Join our security team and help secure our organization through maintaining, engineering, and deploying security solutions. We use industry-standard security tools, in an automated fashion, to ensure our security teams can operate effectively and provide security to the company.

Responsibilities:

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Roles & Responsibilities

Join our security team and help secure our organization through maintaining, engineering, and deploying security solutions. We use industry-standard security tools, in an automated fashion, to ensure our security teams can operate effectively and provide security to the company.

Responsibilities:

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Job Summary:

• Provide 1st and 2nd Level IT Support to end-users
• Manage IT assets through procurement, tracking, maintenance, refresh /renewal and disposal/ termination.
• Provide assistance in the implementation of new end-user computing technologies.

Job Scope:

• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Conduct security audits, compliance checks such as vulnerability assessments with risk analysis
• Development and enforcement of security policies, procedures and controls
• Integrate security measures into new and existing IT systems and applications.
• Ensure that applications are securely configured, including hardening default settings, securing APIs, and restricting file permissions.
• Conduct initial investigations of security violations/incidents, and escalate as necessary
• Collaborate with other IT teams to ensure security is integrated across all systems and processes.
• Stay updated on the latest security trends & technologies
• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Work with other contractors where required for delivery of network services
• Any other IT duties as assigned.

Special Aptitude And Knowledge

• Advanced technical knowledge of security technologies and systems.
• Expertise in firewall administration, encryption technologies, and network protocols.
• Experience in designing and implementing security architectures.
• Proficiency in vulnerability assessment tools and penetration testing methodologies.
• Able to communicate well, handle documentation and explaining network and IT architecture
• A great team player and able to work well with other team member

Qualification

• Recognized Degree in Information Technology, Computer/ Network Engineering or equivalent.
• Possess relevant certifications such as CISSP, CCSP, CEH, or advanced security certifications
• Minimum 5 years of experience in an equivalent role.
• Experience with a company that has achieved CyberTrust Mark certification or has actively worked towards it is a bonus.
• Familiarity with implementing security measures in the healthcare industry is also advantageous.

Cyber Security Engineer Job description

- To implement and deploy solutions like SIEM, EDR, and NMS:

o Splunk

o QRadar

o Carbon Black EDR

o SolarWinds NMS

o Other new onboarded products or solutions

- To manage and work/liaise with product vendors, partners, and customers in terms of schedule, expectation, and requirements

- To be able to research and stage test environment for project preparation

- To provide consistent and clear communication to external and internal stakeholders

- To provide informal training to partners and customers

Requirements:

- Diploma/Degree in Computer Engineering, Computer Science, Information Systems or equivalent

- Minimum 2 years of relevant work experience in IT security implementation and deployment

- Minimum 1 year of relevant work experience with relevant product deployment

- Good understanding of operating system technology, such as Unix, Linux, and Windows Server

- Good networking & scripting knowledge

- Technically inclined and hands-on

- Good interpersonal skills, independent, proactive and a team player

- Good communication, presentation, and writing skills

- Able to work independently

- Preferably from a System-Integrator or Distributor background

Job Summary:

• Provide 1st and 2nd Level IT Support to end-users
• Manage IT assets through procurement, tracking, maintenance, refresh /renewal and disposal/ termination.
• Provide assistance in the implementation of new end-user computing technologies.

Job Scope:

• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Conduct security audits, compliance checks such as vulnerability assessments with risk analysis
• Development and enforcement of security policies, procedures and controls
• Integrate security measures into new and existing IT systems and applications.
• Ensure that applications are securely configured, including hardening default settings, securing APIs, and restricting file permissions.
• Conduct initial investigations of security violations/incidents, and escalate as necessary
• Collaborate with other IT teams to ensure security is integrated across all systems and processes.
• Stay updated on the latest security trends & technologies
• Design, deploy, and manage security solutions such as firewalls, IDS/IPS, and encryption technologies.
• Work with other contractors where required for delivery of network services
• Any other IT duties as assigned.

Special Aptitude And Knowledge

• Advanced technical knowledge of security technologies and systems.
• Expertise in firewall administration, encryption technologies, and network protocols.
• Experience in designing and implementing security architectures.
• Proficiency in vulnerability assessment tools and penetration testing methodologies.
• Able to communicate well, handle documentation and explaining network and IT architecture
• A great team player and able to work well with other team member

Qualification

• Recognized Degree in Information Technology, Computer/ Network Engineering or equivalent.
• Possess relevant certifications such as CISSP, CCSP, CEH, or advanced security certifications
• Minimum 5 years of experience in an equivalent role.
• Experience with a company that has achieved CyberTrust Mark certification or has actively worked towards it is a bonus.
• Familiarity with implementing security measures in the healthcare industry is also advantageous.

