships with product development partners to maintain and improve product and application security processes.
• Assist to maturing process, policy, and standards guidance.
• Educate key partners on program, risks, and importance of security in our products and environment.
• Work with business units to identify, collect, call out, and close security vulnerabilities found in Thermo Fisher products and infrastructure; Leverage tools to deliver vulnerability information back to the development organization for remediation.
• Mentor others in what constitutes secure product activities.
• Perform research activities on existing and in development products and/or infrastructure to resolve security capabilities and discover unknown risks.
• Build testing approaches and perform testing activities on products and/or infrastructure to resolve vulnerabilities, validate remediation, and reduce overall risk profiles.
• Proactively ensure that applicable regulatory mandates are addressed with appropriate controls.
• Coordinate/participate in and perform design reviews, peer reviews, and code reviews.
• Ensure excellent consistency, documentation, and process across all programs.
• Coordinate with security risk assessments for new and existing products through the risk assessment team.
• Collaborate with other groups (e.g., Risk Management, Internal Audit, HR, Legal, etc.) to direct compliance issues to appropriate existing channels for investigation and resolution.
• Creation of product whitepapers throughout the product lifecycle.
• Creation of security bulletins to address new or evolving threats to products and infrastructure.
• Travel up to 25% and on-call/after hours duties may be required.
• 
  

Minimum Requirements/Qualifications:

• Deep knowledge of IoT and digital device research methods, variables and parameters including analysis, testing and documentation.
• Deep understanding of cryptography, authentication, authorization, network security protocols, and application security.
• Solid understanding of how to connect new and changing threats to IoT portfolio to build mitigating or compensating activities.
• Strong exposure to popular application security standards including OWASP TOP 10, CSC 20 etc.
• Bachelor’s Degree in Information Assurance, Information Security, Management Information Systems, Risk Management, or Computer Science (Master’s Degree a plus) or equivalent field experience.
• Relevant technical certificates a plus (OSCP, SANS, GIAC, etc).
• 5+ years of related work experience with security consulting, product security, secure software development, risk assessment, and/or vulnerability management.
• Solid interpersonal and documentation skills are a must.
• Ability to explain and promote technical concepts.
• Solid attention to detail, organizational skills.
• Strong customer service skills required.
• Excellent verbal and written communication skills and the ability to communicate professionally with a diverse group, executives, managers, and domain experts.
• The ideal candidate will have hands on experience in one or more of the following areas: Hardware System Integration, Signal and Power Integrity, RF Systems, Wi-Fi, Bluetooth, Wireless Communications, TCP/IP, Network and Application Penetration Testing.

Benefits

We offer competitive remuneration, annual incentive plan bonus, healthcare, and a range of employee benefits. Thermo Fisher Scientific offers employment with an innovative, forward-thinking organization, and outstanding career and development prospects. We offer an exciting company culture that stands for integrity, intensity, involvement, and innovation!

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust as a global technology, defence and engineering group, spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Collaboration is key to our success. We prioritize open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructure, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

Job Description

• Best to have formal experience in pre-sales, post sales, delivery team and highly familiar in the project methodologies such as Planning, Design, and relevant Technologies in order to develop proposal for the tenders/bids.
• Experience in overall design for network and security solutions
• Propose technical solutions and oversee the selection of technologies and work with subject matter partners to develop the proposed solutions to meet customer’s requirements.
• Propose technical solutions and oversee the selection of technologies and work with subject matter partners to develop the proposed solutions to meet customer’s requirements.
• Articulate alternatives in terms of cost, benefit and risk where multiple solutions exist.
• Actively participate in identifying opportunities, generate proposals, and support sales efforts
• Increase organization effectiveness by identifying opportunities to leverage solutions to other engagements
• Take ownership and responsibility for customers’ risks and issues.

