Job Summary:

We are seeking a proactive and skilled Security Analyst to join our cybersecurity team. In this role, you will implement and maintain a robust security architecture blueprint covering DevSecOps, applications, infrastructure, and operational security. You will engage in vulnerability scanning, manage access controls and SIEM tools, and support auditing processes while maintaining high standards in security operations.

Key Responsibilities:

Security Architecture and Access Management:

· Design and implement security architecture blueprints to support secure interactions between applications and systems.

· Define processes, provisioning, and interfaces, providing actionable recommendations to enhance security.

· Manage and enforce access control policies across the environment.

Vulnerability Scanning and Issue Resolution:

· Conduct and engage in security vulnerability scanning activities, including HCR, NVA, Pen Testing, SAST, and DAST.

· Analyse findings and implement effective resolutions.

Security Operations Management:

· Oversee and operate tools such as Access Management and SIEM (e.g., IBM Security Verify Access, IBM Qradar).

· Facilitate external auditing processes and ensure compliance with regulatory standards.

Operational Security Processes:

· Perform OS-level and application-level patching to address vulnerabilities.

· Implement and follow procedures for server and application hardening.

· Execute security incident detection, reporting, and resolution processes.

· Manage SSL certificate renewals and operational housekeeping tasks.

Technologies & Tools:

· OS Administration (Linux / Windows)

· IBM Security Verify Access

· IBM Qradar

· Thales HSM

· OpenSSL

· Vulnerability and Penetration Testing Tools (e.g., Tenable Nessus, Burp Suite Enterprise)

Required Skills and Qualifications:

Must-Have Skills:

Experience:

· Minimum 2+ years of experience in IT Security.

Certifications:

· Preferably certified in CISSP, CCSP, CCSK, or equivalent certifications.

Cybersecurity Expertise:

· Hands-on experience in at least 1-2 areas of cybersecurity domains such as Identity Access Management, Security and Risk Management, Application and Network Security, and Vulnerability Management.

· Broad understanding of other cybersecurity domains.

Good-to-Have Skills (Optional):

· Experience planning and executing SSAT, Security Compliance Checks, DAST, and SAST activities.

12-hr rotating shift, 7.30am - 7.30pm, 7.30pm - 7.30am

Responsibilities

• Responding to intrusion alarm system activations
• Performing maintenance services on alarm systems
• Commissioning new alarm systems
• Attending to customer requests regarding alarm and card access systems
• Conducting night patrols

Requirements

• High level of energy
• Good interpersonal communication skills
• Valid Class 3 license
• Min 1 year of working experience
• Enhanced Basic Security certification is an added advantage
• Ability to work 12-hour rotating shifts

Please submit your updated resume by using the APPLY NOW BUTTON

By submitting your personal data and/or resume to us in connection with your job application, you will be deemed to have agreed and consented to us in collecting, using, retaining, and disclosing your personal data and/or resume to prospective employers for the purpose of the evaluating, processing and administration by company relating to this job application.

We regret to inform that only shortlisted candidates would be notified

We wish you all the best in your career search.

You are welcome to visit our website at www.rdtpsg.com

RD Trusted Partners Pte Ltd| EA License No.: 24C2352

Devon Yang Yue Teng | EA Personnel No.: R24123723

Job Description

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success, we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking for Security Engineer who has proven track record in IT Industry. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Security Engineer

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.


Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected] Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS:

Consultant Name : Seema Verma

Avensys Consulting Pte Ltd

EA Licence 12C5759

Privacy Statement:

We take your personal data protection seriously and adhere to both EU and local data protction regulations.

Upon submission of your CV, you grant Avensys Consulting permission to retain your personal information in our electronic database, unless you specify otherwise. This data will be used to evaluate your suitability for current and potential job openings within our organization. Should you wish to have your personal data removed at any point, a simple notification to us will suffice.

Rest assured, we will not disclose your personal information to any third parties, and we remain steadfast in our commitment to providing equal opportunities to all applicants.

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with).

• Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.


Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

Requirements:

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes

- OS level patching
- Application-level patching
- Operational housekeeping and archival.
- Server and application hardening procedure & steps
- IM8 policy
- Vulnerability Assessment
- Security Incident detection and reporting
- SSL certificate renewal

Technologies & Skills Required:

• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:

• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

Good to have skills (Optional):

• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

Next Step:

• Prepare your updated resume (please include your current salary package with full breakdown such as base, incentives, annual wage supplement, etc.) and expected package.
• Simply click on 'Apply here' to drop your resume or email at [email protected]
• All shortlisted candidates will be contacted.

Saghana Sithara | Registration Number: R1550224

Position Overview:
We are seeking a skilled and motivated IT Security Specialist to join our team. The ideal candidate will play a pivotal role in implementing and managing security architecture, ensuring compliance with security standards, and mitigating risks through effective vulnerability management. This position demands expertise in IT security tools and methodologies, a proactive approach to incident detection and resolution, and familiarity with operational security processes.

Key Responsibilities:

• Security Architecture Implementation:Develop and implement a security architecture blueprint encompassing DevSecOps, application, infrastructure, and operational security.
  Define processes, provisioning, and interfaces for secure application interaction.
  Provide expert recommendations on security practices and improvements.
  
• Access Management and Control:Manage and optimize access control processes and tools.
  Oversee access management systems, ensuring secure and compliant operations.
  
• Vulnerability Management:Execute security vulnerability scanning activities, including HCR/NVA, Pen Testing, SAST, and DAST.
  Analyze and resolve findings from security assessments and audits.
  
• Operational Security Management:Oversee OS and application-level patching, operational housekeeping, and archival processes.
  Implement server and application hardening procedures, following IM8 policies and vulnerability assessment standards.
  Handle security incident detection, reporting, and SSL certificate renewals.
  
• Audit Facilitation:Support and facilitate external auditing processes to ensure compliance with security frameworks.
  

Technologies & Skills Required:

• OS Administration (Linux/Windows).
• Expertise in security tools, including:IBM Security Verify Access
  IBM QRadar
  Thales HSM
  OpenSSL
  Tenable Nessus
  Burp Suite Enterprise
  

Requirements:

• Minimum 2+ years of experience in IT Security.
• Professional certifications such as CISSP, CCSP, CCSK, or equivalent are preferred.
• Proficiency in 1-2 Cyber Security domains, such as Identity Access Management, Security and Risk Management, Application/Network Security, or Vulnerability Management, with a broad understanding of other areas.

EA License number: 11C4879

Job Description

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal
Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.


Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.


Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

12-hr rotating shift, 7.30am - 7.30pm, 7.30pm - 7.30am

Responsibilities

• Responding to intrusion alarm system activations
• Performing maintenance services on alarm systems
• Commissioning new alarm systems
• Attending to customer requests regarding alarm and card access systems
• Conducting night patrols

Requirements

• At least a Higher Nitec qualification
• High level of energy
• Good interpersonal communication skills
• Valid Class 3 license
• Min 1 year of working experience
• Enhanced Basic Security certification is an added advantage
• Ability to work 12-hour rotating shifts

Devon Yang Yue Teng

EA License No: 24C2352

Reg No: R24123723

Role Summary

The role is responsible for delivering and managing cloud security and endpoint security services, assessing policies and rules, safeguarding SaaS applications, data and endpoints. You’ll collaborate with colleagues supporting network and architecture assessment, threat modeling, vulnerability assessment, and security operations. This position supports the Enterprise Security Transformation practice and is focused on engineering secure methods of utilizing cloud infrastructure services and software to improve the overall security posture. Cloud security engineers may instruct other teams on proper coding methods. They may also investigate, create, and recommend innovative technologies or other methods that will enhance the security of cloud-based environments.

Roles and Responsibilities

• Protects system by defining access privileges, control structures, and resources.
• Safeguards information system assets by identifying and solving potential and actual security problems.
• Recognizes problems by identifying abnormalities; reporting violations.
• Determines security violations and inefficiencies by conducting periodic audits.
• Consolidate root cause analysis of past pentest results.
• Upgrades system by implementing and maintaining security controls.
• Require periodic after-hours/weekend support.
• Any other duties assigned by the Team Lead/Solution Architect.

