Total 686 software engineer job vacancies in Legal / Public / Security category in Singapore

• Identification, quantifying and tracking of cyber security incidents across the organisation.
• Triage and management of information security events including, where necessary, participation in security incident management.
• Regularly engage with other security technologists and be expected to demonstrate deep knowledge and understanding of various security concepts.
• Building client relationships and establishing credibility by demonstrating knowledge of various aspects of cyber security platforms
• Security administration and auditing of privileged systems access.
• Development and maintenance of security processes and procedures.
• Assist in maintaining and tracking all information security related documentation to ensure they remain relevant, appropriate and up to date
• Respond to inbound Change Requests (CRs), Service Requests (SRs), Queries for handling Incident Management.
• Candidate should possess the ability to work under pressure with extreme deadlines, prioritize projects & tasks, and maintain focus in a dynamic environment.

• Bachelor’s degree in a related discipline or equivalent experience/combined education
• Minimum 3 years of relevant working experience within cyber security operations environment as well as managing incident response
• Strong knowledge on networking such as TCP/IP, switching / routing and Cybersecurity Concepts.
• Well-verse in network packet analysis using analysis tools such as wireshark and experience in various operating systems i.e. Windows, Linux, Unix
• Experience with security systems including firewalls, intrusion detection systems, anti -virus software, endpoint security and vulnerability management software.
• Strong knowledge of frameworks such as Cyber Kill Chain and Adversary Tactics,Techniques and Procedures.
• Hands-on experience in Splunk SIEM or any other major SIEM Platform.
• Hands-on experience in fine tuning detection usecases and development of new use cases to improve Cyber threat detection capabilities.
• Hands-on experience of vulnerability management processes and tools.
• Experience in Malware triage and analysis capability.
• Knowledge of security standards, risk methodologies and relevant legal, financial and regulatory legislation
• Stand-by support after office hours and during weekend/public holidays.
• Hold relevant Security domain related Certifications such as Security+, CEH, OSCP, SANS GMON, GCIA, GCIH
• Good communication skills
• Programming skills, including ability to script in Python desired.
• Passionate about security and self-development, keeping up to date with the evolving threat and vulnerability
• landscape, new technologies and service improvements
• Previous exposure to working with a MSSP is an advantage
• Knowledge and experience in SOAR platform is desirable.

Responsibilities:

• Develop and implement a comprehensive cloud DLP security strategy that aligns with the organization's goals and compliance requirements.

• Design and architect secure cloud solutions, considering aspects such as network security, identity and access management (IAM), encryption, and data protection
Continuously monitor cloud environments for security threats, vulnerabilities, and anomalies.

• Guide implementation of proactive measures to address security concerns effectively

• Ensure that cloud security practices adhere to industry standards and regulatory compliance, such as GDPR, HIPAA, or SOC 2.

• Establish reporting routines that provide visibility to effective execution of long-term maturity/strategic plans.

• Consult with control owners and others on developing complete and repeatable control processes including control documentation such as procedures, control evidence, narratives, control matrices, metrics etc.

• Develop high-level presentations tailored for executives and stakeholders.

Requirements

• 10+ years of experience in information security,

• 5+ years focused on cloud security.

• Prior experience as a Security Architect

• Experience with developing performance baselines for DLP tools

• Proficiency in cloud platforms such as AWS, Azure, or Google Cloud, including knowledge of their security services and best practices.

• Strong understanding of security principles, protocols, and technologies, with expertise in areas like network security, DLP, and encryption.

• Exceptional analytical and problem-solving abilities, along with the ability to assess complex security risks and devise effective solutions.

• Experience in administration of a DLP tool which includes configuring policies, upgrading and disaster recovery of DLP operations planning

• Understanding of technical and organizational security vulnerabilities, threats, and risks

• Certified Cloud Security Professional (CCSP) preferred or ability to obtain within 3 months.

iKas International (Asia) Pte Ltd

“Sanderson-iKas” is the brand name for iKas International (Asia) Pte Ltd

EA Licence No: 16S8086 | EA Registration No. R1988468

We regret to inform you that only shortlisted candidates will be notified /contacted.

• Apprised of the current state of computer security in place in the organization
• Technically proficient and up-to-date in basic computer security policies and practices
• Proactive in preventing Cyber-Security Incident

- To perform technical security assessment for IT & Network components - Vulnerability assessment, Penetration testing, Opportunistic Hacking, Web application security testing, Security source code review etc.

- To monitor and track the identified vulnerability, issues and fix detected vulnerabilities to maintain a high-security standard.

