Total 721 software test engineer job vacancies in Legal / Public / Security category in Singapore

As a Cloud Security Engineer, you will deliver expert technical guidance to customers adopting Google Cloud services. This role involves sharing best practices for secure foundational cloud implementations, automating infrastructure and application provisioning, and designing cloud-ready application architectures. You will provide prescriptive guidance to ensure customers maximize the benefits of Google Cloud Platform (GCP) and deliver an exceptional experience as they migrate, build, modernize, and maintain applications on Google Cloud. Additionally, you will collaborate closely with Product Management and Engineering teams to drive improvements in Google Cloud products and features.

Job Responsibilities:

• Serve as a trusted advisor to customers, offering deep expertise in cloud security and tackling complex cloud security and compliance challenges.
• Partner with customers to design and implement secure cloud architectures and solutions that exceed their security requirements, through in-depth discussions, strategic recommendations, and hands-on implementation in Google Cloud.
• Develop and deliver best practices, tutorials, blog articles, sample code, and technical presentations tailored to different business and technical audiences.
• Communicate effectively via video conferencing for meetings, technical reviews, and onsite engagements.
• Manage senior stakeholders within customer environments to build consensus and drive successful outcomes on the Google Cloud platform.
• Stay current with industry trends and security best practices across various sectors.
• Travel regularly (up to 30%) within the region for meetings, technical reviews, and onsite engagements, with frequent use of video conferencing.

Job Requirement:

• Bachelor’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
• Proficiency in coding in one or more general-purpose programming languages.
• Experience managing customer projects to completion in collaboration with engineering teams, sales, and partners.
• Proven experience in architecting, developing, or maintaining secure cloud solutions.
• Excellent verbal and written communication skills in English and Mandarin Chinese, with the ability to create high-quality technical documentation and presentation materials.

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to [email protected] to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services,

and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you

could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems,

and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything

we create is the result of people in different roles and teams working together to make each other’s ideas

stronger. That same passion for innovation that goes into our products also applies to our practices,

strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the

Threat Analysis and Incident Response function. A successful candidate will possess a proven technical

background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You

will work with a global team of security professionals on a follow-the-sun model with a primary focus on the

identification, containment, and mitigation of security incidents. This role is an integral part of the security controls

Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology

and processes with global reach. Apple is an Equal Opportunity Employer that is committed to inclusion and

diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants,

including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or

retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job

application or interview process, to perform essential job functions, and to receive other benefits and privileges of

employment. Please contact us to request accommodation.

Minimum Qualifications

More than 7 years of experience in Information Security with a focus on Incident Response, Security

Engineering, and/or Intrusion Detection

Proficient understanding of incident response automation strategies, with demonstrated ability to implement

them

Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors

Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues

In-depth technical knowledge of macOS or Linux Operating Systems

Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze

endpoint, network, and application logs

Proficient in one or more programming/scripting languages

Excellent verbal and written communication skills

Preferred Qualifications

Experience with disk and memory forensic tools

Experience writing and tuning IDS signatures

Experience triaging malware

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to [email protected]

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Company Overview:

Traveloka is a leading technology company that provides a one-stop travel and lifestyle platform for customers in Southeast Asia. Our platform offers a wide range of travel-related services, including flight and hotel bookings, activities, attractions, and more. With a mission to empower travelers with seamless experiences, we're committed to pushing the boundaries of technology and innovation in the travel industry.

It's fun to work in a company where people truly BELIEVE in what they're doing!

Job Description:

As a leading travel technology company, Traveloka manages a vast ecosystem of APIs, microservices, cloud infrastructures, and front-end applications (web and mobile) that serve millions of users worldwide. On the back side, we operate large-scale data pipelines and internal business operations, many are engineered in-house, which require robust security measures to protect user data, intellectual property, and sensitive corporate information.

The Security Engineering Manager will take a holistic approach to safeguarding our engineering assets, working and managing across multiple teams including DevSecOps, Product Security, and Offensive Security. Success in this role requires strong analytical, problem-solving, and leadership abilities, as well as the capacity to think from defensive, offensive, and engineering perspectives to craft tailored security solutions for our unique environment. The ideal candidate will not only be proficient in using readily available or off-the-shelf tools but will also have the expertise to assess when and how custom security tools need to be developed and maintained with a software engineering perspective to address specific challenges.