Job Requirements

• 3 years experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector, etc.
• Strong understanding of SSDLC and security frameworks.
• Knowledge in OWASP Security Standards.
• In-depth knowledge of architecture, engineering, and operations of at least one enterprise IDS/IPS/SIEM platform.
• Hands on experience with vulnerability scanning and pentesting tools.
• Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations.
• Experience with identity and access management architectures and solutions including AD, RBAC, SSO, identity lifecycle management.
• Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security
• Experience with Linux administration, shell scripting, and open-source security tools.
• Knowledge of security best practices in hardening and protecting cloud environments, networks, servers, endpoints, applications, and databases.
• Certifications in OSCP / CISSP / SANS / Other relevant security certifications.
• Excellent interpersonal skills, team player and independent worker.
• Ability to operate in a fast-paced work environment and deliver under pressure.
• AWS certification will be an added advantage.

IT SECURITY engineer

We are a leading Regional IT and Cyber Security system integrator headquartered in Singapore with a presence in Malaysia & the Philippines. We are hiring talented individuals with a positive attitude to join us. We run SOC, a cybersecurity consultancy, and other professional services to local and regional customers.

Primary Functions:

· Responsible for providing technical assistance and support related to computer systems, hardware, or software

· Responds to queries, run diagnostic programs, isolate the problem, and determines and implements a solution

· To ensure that clients get prompt and quality service

· To document troubleshooting and problem-resolution steps

· To participate and provide knowledge transfer to customers when necessary

· Professional services implementation including but not limited to Linux, Wintel Server, Networking, CyberSecurity project implementation

· Create training manuals, documentation, and knowledge transfer documents

· Install and modify computer & Infrastructure based on in-house best practices

· To implement security control on the system and network devices

· Follow up with customers to ensure the issue has been resolved

· Provide technical assistance and support for queries and issues related to computer systems, Local area network (LAN), Wide area network (WAN), and other hardware/software via phone, email, and/or onsite according to stipulated SLA

Requirements and Skills:

· Diploma holder in IT and other IT Security certifications will be a plus

· Minimum 1-year experience in IT

· Fresh graduates are welcome as we will provide relevant training

· A good understanding of IT network, data storage, network, Wintel Server

· Resourceful, creative, independent, and able to work well in a team

· Required to work on-site when necessary

· Taking ownership of technical issues and working with customers and partners to resolve more advanced issues when necessary.

· Good written and verbal skills; excellent phone and email manners.

· Understanding of TCP/IP, OSI Layer, network security, Internet, DNS, network routing, switching, SMTP email, Linux, and Microsoft Windows

Other Information:

· Office Location: 67 Ayer Rajah Crescent #02-10 S139950

· Working hours: Mon-Friday, 9 am-6 pm

· Depending on the season and customer request may require to work outside working hours

· Monthly basic salary commensurate with qualifications and experiences

· Other benefits such as annual leave, medical, insurance, training opportunities, regional exposures, etc

· Additional performance bonus based on individual contribution towards company strategy and its financial performance

Contact: [email protected]

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernizing, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities

• We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on customer.
• The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team. 
• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges. 
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment. 
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.  Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities. 
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Cloud platform. 
• Stay connected with the latest security trends throughout various industry verticals
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities

Minimum Qualifications (MQs) 

• Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience. 
• Coding experience in one or more general purpose languages. 
• Experience managing customer projects to completion, working with engineering teams, sales and partners. 
• Experience architecting, developing, or maintaining secure cloud solutions. 
• Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications 

• At least 10+ Year work experience of security architecture and/or security engineering experience  Hands on and deep knowledge of security principles. 
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles. Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks. 
• Strong practical experience securing Kubernetes and containerized workloads.