Summary

The OT Cyber Security Engineers is working in billion-dollar scale projects to safely and securely deliver the Digitalisation Strategy for our FPSO Facilities. Digital innovation requires operational technology (OT) systems to interact more and more with information technology (IT) systems. With the convergence of OT and IT Systems and network components comes increased Cyber security threats requiring focused attention and management.

You will be focusing on implementing and maintaining a defence in depth security posture and securely connecting previously isolated Systems and Equipment within OT networks to the Enterprise IT environment.

Additionally, to the OT integration piece, you will assist with the development and sustainment of robust processes and methodologies for data handling, which in-turn assists the management of tactical and strategic interactions between Technology & Autonomy and other business units across the organization.

MODEC is a part of the Mitsui Group, with 5000+ employees from 25 countries. Following the successful launch of digital capability in Brazil (https://www.modec.com/news/2020/20200115_pr_MV29-Lighthouse.html), our Singapore office commenced building digital team and promote Digital Transformation in 2021. You will work in this new “start-up” team in the professional, multinational work environment.

Our Singapore office occupies the top floors of The Metropolis Tower building, which provides scenic views of the city, and is located right next to the Buona Vista MRT station.

Responsibilities In EPCI Project

• Advocate, integrate and improve on existing technology change management process.
• Focal Point for Project related OT Cyber Security matters
• Research, design, and implements cyber security solutions for OT systems and products
• Contribute to Project Cyber Security Detailed Risk Assessment/s
• Establish and define Cyber Security Requirement Specification/s for FPSO Project’s
• Provide Cyber Security and Network Engineering requirements to Contractors, Vendors and suppliers
• Review and verify Contractors/Vendors/Suppliers design and deliveries
• Assist with Scoping, Development and Management of OT projects.
• Assist with Hardware Lifecycle planning and standardization.
• Liaising with key stakeholders
• Participates in project design reviews to ensure consistency with required business outcomes.

In Digital & Analytics Department

• Contribute to relevant Company policies/strategies/philosophies
• Analyse Operation Technology (OT) and Information Technology (IT) networks for opportunities to improve integration, network architecture and security.
• Provide architectural advice and oversight and input into selected Operational Application implementation projects
• Design, document and deliver technical Cyber Security solutions for OT within company and client enterprise architectures.
• Communicate effectively with, and between the immediate team, business subject matter experts, developers, analysts, engineers, end users of systems and management.
• Assists in responding to audits, penetration tests and vulnerability assessments

Key Skills

Domain Expertise – can be flexible

• Broad understanding of Technology Infrastructure and Applications that support FPSO Operations.
• Excellent communication skills with a strong technology focus.
• Ability to understand complex and detailed business processes.
• Bachelor’s or Master’s degree in relevant field of Engineering (With a strong knowledge of Industrial Automation Systems and Operational Technology)
• Understanding of Cyber Security standards (IEC, ISO, NIST or equivalent). Certified competencies highly regarded.
• Understanding of Network design and infrastructure used in both OT and IT realms
• Understanding of Industrial Communications protocols
• Understanding of Operational Challenges for Integrating and managing OT systems
• Understanding of Virtualisation, Server equipment and SAN Solutions (either in Use, Management or Design)
• Strong knowledge of common vulnerabilities and exploitation techniques
• Technical knowledge in Industrial network security; For example, firewall configuration, network monitoring, intrusion detection, etc.
• Strong problem-solving and trouble-shooting skills
• Good knowledge of System’s Engineering approaches, tools and their application

Individual Skills

• Has the ability to interface with, and gain the respect of, stakeholders at all levels and roles in the company
• Is a confident, energetic self-starter, with strong interpersonal skills
• Has good judgment, a sense of urgency and has demonstrated commitment to high standards of ethics, regulatory compliance, customer service and business integrity
• Instinctive and creative
• Self-motivated and possessing of a high sense of urgency and personal integrity
• Highest ethical standards and values

Ref ID: JT

Position Summary:

Mainly supporting security aspect like firewall checkpoint, security appliances - configuration, troubleshooting, capacity planning. Supporting current operation and deployment of resiliency project.