Requirements:

• Proven experience managing Security Engineering or Software Engineering teams, with at least 7 years of extensive expertise in cybersecurity.
• Strong background in leading cybersecurity or software development projects using agile methodologies.
• Experience securing applications in fast-paced environments with frequent changes.
• Proficient in general-purpose programming languages (e.g., Python) and Object-Oriented Programming (e.g., Java).
• Hands-on experience with cloud platforms like AWS and GCP, including platform- specific security features and common security tools.
• Familiarity with modern technologies such as containerization, managed container services, serverless functions, infrastructure as code, API gateways, BFF (Backend for Frontend), CI/CD, and microservices.
• Deep technical knowledge of web, mobile, OS, and network security
• Able to practically demonstrate various security tests and control implementation such as SAST, DAST, SCA, WAF, secure-by-design, and secure application framework.
• Excellent verbal and written communication skills.
• Strong self-initiative to bridge gaps between Software Engineering, Infrastructure Engineering, and Security Engineering, while providing a security framework for the entire technology team and management.
• Commitment to cybersecurity with a dedication to continuous learning and staying updated on new technologies.
• Experience in CTF, bug bounty programs, presenting at security conferences, or publications is a plus.
• Experience with penetration testing, red teaming, or purple teaming is a plus.
• Web development experience or developing security tools is a plus.
• Relevant technical security certifications (e.g., Offensive Security, CREST, SANS GIAC) are a plus

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Proficio is an award-winning managed detection and response (MDR) services provider. We provide 24/7 security monitoring, investigation, alerting and response services to organizations in healthcare, financial services, manufacturing, retail and other industries. Take a video tour of our global network of 24/7 Security Operations Centers (SOCs).

 Proficio has been highlighted in Gartner’s Market Guide for Managed Detection and Response Services for the last five consecutive years. MSSP Alert ranks Proficio among the top 250 global Managed Security Services Providers (MSSPs).

 We have a track record of innovation. Proficio invented the concept of SOC-as-a-Service. We were the first MSSP to provide automated response services and are the only company in our space with a patent for cyber risk scoring and security posture gap analysis.

 Our typical client is a medium to large-sized organization that lacks the in-house resources to address the challenges of a rapidly changing threat landscape. The difficulty of hiring and retaining cybersecurity professionals are widely understood. Our prospective clients are also challenged to effectively harness technology and build hardened processes that reduce the risk of security breaches.

 While Proficio has developed a unified service delivery platform designed to meet the needs of the most demanding clients, what sets us apart is the quality and passion of our people. We believe the SOC of the Future will meld the creativity of human intelligence with the power of advanced technologies like AI.

 Proficio’s commitment to developing and promoting our team members is unparalleled in our industry. Most of our senior managers were promoted from within.

 SUMMARY

We are seeking an energetic Security Engineer II to serve as a technical resource and leader. This position has two components and supports both our team that Onboards new customers and our MSS team that manages security devices for our customers. 

Onboarding, 60% of this role:  this part of the position centers on security and availability of customer data as it is brought into the Proficio SIEM. The Security Engineer II will assist in working with new clients as they transition to our ProSOC service. This includes ensuring timely deployment of services, developing a personalized on-boarding strategy for each customer and auditing of systems reporting from the client to our Security Operation Center. 

MSS device configuration/maintenance, 40% of this role:  this part of the position will help ensure delivery of our Elastic Stack Managed Security Services to meet or exceed the defined service levels of our clients. The Security Engineer II will respond to customer requests and act as a trusted technical resource for our clients while striving to maintain high reliability and performance within our customer’s environments. This position also includes managing and optimizing overall IT infrastructure and systems used in the delivery of our Managed Security Services.

 Responsibilities

• Assist in the onboarding and implementation of ProSOC service and Managed Security Services solutions for Proficio clients across industries and geographic locations. 
• Act as a technical liaison between Proficio and its customers during the onboarding process.
• Review technical security posture (network, application, and database) for existing and newly acquired businesses or services.
• Perform security reviews and monitoring of the production environment. 
• Perform the installation and configuration of security monitoring tools in support of our ProSOC service.
• Use out of the box thinking as well as industry standard troubleshooting tools, such as, Wireshark, TCPDUMP, and other tools, to facilitate on-boarding of customer data sources.
• Work with senior staff to evaluate client security devices and make recommendations based on industry standards for security configurations.
• Assist Proficio engineering team with tasks related to the review and development of Managed Security Services related processes and procedures.
• Assist senior staff when they provide Subject Matter Expert (SME) services, engaging directly with clients to perform necessary research, answering questions and making recommendations based on industry standards and best practices.
• Participate in engineering team on-call rotation.