Being a specialist in the areas of Operational Technology Cyber Security, including Risk Assessment, Vulnerability Assessment and Penetration Testing;

• Perform technical reviews of cybersecurity solutions, servers, network devices (SCADA, DCS and PLC system and applications)
• Design and execute project by providing technical support, site installation, integration, testing and documentation
• Provide site support in FAT & SAT at clients' location
• Provide technical advice on solution alternatives, corresponding risks and implications
• Keep abreast of new developments in cybersecurity practices and technologies, as well as emerging threats and vulnerabilities

Requirements

• Bachelor’s Degree in Computing, Engineering, Information Security, Cyber Security or equivalent
• Minimum 2 years' of relevant experience
• Strong project management and communication skills (written and spoken)
• Knowledge of risk assessment & VAPT tools, technologies and methods for IT/OT security
• Possess information security certifications or related security product certifications such as CISSP, CISA, CEH, CREST Penetration Testing or equivalent
• Those familiar with ISA/IEC62443, NIST standards will have added advantage
• Candidates should have passion for OT security, is self-driven and independent
• When necessary, willing to go to critical infrastructure sites such as water treatment plant, power plant, manufacturing plant etc.

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire a Security Engineer/ Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

JOB TYPE

Long Term Contract

ROLES AND RESPONSIBILITIES

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
• OS level patching
• Application-level patching
• Operational housekeeping and archival.
• Server and application hardening procedure & steps
• IM8 policy
• Vulnerability Assessment
• Security Incident detection and reporting
• SSL certificate renewal

REQUIREMENTS

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected]. Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS

Consultant Name: Keerthana Ramakrishnan

Avensys Consulting Pte Ltd

EA License 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.

Responsibilities:

• Designing, implementing, and managing security solutions to protect against cyber threats while ensuring seamless IT Infrastructure, Servers and Applications performance.
• Continuously optimize existing IT Infrastructure, Servers and Applications security policies and models, monitor and respond to threat detection event alerts and response handling, and enhance overall detection levels and coverage.
• Be responsible for vulnerability management (CVE, CVSS, OWASP Top 10), container, network & systems security, as well as cloud security tools and services
• Design, configure, and maintain firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and other security devices.
• Monitor and analyze security events and logs to identify potential vulnerabilities and incidents.
• Threat Prevention & Incident Response: Identify, investigate, and resolve security breaches and incidents.
• Develop and implement strategies to mitigate identified risks and vulnerabilities.
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Conduct regular audits of IT Infrastructure, Servers and Applications security to ensure compliance with security policies.
• Maintain compliance with industry standards such as ISO 27001, GDPR, or SOC 2.
• Create and maintain detailed network diagrams and security documentation.
• Work closely with IT teams to ensure robust security integration across systems.
• Educate employees on security best practices and emerging threats.
• Manage tools like SIEM, antivirus solutions, IDS/IPS and DLP software.
• Stay updated with the latest technologies, trends, and vulnerabilities in cybersecurity.

Requirements:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Relevant certifications (e.g., CISSP, CEH, CCNP Security, Palo Alto PCNSA) are a plus but not mandatory.
• 7 to 12 years of experience in the designing, implementing, and managing of IT Infrastructure, Servers and Applications security according to industry standards such as ISO 27001, GDPR, or SOC 2.
• Expertise in one or more IT Security Engineering topics, such as Secure Browsing, PAM, PKI, or Multifactor Authentication.
• Proven ability to contribute to the development of architecture, concepts, and processes in IT security.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.), firewalls, VPNs, intrusion detection / prevention systems (IDS/IPS), vulnerability management (CVE, CVSS, OWASP Top 10) and etc.
• Proficiency in firewall technologies (e.g., Fortinet, Palo Alto, Cisco ASA).
• Experience with vulnerability scanning tools and penetration testing.
• Experienced with cloud environments and cloud security principles. Knowledge in AWS/Azure cloud security tools and services.

