Total 199 supply chain analyst job vacancies in Legal / Public / Security category in Singapore

Security Analyst

• 12 months contract
• Work location: CBD

The Opportunity

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.

Your Background

• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.
• Only Singaporeans
• Familiar with operational security processes
  o OS level patching
  o Application-level patching
  o Operational housekeeping and archival.
  o Server and application hardening procedure & steps
  o IM8 policy
  o Vulnerability Assessment
  o Security Incident detection and reporting
  o SSL certificate renewal
  
  Technologies & Skills Required
  • OS Administration (Linux / Windows)
  • IBM Security Verify Access
  • IBM Qradar
  • Thales HSM
  • OpenSSL
  • Tenable Nessus, Burp Suite Enterprise

Interested parties please click "Apply Now" or contact May Anne Ramos (EA Reg no: R1110127) at [email protected] for more information.
Peoplebank Singapore Pte Ltd, EA Licence Number: 08C5248.

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire a Security Engineer/ Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

JOB TYPE

Long Term Contract

ROLES AND RESPONSIBILITIES

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
• OS level patching
• Application-level patching
• Operational housekeeping and archival.
• Server and application hardening procedure & steps
• IM8 policy
• Vulnerability Assessment
• Security Incident detection and reporting
• SSL certificate renewal

REQUIREMENTS

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected]. Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS

Consultant Name: Keerthana Ramakrishnan

Avensys Consulting Pte Ltd

EA License 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.

Title: IT Security Analyst

The suitable candidate will join a team of engineers and operations specialists in the support of enterprise privileged access management infrastructure and operations. He/She will be responsible for the end to end design, deployment, operations and development of the bank’s privileged access management framework, infrastructure and processes.

Key responsibilities

Drive the automation and integration of privileged access management infrastructure to other systems to achieve straight through processing and reduce manual work.

Provide on-going operations support including management reporting and operations dashboards relating to the governance oversight of privileged accounts and passwords.

Requirements

5+ Years of CyberArk Experience:

Demonstrated expertise in the deployment, configuration, management, and support of CyberArk infrastructure components. Proven ability to provide regional support and integrate CyberArk solutions via APIs. CyberArk certifications are preferred to validate knowledge and skills.

Scripting and Reporting:

Proficient in writing PowerShell scripts and SQL statements to develop comprehensive management reports focused on the usage and operational management of privileged accounts. This includes automating reporting processes and ensuring accurate data presentation for stakeholders.

Data Visualization: Experienced with Grafana for creating data visualizations and dashboards, enabling real-time insights into access management and security posture. Skilled at translating complex data sets into understandable visual formats for better decision-making.

Privileged Access Management: Strong understanding of enterprise privileged access management principles, encompassing risk management, compliance, governance, and control. Ability to develop and enforce policies that mitigate risks associated with privileged access.

Audit Experience:

Extensive experience in responding to audit queries and preparing detailed reports related to access management. Skilled in analyzing audit findings and implementing corrective actions to address compliance gaps. Proven ability to collaborate with internal and external auditors to ensure all necessary documentation is accurate and readily available.

Remediation Expertise:

Extensive experience in remediating CyberArk failed objects to ensure that auto-managed objects comply with security policies and standards. This includes troubleshooting and resolving issues to maintain operational integrity and compliance.

Technical Platform Knowledge:

In-depth knowledge of key operating systems and databases, including Windows, Unix, MSSQL, and MariaDB. Previous experience in administering these platforms enhances ability to manage and secure privileged accounts effectively.

Banking Environment Experience:

Familiarity with working in a banking or financial services environment, understanding the unique regulatory and security requirements involved. This background supports effective implementation of access management solutions tailored to industry standards.

Educational Background:

Bachelor’s degree in Computer Science, Information Systems, or Engineering (or a related field). Alternatively, a combination of relevant professional experience and CyberArk certifications is also acceptable, demonstrating a solid foundation in security practices.

What you'll do:

As a Junior Cyber Security Analyst, your primary role will be to ensure the security and integrity of our client's digital assets. You will intake cybersecurity related requests from internal and external entities that require triage, remediation or escalation. Your excellent problem-solving skills will be put to use as you collaborate with your team members to resolve complex issues. Your commitment to accurate documentation will contribute significantly to record-keeping and analysis.