• A Bachelor’s degree in Information Systems, Business, Engineering, or a related field from an accredited institution OR equivalent experience
• 4-5+ years’ experience as a Network Engineer or Security Engineer working with a broad range of technologies
• Minimum 2+ years’ experience in Information Technology IT Security in a SOC or NOC environment working with a broad range of technologies highly preferred.
• Security certification required, such as, Security+ and Network+. Security certification such as SANS/GIAC, CISSP, CISA, CISM are a plus
• Basic Unix or Linux systems administration and command-line experience (Redhat/Linux, FreeBSD, Ubuntu, etc.).
• Experience with Windows Server security logs.
• Experience in the configuration and troubleshooting of IPSec VPN tunnels.
• Knowledge of network analysis tools, such as, Wireshark and TCPDump and SCP.

• Knowledge of UNIX and Windows environments as may pertain to Network and Security tasks including syslog, DNS, load balancers and BIND, BigIP command line on BSD, Windows Event Log.
• Hands-on experience installing, configuring and administering network and security devices, applications and systems
• General understanding of SIEM operations experience with Elasticsearch is a strong plus
• Managed Services experience preferred with a customer focused mindset that is willing to go above and beyond to satisfy a customer requirement absolutely required
• Experience performing vulnerability assessment and remediation using products such as Qualys, Nexpose or Nessus is a plus
• Proficient with Linux (scripting in Bash or Perl is required and Python is a plus)
• Vendor certifications from Palo Alto, Cisco, Juniper etc. are a plus
• Effective time task management skills.
• Strong communications skills, both written and oral
• Ability to participate in on-call rotation for after hours and weekend escalations

 At least 1 years’ experience configuring and/or using the following:

•  Security Management Systems (i.e. Tipping Point SMS, CheckPoint Security Management Server, Cisco Sourcefire Management Console, or JunosSpace)
• Firewalls (Cisco, Palo Alto, Checkpoint, Fortinet, Juniper SRX, or IPTables)
• IDS/IPS (Cisco AIP or Sourcefire, McAffee, Juniper or Tipping Point)
• Linux command line or similar operating system
• Experience with Vulnerability Management Tools
• Wireshark or other similar industry standard application
• Data Encryption using SSH, IPSEC VPN or TLS/HTTPS

• Opportunity to work in a progressive organization with structured training and roadmap for success

• Lunches and fun employee activities!
• Experience in one of the hottest IT industries today

Proficio is an EOE employer.

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 1 to 4 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

Job Description & Requirements

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Skills (Key Words)

VAPT,Infra security, Security architecture review, Application Security

Job Description & Requirements

Responsibilities

•Work closely with the senior IT Services stakeholders to ensure that appropriate security guidance is provided to support project delivery;

•Input in to the design and implementation of standards, policies, guidelines and appropriate architectural principles to ensure the firm’s cyber security goals continue to be met;

•Provide risk based direction in conjunction with IT Services for future system enhancements in line with the overall firm’s strategy;

•Recognize potential opportunities for enhancing the firm’s security, ensuring minimal impact to practitioners;

•Provide subject matter expertise to support business relationship management functions.

•Take ownership and ensure Governance, Policy and Procedures in relation to Management of Information

Security meets agreed standards and Technology Risk Assurance

•Develop a culture of in-depth understanding as to why security testing is required at both business and internal team level;

•Analysis of information protection technologies and processes to identify technology security weaknesses;

•Lead ongoing risk assessments of data processing systems to confirm the design of logical controls are effective and meet regulatory and legal requirements; and

•Provide quality reports to summarize test activities, including objectives, planning, methodology, results, analysis and recommendations to both technical and non-technical audiences. From the output of the reports provide suggested approaches to enhance further.

•Provide oversight and guidance during security incidents and investigations, ensure RCA is undertaken and input suggested approaches to deal with lessons identified

•Assist in the enhancement of delivery and management of key technology security platforms.

•Provide continuous improvement to the Technology Security function;

•Collaborate with IT Services to develop and maintain secure technology solutions; and

•Actively contribute to the overall Ogier risk management framework reporting to the Head of Risk & Compliance ensuring consistency in the advice we provide to the business.

•Prepare Monthly reports

•Provide Internal and External Audit Support.