Roles and Responsibilities:

• Directly reporting to Security Senior Manager
• Assist Architect team on new infrastructure design, implementation, and management of network solutions that form the core infrastructure, ensuring seamless integration across different platforms. This includes procurement of necessary equipment.
• To provide comprehensive product knowledge on the data technology required to deliver, support the networks infrastructure.
• Collaborate with the team to identify network and system needs, monitor performance metrics, troubleshoot, and resolve network-related issues, and implement improvements.
• Deliver project management for network activities encompassing upgrades, deployments, and migrations. Provide technical guidance and user support as required.
• Develop, maintain, and update documentation covering the network environment and operational procedures.
• Generate reports and detailed documentation outlining findings, implemented solutions, and recommendations for further enhancements.
• Oversee network environment to maximize performance, scalability, and minimize downtime.
• Closely coordinate and conform to Change Management policies, process, and procedures on any network changes.
• To implement approved changes, troubleshoot to identify root causes and implement effective solutions.
• Experience on Automating daily network tasks using scripting.
• Be available to provide on-call support as needed.

Qualification/ Requirements:

• Minimum Bachelor in Computer Engineering or equivalent
• Must equipped with CCNP or CCIE
• Network Infrastructure & Hardware: 5+ years experience managing large enterprise network with a strong focus on F5, Palo Alto, Cisco, and CheckPoint Technology.
• Network Devices: In-depth knowledge and proficiency with switches, firewalls, load balancers, routers, and ISE.
• Network Design & Troubleshooting: Expertise in designing, monitoring, and network & incident management (LAN, WAN, VPN).
• Experience with automation tools: Ansible, Python
• Experience with Deployment and automation, advantage to have experience building data center
• Proven track record of success in a fast-paced IT environment.
• Excellent communication and interpersonal skills, allowing you to effectively collaborate with both technical and non-technical stakeholders.
• Ability to work under pressure and delivery the project on time with minimum supervision.
• Certified and experienced with the mentioned technologies.
• 2 years contract

Role Summary

The role is responsible for delivering and managing cloud security and endpoint security services, assessing policies and rules, safeguarding SaaS applications, data and endpoints. You’ll collaborate with colleagues supporting network and architecture assessment, threat modeling, vulnerability assessment, and security operations. This position supports the Enterprise Security Transformation practice and is focused on engineering secure methods of utilizing cloud infrastructure services and software to improve the overall security posture. Cloud security engineers may instruct other teams on proper coding methods. They may also investigate, create, and recommend innovative technologies or other methods that will enhance the security of cloud-based environments.

Roles and Responsibilities

• Protects system by defining access privileges, control structures, and resources.
• Safeguards information system assets by identifying and solving potential and actual security problems.
• Recognizes problems by identifying abnormalities; reporting violations.
• Determines security violations and inefficiencies by conducting periodic audits.
• Consolidate root cause analysis of past pentest results.
• Upgrades system by implementing and maintaining security controls.
• Require periodic after-hours/weekend support.
• Any other duties assigned by the Team Lead/Solution Architect.

Job Requirements

• 3 years experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector, etc.
• Strong understanding of SSDLC and security frameworks.
• Knowledge in OWASP Security Standards.
• In-depth knowledge of architecture, engineering, and operations of at least one enterprise IDS/IPS/SIEM platform.
• Hands on experience with vulnerability scanning and pentesting tools.
• Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations.
• Experience with identity and access management architectures and solutions including AD, RBAC, SSO, identity lifecycle management.
• Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security
• Experience with Linux administration, shell scripting, and open-source security tools.
• Knowledge of security best practices in hardening and protecting cloud environments, networks, servers, endpoints, applications, and databases.
• Certifications in OSCP / CISSP / SANS / Other relevant security certifications.
• Excellent interpersonal skills, team player and independent worker.
• Ability to operate in a fast-paced work environment and deliver under pressure.
• AWS certification will be an added advantage.

IT SECURITY engineer

We are a leading Regional IT and Cyber Security system integrator headquartered in Singapore with a presence in Malaysia & the Philippines. We are hiring talented individuals with a positive attitude to join us. We run SOC, a cybersecurity consultancy, and other professional services to local and regional customers.

Primary Functions:

· Responsible for providing technical assistance and support related to computer systems, hardware, or software

· Responds to queries, run diagnostic programs, isolate the problem, and determines and implements a solution

· To ensure that clients get prompt and quality service

· To document troubleshooting and problem-resolution steps

· To participate and provide knowledge transfer to customers when necessary

· Professional services implementation including but not limited to Linux, Wintel Server, Networking, CyberSecurity project implementation

· Create training manuals, documentation, and knowledge transfer documents

· Install and modify computer & Infrastructure based on in-house best practices

· To implement security control on the system and network devices

· Follow up with customers to ensure the issue has been resolved

· Provide technical assistance and support for queries and issues related to computer systems, Local area network (LAN), Wide area network (WAN), and other hardware/software via phone, email, and/or onsite according to stipulated SLA

Requirements and Skills:

· Diploma holder in IT and other IT Security certifications will be a plus

· Minimum 1-year experience in IT

· Fresh graduates are welcome as we will provide relevant training

· A good understanding of IT network, data storage, network, Wintel Server

· Resourceful, creative, independent, and able to work well in a team

· Required to work on-site when necessary

· Taking ownership of technical issues and working with customers and partners to resolve more advanced issues when necessary.