* Answer incoming calls to assist with information security inquiries or issues.
* Document all interactions accurately for record-keeping and analysis.
* Follow established processes and guidelines to handle common issues.
* Collaborate with team members to resolve more complex problems or escalate as necessary.
* Monitor your assigned queues and work cases in an efficient and effective manner.

What you bring:

The ideal candidate for the Junior Cyber Security Analyst role is someone who has a strong understanding of Cyber Security and Information Technology. Your effective typing skills will enable you to document all interactions accurately, while your strong problem-solving and critical thinking skills will be crucial in handling common issues. Your effective communication and interpersonal skills will allow you to collaborate effectively with team members.

* Effective typing skills
* Familiarity with Cyber Security and Information Technology
* Strong problem-solving and critical thinking skills
* Effective communication and interpersonal skills

What sets this company apart:

Our client is a leading global organisation that values collaboration, commitment, and growth. They offer an inclusive work environment where every employee is valued for their unique contributions. They believe in providing opportunities for learning and development, making it an ideal place for individuals who are eager to grow their careers.

What's next:

Ready to take the first step towards a rewarding career in cybersecurity? Don't hesitate!

Apply today by clicking on the link!

Do note that we will only be in touch if your application is shortlisted. Robert Walters (Singapore) Pte Ltd ROC No.: 199706961E | EA Licence No.: 03C5451 EA Registration No.: R24123088 Josue Hoyos Pardavell

Job Summary:

We are seeking a skilled and dedicated Information Security Analyst/Consultant to join our team. In this role, you will be responsible for advising, assisting, and implementing information security programs for our clients using frameworks such as ISO/IEC 27001:2022 and Cyber Trust Mark, in addition you will also be involve in overseeing the implementation of security solutions to assist clients in improving their information security and cyber security posture. You will work closely with clients to assess their security needs, develop robust security strategies, and ensure compliance with industry standards and are expected to manage client’s requirements and expectations during the consulting process helping them to achieve ISO/IEC 27001:2022 or Cyber Trust Mark Certification.

Key Responsibilities:

• Client Advisory and Consultation: Provide pre-sales support, expert advice and consultation to clients on information security practices and strategies.
• Framework Implementation: Assist clients in developing and implementing information security programs using frameworks like ISO/IEC 27001:2022 and Cyber Trust Mark.
• Security Assessments: Conduct comprehensive security assessments to identify vulnerabilities and recommend mitigation strategies.
• Policy Development: Develop and maintain information security policies, procedures, and guidelines for clients.
• Compliance and Auditing: Ensure client compliance with industry standards and regulatory requirements through regular audits and assessments.
• Risk Management: Identify, analyze, and manage information security risks for clients.
• Incident Response: Assist clients in developing incident response plans and provide support during security incidents.
• Training and Awareness: Conduct training sessions and workshops to raise awareness about information security best practices among client employees.
• Documentation: Prepare detailed reports and documentation for security assessments, policies, and compliance efforts.
• Monitoring Emerging Technologies and Threats: Stay up-to-date with emerging technologies and threats in AI, blockchain, and other relevant fields, and integrate this knowledge into security strategies.
• Security solutions: Understand and learn new cybersecurity solutions and assisting to implement these solutions to improve their security posture.

Qualifications:

• Education: Minimum diploma in Cyber Security, Computer Science, or related field and minimum 3 years of experience in IT or Cyber Security field.
• Certifications: Good to have certifications such as CISSP, CISM, or ISO/IEC 27001 Lead Auditor/Implementer, Certified Ethical Hacker.
• Experience: Proven experience in information security consulting, with a focus on implementing security frameworks like ISO/IEC 27001:2022, NIST, CSA Star and CIS.
• Skills: Strong analytical, problem-solving, and communication skills. Proficiency in security assessment tools and methodologies.
• Knowledge: In-depth knowledge of information security principles, standards, and best practices.
• Project management: Understanding of stakeholder management and managing project lifecycle.

What We Offer:

Opportunities for professional development and career growth. A dynamic and collaborative work environment.

Cybersecurity certification training opportunities

Details of the Division and Team:

Everyday DB observes thousands of cyber security intrusion attempts. Deutsche Bank’s COO Chief Security Office (CSO) integrates both Corporate Security (CS) and Information Security (CISO) as both teams are responsible for mitigating these risks.

The CSO team enables the business of Deutsche Bank by providing agile security operational capabilities.