• Experience on Windows Server and Networking

• Knowledge on Azure SAAS

Essential Requirements (Skills Requirements)

· A Bachelor’s degree in Information Technology, Information Systems Security, Cyber Security related or IT related equivalent. Years of Experience

· Minimum 6 to 8 years of IT & Security Experience

· Preferred industry qualifications - CISSP / CISA / CRISC / or equivalent

· Broad knowledge of a wide range of Information Technology systems and a deep understanding of the inherent security risks associated with these technologies;

· Understanding of information security principles and best practice (e.g., ISO27001 and ISF Standards of Good Practice for Information Security);

Technical / Professional Skills

· VAPT

· Infrastructure Security (Nessus, Qualys)

· Risk assessment

· Application security

· Security Audit

Non-Technical / Soft Skills

· Ability to understand and assess technology systems and applications from both a technical and business

· function perspective;

· Ability to communicate business and technical risk to all levels of audience;

· Excellent interpersonal skills with the ability to build and influence teams; and self-motivated

· Strong technical abilities, combined with business acumen;

· Ability to present security topics to a non-technical audience and presenting the business value of security;

GOOD TO HAVE

· Understand IT security and infrastructure technology

· Understand IT service management

· A good understanding of IT networking and access management concepts

· Prior experiences in leading an end-to-end IT Audit with COBIT framework and ITIL practices.

Skills (Key Words)

VAPT,Infra security, Security architecture review, Application Security

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 4 to 5 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

Job Description

• Oversee day-to-day PKI operations, including the issuance, renewal, and revocation of digital certificates.
• Manage certificate lifecycle in both enterprise and cloud environments.
• Monitor and maintain certificate authorities (CA) and related infrastructure, ensuring high availability and security.
• Implement best practices for secure key management, including key rotation, backup, and recovery processes.
• Support cryptographic hardware devices, such as HSMs (Hardware Security Modules), ensuring proper configuration and compliance.
• Identify and resolve issues related to PKI infrastructure, certificates, and cryptographic hardware.
• Provide Level 1/2 support for PKI-related incidents and requests.
• Document troubleshooting steps and resolutions to improve future responses.
• Ensure PKI operations align with industry standards and regulatory requirements.
• Conduct regular audits of PKI systems and assist with compliance reporting.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).

Experience:

• Minimum of 3 years in IT with a focus on systems administration, networking, or cybersecurity.
• At least 2 years of hands-on experience with PKI or certificate operations
• Strong understanding of PKI concepts, protocols (e.g., TLS/SSL, x.509), and standards (e.g., FIPS, NIST).
• Familiarity with certificate management tools and software.
• Experience with scripting languages (e.g., PowerShell, Python) is a plus.
• Excellent problem-solving skills and attention to detail.
• Effective communication skills to interact with technical and non-technical stakeholders.

About the Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role (Lead Security Engineer):

• We are seeking a lead security engineer who can drive security strategy and initiatives from 0 to 1. This could be across a wide range of domains covering identity, application security, cloud, DevSecOps, or detection engineering. We are open to security engineers with deep skills in one or more of these domains.
• You will have excellent stakeholder management skills, and are able to operate and influence across the business.
• You should be excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source and build tools that automate our security posture.

The day-to-day activities:

• Work with the wider security engineering team to take security requirements and build scalable applications and solutions that automate security and reduce the risk of the bank.
• Own the strategy for assigned security domains, consisting of tactical initiatives and strategic multi-year decisions.
• Partner with teams across the bank including SRE, Data Engineering, GenAI and Product to identify areas of security posture improvement, create the plan and execute.
• Maintain standards and procedures inline with regulatory and internal policy requirements.
• Lead engagements with internal and external audits that are applicable to first line technology.
• Mentor junior engineers to uplift their ability across security domains, increasing the teams knowledge and standard operating procedures.

The must-haves:

• Should have relevant experience of 8+ years within information security
• Experience with scripting/programming security automation.
• Knowledge of cloud platforms (AWS, Serverless, managed services, containers, etc)
• Excellent soft skills - able to handle pressure in a fast-paced environment. Open-minded, creative and innovative.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• In-depth knowledge of security frameworks, standards, and best practices.
• Proficiency in security technologies (e.g., SIEM, IDS/IPS, firewalls, endpoint protection).
• Strong understanding of network protocols, operating systems, and application security.
• Excellent problem-solving, analytical, and decision-making skills.
• Strong leadership, communication, and collaboration abilities.
• Ability to manage multiple projects and priorities in a fast-paced environment.