- Be familiar with browser, Web service, cloud security, mobile applications security, and operating system security concepts

- Understanding of leading vulnerability scoring standards and ability to translate vulnerability severity as security risk

• Assist in forensic investigation when required.

- Review security logs, security alerts and identify the root cause and resolve the SIEM security alerts

- Performed ad-hoc system related patching of Windows and Linux security patches

- Response to customer email/call ticket in a timely manner

- Performed ad-hoc activities as instructured by the team lead

- Good communication skills and writing skills.

Responsibilities:

• Provide technical support and assistance to clients and internal teams in the security solutions industry.
• Install, maintain, and troubleshoot security systems such as CCTV, access control, and alarm systems.
• Conduct site surveys and assessments to determine optimal security system solutions.
• Collaborate with clients to understand their security requirements and provide customized solutions.
• Ensure compliance with industry standards and regulations in the implementation of security systems.
• Provide training and guidance to clients and internal teams on the operation and maintenance of security systems.
• Monitor and evaluate the performance of security systems and recommend improvements or upgrades.

Requirements:

• Min Nitec Electrical or Electronic Engineering or related field.
• Min 2 years of experience in the security solutions industry.
• Strong knowledge and hands-on experience in CCTV, access control, and alarm systems.
• Excellent problem-solving and troubleshooting skills.
• Good communication and interpersonal skills.

Interested candidates who wish to apply for the advertised position, please click on the APPLY button below to send in your resume or send to [email protected]

EA License No.: 13C6305

Registration No.: R1981808

For candidate who applied for the advertised position is deemed to have consented to us that we may collect, use or disclose your personal information for purpose in connection with the services provided by us.

The Security Engineer will support the day to day operations and development of the bank security suite of products with key objective in designing, developing, deploying, maintaining and enhancing the Bank’s Data Security capabilities which includes but is not limited to Data Loss Prevention (DLP), E-Mail Encryption and Operations.

Key Responsibilities:

• Support security solutions and infrastructure for Data Security Engineering services
• Transform business data security requirements to effective rules with consideration of operational impact
• Product research and define requirements for new projects, support product evaluation and technical Proof of Concept.
• Test and support Data Security solutions, system and infrastructure changes, upgrades, troubleshooting, patching and improvements.
• Support upgrades and migration to ensure Data Security solutions and or related platforms are maintained in tip-top working conditions with proper documentation and RCA.
• Conduct regression testing on new data security rules, use cases and enhancements.
• Manage and coordinate change process engagement with regards to current Data Security solutions.
• Automation development on existing processes and develop contextual data sets, reports and dashboards to provide management and service insights
• Provide support for all Audit and Regulatory requests

Others:

• Communicate effectively with a variety of internal teams and third party service providers/vendors for the delivery of Data Security services/solutions
• Capable of managing a variety of priorities and deliverables in an operational, interrupt driven environment with minimal guidance or supervision.
• Work within established practices and handling guidelines to triage device outages.
• Work with internal technical teams and engineers in technical troubleshooting and forums.
• Available to respond to any requests and assist with troubleshooting activities along with proper documentation.
• Resolve standard/routine issues with no guidance and complex/unusual issues with minimal guidance.

Education

• Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution
• Data Security product certifications will be favorable although not mandatory

Technical Skills

• Overall experience 3 to 6 years of experience
• 1 to 2 years of relevant experience in managing and deploying Data Security solutions such as Data Loss Prevention, Sensitive Data Discovery, Information Rights Management
• Knowledgeable with the variety of Data Security technologies and familiar with the industry trends and best practices
• Hands-on experience with Operating Systems (Windows, Unix, Linux), networking technologies (routers/firewalls), end user technologies (Windows, iOS, Android) and endpoint management platforms (MDM) in relation to Data Security
• Familiar with cloud technologies (e.g. AWS, Azure, GCP) in relation to Data Security controls (e.g. Microsoft Purview, Microsoft IRM, CASB)
• Knowledgeable with cryptographic standards and secure data transmission methodologies
• Analytical problem solver and good at troubleshooting technical issues

Soft Skills

• Good written and verbal communication skills
  Process aware mindset
• Strong analytical and problem solving skills
  Effective time management and organizational skills.
  Team player, including ability to establish and maintain effective working relationships within and across the organisation

Other Requirements

Willingness to perform on-call duties as and when required

Our client is a leading fintech who is looking to onboard an Infosec Engineer to be part of their cyber fusion centre.