· Good written and verbal skills; excellent phone and email manners.

· Understanding of TCP/IP, OSI Layer, network security, Internet, DNS, network routing, switching, SMTP email, Linux, and Microsoft Windows

Other Information:

· Office Location: 67 Ayer Rajah Crescent #02-10 S139950

· Working hours: Mon-Friday, 9 am-6 pm

· Depending on the season and customer request may require to work outside working hours

· Monthly basic salary commensurate with qualifications and experiences

· Other benefits such as annual leave, medical, insurance, training opportunities, regional exposures, etc

· Additional performance bonus based on individual contribution towards company strategy and its financial performance

Contact: [email protected]

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

• Develop low level design document for the project delivery detailing the scope with the sensible technology write up.
• Participate in Internal/Customer meetings to develop the LLD document.
• In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.
• Prepare UAT document and perform UAT as per document.
• Understanding of Windows Active Directory and Integration with NAC Solutions
• Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.
• Ability to deliver MFA Solutions for specific use case requirements.
• Assist in reviewing Technical Design Specifications (TDS) document for security projects
• Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

• Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).
• Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.
• Hands on experience Cisco FirePower NGIPS.
• Basic understanding of Networking – Routing and Switching Protocols.
• Ability to manage medium to large size project and ensure completion within the projected timeline.
• Build customer relationship to manage the projects in a congenial way.
• Team Player highly spirited, sharing project experience with peers.
• Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 1 to 4 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 4 to 5 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

About the Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role (Lead Security Engineer):

• We are seeking a lead security engineer who can drive security strategy and initiatives from 0 to 1. This could be across a wide range of domains covering identity, application security, cloud, DevSecOps, or detection engineering. We are open to security engineers with deep skills in one or more of these domains.
• You will have excellent stakeholder management skills, and are able to operate and influence across the business.
• You should be excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source and build tools that automate our security posture.

The day-to-day activities:

• Work with the wider security engineering team to take security requirements and build scalable applications and solutions that automate security and reduce the risk of the bank.
• Own the strategy for assigned security domains, consisting of tactical initiatives and strategic multi-year decisions.
• Partner with teams across the bank including SRE, Data Engineering, GenAI and Product to identify areas of security posture improvement, create the plan and execute.
• Maintain standards and procedures inline with regulatory and internal policy requirements.
• Lead engagements with internal and external audits that are applicable to first line technology.
• Mentor junior engineers to uplift their ability across security domains, increasing the teams knowledge and standard operating procedures.

The must-haves:

• Should have relevant experience of 8+ years within information security
• Experience with scripting/programming security automation.
• Knowledge of cloud platforms (AWS, Serverless, managed services, containers, etc)
• Excellent soft skills - able to handle pressure in a fast-paced environment. Open-minded, creative and innovative.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• In-depth knowledge of security frameworks, standards, and best practices.
• Proficiency in security technologies (e.g., SIEM, IDS/IPS, firewalls, endpoint protection).
• Strong understanding of network protocols, operating systems, and application security.
• Excellent problem-solving, analytical, and decision-making skills.
• Strong leadership, communication, and collaboration abilities.
• Ability to manage multiple projects and priorities in a fast-paced environment.

Position Summary:

Mainly supporting security aspect like firewall checkpoint, security appliances - configuration, troubleshooting, capacity planning. Supporting current operation and deployment of resiliency project.

Roles and Responsibilities:

• Directly reporting to Security Senior Manager
• Assist Architect team on new infrastructure design, implementation, and management of network solutions that form the core infrastructure, ensuring seamless integration across different platforms. This includes procurement of necessary equipment.
• To provide comprehensive product knowledge on the data technology required to deliver, support the networks infrastructure.
• Collaborate with the team to identify network and system needs, monitor performance metrics, troubleshoot, and resolve network-related issues, and implement improvements.
• Deliver project management for network activities encompassing upgrades, deployments, and migrations. Provide technical guidance and user support as required.
• Develop, maintain, and update documentation covering the network environment and operational procedures.
• Generate reports and detailed documentation outlining findings, implemented solutions, and recommendations for further enhancements.
• Oversee network environment to maximize performance, scalability, and minimize downtime.
• Closely coordinate and conform to Change Management policies, process, and procedures on any network changes.
• To implement approved changes, troubleshoot to identify root causes and implement effective solutions.
• Experience on Automating daily network tasks using scripting.
• Be available to provide on-call support as needed.