Cloud Security Engineer (AWS | Security | IAM | OWASP)

Working Hours: Mon-Fri 830am to 6pm

Working Location: Central

Remuneration Package: Basic X 13months + Bonus + Attractive Staff benefits

Responsibilities:

• Protects system by defining access privileges, control structures, and resources.
• Safeguards information system assets by identifying and solving potential and actual security problems.
• Recognizes problems by identifying abnormalities; reporting violations.
• Determines security violations and inefficiencies by conducting periodic audits.
• Consolidate root cause analysis of past pentest results.
• Upgrades system by implementing and maintaining security controls.
• Require periodic after-hours/weekend support.

Requirements:

• Min 3years AWS Cloud Security, Security Hub, Guard Duty, Inspector, etc.
• Strong understanding of SSDLC and security frameworks.
• Hands on experience with vulnerability scanning and pentesting tools.
• Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations.
• Experience with identity and access management architectures and solutions including AD, RBAC, SSO, identity lifecycle management.
• Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security
• Certifications in OSCP / CISSP / SANS / Other relevant security certifications.

If you are excited by the above opportunity and challenges and enjoy making things happen, do apply now! OR

Email your resume to: [email protected] (indicating Job ID J43602 for faster processing).

• By submitting your resume, you consent to the collection, use, and disclosure of your personal information in line with ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).
• This authorizes us to contact you about potential alternative job openings beyond the positions you have initially applied for.
• Sensitive personal data that is not required at this stage of job application may be deleted accordingly.
• If you wish to withdraw your consent, please write to [email protected].

Low Yong Wei (Wyman) - R1550983

ScienTec Consulting Pte Ltd - 11C5781

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Your new company

This is a multinational investment bank.

Your new role

• Develop and implement a comprehensive cloud DLP security strategy that aligns with the organization's goals and compliance requirements.
• Design and architect secure cloud solutions, considering aspects such as network security, identity and access management (IAM), encryption, and data protection.
• Ensure that cloud security practices adhere to industry standards and regulatory compliance, such as GDPR, HIPAA, or SOC 2.
• Develop high-level presentations tailored for executives and stakeholders.

What you'll need to succeed

• Minimum of 5 years of experience in cloud security.
• Proficiency in AWS specifically for incident handling.
• Strong experience in using Splunk for monitoring.
• Certified Cloud Security Professional (CCSP) preferred.

What you'll get in return

• Challenging yet fulfilling career with an equal opportunity employer.
• Various opportunities to learn and upgrade your skill sets
• Competitive remuneration package and benefits

What you need to do now

If you’re interested in this role, click ‘apply now’ to forward an up-to-date copy of your CV, or call Shabnam at Hays on +65 60271964 or email [email protected] for a confidential discussion.

Referrals are welcome.

Registration ID No. R1873584 | EA License number: 07C3924 | Company Registration No. 200609504D

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Senior Security Engineer

We are looking for an experienced and proactive Senior Security Engineer for one of our clients. Reporting to the Senior Security Manager, the Senior Security Engineer will manage security incidents, conduct threat hunting with SIEM/SOAR tools, and support IT audits. You’ll oversee vulnerability assessments, security training, and IT security for vessels. Additionally, you lead security projects, provide advisory for projects, and engage with external parties on cyber threats.

The ideal candidates would have at least 3-5 years of relevant experience in IT and Cloud Security. He/she will have good communication skills, be resourceful, self-organized and a good team player.

Responsibilities

· Security Incidents

o Perform investigations of Security incidents.

o Perform threat hunting using SIEM and SOAR tools.

o SIEM/SOAR Tools: Hands-on experience with security monitoring tools like Microsoft

Sentinel or other relevant SIEM and SOAR platforms.

· Audit and Governance

o Participate in internal and external IT audits.

o Maintain Incident Response Plans and IT policies.

o Perform Vulnerability Assessment and Penetration Testing.

o Conduct Security awareness training for the organization.

o Conduct phishing campaigns.

o Design and review IT/Cyber security architectures.

o Works with external parties (eg; CSA, MPA) on the latest cyber threats and trends.

o Assist in vessel IT security setup, review, audit and remedial actions.

· Projects

o Manages Security related projects.

o Acts as Security Advisory for all projects.

o Participate in Request for Proposal and Request for Quote process.

Requirements

Education & Knowledge

· Degree in Information Security, Computer Science or related disciplines with at least 3 years of relevant experience.

· Knowledgeable in IT Security, Cloud Security, and security standards such as NIST, ISO 27000 and IMO.

· Azure Cloud Security: Strong expertise in Azure Security Center, Microsoft Defender for Cloud, and Azure Policy for real-time cloud threat management and compliance.

· IT Security Management experience of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc will be an advantage.