Requirement

• At least 3 – 5 years of working experience with in-depth knowledge of pre-sales solutioning and is in abreast with evolving technology capabilities
• Possess in-depth knowledge of current technologies, tools, methodologies and industry trends, Government guidelines
• Strong problem resolution, judgment and decision making skills
• Fosters proactive and cooperative relationships within own team and other individuals/groups that interface with the team.
• Excellent interpersonal and group dynamic skills.
• Highly developed analytical and problem solving skills.
• Ability to deal with the ambiguity associated with working in a fast paced and changing environment
• Any other ad-hoc duties as required or assigned
• Possess relevant professional certification like CISSP, CCIE would be an added advantage
• Familiar with regularity compliance like IM8, AIAS, CSA Security by Design, MAS TRM
• Work Location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

• Participate in projects for customers as a Lead Evaluator.
• Evaluate payment related products for different customers with in-depth understanding of the total field of EMVCo/Visa/Master and the causes of security demands in evaluation methods.
• Responsible for the technical and/or methodological quality of projects.
• Represent the company in the field of EMVCo/Visa/Master to customers and during conferences and events.
• Actively involved in defining internal R&D programs and take an active role in supporting the acquisition of projects.
• Guide other colleagues in their development and communication to customers.
• Any other adhoc duties as assigned

Job Responsibilities:

· Drive the fortification and optimization of the wallet security system, including but not limited to security policies, patching vulnerabilities, and monitoring unusual activities.

· Responsible for the daily operational maintenance of the wallet system, including but not limited to node deployment, on-chain data synchronization, and system backup, etc.

· Provide reasonable and effective suggestions for the existing wallet system framework, assist in upgrading the security organizational framework, participate in the design and implementation of security policies, to ensure the security of the exchange wallet system.

· Design and collaborate on the development of a security framework with rational security logic.

· Enrich and optimize existing rules, participate in the emergency response to daily security incidents, as well as the maintenance of security systems.

· Continuously track the latest technologies and threats in the field of blockchain and digital asset security, providing professional advice and guidance to the team.

· Proactively identify and resolve potential system risks, improving the overall security awareness and capabilities of the team.

Qualification Requirements:

· Have a sense of infrastructure security, familiar with common security vulnerabilities and attack methods.

· Capable of independently developing, writing, and maintaining a security framework.

· Familiar with common Linux commands and tools, penetration testing processes and tools.

· Familiar with security risk management, security node upgrades.

· Familiar with WEB3 development technology, with priority given to those who have experience in Solidity smart contract development.

· Have a deep understanding of blockchain technology and digital assets, familiar with the application skills of common scenarios on the chain.

· Good communication and written expression abilities, able to effectively communicate and cooperate with colleagues in different positions.

Bonus Points:

· Experience in security framework design.

· Experience in handling security incidents & offensive and defensive real-world experiences.

· Priority given to those with practical project or tool development experience.

As an Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities:

• Perform cybersecurity assessments on Consumer, Industrial and Medical related products and systems.
• Evaluate and perform attack surface analysis on IoT products and respective network and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems.
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT technologies
• Collaboration across various teams to ensure comprehensive service delivery.
• Product conformity testing on any of the following requirements but not limited to:

1. IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, IMDA TS RG-SEC, etc.)
2. OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
3. Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc.)

Key Requirements:

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.
• On the job training will be provided as required

Roles & Responsibilities：

• Site Leadership Teams Serve as a knowledgeable resource to the Site Leadership Teams (SLT’s) providing support and direction pertaining to IT-OT Foundational Infrastructure and ICS Security.

• Work with the ICS Security Team, OT admin to implement and support an IT-OT Foundational Infrastructure, integrated with Manufacturing Application Services

• Monitor Vulnerabilities and work with OT Admin / Asset Leaders to mitigate potential impacts and take corrective actions

• Improve the ability to resist, detect, respond to, and contain cyber attacks

• Work with technical resources, architects to plan and implement cyber security activities appropriate for all Purdue Levels (PCN Core, PCN DMZ, and PCN Services, PCN Access, within the Manufacturing Site)

• Perform compliance audits of security policies, standards, processes, procedures, guidelines and regulatory requirements

• Assist in IT/OT security and network setup and implementation

• Network Infrastructure and Firewall Services Support

• Provide Network Infrastructure and Firewall Services Support Provide

• Incident Management and Response

Competencies Required：

• Demonstrated ability to serve as a knowledgeable resource to the Site Leadership Team (SLT) providing support and direction

• Evidence of the ability to practice a high level of confidentiality

• Excellent organizational management skills

• Ability to work effectively across a diverse technical team

• Self-motivated requiring minimal supervision

• Demonstrated ability to work in a fast pace environment with many changes

• Effectively prioritize resources against workload demand

• Bachelor’s degree in a technical discipline (or equivalent work experience) : process control, automation; process safety;

• Minimum of 5 years experience in IT or OT within Manufacturing Industry

• Outstanding interpersonal relationship building and employee coaching and development skills

• Excellent written and spoken communication skills

• Knowledge of the functions, operation and mission of Manufacturing Operations

• Process Automation / Control Background in the Chemical Area

• Fundamental knowledge of various industrial network solution providers to include Cisco, Fortinet, Palo Alto, Tofino, Hirschman, Nozomi, Claroty, CyberX, and Armis.