Qualification/ Requirements:

• Minimum Bachelor in Computer Engineering or equivalent
• Must equipped with CCNP or CCIE
• Network Infrastructure & Hardware: 5+ years experience managing large enterprise network with a strong focus on F5, Palo Alto, Cisco, and CheckPoint Technology.
• Network Devices: In-depth knowledge and proficiency with switches, firewalls, load balancers, routers, and ISE.
• Network Design & Troubleshooting: Expertise in designing, monitoring, and network & incident management (LAN, WAN, VPN).
• Experience with automation tools: Ansible, Python
• Experience with Deployment and automation, advantage to have experience building data center
• Proven track record of success in a fast-paced IT environment.
• Excellent communication and interpersonal skills, allowing you to effectively collaborate with both technical and non-technical stakeholders.
• Ability to work under pressure and delivery the project on time with minimum supervision.
• Certified and experienced with the mentioned technologies.
• 2 years contract

Test Engineering Services (TES) at Synapxe is embarking on a journey to constantly transform its services by exploiting state-of-the-art technologies and tools to enhance TES’ ability to offer specialized testing services to its stakeholders. TES is passionate about making an impact with lasting change and we aim to provide our stakeholders with automated and optimized testing solutions to not only help them speed-up testing but produce accurate, reliable, and repeatable results.

TES is planning to implement and roll out a Dynamic/Interactive Application Security Testing (D/IAST) solution. This will act as a control measure proposed for implementation in response to Secured-by-Design Framework v1.0 as recommended by CSA’s Cybersecurity Code of Practice (CCoP).

As an Application Security Testing Specialist, you will be responsible for:
• Leading the request for proposal from a technical perspective to procure a D/IAST solution.
• Defining and documenting technical product requirements and specifications for a D/IAST solutions, evaluating the solution proposals to perform fit/gap analysis, determining the detailed evaluation criteria and producing recommendations to prevent, detect and analyse security threats and weaknesses in the running application.
• Leading the implementation and roll out of the identified D/IAST solution; work with the senior manager and product vendor to plan, set-up, on-board, test and deploy the D/IAST solution.
• Automated application security using the D/IAST tool to perform application security testing, gather and understand reports, assess potential security vulnerabilities, work closely with the application developers/vendors to resolve any vulnerabilities, and present the risks to the business for acceptance or mitigation.
• Removing false positives from the reports and working closely with the development/test teams to automate test and embed security testing in the CI/CD pipe line.
• Developing comprehensive and accurate reports and presentations for both technical and management audiences and effectively communicating the findings and remediation strategies.
• Recognising and safely utilising attacker tools, tactics, and procedures
• Maintaining and performing routine maintenance on D/IAST monitoring servers, reports repository, agents, etc.

• 8 years of experience with SAST/DAST/IAST/RASP methodologies and technologies to catch security flaws in the software?
• Hands-on experience with a wide-range of security tools such as MF Fortify, WebInspect, Contrast Security Assess and Protect, IBM AppScan, Checkmarx, MS Threat Modeling, BurpSuite, etc.
• Eager to collectively learn, share and solve problems within the area of application security testing in the area of healthcare domain?
• Consistent attention to details and work under pressure to achieve agreed targets/goals
• Work with intra-teams, and building rapport with the stakeholders and be able to manage difficult people
• Think out of the box and carries the courage to try and implement unconventional approach to deliver solutions

Cloud Security Engineer

Responsibilities:

• Consult engineer on security requirements and utilize best practices to meet them
• Work with the Cloud Infrastructure and Platform teams to lead initiatives and develop and build security utilities and tools that will enable organisation to operate more securely
• Build threat detection for a hybrid infrastructure covering the overall technology stack that includes Application infrastructure, Containers, IoT infrastructure
• Contribute to and lead discussions and communications within the team and outside, including customers and other business units
• Translate Standards and Regulatory based controls to Engineers do they understand what needs to be done
• Build and maintain a robust infrastructure/platform security roadmap to meet customer demands and regulatory mandates
• Responding to customer-facing departments about EnOS Platform and Edge security posture
• Responding promptly and in detail to customer-sponsored penetration tests
• Develop, maintain, and promote standards through workshops, office hours, knowledge shares and brown-bags
• Promotes best practices and design patterns
• Onboard and development of Security Orchestration, Automation and Response system.