· Knowledge managing network security devices (NextGen Firewalls, IDS, IPS, UTM, NAC, AV, etc.), Windows, Linux, and networking service will be an advantage.

· Preferred Certifications: CCSP (Certified Cloud Security Professional) and Azure Security Engineer Associate are highly preferred, in addition to other certifications such as CISSP, CISM, or CEH.

· Strong hands-on knowledge and experience with security architecture and implementation of Azure Cloud Computing (IaaS, Containers, AKS, DevOps, CI/CD) is mandatory.

· Proficiency in automating security workflows within CI/CD pipelines, focusing on Azure DevOps integration.

· Ideally completed 2 or more of the following certifications: SC-200, SC-300, AZ-500, MS-500 and SC-100.

· Knowledge of Vessel IT will be an advantage.

· Maritime Cybersecurity: Familiarity with maritime cybersecurity standards such as IMO guidelines and TMSA (Tanker Management and Self-Assessment) is a strong advantage for vessel IT security.

Others

• UK MNC and good corporate culture

• 5-day work week (Centralised location)

To apply, please send your CV to [email protected]

We regret that only shortlisted candidates will be notified.

As an Information Security Engineer, you will play a crucial role in our Security Operations Center. Your responsibilities will include monitoring, detecting, investigating, analyzing, and responding to security events within our IT infrastructure, including Operational Technology (OT) systems. Your expertise in cybersecurity frameworks, risk management, and incident response protocols will help fortify our defenses. A thorough understanding of Operational Technology security principles is essential, as you will oversee the integration of security practices in both IT and OT environments to protect our critical infrastructure. You will also apply Scaled Agile Scrum methodologies to coordinate technical meetings and manage security projects efficiently.

Roles and Responsibilities

• Design and implement advanced security architectures for IT and OT environments to ensure robust protection against emerging threats.
• Lead the development and integration of custom security solutions tailored to the specific needs of our digital and physical infrastructures.
• Conduct high-level vulnerability assessments and penetration testing to evaluate the security of IT and OT systems.
• Develop and refine incident response strategies to enhance our ability to respond to and recover from security breaches swiftly and effectively.
• Collaborate with IT and OT teams to ensure seamless integration of security technologies across all platforms.
• Serve as the technical lead on projects involving cybersecurity technologies, ensuring compliance with industry standards and regulatory requirements.
• Mentor junior engineers and analysts, providing guidance on complex technical issues and fostering a culture of technical excellence and innovation.
• Stay current with the latest cybersecurity technologies and trends, applying this knowledge to continuously improve our security posture.
• Prepare and present detailed technical reports and security briefings to senior management, offering strategic recommendations based on your assessments and findings.

Requirements

• A master’s degree in Cybersecurity, Computer Science, Engineering, or a related field, along with significant professional experience in cybersecurity.
• Expertise in designing and managing security solutions for both IT and Operational Technology systems.
• Advanced certifications in cybersecurity such as CISSP, CISM, or GIAC, with specific training in areas like SCADA or ICS security.
• Strong leadership skills with experience in managing complex security projects and leading cross-functional teams.
• Deep understanding of regulatory compliance and security frameworks such as ISO 27001, NIST, SOC 2, and others relevant to IT and OT cybersecurity.

Interested candidates, who wish to apply for the advertised position, please email us an updated copy of your resume.

We regret that only shortlisted candidates will be notified.

EA License No.: 01C4394

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy

Responsibilities:

- Design and implement integration solutions for various physical security systems, including access control, video surveillance, intrusion detection, video analytics and alarm systems

- Ability to understand and address customer requirements and translate them into technical solutions

- Collaborate with product teams to address specific customer needs and feedback

- Design and propose security technology solutions tailored to different verticals

- Collaborate with cross-functional teams to gather requirements and define project scope

- Conduct site surveys and assessments to determine integration needs and best practices

- Conduct POC, demo, testing and setup of security system and video analytics

- Manage and execute projects with strong project management skills

- Develop documentation, including system specifications, integration plans, and user manuals

- Stay updated on industry trends, technologies, and best practices related to physical security

Requirements:

- Bachelor’s degree in Computer Science, Engineering, or a related subject

- Programming skills in Python, C++ and/or Javascript

- Fullstack experience is strongly preferred

- Strong understanding of networking, database management, and software integration

- Familiarity with industry standards and protocols (e.g., ONVIF, BACnet, etc.)