Key Roles and Responsibilities:

• Lead and direct projects and ensure they are directed towards a common objective
• Engage and communicate with stakeholders to deliver project milestones and comply with strict deadlines
• Ensure client satisfaction and manage escalations, acting as single point of contact to the client
• Ensure that the project delivers as-sold solution, remains within the baseline budget and is delivered on time whilst maintaining quality criteria and client satisfaction
• Coordinate activities of the project teams through task delegation, resource assignment and programme management
• Ensure proper documentation is in order
• Any other duties as assigned

Job Requirement:

• Minimum Diploma in Electronics & Communication Engineering or related field
• Preferably with 2 years’ relevant work experience, or entry level candidates in relevant field of study
• Good communicator with excellent coordination skills
• Ultra-sensitive to deadlines and capable of good resource planning
• Basic technical knowledge on ELV, Automation, Networking and Security Systems (CCTV, Card Access, Alarm System) will be an advantage
• Committed individual with great initiative and strong problem-solving skills
• Candidates from the same industry will be highly preferred
• Only Singaporeans may apply
• This job is suitable for older workers

Please indicate in your profile your expected salary as you apply. Thank you.

Job scopes

• Implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with.
• Define the process, provisioning, interfaces, provide recommendations.
• Securing at scale enterprise BigData Architectures with role-based access controls, DLP tools, monitoring tools to ensure proper data usage & reporting & prevention activities.
• Engage and execute Security Vulnerability Scanning activities ( HCR/NVA/Pen Test/ SAST/DAST activities etc) & resolve findings.
• Familiar with operational security processes
  o OS level patching
  o Application-level patching
  o Operational housekeeping and archival.
  o Server and application hardening procedure & steps
  o IM8 policy

Job requirement

• Bachelor’s degree in Computer science or equivalent
• Minimum 5+ years of experience as a Security Solution Architect
• Familiar with implementing HSM, EDRs, DLP , enterprise antivirus product implementation & operationalization.
• Familiar with container orchestration security (either OpenShift/CloudFoundation/Kubernetes), Securing containers, monitoring traffic. Container repository security, secure images.
• Must have a specialization in 1-2 areas of Cyber domains such as Identity Access Management, Cloud Security, Container orchestration platform security with a broad understanding of other areas.
• Familiar with Gov standard of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with cloud security tools & environment.
• Good to have experience with Thales CipherTrust & HSM., DigitalGuardian DLP Product Suite, vmWare CarbonBlack EDR, TrendMicro DeepSecurity Product Suite, Tenable Nessus, Burp Suite Enterprise
• Must have CISSP/CCSP/CCSK certification or its equivalent

Thank you for your interest!

We respect your privacy and all communication will be treated with confidentiality. If you wish to know more about this position or explore other roles, please prepare your updated profile and get in touch with our consultant at [email protected]

Cristina Malabuyoc Malijan EA License No. 02C3423 Personnel Registration No. R1111547

Please note that your response to this advertisement and communications with us pursuant to this advertisement will constitute informed consent to the collection, use and/or disclosure of personal data by ManpowerGroup Singapore for the purpose of carrying out its business, in compliance with the relevant provisions of the Personal Data Protection Act 2012. To learn more about ManpowerGroup's Global Privacy Policy, please visit https://www.manpower.com.sg/privacy-policy

Job Description: • Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

Zenith Infotech (S) is Tech Recruitment firm with 27 years of presence in Singapore, supporting our clients in terms of ICT Consultant placements since 1997

Currently, we are lookng out for 2 to 3 years of experience a a Security Engineer, with approprate certifications in Cyber Security domain. This requirement is for Singapore Citizens only.

Responsibilities

• Able to implement a security architecture blueprint(from devsecops, application, infrastructure, operational security, for applications to interact with).

• Define the process, provisioning, interfaces and provide recommendations.

• Access management and control.

• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.

• Manage Access management and SIEM tools in the environment.

• Facilitate auditing processes conducted by external parties.

• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required

• OS Administration (Linux / Windows)

• IBM Security Verify Access

• IBM Qradar

• Thales HSM

• OpenSSL

• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.


Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

Role Description

AtomIT Networks Pte Ltd is seeking a highly skilled and motivated Cyber Security Engineer to join our team in Singapore. This is a full-time, on-site role requiring hands-on expertise in Cybersecurity operations and solutions delivery. The Cyber Security Engineer will play a pivotal role in safeguarding our clients' networks, systems, and data against sophisticated cyber threats and vulnerabilities. This position demands a dynamic professional capable of operating in a fast-paced environment with 24x7 standby responsibilities to respond to critical incidents and ensure uninterrupted security operations.

Key Responsibilities

• Design, implement, and manage robust cybersecurity measures to protect networks, applications, and systems.
• Regularly monitor latest cybersecurity news and proactively identify & mitigate potential security risks.
• Monitor and analyze network traffic, logs, and alerts to detect and respond to security incidents promptly.
• Collaborate with cross-functional teams to align security strategies with business objectives.
• Create and update detailed documentation, including implementation plan, procedures, and incident reports.
• Stay updated with emerging threats and security technologies to implement proactive defenses.
• Provide 24x7 standby duty support to address urgent security incidents and maintain system integrity.

Qualifications

• Proven expertise in Cybersecurity, Network Security, and Information Security.
• Proficiency in security technologies such as firewalls, SD-WAN, IDS/IPS, WAF, SIEM, ZTNA, SASE, EDR and etc.
• Familiarity with cloud security across platforms like AWS, Azure, or GCP.
• Relevant certifications such as Fortinet NSE, Cisco CCNP Security, CISSP, CEH, AWS & Azure Security Specialization, or equivalent are highly desirable.
• Strong analytical skills and the ability to troubleshoot complex security challenges.
• Excellent communication and collaboration skills with a proactive, detail-oriented mindset.
• Hands-on experience in Vulnerability Assessment, threat modeling, and risk analysis is a plus point.
• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• Priority will be given to Singapore Citizens and Permanent Residents.

Job Description:

• As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Company Cloud services.
• You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more.
• You will provide prescriptive guidance in ensuring customers receive the best of what Company's Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernising, and maintaining applications in the Cloud.
• Additionally, you will work closely with Product Management and Product Engineering to drive excellence in the Cloud products and features.
• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges.
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment.
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.
• Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities.
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Cloud platform.
• Stay connected with the latest security trends throughout various industry verticals.
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities.

Requirements:

Minimum Qualifications (MQs)
● Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience.
● Coding experience in one or more general purpose languages.
● Experience managing customer projects to completion, working with engineering teams, sales and partners.
● Experience architecting, developing, or maintaining secure cloud solutions.
● Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications (PQs)
● At Least 7 years of security architecture and/or security engineering experience
● Hands on and deep knowledge of security principles.
● Demonstrated experience in Cloud Security delivered within the context of customer facing roles.
● Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks.
● Strong practical experience securing Kubernetes and containerised workloads.

Job Responsibilities & Duties

Principal Job Functions

1. Monitor developing cybersecurity events around the world, and escalate to L2 team if relevant events are observed

2. Performs monitoring, risk assessment and analysis on security tools such as Anomaly Detection systems, Firewalls, Antivirus systems, Proxy devices

3. Follow pre-defined actions to handle security alerts including escalating to L2 team and other support groups

4. Execute daily ad-hoc tasks or lead small projects as needed

5. Participate in daily and ad-hoc documentation related tasks

6. Create and maintain operational reports for Key Performance Indicators and weekly and Monthly Metrics

7. Perform assessment phase of Vulnerability & Threat Management process

8. Receive threat intelligence from feeds the Group subscribed to and update to Threat Intel knowledge base

9. Be ready to support any security incident response investigation in the Group regardless of location and environment

10. Work closely with Team Lead to review, provide feedback and take actions to improve the methodology use in the Security Operations

11. Responsible to ensure all tickets logged are closed correctly and timely

12. Ensure timely submission of routine reports on threats, vulnerabilities and incidents handled by the Security Operations Center

13. Keep the Security Operations Center runbooks and procedures updated

Recommended prerequisites:

1. 1+ years working in security operations, preferably with incident management experience