With their expertise in Threat Intelligence, Data Leakage Protection, Cyber Threat Analytics, Malware Response & Research, Security Monitoring, Incident Response, Forensics and Vulnerability Management, they provide global services from key locations in Frankfurt, Jacksonville and Singapore while leveraging offshore capabilities in Pune and Bucharest.

What we will offer you:

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services.
• Comprehensive leave benefits
• Gender Neutral Parental Leave
• Flexible working arrangements
• 21 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

The Deutsche Bank Chief Security Office is looking for an experienced DLP Information Security Analyst.

Adhering to internal and external policies, the role is required to work in a global team to identify and assess technical and personnel security breaches within a heterogeneous business and technical landscape. This will include working with a variety of technologies and business groups to detect, assess and document the escalation of security alerts and consequence management.

Additionally, the role will require collaboration with control functions as well as businesses to identify information that needs to be protected and controls that are best suited to address these requirements.

The work will also involve utilizing vendor solutions, bespoke control applications and supporting the development of team tasks, such as the continual assessment of preventive and detective controls.

• Continuously monitor DLP systems for alerts and act as a subject matter expert for all data leakage investigations globally across all regions where the bank has a footprint.
• Manage DLP incidents, ensuring coordinated response and timely escalations.
• Document all incidents, actions taken, and outcomes. Prepare detailed reports for management and compliance purposes.
• The incumbent also assumes responsibility for overseeing and coordinating all facets of incident management like initial evaluation, stakeholder management, technical triage, and incident resolution.
• Ensure DLP tools and technologies are maintained, optimized, and regularly evaluated through established cyber risk frameworks.
• Cooperate with control functions to understand regulatory requirements and applicable laws.
• Ability to methodically analyze complex data and requirements and provide accountable SME opinion.
• Design and implement new DLP monitoring use cases. Collaborate with business and control functions to identify sensitive information that needs to be protected.
• Propose ways to improve existing process to achieve better operational excellence via automation.

Your skills and experience:

• Minimum 3 years of working experience in either Data Loss Prevention (DLP) or Security Operations Center, with at least 1 year working in an enterprise-grade Operations Center.
• A Bachelor's degree in Information Technology, Computer Science, or a related field is required.
• Working experience with Data Loss related applications such as Symantec DLP, Digital Guardian; and SIEM tools such as Splunk, Sentinel.
• Working knowledge in IT Fundamentals such as networking, hardware/software.
• Analytical and critical thinking with an inquisitive mindset, collaboration, and conflict management with good communication skills.
• Mentor new team members and provide guidance and directions when required.
• Ability to work in fast paced environment and within tight deadlines.
• Certifications such as Symantec DLP certified specialist, CompTIA Security+, CISSP, Microsoft Information Protection, Certified Data Protection Officer etc.

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we’ll support you:

• Flexible working to assist you balance your personal priorities
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. Click click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

About the company

CGS International Securities Pte. Ltd. (CGS International) is an award-winning and market leading integrated financial services provider, ranked among the top securities houses in Asia.

CGS International taps on our wealth of global and ASEAN insights to offer equities trading, leveraged products, wealth management, investment banking, equities research, Shariah-compliant financing, fixed income, currency and commodities, structured products and prime brokerage services in over 15 countries and regions.

Along with its parent organisation China Galaxy Securities, a leading securities house in China, CGS International is trusted by more than 15 million customers globally.

Job Description

1) Threat Detection:

- Use of tools to scan/ detect/ analyze/ correlate threats

- Manually review to detect/ analyze/ correlate threats

- Participate in design of infrastructure and process of threat detection

- Perform triage of security alerts to filter false positives, classify alerts and determine response type

2) Threat Hunting:

- Collect and analyze data to identify patterns and anomalies that indicate presence of a hidden threat

- Investigate potential threats to determine if they pose a real threat

3) Threat Intelligence:

- Keep up to date of threats reported by reliable internal and external sources

- Maintain samples, logs and records, compromised information that help understanding of attacks

4) Incident Response:

- Inform relevant members and departments of threats and advise of remediation and mitigation

- Coordinate and follow up with all relevant members and departments to collect data and evidences, to ensure completion of remediation and mitgation

- Document all security incidents with records of assessment, investigation, remediation and mitigation

- Maintain playbooks and guide other departments on contributing to them

- Lead and participate actively in security incident response effort

- Lead and participate actively in post-incident reviews to evaluate response effectiveness and recommend improvements

- Conduct, coordinate and debrief simulated exercises on security incident management across departments