Nice to have:

- Professional experience working with VMS systems and integrating 3rd party solutions

- B2B (Business-to-Business) experience in physical security

- Technical security system certifications (I.e., Gallagher, Genetec, BICSI, Milestone) and/or related IT (i.e., CCNA) certifications preferred

- Possess market knowledge in physical security industry for verticals ie. transportation, commercial building, hospitality, etc.

Key Responsibilities

• Project Management: Oversee sourcing, planning, and delivery of infrastructure security projects, ensuring timely and effective outcomes.
• Tool Implementation: Lead planning and delivery for centralized security platforms, including VA Tools, PIAM, MFA, and Secure Remote Access Tools.
• Security Enhancements: Initiate new security projects to enhance security controls, efficiency, and usability while maintaining compliance.
• Task Monitoring: Track project tasks, escalate delays, and coordinate with stakeholders as necessary.
• Team and Vendor Management: Collaborate with internal teams and external vendors to meet project goals.
• Technology Awareness: Stay updated on emerging security technologies, threats, and vulnerabilities.
• Documentation: Maintain and update all role-related technical documentation.

Required Skills

• Educational Background: Degree in IT or equivalent, with experience in telecommunications or banking.
• Technical Leadership: 2+ years as a technical lead in security-related projects (LAN/WAN, Linux, Windows systems).
• Security Knowledge: Strong understanding of security protocols, cryptography, authentication, and authorization.
• Tool Implementation: Hands-on experience with firewalls, vulnerability assessment, SIEM, PIAM, and endpoint security.
• Network & OS Knowledge: Experience with IP networking, OS-hardening, UNIX, Windows platforms (AD, SCCM).
• Compliance Knowledge (preferred): Familiarity with Singapore Cybersecurity Act 2018, ISO 27001, and CIS hardening guides.
• Certifications (preferred): CISSP, RHSE, MCSE.

Soft Skills

• Communication: Strong interpersonal, presentation, writing, and communication skills.
• Self-Motivated: Ability to work under pressure and adapt to new technologies independently.
• Team-Oriented: Team player with minimal supervision needed.

Position Summary:

Mainly supporting security aspect like firewall checkpoint, security appliances - configuration, troubleshooting, capacity planning. Supporting current operation and deployment of resiliency project.

Roles and Responsibilities:

• Directly reporting to Security Senior Manager
• Assist Architect team on new infrastructure design, implementation, and management of network solutions that form the core infrastructure, ensuring seamless integration across different platforms. This includes procurement of necessary equipment.
• To provide comprehensive product knowledge on the data technology required to deliver, support the networks infrastructure.
• Collaborate with the team to identify network and system needs, monitor performance metrics, troubleshoot, and resolve network-related issues, and implement improvements.
• Deliver project management for network activities encompassing upgrades, deployments, and migrations. Provide technical guidance and user support as required.
• Develop, maintain, and update documentation covering the network environment and operational procedures.
• Generate reports and detailed documentation outlining findings, implemented solutions, and recommendations for further enhancements.
• Oversee network environment to maximize performance, scalability, and minimize downtime.
• Closely coordinate and conform to Change Management policies, process, and procedures on any network changes.
• To implement approved changes, troubleshoot to identify root causes and implement effective solutions.
• Experience on Automating daily network tasks using scripting.
• Be available to provide on-call support as needed.

Qualification/ Requirements:

• Minimum Bachelor in Computer Engineering or equivalent
• Must equipped with CCNP or CCIE
• Network Infrastructure & Hardware: 5+ years experience managing large enterprise network with a strong focus on F5, Palo Alto, Cisco, and CheckPoint Technology.
• Network Devices: In-depth knowledge and proficiency with switches, firewalls, load balancers, routers, and ISE.
• Network Design & Troubleshooting: Expertise in designing, monitoring, and network & incident management (LAN, WAN, VPN).
• Experience with automation tools: Ansible, Python
• Experience with Deployment and automation, advantage to have experience building data center
• Proven track record of success in a fast-paced IT environment.
• Excellent communication and interpersonal skills, allowing you to effectively collaborate with both technical and non-technical stakeholders.
• Ability to work under pressure and delivery the project on time with minimum supervision.
• Certified and experienced with the mentioned technologies.
• 2 years contract

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

About GlobalFoundries
GlobalFoundries is a leading full-service semiconductor foundry providing a unique combination of design, development, and fabrication services to some of the world’s most inspired technology companies. With a global manufacturing footprint spanning three continents, GlobalFoundries makes possible the technologies and systems that transform industries and give customers the power to shape their markets. For more information, visit www.gf.com.