Responsibilities:

• Configure, troubleshoot, and maintain security infrastructure hardware and software.
• Develop and implement effective security measures to protect company data and network infrastructure.
• Regularly track and report on the performance of these security measures.
• Deep understanding of comprehensive cybersecurity architectures.
• Develop and update the company’s information security strategy, ensuring it aligns with industry best practices and business objectives.
• Identify, define, and document system security requirements.
• Prepare and maintain technical documentation.
• Recommend solutions to management based on these requirements.
• Install and manage software for monitoring systems and networks for security breaches and intrusions
• Establish and enforce preventive measures to mitigate potential security threats.
• Educate and train staff on information system security best practices.
• Foster a security-aware culture within the organization.

Experience:

• Preferable to have 3+ years of relevant experience
• Knowledge in managing security solution stated above.
• Strong understanding of cybersecurity principles, practices, and solutions.
• Effective communication and analytical abilities.
• Ability to analyze complex security systems and identify vulnerabilities and solution.
• Expertise in computer programming and scripting languages.
• CISSP, or any related vendor certification (preferred)
• Proficient in managing a range of security devices, including but not limited to:

· Email Security

· IDPS

· Attack Surface Monitoring

· Anti-Malware Solution

· Web Application Firewall

· Certificate Management System (CMS)

Responsibilities:

• Domain Expert responsible for design and implementation of network security architectural framework, standard methodologies, and compliance requirements.
• Identify and implement defense-in-depth network analytics technologies and solutions.
• Ensure best security practices, and provide technical consulting on the use of firewall, access control, intrusion detection and prevention, malware analysis, and threat correlation.
• Implementation of load balancers and other security appliances like email security, web gateway, web security appliances, etc
• Implementation of Firewall or APT like Cisco / Sonicwall / Palo Alto / Fortinet / Juniper
• Implementation of security applications like DLP / Anti-virus / NAC / SIEM
• Ability to provide customers' satisfaction and execution for all project deliverables
• Provide rectification and resolution of network problems/issues

Requirements:

• Degree with min 2 years' experience in Network & Security Project Implementation
• CCDA / CCNP certification
• Strong background in security architecture including a deep knowledge of IT network security (secure LAN, WAN, vLAN, MPLS, and secure network zoning and restricted network design) and cloud-based technologies
• Strong background in Network Engineering including a deep understanding of Windows Server architecture, Windows Virtualization, Networking, Backup Solutions, and Disaster Recovery
• Project management of large scale network projects will be an advantage
• Provide daily support team to meet stringent SLA requirements

Interested candidates who wish to apply for the advertised position, please click APPLYto submit your resume.

EA License No: 13C6305

Reg. No.: R1770654

For candidate who applied for the advertised position is deemed to have consented to us that we may collect, use or disclose your personal information for purpose in connection with the services provided by us.

The Job:

• Network security management
• Web security management
• End point security management
• Messaging security management
• Security & vulnerability management
• Automation of management tasks

What You’ll Need:

• Degree/Diploma in Computer-related disciplines
• At least 5 years of experience that covers management of enterprise security solution

Interested applicants can send their detailed resumes to [email protected]or call JANE @ 6735 1955.

JANE LUI JIE'EN

CEI: R1104482

Company Reg. No. 199601303W || EA Licence No. 99C4599

Cyber Security Engineer

Cyber Security Engineer is responsible for maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis
• Work with vendor to conduct security assessments and penetration tests.
• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.
• Standardize and refine security incident response and escalation processes.
• Mitigate and contain threats when detected.
• Escalate security incidents and non-compliances on a timely basis.
• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM, secured remote access, MFA, Identity Access Management and Privileged Access Management.
• Monitor information security alerts triage, mitigate, and escalate issues as needed.
• Provide security advisory to end users on regular basis.
• IT Security Management of various aspect, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.
• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

Requirements

• Degree in engineering, science or information technology, or equivalent education.
• At least 3 years of related work experience in cybersecurity management and security governance.
• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening,
  IDS/IPD, firewall), security incident response and security assessment.
• Strong understanding of ISO27001 standard.
• Hands-on experience at least 4 of the following IT Security Tools:
  a. Next Generation Firewall (e.g., FortiGate, Palo Alto, Cisco FirePower)
  b. SASE (Zscaler, Netskope, Skyhigh)
  c. Tenable Security Center Continuous View
  d. Endpoint Protection (e.g., Symantec, Trend Micro, Sophos Endpoint)
  e. Email Security (e.g., Mimecast, ProofPoint, Cisco Email Security)
  f. Data Loss Prevention (e.g., Symantec, ForcePoint, Digital Guardian)
  g. SIEM (e.g., Splunk, QRadar)
  h. CyberArk PAM and IAM

Interested candidates, who wish to apply for the above position, please send in your resume to [email protected].