3. Familiar with security products and network devices

4. Extensive technical experience with network security practices including Intranet, Extranet and Internet access

6. Knowledge of TCP/IP, DNS, web, wireless security architectures and enterprise-grade security solutions

7. Knowledge of encryption and authentication methods such as 2FA, DES/AES/RSA, Digital Certificates, SSL/TLS, IPSec and development of DMZ’s

8. Knowledge of intrusion detection (deep TCP/IP knowledge, and cybersecurity), various operating systems (Windows/UNIX), and web technologies (especially internet security)

Shift Works: This is a 24-by-7 shift work (working in 3 shift morning, afternoon & Night for 8 hours)

---------------------------

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

We are looking for a skilled Security Engineer to join our team for a 1-year contract. The successful candidate will bring strong expertise in information security and hands-on experience managing security projects from start to finish.

Responsibilities:

• Lead and execute security projects across various domains, including endpoint, network, and application security.
• Implement and manage security tools, such as Web Proxy, Endpoint Protection, Email Security, and Vulnerability Scanners.
• Assess system security through threat modeling and propose effective solutions.
• Explore and integrate emerging security technologies to strengthen the organization’s security posture.
• Collaborate with teams to ensure secure deployment and operation of cloud environments.

Requirements:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related field.
• At least 4 years of experience as a Security Engineer, with deep expertise in one or more security domains.
• Minimum of 2 years of hands-on experience managing and delivering security projects.
• Familiarity with key security tools and frameworks.
• Security certifications (CISSP, CISM, AWS Certified Security, etc.) are highly desirable.
• Experience with cloud security is an added advantage.

This role is a great opportunity to work on impactful security projects in a dynamic environment.

We are looking for a skilled IT Security Engineer to join our client for a 1-year direct contract. The successful candidate will bring strong expertise in information security and hands-on experience managing security projects from start to finish.

Responsibilities:

• Lead and execute security projects across various domains, including endpoint, network, and application security.
• Implement and manage security tools, such as Web Proxy, Endpoint Protection, Email Security, and Vulnerability Scanners.
• Assess system security through threat modeling and propose effective solutions.
• Explore and integrate emerging security technologies to strengthen the organization’s security posture.
• Collaborate with teams to ensure secure deployment and operation of cloud environments.

Requirements:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related field.
• 5 years experience in IT Security, with deep expertise in one or more security domains.
• 3 years hands-on experience in end-to-end IT security projects or project delivery.
• Familiarity with security tools and frameworks.
• Security certifications (CISSP, CISM, AWS Certified Security, etc.) are highly desirable.
• Experience with cloud security is an added advantage.
• Thrives in fast-paced and demanding environments.

This role is a great opportunity to work on impactful security projects in a dynamic environment.

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

- Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)

- Guide IT managers of the group companies per the headquarters' directive.

- Effectively manage and analyze system logs on an ongoing basis.

- Remain updated about the latest security vulnerabilities and take immediate action if necessary.

- Collaborate with internal and external parties to ensure secure, smooth operations.

- Handle client inquiries about our proprietary applications.

- Automate redundant tasks using programming language skills.

- Regularly monitor and maintain system metrics dashboard and alerts.

- Educate colleagues and enhance company documentation about our IT infrastructure.

- Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

- At least 5 years of extensive experience in IT-related fields.

- Proficient reading and writing skills in Japanese.

- Exceptionally good communication and interpersonal skills.

- Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.

- Strong ability to configure SIEM and Power BI tools.

- In-depth familiarization with account management and data security.

- Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

- Proficiency in additional languages such as Chinese, Malay, or Thai.

- Proven experience with Cyber Incident Response Plan (CIRP).

- Expertise in vulnerability management, penetration testing, and implementing security incident response processes.

- Extensive experience in developing, implementing, and maintaining security policies.

- Knowledge of network security design and implementation.

- Experience in using vulnerability scanning tools and security tools.

- Proven record of enhancing cloud security through policy implementation and monitoring.

- Experience in promoting social engineering and phishing countermeasures.

- Ability to provide in-house security training.

- Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.