Job Scope

Protects Company's People, Assets, and Intellectual Property.
Typically performs one or more of the following in capacity of either an individual contributor (as directed and/or independently), or as a manager:
Develops and deploys Security Measures and Timely and Accurate Intelligence across APAC region.
Lead Security Risk Assessments Program in a complex semiconductor environment with many regional offices.
Empowers risk-based and collaborative decisions in support of current and future business opportunities and operations
Protects the organization's employees, properties and all items of value on premises from any preventable harm or danger
Develops security policies and procedures that comply with government guidelines and standards
Conducts investigations to protect organization assets
Responds to contingency events, including but not limited to bomb threats, sabotage and severe weather conditions through on-site security force or with the assistance of government law enforcement agencies
Manage security manpower services contracts, systems and control across APAC region.
Perform all activities in a safe and responsible manner and support all Environmental, Health, Safety & Security requirements and programs.
Must be able cohesively work and collaborate with internal and external shareholders on projects and or assignments as needed.
Exhibits leadership qualities that could include mentorship of junior colleagues as well as direct management of other Security Professionals
Mentor colleagues with guidance to support them in operational roles potentially including future management responsibilities within the Principal Engineer Position.
Implements best practices from local and global best Security practices through internal and external sources.
Utilize Security networking across the industry to implement best practices through technology improvements to bring GF Security to the leading edge of Semiconductor Foundries.
Uphold GlobalFoundries Integrity and Ethics standards in all actions and decisions
See description for career level for general proficiency levels pertaining to Job Complexity, Accountability, Relationship Focus, and Knowledge, Skills & Abilities. These proficiency levels apply to all career levels. Some requirements may vary locally.

Job Complexity
Shows mastery of many aspects within one technical discipline, with group-wide recognition as a senior member of a technical team.
Initiative and creativity result in significant changes to existing processes and methods, leads development and implementation.
Solves complex, novel and non-recurring problems.
Contributing inventor on a few patents
Contributes to conference or journal publications

Accountability
Works on small projects or on sets of tasks of large projects and assignments.
Trains and guides others in the own work area on technical skills as needed; ability to break down information for internal and external customers in a systematic and communicable manner.
Participates in and/or leads (project) teams

Relationship Focus
Limited and supervised contact at engineering level.
Maintains awareness of industry trends.
Actively engages with suppliers (demos, in-house work).
Attends consortia technical reviews.

Knowledge, Skills & Abilities
Specialized knowledge, imaginative thinking and sophisticated analytical techniques.
Requires a technical (University) degree.
BS + 4-5 years of experience or
MS + 2-4 years
PhD + 1-2 year

GlobalFoundries is an equal opportunity employer, cultivating a diverse and inclusive workforce. We believe having a multicultural workplace enhances productivity, efficiency and innovation whilst our employees feel truly respected, valued and heard.
As an affirmative employer, all qualified applicants are considered for employment regardless of age, ethnicity, marital status, citizenship, race, religion, political affiliation, gender, sexual orientation and medical and/or physical abilities.
All offers of employment with GlobalFoundries are conditioned upon the successful completion of background checks, medical screenings as applicable and subject to the respective local laws and regulations.

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

- Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)

- Guide IT managers of the group companies per the headquarters' directive.

- Effectively manage and analyze system logs on an ongoing basis.

- Remain updated about the latest security vulnerabilities and take immediate action if necessary.

- Collaborate with internal and external parties to ensure secure, smooth operations.

- Handle client inquiries about our proprietary applications.

- Automate redundant tasks using programming language skills.

- Regularly monitor and maintain system metrics dashboard and alerts.

- Educate colleagues and enhance company documentation about our IT infrastructure.

- Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

- At least 5 years of extensive experience in IT-related fields.

- Proficient reading and writing skills in Japanese.

- Exceptionally good communication and interpersonal skills.

- Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.

- Strong ability to configure SIEM and Power BI tools.

- In-depth familiarization with account management and data security.

- Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

- Proficiency in additional languages such as Chinese, Malay, or Thai.

- Proven experience with Cyber Incident Response Plan (CIRP).

- Expertise in vulnerability management, penetration testing, and implementing security incident response processes.

- Extensive experience in developing, implementing, and maintaining security policies.

- Knowledge of network security design and implementation.

- Experience in using vulnerability scanning tools and security tools.

- Proven record of enhancing cloud security through policy implementation and monitoring.

- Experience in promoting social engineering and phishing countermeasures.

- Ability to provide in-house security training.

- Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.