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Job Description:

• As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Company's Cloud services.
• You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more.
• You will provide prescriptive guidance in ensuring customers receive the best of what Company's Cloud Platform can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in the Cloud.
• Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Company's Cloud products and features
• We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on the Cloud. The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team.
• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in the Cloud environment.
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
• Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Cloud platform.
• Stay connected with the latest security trends throughout various industry verticals.
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Requirements:

• Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience.
• Coding experience in one or more general purpose languages.
• Experience managing customer projects to completion, working with engineering teams, sales and partners.
• Experience architecting, developing, or maintaining secure cloud solutions.
• Ability to develop high-quality technical documentation and presentation materials.
• At Least 7 years of security architecture and/or security engineering experience
• Hands on and deep knowledge of security principles.
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
• Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
• Strong practical experience securing Kubernetes and containerised workloads.

THE JOB:

The Security Systems Engineer reports to the Campus Security Manager and is responsible for the physical security technologies and systems within the DataCenter.

JOB RESPONSIBILITIES

• Management of physical security technologies and systems within the Datacenter. Includes physical access control, video surveillance, security networks, VHF/UHF Radio systems, hard key management systems, and perimeter entry systems.
• Deployment of security technologies while ensuring standards are adhered to as well as maintenance/repair supervision working with vendor support teams on corrective activities for system issues.
• Collection and maintenance of system information on the health of current security systems and report out of performance trends. Identification of system issues or failures and coordination with site personnel to drive and correct failures by collaborating with other internal and external service providers in weekly / biweekly meetings.
• Receive escalations/notifications of physical security and business impacting incidents/events and appropriately triage, ensuring that leadership is made initially and continuously aware when appropriate and that the appropriate personnel are managing the incident response effectively.
• Serve as a Subject Matter Expert (SME) for security technologies, supporting high visibility needs of the business in a variety of special projects. These unique projects often involve expedited deliverables, operational agility, and require top quality deliverables covering both the consulting and operations functions.
• Continuously improve the efficiency and maturity of the overall physical security program.
• Collaborate with peer teams and organizations to ensure their team is aligned with broader strategy and initiatives, fully supporting leadership priorities, being good partners, helping reduce costs, time burden, complexity, and being responsive trusted advisors.
• Continuously seek data and recommend strategies and ideas to reduce churn, optimize, implement a creative solution to a problem, scale, automate, and simplify.
• Confident and skilled in preparing and delivering presentations and briefings to customers, senior leaders, and executives.
• Any other ad-hoc task assigned.

JOB REQUIREMENTS:

• Diploma or BS or BA in physical security or related discipline, or equivalent experience preferred.
• With 5 years’ experience successfully managing security systems projects in a corporate, law enforcement or government operations program role.
• Must be Lenel Certified Professional in Access Control and Digital Video or to attain Lenel certification within 6 months from date of hire.
• Experience with or exposure to regulatory and industry compliance frameworks and audits (e.g. ISO27001, PCI, SOC).
• Experience with datacentres or other critical infrastructure facilities.
• Experience with HA and DR solutions such as SQL Clustering, NEC WAN Express.
• With more than 5 years of managing, configuring, and maintaining Microsoft SQL Servers and processes.
• Experience making and influencing good decisions that impact mission-critical, 24x7 operations environments.
• Strong work and compliance ethic, and the ability to effectively prioritize and execute tasks in a dynamic and high-pressure environment.
• Proficient in the use of Microsoft Office products for business.
• Analytical and process improvement skills to produce data driven insights and associated process changes.
• Thought leadership and subject matter expertise to deliver one or more large programs and services while increasing standardization, simplification, and automation.
• Ability to change plans, goals, actions, and priorities in response to an evolving business environment with awareness to operate as a champion for course corrections when necessary.

Responsibilities:

• Provide consultation to engineers on security requirements, ensuring best practices are followed to meet these needs.
• Collaborate with the Cloud Infrastructure and Platform teams to spearhead initiatives that enhance the security utilities and tools .
• Develop and implement threat detection mechanisms for a hybrid infrastructure, encompassing application infrastructure, containers, and IoT systems.
• Lead and actively participate in discussions and communications within the team, as well as with customers and other business units.
• Translate standards and regulatory controls into actionable tasks for engineers, ensuring clarity in what needs to be accomplished.
• Develop and maintain a comprehensive infrastructure and platform security roadmap that aligns with customer demands and regulatory requirements.
• Address customer-sponsored penetration tests with timely and detailed responses.
• Develop, maintain, and promote security standards through various knowledge-sharing platforms such as workshops, office hours, and brown-bag sessions.
• Advocate for best practices and design patterns in security.
• Lead the onboarding and development of Security Orchestration, Automation, and Response (SOAR) systems.