5) Requirements Review:

- Insurance coverage of incident response management

- Third party agreement coverage of security monitoring and incident response management

Corporate policies, standards and procedures in security monitoring and incident response management

Job Requirements

• Strong knowledge of information security principles, incident response methodologies, network protocols, logging/detection/response tools (e.g. SIEM, EDR, XDR)
• Proficient in network communications, log analysis, scripting
• Good problem-solving, analytical and communication skills
• Preferably has experience working with cross-geographical teams
• 1-3 years of experience as a Security Operations Analyst or similar role
• Diploma or Bachelor degree in Computing or related field
• Preferably has relevant certifications (e.g. GCIH, GCIA)
• Proactive and independent
• Keen to learn
• Has an eye for detail
• Willing to share and collaborate as a team player

Exciting role in the Public Sector - in the Technology industry!

Salary: $3400-$3800/month

Contract till August 2024, extendable

Job Responsibilities:

• Conduct surveys and design questionnaires that are intuitive and respondent friendly.
• Conduct data cleaning and analysis to translate data into actionable analysis
• Support data requests using in-house statistical tools to prepare the data based on the various data points and cuts as required by line divisions or stakeholders.
• Management and review of survey databases and creation of data visualization platform
• Prepare the layout and proofreading of surveys in hardcopy and electronic formats.
• Programme of the online survey questionnaire in the in-house survey system.
• Test survey validations and rules in the electronic survey platform.
• Conduct random checks of data entered survey forms to ensure data accuracy.
• Perform desktop research on the internet for supplementary information.
• Monitor fieldwork completion rates to ensure timely fieldwork completion.
• Monitor the response rate of every ongoing survey to ensure good representation of the data collected from every sector.
• Update the weekly response rate and monitor the progress of the survey fieldwork.
• Other adhoc duties as assigned

Looking for:

• Singaporeans only
• Min. Degree in Economics, Business Studies or any relevant field of study
• Good knowledge of quantitative research methodologies
• Good knowledge in using statistical software such as R, Python, Tableau
• Self-starter with strong numerical and analytical skills

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:
Contact you about potential opportunities.
Delete personal data not required at this application stage.
To withdraw consent, email [email protected].
All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Chloe Chew (R1768631)
ScienTec Consulting (ScienTec Personnel) - 11C578

- 1-year outsourced contract

- Up to $5,000 + Allowance

- Mon – Fri: 8:30am – 6pm

- AMK

Job Responsibilities:

• Apprised of the current state of computer security in place in the organization
• Technically proficient and up-to-date in basic computer security policies and practices
• Proactive in preventing Cyber-Security Incident
• To perform technical security assessment for IT & Network components - Vulnerability assessment, Penetration testing, Opportunistic Hacking, Web application security testing, Security source code review etc.
• To monitor and track the identified vulnerability, issues and fix detected vulnerabilities to maintain a high-security standard
• Be familiar with browser, Web service, cloud security, mobile applications security, and operating system security concepts
• Understanding of leading vulnerability scoring standards and ability to translate vulnerability severity as security risk
• Perform forensic investigation if required
• Review all security logs

Period:

• 1-year outsourced contract

Working Hours:

• Mon – Fri: 8:30am – 6pm

Salary:

• Up to $5,000 + Support allowance $200

Location:

• AMK

Requirements:

• Degree in Computer Engineering, Computer Science or equivalent, although consideration will be given to experience and certifications in lieu of degree.
• At least 2-3 years' experience in cyber security
• Certifications such as CREST, OSCP and CISSP.
• Special Knowledge or Skills:

1. Perform PenTest, Vulnerability Assessment & Risk Assessment
2. Strong in technical skill
3. Able to handle demanding service response and recovery turnaround
4. Able to manage daily support tasks to meet stringent SLA requirements
5. Excellent scheduling and multitasking skills
6. Meticulous and process-oriented
7. Good, hard-working attitude with ability to work well under pressure
8. Good communication skills English (written, spoken) to serve English-speaking clients
9. Good analytical skills with ability to work with others to resolve problems.
10. Good organization skills, with ability to properly document and track information
11. Dynamic, customer oriented, experience working in a fast paced environment
12. Good Knowledge of following products will be advantageous:

- Splunk

- FireEye

- Tenable

Interested applicants, kindly email your detailed resume (MS Word format is preferred):
[email protected] (Registration no: R1332758)

Please ensure that applications sent through email are no bigger than 1Mb.