Qualifications & Experience:

• Bachelor Degree in Computer Engineering/ in STEM major in Science, Technology, Engineering or Maths)
• AZ-500 & AWS security certification will be a plus
• At least 5+ years of experience in security controls management aspects at Azure/AWS/Google cloud
• Strong knowledge of CI/CD and automation tools (Chef, Git, Jenkins) and Infrastructure as Code/Policy As code.
• Strong knowledge of Identity management and identity federation (SAML, Oauth)
• Strong knowledge of virtual infrastructure and containerization technologies
• Experience designing and implementing security controls in cloud platforms such as AWS, Azure and alike.
• Experience with the application of risk identification and evaluation techniques
• Experience with broad set of information security technologies and processes within a SaaS, IaaS, PaaS, or cloud environment
• Experience with at least one SIEM and SOAR platform – including on boarding of log sources and developing automation.

Regret to inform that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R1878287

Business Registration Number: 201735941W.

Licence Number: 18S9037

· Perform analysis, prioritization and classification of risk.

· Handle day-to-day security vulnerability assessments and operational request.

· Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.

· Proactive monitoring of remediation plans and progress.

· Schedule security checks in accordance with reporting schedules.

· Continuous enhancement of existing security vulnerability assessment process.

· Verifies security controls are implemented accordingly.

· Review security incident reports

· Evaluate the type and severity of security events

· Assist with establishing procedures for handling detected security events

· Create final incident report detailing the events of the incident

· Prepare periodic status reports for presentation to management

· At least 5 year working experience in vulnerability management and incident response.

· Familiar with at least one vulnerability scanner.

· Strong analytical skills and ability to work independently.

· Good team player as well as strong communications skills with stakeholders at all levels

· Possess QISP, CEH, CISSP and/or related security certification.

· Experience in healthcare industry is an added advantage.

· Degree in Computer Science, Engineering or equivalent.

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

We are currently looking for a Cyber Security Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and 2FA solutions.

Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies. And based out of our Singapore office, this role would be reporting to the Technical Manager (Cyber Security).

1.0 Job Responsibilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document

· Strong understanding with hands-on experience of multiple NAC solutions using Radius Protocol and device admin with Tacacs Protocol

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and tuning Firewall/IPS policies.

· Ability to deliver 2FA Solutions for specific use case requirements

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team

2.0 Required Qualifications:

Essential:

· Network Access Control (dot1x) experience of HPE ClearPass, Cisco ISE

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint

· Hands on experience Cisco FirePower NGIPS

· Basic understanding of Networking – Routing and Switching Protocols

· Ability to manage small scale project and ensure completion within the projected timeline

· Build Customer relationship to manage the projects in a congenial way

· Team Player highly spirited, sharing project experience with peers

· Able to learn and adopt new skills when projects warrant based on the relevant training provided

Desirable:

· Hands on experience RSA SecureID, Cisco DUO 2FA

· Hands on experience deploying in Cloud platform (i.e. AWS, Azure) is preferred

· Knowledge of CyberArk, WAF and Database Firewall is preferred

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document.

· In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.

· Prepare UAT document and perform UAT as per document.

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.

· Ability to deliver MFA Solutions for specific use case requirements.

· Assist in reviewing Technical Design Specifications (TDS) document for security projects

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

· Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.

· Hands on experience Cisco FirePower NGIPS.

· Basic understanding of Networking – Routing and Switching Protocols.

· Ability to manage medium to large size project and ensure completion within the projected timeline.

· Build customer relationship to manage the projects in a congenial way.

· Team Player highly spirited, sharing project experience with peers.

· Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Job Summary:

We are currently looking for a Cyber Security Lead Engineer who will support the School by managing and maintaining the Cyber Security, Azure Infrastructure and Microsoft 365. The appointee works with the Director of Technology & Senior Cyber Security Manager to ensure the IT requirements of the end user are met.

The role reports to the Senior Cyber Security Manager.

Requirements:

· Minimum Degree in Computer Science, Engineering or equivalent

· Minimum relevant experience of 3 years and above

· Excellent knowledge of Cyber Security, Azure and Microsoft 365

· Experience in Microsoft Intune, Microsoft Defenders and Microsoft Sentinel

· Experience in managing Azure Identities and MDM

· Able to work independently as well as a good team player with good initiative

· A positive approach to working with people

· Will accept late hours and weekend work for maintenance and patching

The school is committed to safeguarding and promoting the welfare of children and young people and expects all staff and volunteers to share this commitment. We will conduct thorough background checks on all successful applicants.

Please refer to “Careers” on our website at www.tts.edu.sg for a detailed job description.

5-day week – working hours are from 7.30 am to 4.30 pm (41.25 nett hours per week). Interested applicants, please submit an application letter and detailed resume, stating your current and expected salary, date of availability and contact number via the online system at https://careers.tts.edu.sg/careerportal/main.aspx. In your application, please provide the names and addresses of three people from whom confidential references may be obtained. Please indicate their professional relationship to you.

(Only shortlisted applicants will be notified)

CPE Registration No.: 196100114C | Period of Registration: 7 June 2023 to 6 June 2029

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Logicalis - A Great Place to Work

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document.

· In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.

· Prepare UAT document and perform UAT as per document.

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.

· Ability to deliver MFA Solutions for specific use case requirements.

· Assist in reviewing Technical Design Specifications (TDS) document for security projects

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

· Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.

· Hands on experience Cisco FirePower NGIPS.

· Basic understanding of Networking – Routing and Switching Protocols.

· Ability to manage medium to large size project and ensure completion within the projected timeline.

· Build customer relationship to manage the projects in a congenial way.

· Team Player highly spirited, sharing project experience with peers.

· Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Only for Singaporeans/PR's

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Job summary:

We are currently looking for a Cyber Security Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and 2FA solutions.

Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies. And based out of our Singapore office, this role would be reporting to the Technical Manager (Cyber Security).

1.0 Job Responsibilities:

· Develop low level design document for the project delivery detailing the scope with the sensible technology write up.

· Participate in Internal/Customer meetings to develop the LLD document

· Strong understanding with hands-on experience of multiple NAC solutions using Radius Protocol and device admin with Tacacs Protocol

· Understanding of Windows Active Directory and Integration with NAC Solutions

· Proficient with hands-on experience delivering Firewall migrations and tuning Firewall/IPS policies.

· Ability to deliver 2FA Solutions for specific use case requirements

· Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team

2.0 Required Qualifications:

Essential:

· Network Access Control (dot1x) experience of HPE ClearPass, Cisco ISE

· Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint

· Hands on experience Cisco FirePower NGIPS

· Basic understanding of Networking – Routing and Switching Protocols

· Ability to manage small scale project and ensure completion within the projected timeline

· Build Customer relationship to manage the projects in a congenial way

· Team Player highly spirited, sharing project experience with peers

· Able to learn and adopt new skills when projects warrant based on the relevant training provided

Desirable:

· Hands on experience RSA SecureID, Cisco DUO 2FA

· Hands on experience deploying in Cloud platform (i.e. AWS, Azure) is preferred

· Knowledge of CyberArk, WAF and Database Firewall is preferred

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Background

Thales people architect solutions that are relied upon to deliver operational advantage at every decisive moment throughout the mission. Defence and armed forces customers rely on us to deliver the full range of defensive systems for land, sea, and air. From early warning, to threat neutralisation, our platforms cover all levels from very short-range systems, to extended protection across the entire battle-space including Airspace Mobility Solutions, Vehicles and Tactical Systems and Missile Defence, Optronics, and Radar.

Air Mobility Solutions provides leading edge airspace control and security solutions for the commercial and defence sectors.

Thales's advanced LORADS air traffic management system ensures the safety of operators and passengers at a time when soaring growth in air traffic poses a range of complex technical challenges.

Technologies supplied by the Air Mobility Solutions global centre of excellence, based in Singapore, are currently deployed in Singapore and across Asia and the Pacific region.

Thales Australia's air traffic control systems are in use in over 50 countries including Australia, Mexico, South Africa, China, Singapore and Thailand.

Purpose:

The Cyber Security Engineering position is within Airspace Mobility Solutions in Singapore to contribute, but not limited to the LORADS and Topsky-ATC HE projects managed and supported from Singapore.

The position includes the following main responsibilities:

• To undertake security engineering and architecture activities as per budget and aligned with contract and strategy set by the System Cyber Security Engineering Lead.
• To define security solution and associated estimates for specific work packages and bids activities, for example in relation to Contract Change Proposal and Engineering Change Requests/Proposals.
• To provide technical leadership on security solution for the LORADS System and the impact on suppliers’ sub-systems and security components (e.g. other business lines).
• To define security solutions cooperatively with supplier solution teams, engineers and the cyber security design authority.
• To develop security engineering artefacts such as the statement of applicability to the targeted version of the applicable security standards, and other applicable CDRLs as directed by the lead cyber security engineer.
• To lead the vulnerability management service activities to Asian customers.
• To lead security audit and cyber health check service activities to Asian customers.
• To interface with other business lines (e.g. CDS) for the delivery of other cyber security services to Asian customers.
• Contribute to the security risk management by identifying and characterising security risk to the customer context.
• To contribute to customer meetings in relation to the cyber security tasks that you are implementing.
• To contribute to other security tasks from the AMS Business Line like for instance incident response and crisis exercises.
• To support other project or service initiatives when required.

KEY ACTIVITIES AND RESPONSIBILITIES

As the Cyber Security Engineer, you are accountable for:

• Lead, tailor, and support the Security strategy as per Engineering Plans.
• Plan, execute and manage the delivery and the Customer approval of Security deliverables;
• Plan, execute and manage the delivery of the security component with appropriate artefacts.
• Manage the technical risks relevant to Security activities to contribute to program risk management.
• Lead Security Architecture Design as per project needs.
• Lead the vulnerability management service activities to Asian customers.
• Lead security audit and cyber health check service activities to Asian customers.
• Contribute to the response of cyber incident and crisis events.
• Select, specify, and deploy methodologies (including metrics), tools/platforms necessary for Security Engineering activities in line with company policies.
• Manage and prioritize defects correction and evolutions in accordance with the project sprint strategy.
• Support Bids and Engineering Change Proposal evaluation;
• Providing collaborative support to the other members of the Project team.
• Support and contribute to the definition of the Security solution and Policies for the Products (Topsky-HE, Topsky-One, LORADS ATC).

Interactions:

• Works closely with the head Cyber Engineering Manager and the Cyber System team in country and Australia, the cyber sub-system team and solution engineering teams from the various sub-systems, including the legacy LORADS ATC and the future Topsky-One.
• Works closely with Cyber Head of Discipline, Security Authority and Solution Architects.
• Works with Subcontractors and suppliers to ensure they are aligned with the Security Program and comply with the defined security baseline.
• To establish trusted relationship with the Customers and Subcontractors (including CDS).
• Strong internal and external stakeholder management skills.

Challenges:

• Complex stakeholder community with different requirements and cultural approaches to the Delivery Process.
• High level of Customer and Senior Thales Management scrutiny and audit.
• Re-establishing a robust and rigorous discipline of weekly/monthly reporting and tracking of Project issues (cost/risk/schedule etc).
• Working in a multicultural and multisite environment.
• This position requires the capacity to understand and handle resistance to change, to engage cross functional, diverse stakeholders.

KEY KNOWLEDGE AND EXPERIENCE

To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:

• Experience in the life cycle of software/system development including processes and responsibilities at each stage of the cycle.
• Delivery of engineering/management services to tight timelines.
• Understanding of Security System Engineering processes and FBL/ABL/PBL management
• Working with a multi-skilled team of engineers: 2+ years
• Knowledge of Security Standards (NIST, ISO27001, Singapore security standards)
• Understanding of System accreditation and impact on project streams (sub-systems).
• Proven problem identification and analysis skills and system requirements analysis skills.
• Selecting, specifying and deploying methodologies including metrics, tools/platforms (e.g. DOORS).
• Producing appropriate artefacts leading to Customer acceptance and final accreditation.
• Contributing to Cost Models.
• Contributor to Risks & Opportunity management.
• Contribution to the management of subcontractors.
• Providing coaching/mentoring of less experienced staff.
• Challenge status-quo by being creative and innovative.
• Capability to delegate and supervise work performance.
• Excellent written and oral communications skills.
• Ability to manage Work Packages.

Roles & Responsibilities

• Manage communications and working relationships between IT and other departments within the organization as well as multiple outside IT service providers.
• Design, develop, implement, and coordinate policies and procedures for all areas of information technology to assure data accuracy, security, legal and regulatory compliance; assure compliance with Standard.
• Implement, maintain, and ensure maximum uptime for IT systems and user support.
• Hands-on experience on IT supports and Perform the hardware and software installation and maintenance.
• Support the IT infrastructure with a focus on Cloud server and in-house server in office.
• Maintain the telecommunication and data communication links, network routing and switching, firewall and security, SAN storage, server virtualization and OS maintenance, database management, end-point protections.
• Maintain IT Operations & system/network appliance, IT Administration & Resource Planning.
• Business Recovery, Security Risk & Operational Risk, Project Management, PDPA policy, Documentation & Work Procedure Manual to ensure compliance and regulatory requirements and industry standards.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• Carry out any additional responsibilities assigned by the Supervisor.

Job Requirement

• Diploma/degree in computer studies
• 2 years of experience working in a security operation, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Technical knowledge – Network switches, servers, PCs, printers, and other equipment all fall under the IT infrastructure engineer’s purview.
• Have the knowledge to manage VLANs on wired/wireless networks.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Have team work spirit, weekend support are required when needed.
• Be fluent in English listening, speaking, reading and writing.

Added experience in the below will be an advantage.

• Work experience for Oracle Cloud Infrastructure and AWS.