Qualifications & Experience:

• Bachelor’s degree in Computer Engineering or a STEM-related field (Science, Technology, Engineering, or Math).
• AZ-500 & AWS security certifications are advantageous.
• A minimum of 5 years of experience in managing security controls within Azure, AWS, or Google Cloud.
• Strong proficiency in CI/CD and automation tools (such as Chef, Git, Jenkins) and in Infrastructure as Code/Policy as Code.
• Deep understanding of identity management and identity federation technologies (SAML, OAuth).
• Extensive knowledge of virtual infrastructure and containerization technologies.
• Proven experience in designing and implementing security controls on cloud platforms like AWS, Azure, or similar environments.
• Skilled in risk identification and evaluation techniques.
• Experience with at least one SIEM and SOAR platform, including log source onboarding and automation development.
• Proficient in scripting and automation, particularly in Python.

Cloud Security Engineer

Responsibilities:

• Consult engineer on security requirements and utilize best practices to meet them
• Work with the Cloud Infrastructure and Platform teams to lead initiatives and develop and build security utilities and tools that will enable organisation to operate more securely
• Build threat detection for a hybrid infrastructure covering the overall technology stack that includes Application infrastructure, Containers, IoT infrastructure
• Contribute to and lead discussions and communications within the team and outside, including customers and other business units
• Translate Standards and Regulatory based controls to Engineers do they understand what needs to be done
• Build and maintain a robust infrastructure/platform security roadmap to meet customer demands and regulatory mandates
• Responding to customer-facing departments about EnOS Platform and Edge security posture
• Responding promptly and in detail to customer-sponsored penetration tests
• Develop, maintain, and promote standards through workshops, office hours, knowledge shares and brown-bags
• Promotes best practices and design patterns
• Onboard and development of Security Orchestration, Automation and Response system.

Qualifications & Experience:

• Bachelor Degree in Computer Engineering/ in STEM major in Science, Technology, Engineering or Maths)
• AZ-500 & AWS security certification will be a plus
• At least 5+ years of experience in security controls management aspects at Azure/AWS/Google cloud
• Strong knowledge of CI/CD and automation tools (Chef, Git, Jenkins) and Infrastructure as Code/Policy As code.
• Strong knowledge of Identity management and identity federation (SAML, Oauth)
• Strong knowledge of virtual infrastructure and containerization technologies
• Experience designing and implementing security controls in cloud platforms such as AWS, Azure and alike.
• Experience with the application of risk identification and evaluation techniques
• Experience with broad set of information security technologies and processes within a SaaS, IaaS, PaaS, or cloud environment
• Experience with at least one SIEM and SOAR platform – including on boarding of log sources and developing automation.

Regret to inform that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R1878287

Business Registration Number: 201735941W.

Licence Number: 18S9037

Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.

Excellent communication skills and the ability to collaborate with diverse teams.

Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.

Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.

Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services

Good knowledge in security

Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.

Proficient in security concepts related to infrastructure as code (IaC) and containerisation.

Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

As a Cyber Security Specialist at Jurong Port, you will be responsible for the daily administration and management of cyber security tools and systems. Your primary duties will include maintaining and optimizing security tools, monitoring system logs, conducting vulnerability assessments, and ensuring endpoint protection.

The Job:

• Oversee the daily operation and maintenance of security tools such as endpoint protection solutions, PAMS, WAF and vulnerability assessment tools.
• Review and investigate security logs from various systems and tools to identify and respond to potential security incidents and breaches.
• Conduct regular vulnerability assessments and penetration testing to identify and mitigate security weaknesses.
• Conduct cyber security training and exercise to test and improve staffs’ awareness and response
• Monitor and respond timely to security incidents and alerts, conducting thorough investigations and root cause analyses to minimize risk exposure.
• Work closely with IT and application team to ensure security compliance and best practices are integrated into all aspects of the organization's operations.
• Ensure regulatory compliance for cyber security matters.
• Develop and distribute security newsletters and advisories to educate staff on the latest security threats and best practices.
• Develop and maintain SOP documentation.
• Stay up to date with the latest security trends, threats, and technology solutions.

Job Requirement:

• Diploma or Degree in Computer Science, Information Technology, Cyber Security, or related field.
• At least 5 years of experience in cyber security or a related role.
• Minimum 2 years of experience in vendor management
• Strong knowledge of security principles, techniques, and technologies.
• Experience with security tools such as firewalls, endpoint protection, WAF, VA, SIEM and PAMS solutions.
• Good working knowledge of IT infrastructure (servers, networks, storages and endpoints).
• Relevant certifications such as CEH, CompTIA Security+, SSCP or any cyber security related certificate.

Description:

Role Description (About the job)
As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities
We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on Google Cloud. The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team.

● Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
● Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Google Cloud environment.
● Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
● Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
● Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Google Cloud platform.
● Stay connected with the latest security trends throughout various industry verticals.
● Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Minimum Qualifications (MQs)
● Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience.
● Coding experience in one or more general purpose languages.
● Experience managing customer projects to completion, working with engineering teams, sales and partners.
● Experience architecting, developing, or maintaining secure cloud solutions.
● Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications (PQs)
● At Least 7 years of security architecture and/or security engineering experience
● Hands on and deep knowledge of security principles.
● Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
● Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
● Strong practical experience securing Kubernetes and containerised workloads.

• Salary Range: $2.4k - $2.8k
• Working Days: 4 days
• Working Hours: 12-hr rotating shift (7.30am-7.30pm, 7.30pm-7.30am)
• Location: Toh Guan Road

Responsibilities

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement

• Possess at least a Higher Nitec
• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

Tong Wei Chin (Reg No.: R24123803)

The Supreme HR Advisory Pte Ltd (EA No: 14C7279)

Responsibilities:

· Responsible for assessing the technologies, applications, and overall security controls in Cloud platforms to identify potential risks and vulnerabilities

· Understanding and complying of the Global Information Security policy and relevant cyber security threats to complete security assessments.

· Providing expert technical guidance to support partners and adapting testing methods to emerging cyber security regulations and evolving threats, while developing others on the team.

· Lead and oversee efforts to identify vulnerabilities and misconfigurations in Cloud platforms and workloads.

· Manage daily operations of Cloud security solutions such as Aqua, Wiz, Qualys, CrowdStrike

· Enhance vulnerability identification process for Hybrid Cloud platforms

· Drive Cloud Security solutions in alignment with the Bank’s cloud strategy and in accordance with security best practices

· Leads the analysis, implementation, execution, and improvement of proactive security controls to prevent external threat actors from infiltrating company systems or information.

· Conducts research and provides leadership updates regarding advanced threats to compromise security controls and protocols.

· Monitors new threats and complex attempts to compromise security controls while developing a deep expertise in the early lifecycle for security techniques

Skills and Experience

· Deep understanding of Microsoft Azure and/or AWS native services, tools, and architecture

· Deep understanding of cloud and container security

· Deep working knowledge of cloud threat landscape

· Deep technical experience in infrastructure and security functions

· Experience in DevSecOps and CI/CD pipeline integration through security engineering lifecycles

· Experience writing requirements documentation

· Experience deploying and managing Cloud-based vulnerability management solutions

· Understanding of Threat modeling and cybersecurity frameworks(MITRE ATTCK/D3FEND, OWASP, STRIDE)

· Understanding of vulnerability management and scanning tools

· Well-developed analytic, qualitative, and quantitative reasoning skills with a demonstrated creative problem-solving ability.

iKas International (Asia) Pte Ltd

“Sanderson-iKas” is the brand name for iKas International (Asia) Pte Ltd

EA Licence No: 16S8086 | EA Registration No. R1988468

We regret to inform you that only shortlisted candidates will be notified /contacted.

Salary Range: $2.4k - $2.8k
Working Days: 4 days
Working Hours: Shift Work
Location: Toh Guan Road

Responsibilities

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement

• Possess at least a Higher Nitec
• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

Interested applicants can email your CV to [email protected] or whatsapp to +65 89249206

The Supreme HR Advisory Pte. Ltd || 14C7279

Chua Jie Ying (Cai Jie Ying), Evelynn || EA Personnel License R24120580

• Salary Range: $2.4k - $2.8k
• Working Days: 4 days
• Working Hours: 12-hr rotating shift, 7.30am-7.30pm, 7.30pm-7.30am
• Location: Toh Guan Road

Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems.
• Attending to customer request on alarm and card access systems
• Conducting patrols at night

Requirement:

• Possess at least a Higher Nitec
• Valid class 3 license
• 1-2 years relevant working experience
• With Enhanced Basic Security certification will be an added advantage.

If you are interested to apply, kindly WhatsApp me your updated resume in DOC file and allow our Consultant to match you with our Clients.

Whatsapp: +65 8525 2419

Email: [email protected]

Tan Man Ee Reg No: R22108289

The Supreme Hr Advisory Pte Ltd EA No: 14C7279

Contract: 1 year, Renewable

Experience: 9+ years

Desired Skill:

1.Degree in Computer Science, Information Systems, Engineering or equivalent

2.At least 9 years of IT security experience in areas of security governance, risk management, application security design, security project management, security operation, cloud security technologies

3.Strong risk management principles, risk articulation skills, cloud technologies, network security, data protection 4.Knowledge of cloud platforms such as AWS, Azure or Google cloud is desirable

5.Professional security certification is preferable, such as CISSP, CISM, CISA, CCSP or other similar security certifications

6.Self-motivated with the ability to work independently and as a team member with minimal direction

7.Strong interpersonal and stakeholder management skills 8.Good written and communication skills

Job Responsibilities:

* Identify and assess Cyber risk(s). Propose treatment plan(s) to mitigate Cyber risk(s) identified.

* Provide guidance to Business Services Group (BSG) in ensuring that projects/systems comply with security policies and the relevant legal and regulatory frameworks (such as PDPA or Cybersecurity Act) throughout the product lifecycle

* Perform adequate risk management, including identification, assessment and provide treatment of security risks associated with systems handled by Business Services Group. Risk assessment must be performed in accordance with the organization’s cybersecurity risk management framework

Job Description:

• Monitor, maintain and fine-tune existing network & security infrastructure: Endpoint Security, Next Generation Firewall (NGFW), Encryption, email and network proxy gateways, Microsoft 365, DLP etc.
• Monitor, analyze and response to Information Security Incidents by working across teams (e.g.: infrastructure, application, other departments, etc.)
• Prepare and document security hardening standard, security incident response plan & playbook.
• Collaborate with IT, engineering, production and QA team to ensure security practices are integrated into all systems and applications.
• Prepare documentation such as procedures and guidelines for security practices within the internal IT team, engineering and within OT environment.
• Implement, conduct external and internal vulnerability scans, network penetration tests and application security tests as required.
• With minimum supervision, generate reports from security tools, write incident reports, assessment-based findings, outcomes and propositions for further system security enhancement
• Support relevant projects, initiatives or security activities such as but not limited to security awareness programs, security incident response with relevant teams and security software deployments.
• Report on Security KPIs, vulnerabilities, non-compliance and other security exposures, including misuse of information assets and non-compliance.
• Conduct research, perform PoC to evaluate new emerging technologies and maintain up-to-date understanding of the latest threats, vulnerabilities, mitigation, industry best practices, regulations.
• Participate in projects involving IT systems, provide sound technical advice to ensure security principles are adhered to and provide support as needed.
• Other duties as assigned.

Job Requirements:

• At least 3 years’ experience in security operations centre (SOC) and cyber security incident response team (CIRT)
• A proven track record as an Information Security engineer collaborating with teams internationally
• Hands on experience with security technologies such as NGFW, Endpoint Security, DLP, Proxy, Secure Email Gateway, Active Directory, Identity and Access Management (IAM), Microsoft 65, etc.
• Hands on experience with the implementation, configuration, fine tuning, operations, and maintenance of security tools
• General knowledge of industry best practices on security hardening, OWASP, network security, security risk & management frameworks, national cybersecurity standards, ISO27001, etc.
• Team player and able to collaborate across diverse stakeholders to achieve security objectives
• Excellent communication, interpersonal and consultative skills
• Good problem solving and analytical skills and workshop facilitation skills
• Experience in working with high performance teams and understand the dynamics of international teamwork
• Ability to learn and understand new concepts quickly to keep up with new emerging technology
• It would be advantageous for you to have exposure to working directly for companies who have gone through extensive periods of change and / or a full-scale transformation programme in recent years.
• Data driven, with a continuous improvement mind-set acumen.
• Tertiary Education in Computer Science or related fields
• Experience in solutioning, architecting, implementing security solutions
• CISSP, GIAC, CEH or other security certifications would be good

Responsibilities

• Configure, manage, and maintain security devices such as firewalls, Endpoint Security etc. listed below.

• Ensure proper integration and functioning of security platforms.

• Regularly review and update security device configurations to align with best practices and evolving threats.

• Perform routine maintenance, updates, and patches on security devices and platforms.

• Monitor security alerts and events from various sources, including SIEM systems, IDS/IPS, firewalls, and Endpoint security tools etc..

• Investigate and analyse security incidents to determine the root cause and impact.

• Conduct regular vulnerability assessments and scans on the organization's systems, networks, and applications.