• Fundamental knowledge of various technologies and their integration into an ICS enterprise

• Experience with multiple operational technologies such as Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) software, Distributed Control Systems (DCS), and Safety Instrumented Systems (SIS).

• Knowledge about functional Safety

• Knowledge in Remote Access, Remote Operation

Responsibilities:

• Responsible for the installation and proper maintenance of security equipment and systems such as CCTV cameras, monitors and recorders, intruder alarms, motion detectors, glass break sensors, access control readers and controllers, public address system, fire alarm system etc.
• Conduct regular security system reviews and initiate improvements plans.
• Perform security risk assessments, security audits and support during customer audits.
• Conduct security incidents investigations and follow up closely on corrective actions and recommendations.
• Develop security system instructions, policy, and procedures necessary to meet customer and regulatory requirements.

Requirements:

• Diploma or Degree in engineering related discipline.
• Minimum 5 years relevant work experience in security industry, preferably in manufacturing environment.
• Preferably with working experience in security systems installation and maintenance.
• Adaptable and detailed-oriented with good interpersonal and communication skills.

Cloud Security Engineer is responsible:

• • Design, implement, and manage security measures for cloud environments.
• • Conduct regular security assessments and audits of cloud infrastructure.
• • Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• • Monitor and respond to security incidents, ensuring timely resolution.
• • Implement and maintain access controls, encryption, and other security features.
• • Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• • Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• • Bachelor’s degree in Computer Science, Information Security, or related field.
• • Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• • Excellent communication skills and the ability to collaborate with diverse teams.
• • Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• • Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• • Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• • Good knowledge in security
• • Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• • Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• • Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Cloud Security Engineer is responsible:

• • Design, implement, and manage security measures for cloud environments.
• • Conduct regular security assessments and audits of cloud infrastructure.
• • Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• • Monitor and respond to security incidents, ensuring timely resolution.
• • Implement and maintain access controls, encryption, and other security features.
• • Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• • Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• • Bachelor’s degree in Computer Science, Information Security, or related field.
• • Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• • Excellent communication skills and the ability to collaborate with diverse teams.
• • Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• • Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• • Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• • Good knowledge in security
• • Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• • Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• • Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

• Design, analysis and plan for Structural engineering works
• Design, analysis and plan for the protection of building and infrastructure from explosion and dynamic effects (e.g. blast loading)
• Liaise with other consultants, contractors & authorities from inception to completion of projects
• Responsible for timely submission of plans and reports to authorities and clients
• Manage projects to meet the time, cost and quality objectives
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in Civil & Structural Engineering or equivalent recognized by the Professional Engineers Board
• Candidates with knowledge of design and analysis of structures under dynamic loading, e.g. blast, shock and vibration would be advantageous
• Knowledge of Finite Element Modelling is an advantage

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors & authorities from inception to completion of projects
• Responsible for timely submission of plans and reports to authorities and clients
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in an engineering discipline, preferably recognised by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM
• Good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges

• Design, analysis and plan for security system engineering works
• Liaise with other consultants, contractors & authorities from inception to completion of projects
• Responsible for timely submission of plans and reports to authorities and clients
• Manage projects to meet the time, cost and quality objectives
• Prepare tender specifications and drawings for tendering of construction contracts, including evaluating of tender submissions and make appropriate recommendations to clients
• Coordinate and monitor work progress at site including periodical site inspection and attending meetings during course of construction of projects

Requirements:

• At least a good degree in an engineering discipline, preferably recognised by the Professional Engineers Board
• Proficiency in Engineering software such as AutoCad, BIM
• Good communication skills and the ability to work in a team
• Self-motivated, innovative thinker and willing to take on new challenges

Mandatory Skills

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Mandatory Skills

Job Summary:

Seeking a highly skilled and experienced z/OS Systems Programmer to be responsible for providing technical support for IBM's z/OS operating system, RACF, zSecure, MFA and subsystems including JES2, and USS.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous