Total 9 sales specialist job vacancies in Legal / Public / Security category in d22 jurong jurong island tuas

The Mercedes-Benz Group AG CISO heads Mercedes-Benz Global Cyber Security Department (based in Stuttgart, Germany). We are looking for an Offensive Cyber Security Specialist to join our Global Cyber Security Team. This role focuses on enhancing and implementing our global vulnerability management process to protect our customers from malicious attacks.

As part of our team, you will support and improve vulnerability management across on-premises and cloud environments for Mercedes-Benz Group AG in the APAC and Greater China regions. Your responsibilities will include working on technical topics such as the Vulnerability Disclosure Program, validating proof-of-concepts, and ensuring timely remediation of identified vulnerabilities.

You will also explore new technologies and processes to strengthen the organization’s security posture through innovative vulnerability research and detection. This role is crucial in maintaining a secure and resilient environment by proactively identifying, assessing, and mitigating security risks while collaborating with global teams to drive continuous improvement in cybersecurity practices.

Role and Responsibilities

• Analysing, triaging and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information
• Collaborate on and enforce the implementation of the global Mercedes-Benz Vulnerability Management strategy
• Acting as a point of contact for APAC region for questions regarding different stages of the Vulnerability Management lifecycle, including vulnerability scanning and penetration testing
• Rate new technical vulnerabilities according to their business impact and prioritize remediation activities
• Support application and infrastructure teams on the vulnerability remediation process
• Perform vulnerability scans in the company’s internal networks
• Analyze, rate and confirm vulnerabilities reported by external researchers
• Provide duty analyst support for the Vulnerability Management operations during weekends, utilizing a pre-defined duty roaster.
• Provide project coordination support to assigned projects by the Head of Global Offensive operations towards the roll out, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.
• Provide technical inputs towards the virtual teams as assigned by the Head of Global Offensive operations towards the operational directions, method determination and other related administrative support required from time to time.
• Coordinate Enhanced Proactive Analysis initiatives, as directed by the Head of Global Offensive Operations, to facilitate internal penetration testing of applications. Provide additional administrative support as needed to ensure smooth execution of related activities.
• Coordinate and support source code analysis initiatives, as directed by the Head of Global Offensive Operations, to ensure internal source code testing meets global security standards and is adequately hardened. Provide additional administrative support as needed to facilitate the seamless execution of these activities.

Qualifications

• Degree from a reputable university or significant course work in Computer Science, Information Technology or other IT-related fields of study.
• One or more of the following professional certification is beneficial: OSCP, OSCE, CREST, SANS GIAC Penetration Tester, Web Application Penetration Tester, Exploit Researcher, Advanced Penetration Tester or similar.
• 5+ years working experience in technical offensive cyber security related field in a corporate, military, or law enforcement environment.
• Honest, Professional, strong team influencer, able to proactively support team culture that fosters knowledge sharing, excellence and collaboration.
• Able to work under pressure, facilitate discussion, decision-making, and conflict resolution.
• Excellent communicator, able to engage and effectively respond to diverse stakeholders
• Fluency in the English Language
• Self-motivated with the ability to carry out assigned tasks with minimum supervision
• Proficient understanding of networking and network security technologies.
• Good understanding of Threat Intelligence utilization towards new Vulnerability Detection
• Excellent knowledge of cyber security standards, risks, threats, prevention measures and best practices
• Experiences in improving a vulnerability management process and/or a vulnerability-scanning concept.
• Hands-on experience with vulnerability scanning and management processes and tools (Qualys and ServiceNow Vulnerability Response).
• Experience with Vulnerability Management in cloud solutions.
• Experience with Vulnerability Management Lifecycle
• Good understanding of various operating systems
• Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills

This position is based in Singapore and a valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. Candidate may be offered a lower job level based on candidate’s experience. We regret to inform you that only shortlisted candidates will be notified.

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust as a global technology, defence and engineering group, spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Collaboration is key to our success. We prioritize open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructure, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

Job Description

• Best to have formal experience in pre-sales, post sales, delivery team and highly familiar in the project methodologies such as Planning, Design, and relevant Technologies in order to develop proposal for the tenders/bids.
• Experience in overall design for network and security solutions
• Propose technical solutions and oversee the selection of technologies and work with subject matter partners to develop the proposed solutions to meet customer’s requirements.
• Propose technical solutions and oversee the selection of technologies and work with subject matter partners to develop the proposed solutions to meet customer’s requirements.
• Articulate alternatives in terms of cost, benefit and risk where multiple solutions exist.
• Actively participate in identifying opportunities, generate proposals, and support sales efforts
• Increase organization effectiveness by identifying opportunities to leverage solutions to other engagements
• Take ownership and responsibility for customers’ risks and issues.

Requirement

• At least 3 – 5 years of working experience with in-depth knowledge of pre-sales solutioning and is in abreast with evolving technology capabilities
• Possess in-depth knowledge of current technologies, tools, methodologies and industry trends, Government guidelines
• Strong problem resolution, judgment and decision making skills
• Fosters proactive and cooperative relationships within own team and other individuals/groups that interface with the team.
• Excellent interpersonal and group dynamic skills.
• Highly developed analytical and problem solving skills.
• Ability to deal with the ambiguity associated with working in a fast paced and changing environment
• Any other ad-hoc duties as required or assigned
• Possess relevant professional certification like CISSP, CCIE would be an added advantage
• Familiar with regularity compliance like IM8, AIAS, CSA Security by Design, MAS TRM
• Work Location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Role Accountability

This role is responsible for supporting Lubrizol’s Information Security Training and Awareness initiatives to elevate the understanding and adoption of a security culture that reduces overall cyber risk to the organization. Participate in the development and delivery of training and educational materials, Lubrizol’s simulated phishing program, all while providing reporting of activity to stakeholders with a respectful understanding of Lubrizol’s multicultural, global background.

Essential Job Functions

• Support the Information Security Training and Awareness program initiatives, following our internal policies and procedures.
• Identify training needs among the various business units supporting Lubrizol and supporting the phishing simulation program as needed.
• Assist with tabulation and reporting of results of training and phishing activities, tracking activity status in a consistently manner.
• Provide a bridge of communication utilizing all channels available to achieve a positive behavioural change.
• Support the Security Ambassadors program across Lubrizol.
• Gain an understanding of the unique security awareness requirements of Lubrizol business and manufacturing environments and serve as their primary point of contact.
• Instil a security culture that reduces the possibility of information security incidents.
• Provide insight and recommendations as part of a global information security team.
• Other Information Security activities as needed.

Critical Competencies

• Dynamic, initiative-taker that applies their strong, people-centric cyber-risk background along with effective communication and training skills to significantly improve the cybersecurity culture.
• Demonstrated effectiveness of working independently, establishing priorities, and managing task completion.
• Organizational awareness with an understanding of how to engage with employees and contractors to achieve best results.
• A true collaborator with a strong internal customer service approach, able to effectively build relationships and work in a collaborative, global environment.
• Sound decision-making and initiative-taking/creative critical thinking skills.
• Strong people skills.
• Responsive to internal stakeholders.

Required Qualifications

Education / Certifications:

• Associate degree in information technology (IT) or equivalent business experience.
• SACP, CSAP certifications are a plus.

Experience:

• Minimum four (4) years of IT or relevant business experience, preferably working in a cybersecurity team.
• Understanding of cybersecurity, human, and IT risk concepts, along with industry standards.

Skills & Systems:

• Solid experience with Microsoft Windows-based operating systems and Office products.
• Understanding of information security concepts.
• Ability to resolve issues via research and investigation.
• Experience in documenting issues and solutions to assist end user understanding.
• Understanding of the manufacturing environment and its unique information security needs a plus.
• Non-English language proficiency a plus.

• Manage cloud and on-premises systems, including system security, monitoring tools, Google Workspace, websites, office automation systems, and databases. This involves daily operations, provisioning, and support.
• Provide Level 2 technical support, resolving issues through both on-site and remote troubleshooting methods.
• Manage vendors to ensure good quality service delivery on time and issues are resolved with agreed SLA
• Act as the primary point of contact for all matters related to systems and databases, including solution development.
• Research, evaluate and recommend hardware and software solutions, present evaluation comparison analysis to the management, prepare detailed plans and specifications for systems requirements.
• Oversee the lifecycle management of all system assets, including inventory tracking, technology refreshes, preventive maintenance, and disposal.
• Coordinate and schedule maintenance for compute and storage resources, communicating maintenance schedules and impact on system availability to users.
• Maintain comprehensive documentation of systems, including diagrams, technology stacks, contracts, subscriptions, and licenses.
• Collaborate with external contractors to ensure seamless delivery of systems and services.
• Conduct regular cybersecurity assessments to identify and mitigate risks, ensuring the security and integrity of all systems and data.
• Investigate and respond to cyber incidents in a timely and effective manner, following the incident response procedure
• Collaborate with other Group entities within the Cybersecurity team to enhance the overall security posture of the organization and group
• Demonstrate the ability to handle stress effectively, particularly in high-pressure situations.
• Document and update IT infrastructure, policies, and SOP documents. Involve in audits
• Conduct systems/user ID and access review and involve in audits.
• Perform additional IT-related tasks as assigned.

Requirements

• Diploma or Bachelor's degree in Computer Science or a related field.
• A minimum of 5 years of experience in IT.
• Certifications in MCSE or MCSA, with additional certifications in Google and Azure administration or similar.
• Proficiency in configuring and managing on-premises servers, storage, databases, and AWS resources.
• Skilled in configuring and managing document management and workflow systems.
• Proven ability in designing, implementing, and maintaining data backup and recovery systems.
• Knowledge or experience in network administration and Cyber security is preferred.
• Strong critical thinking, analytical abilities and ability to handle stress.
• Strong in vendor management and troubleshooting skills
• A fast and collaborative team player.
• Able to work and collaborate effectively with cross functional teams within the larger group.
• Strong verbal and written communication skills, capable of creating good quality training guides and videos, explaining IT architecture, drafting clear and precise IT announcement.

Your background

Skills:

· Experience in conducting vulnerability assessments, code reviews and penetration tests against web/mobile application technologies, services, platforms and languages to find flaws and exploits (e.g. SQL Injection, Cross-Site Scripting, Cross-Site Request Forgery, Remote Code Execution, Authentication/Authorization, Privilege Escalation, Business Logic Bypass, etc.)

· Experience in conducting Threat Modeling

· Knowledge of network and Web related protocols/technologies

· Experience with web application vulnerability scanning tools (e.g. IBM AppScan, NetSparker, Burp Suite Pro etc.)

· Experience with vulnerability assessment tools and penetration testing techniques (e.g. web application proxies, packet capture analysis software, browser extensions, advanced penetration testing Linux distributions, static source code analyzers, SoapUI etc.)

· Experience of penetration testing on mobile platforms such as iOS, Android, Windows and RIM.

· Solid programming/debugging skills with proficiency in one or more of the following: Java, JavaScript, HTML, XML, PHP, ASP.NET, AJAX, JSON, Objective-C

· Strong scripting skills (e.g. Python, Perl, Shell script, JavaScript)

· Mobile programming abilities such as Xcode, Objective-C

· Knowledge of a Structured Query Language

· Expert-level experience and very detailed technical knowledge in at least 3 of the following areas: general information security; security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks, single sign-on technologies; exploit automation platforms; RESTful web services

Competencies:

· The ability to work independently and as part of a team, in a very large scale, enterprise setting

· Previous experience as an application security professional with a large Financial Institution is a plus

· Intellectually Curious

· Consistently thinks like a threat actor

· Demonstrated ability to learn and apply critical thinking to a variety of situations

· Ability to clearly communicate (written & verbal) business risk associated with a given vulnerability

· Adaptable & Flexible approach to work

· Ability to demonstrate manual web application testing experience

Qualifications:

· BS/MS in Computer Science (or relevant work experience in a large scale IT environment)

· Additionally penetration testing specific qualifications would preferably include one or more from the following list:

o CREST Registered Penetration Testers (CRT)

o CREST Certified Web Application Tester

o Offensive Security Certified Professional (OSCP)

o Offensive Security Certified Expert (OSCE)

o Offensive Security Exploitation Expert (OSEE)

o Offensive Security Web Expert (OSWE)

o SANS GIAC Penetration Tester (GPEN)

o SANS GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)

o SANS GIAC Web Application Penetration Tester (GWAPT)

o Certified Ethical Hacker (CEH)

What you can expect

The Cyber Security Assurance (CSA) department is responsible for providing an uncompromised technology and application environment for employees, customers, clients, and shareholders through continuous comprehensive cyber security testing. CSA consists of multiple assessment teams that focuses on different technology, platform, and stakeholders.

As a Manual Ethical Hacking Specialist, you will join a dynamic team of world class security experts to conduct application security/penetration tests of our internal/external web, mobile and web service applications, leveraging both manual techniques as well as automated tools in order to uncover and report security vulnerabilities that exist.

You will be knowledgeable with business risks associated with common security vulnerabilities and be able to effectively communicate security vulnerabilities to application developers and/or senior managers who may have little to no experience with application security vulnerability specifics.

What you will do

Responsibilities include, but are not limited to:

· Understanding the requirements of the applications and how to use them

· Testing applications using a variety of tools to identify vulnerabilities that could expose the Bank to risk

· Monitoring existing and proposed security standard setting groups

· Conducting meetings to communicate the findings and implications to stakeholders

· Performing vulnerability fix verification testing in support of the remediation

· Providing technical support to clients, management and staff throughout risk assessments and the implementation of appropriate data security procedures and products

· Acting as a SME, providing guidance and knowledge to reduce the vulnerabilities and risk when apps are being created

· Sharing knowledge with technical and non-technical colleagues directly and through training sessions

· Ensuring identified risks are managed effectively

· Contributing to the development and enhancement of the control function

· Design and perform tests and check cases to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorization, and non-repudiation standards.

· Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

· Certify infrastructure components, systems and applications that meet security standards.

About Bank of America

Our purpose as a firm is to make financial lives better, through the power of every connection. Across the world, we partner with leading corporate and institutional investors through our offices in more than 35 countries. In the U.S. alone, we serve almost all of the Fortune 500 companies and approximately 67 million consumer and small-business clients. We provide a full suite of financial products and services, from banking and investments to asset and risk management. We cover a broad range of asset classes, making us a global leader in corporate and investment banking, sales and trading.

Connecting Asia Pacific to the world

Our Asia Pacific team is spread across 19 cities in 12 markets. We are focused on connecting Asia to the world and the world to Asia, using our global expertise to ensure success is shared between us, our clients and our communities. Our regional footprint covers 12 currencies, more than a dozen languages and five time zones, placing us firmly among the region’s leading financial services companies.

Responsibilities:

• Attend to feedback & complaint received from clients or any other stakeholders
• Liaise with client / consultants, contractor for the monitoring and closure of any complaints, feedback and defects
• General administration work (e.g documents filling, answering phone calls, attend to enquiries or other administative tasks as assigned by the Director /Managers
• Assist in adminstrative works across projects on hand e.g time attendance, leave matters
• Provide administrative support assistance and other ad-hoc adminstrative roles when required

Requirements:

• At least 2 years relevant working experience in related field and preferably in Construction Industry
• WSQ Service Excellence (Level 1) Certification or General Skills Competencies (GSC) preferred
• Good communication & interpersonal skills
• Ability to work well in a team
• Initiative and independent

Overview

This position is responsible for developing and executing a comprehensive PR strategy and plans that support the overall product marketing plans.

Roles & Responsibilities

• Work closely with Marketing, Sales teams, and the appointed PR agency to develop the overall PR strategy and plans for HMGICS products.
• Establish and maintain strong relationships with all media contacts, key opinion leaders, and key industry stakeholders.
• Plan and organize media engagement events, including product previews, launches, and showcases.
• Manage the development and distribution of press materials, including media releases, keynote speeches, product factsheets, etc.
• Actively pitch new story angles/media interviews to maximize product exposure.
• Manage the HMGICS Newsroom to ensure all product news and information (local/global) are updated in a timely manner.
• Oversee the overall management of media test drives and the test car fleet.
• Monitor industry trends and news, and conduct monthly media monitoring of HMGICS clippings.
• Serve as the key liaison for all product-related media inquiries.

Requirements

• Bachelor’s degree in Marketing, Mass Communication, or related disciplines
• Minimum 5 years of experience in Public Relations (preferably in the Automotive industry)
• Strong knowledge of traditional and digital PR techniques, including media relations, influencer marketing, and content creation
• Strategic thinker with a passion for the automotive industry and a proven track record of delivering successful PR campaigns
• Excellent written and verbal communication skills, with the ability to craft compelling messages and narratives

Job Responsibilites and Qualification:

· Participate in requirements gathering and use case development;

· Minimum of 3 years of experience working with SailPoint technologies (IdentityIQ), concepts and features;

· Develop technical project plans and aid in project resourcing;

· Develop and execute test cases and test plans for SailPoint solutions;

· Development background (i.e. JAVA);

· Ability to communicate with all levels of the organization in comprehensive manner (i.e. translate and present technical information to business);

· Experience with IdentityIQ Administration and Implementation;

· Develop or contribute to technical project plans with regular tracking and reporting;

· Front end tech: Angular.js is ideal;

· Bachelor’s Degree in Computer Science, Computer Engineering or a closely related field;

· Strong IAM domain knowledge;

· Strong working knowledge of Java and the ability to write scripts.

Job Responsibilites and Qualification:

· Participate in requirements gathering and use case development;

· Minimum of 3 years of experience working with SailPoint technologies (IdentityIQ), concepts and features;

· Develop technical project plans and aid in project resourcing;

· Develop and execute test cases and test plans for SailPoint solutions;

· Development background (i.e. JAVA);

· Ability to communicate with all levels of the organization in comprehensive manner (i.e. translate and present technical information to business);

· Experience with IdentityIQ Administration and Implementation;

· Develop or contribute to technical project plans with regular tracking and reporting;

· Front end tech: Angular.js is ideal;

· Bachelor’s Degree in Computer Science, Computer Engineering or a closely related field;

· Strong IAM domain knowledge;

· Strong working knowledge of Java and the ability to write scripts.