• Analyse scan results, prioritize vulnerabilities based on risk, and work with IT teams to remediate identified issues.

• Track and report on the status of vulnerabilities and remediation efforts.

• Work closely with IT, network, and application teams to ensure security controls are integrated into system design and implementation.

• Collaborate with external partners and vendors to address security issues and coordinate incident response efforts

Requirements

• Degree in Computer Science or Equivalent

• At least 3-5 years of relevant experiences

• Familiar with at least 5 of the listed tools below:

• Privilege Access Management

• Database Activity Monitoring

• Endpoint Detect and Response

• Endpoint Anti-malware

• Vulnerability Assessment scanner

• Next Gen Firewall

• Patch management system

• Security Information and Event management

• Security event review and investigation

• Handling of security advisory

• Security configuration management system

Licence no: 12C6060

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As a part of ByteDance's Security Department, the Security Governance and Compliance team plays a pivotal role in supporting various business lines. This involves offering expertise in security governance and compliance by implementing robust information security management systems. The team is dedicated to tailoring solutions that address key aspects such as data security, privacy protection, and regulatory compliance. Moreover, they actively pursue and obtain a multitude of security compliance qualifications and certifications essential for the diverse business lines. Additionally, the team actively engages in shaping industry standards for security and privacy, while also conducting advanced research to anticipate and navigate future risks and opportunities.

Job Description:

1. Stay abreast of the latest developments of laws, regulations, policies and information security standards related to Network Security, Data Security and Data protection. Ensure timely updates and maintenance of the internal information security management system.

2. Apply for information security certifications such as ISO 27001, SOC and PCI for our products.

3. Advocate for and oversee the implementation of security compliance and privacy protection requirements. Promptly address and rectify any non-compliant items.

4. Validate and verify that the organization's security controls meet industry requirements. Conduct thorough examinations of processes, systems, policies, procedures, network diagrams, and system configurations.

5. Monitor business activities through collaborating with cross-functional team leaders to guarantee ongoing compliance with external certifications.

Minimum Qualifications:

1. More than 3 years of relevant experience in managing ISO 27001:2022, SOC 2 audit, and compliance programs within a global organizational setting.

2. Demonstrate extensive knowledge and hands-on experience with cybersecurity frameworks, such as ISO 27001, PCI-DSS, SOC 2, and other relevant regulatory requirements.

3. Exhibit excellent communication skills, logical reasoning abilities.

4. Maintain a calm and composed demeanor , showcasing a robust commitment to continuous learning and a collaborative, team-oriented mindset.

5. Display self-driven and results-oriented attributes, enjoy challenging tasks, demonstrate a genuine enthusiasm for work, and work well under pressure.

Preferred Qualifications:

1. Experience in ISO management systems, SOC audit, and PCI certification is preferred.

2. Relevant industry certifications such as CISM, CISA, CISSP is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

This an awesome role for someone who has experience with DevSecOps, Cyber Security and specifically Software Applications Security who wants to use all of their skills and learn alot more.

Key Responsibilities:

• Ensure that software developed is free of security vulnerabilities.

• Manage application security program across multiple SDLCs.

• Review and understand code from both business logic and technical standpoint.

• Coordinate with developers to prioritize and remediate identified true positive vulnerabilities.

• Collaborate with software development and quality assurance teams to ensure code is free from security defects.

• Communicate cybersecurity standards applicable to technology and coding workflows.

• Working with Application Security Engineers, optimize security with existing technologies and processes.

• Review performance of controls such as threat modelling, SCA, SAST, DAST, IAST, RASP, Secrets Scanning, Container Scanning, Misconfiguration Identification, Secure Code Review, CI/CD Pipeline Security, Deployment Environment Security.

• Coordinate with software development leadership, operations leadership, IT leadership, and cybersecurity leadership to integrate application security practices across departments.

Experience Required:

• At least 5 years of total IT experience
• Cyber Security, Software Applications Security and DevSecOps experience
• Demonstrated experience working with technical and non-technical staff.
• Any experience with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure or other cloud platforms, with experience in developing and implementing software would be ideal.
• Experience developing software in various coding languages such as Java, C#, Python, PHP would be helpful
• Strong interpersonal skills with the ability to communicate effectively with guests and other team members of different backgrounds and levels of experience.
• Professional certifications in cyber security (CISSP, OSCP, etc) is highly desirable

Adam Davies

Partner

Technology 'recruitment & search'

Menrva Group

Registered Agent R1326604

Company EA License 19S9808

Company Registration 201900823K
MENRVA PTE. LTD.