We thank all applicants for your interest but regret to inform that only shortlisted candidates would be notified.

Success Human Resource Centre Pte Ltd (EA License Number: 97C4832)

3 Shenton Way, #19-01 Shenton House, Singapore 068805

T: 6337 3183 | F: 6337 0329 | W: www.successhrc.com.sg

· Act as Incident first responder for a 24/7 staffed SOC.

· Monitor security sensors and review logs to identify network anomalies or intrusions.

· Perform initial analysis of security alerts.

· Escalate security incidents using established policies and procedures in a timely manner.

· Work with customers to analysis potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s).

· Performing Response action based on standardize workflow and agreement with clients.

· Assist with the development of incident response plans, workflows, and SOPs.

· Provide threat and vulnerability analysis security advisory services.

· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management.

· Act as Incident first responder for a 24/7 staffed SOC.

· Monitor security sensors and review logs to identify network anomalies or intrusions.

· Perform initial analysis of security alerts.

· Escalate security incidents using established policies and procedures in a timely manner.

· Work with customers to analysis potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s).

· Performing Response action based on standardize workflow and agreement with clients.

· Assist with the development of incident response plans, workflows, and SOPs.

· Provide threat and vulnerability analysis security advisory services.

· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management.

Summary of Role:

Security Analyst is responsible for security monitoring and responding to alerts and events. He/Shewill be creating, tuning, compiling metrics of all security devices, along with documentation of processes and procedures.

This role will require strong analytical and collaboration skills, detailed working knowledge of current and emerging security technologies, as well as the ability to correlate events to identify abnormal behaviour.

Responsibilities:

• Monitor and advice on information security issues related to the systems and workflow to ensure the internal security controls are appropriate and operating as intended.
• Coordinate response to information security incidents.
• Develop and publish information security policies, procedures, standards and guidelines based on knowledge of best practices and compliance requirements.
• Assist with data classification assessment and security audits and remediation plans.
• Collaborate with IT management to manage security vulnerabilities.
• Perform network penetration tests, vulnerability assessment scans and risk assessment reviews.
• Develop, coordinate and review server hardening for platforms used within the environment.
• Review of logs pertaining to security of various platforms, namely server events and logs, network logs.
• Create, conduct and maintain user security awareness.
• Conduct security research in keeping abreast of latest security policies.
• Perform other security related duties as assigned.

Requirements:

• Degree in Computer Science/Information Technology or equivalent.
• At least 3 years’ experience in IT sector.
• Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and above).
• Experience in using security tools (Security Endpoint solutions, HP ArcSight, QRadar, Rapid7 Nexpose, Tenable Nessus).
• Certified with one or more of the following: QISP, CISSP, Cybersecurity Nexus, CompTIA Security+.

Responsibilities

• Apply knowledge on security awareness training, phishing campaign and security tools
• Support ongoing cybersecurity activities i.e phishing campaigns, security awareness trainings
• Support cybersecurity-related communications and engagement activities
• Collaborate with all levels of organisation in which SOC supports

Requirements

• Comfortable to commit to a 12-month fixed term contract
• Bachelor’s degree in computer engineering
• At least 3 years of relevance in cybersecurity field
• Proven experience in previous roles handling ongoing cybersecurity campaigns e.g. phishing campaigns, security awareness trainings, and support cybersecurity-related

The SOC Analyst will be responsible for monitoring, detecting, and responding to security threats and incidents in a 24/7 Security Operations Center.

Responsibilities:

• Continuously monitor and analyze system activities and security alerts from SIEM and EDR tools to identify malicious activity.
• Analyze security events to identify and response to potential threats and vulnerabilities in real-time.
• investigate security incidents, determining the scope and impact, and take appropriate action to mitigate risks.
• Document all incidents and responses, maintaining clear records for future reference and analysis.
• Conduct threat hunting activities to identify indicators of compromise (IOCs) and unusual patterns of activity.
• Stay current on emerging threats and vulnerabilities, adapting monitoring strategies as needed.
• Develop scripts and optimize SIEM rules to automate triage and analysis
• Participating in post-incident reviews to evaluate response effectiveness and recommend improvements.

Requirements:

• Diploma or Bachelors degree in Cybersecurity, Information Technology, or related field.
• 1+ years of experience as SOC Analyst, with familiarity in SIEM and EDR tools.
• Strong knowledge of cybersecurity principles, incident response methodologies, and network protocols.
• Proficiency in network communications, log analysis, scripting (Python, PowerShell etc).
• Relevant certifications (e.g., GSEC, GCIH, GCIA) preferred.
• Excellent problem-solving, analytical, and communication skills.
• Willing to work in a 24/7 shift environment
• Able to work 12-hour shifts, including nights, weekends, and holidays as needed.
• Ability to work independently and as part of a team in a fast-paced environment.

Interested applicants please click on the APPLY NOW button or email your resume to ⁠[email protected]

Careerally Pte Ltd | EA Licence: 24C2215
EA Personnel Name: Hon Csia Fui (Han Jiahui)
EA Personnel No: R1875919

Position Overview

The IT Security Operations Analyst role’s is to safeguard the organization’s IT systems and data. This role requires the candidate's active participation in the implementation of security policies and procedures, the monitoring and analysis of security events and the maintenance of security tools. Other responsibilities are to identify, investigate and resolve any security threats, vulnerabilities and incidents. The candidate must keep up to date with the latest security trends, have excellent communication and problem-solving skills and have a deep understanding of security principles and technologies. The individual will have a functional role in mentoring other team members and share the off-hour support responsibilities.

Responsibilities

1. Monitor, maintain, and analyze network and computers for unusual activity or suspicious behavior by reviewing information security logs.
2. Manage and resolve security Level 2 support tickets per defined SLAs
3. Investigate and analyze security incidents to determine root cause and impact.
4. Report compliance failures to management for immediate remediation.
5. Responsible for the effective management of the organization’s Crowdstrike Falcon Admin Console.

• Deploy Crowdstrike Falcon EDR detection agent on all corporate devices.
• Ensure coverage of malware detection for all managed EDR Agent capable devices.
• Migrate existing server agents from alert-only mode to blocking mode.
• Provide EDR escalation support for agents already installed

1. Assist and collaborate with the Information Security Group and coordinate with IT Infrastructure on the following:

• IT Threats and Vulnerabilities Assessments, Protection, and Remediation
• IT security patch management follow-up and reporting
• Firewall rule documentation, review, and approval
• Promote within IT Infrastructure the proper Security controls aligned with the IT Security Program
• Validate and maintain operational security documentation.

1. Continuously assess the current Security Posture and provide recommendations for remediation and prevention of security incidents.
2. Collaborate with cross-functional teams to implement security solutions and technologies.
3. Stay up to date with industry trends and emerging security threats to proactively address potential risks.
4. Assist in the deployment of new security systems.
5. Participate in security audits and assessments to ensure compliance with regulations and standards.
6. Understand the dark and deep web ecosystem.
7. Manage and support the following applications:

• Palo Alto/Firewall
• Network security (Micro-segmentation)

1. Perform other duties as required

Qualifications and Experience

• Bachelor’s degree in Cybersecurity Engineering or Computer Sciences
• Strong professional experience in information security with a focus on security operations and technical support
• Strong Experience with Palo Alto and Crowdstrike platform
• Experience with VPN, SSL and other encryption technologies
• Good knowledge of server, workstation, and Active Directory technologies that impact security controls
• Deep understanding of TCP/IP, DNS and common network services
• Experience with security frameworks and compliance requirements such as GDPR, ISO 27001, NIST 800 and PCI DSS.

Responsibilities

· Handling of Court Orders (not limited to Bankruptcy, Winding-Up, Garnishee Orders, Injunction Orders) and Deceased matters

· Processing & monitoring of all deposit accounts relating to the above processes to ensure compliance

· Liaise with legal, lawyers, official assignees, public trustee on legal issues

· Liaise with relevant internal stakeholders for timely dissemination

· General ad-hoc administrative duties as assigned

· Maintain, review and update workflow and database

· Participate in ad-hoc projects as assigned by team leader

· Contribute and/or lead process improvements initiatives

Requirements

· A degree holder with at least 1 year of banking experience and demonstrates basic understanding of legal requirements

· Sound knowledge of the bank’s core operating systems and control standards is an added advantage

· Proficient in MS Office applications

· Good interpersonal and communication skills

· Focused and meticulous, with a keen eye for detail

· A team player and demonstrates strong ability to deliver under tight deadlines and under pressure with minimum supervision

“This is in partnership with the Employment and Employability Institute Pte Ltd (“e2i”).

e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to A-IT Software Services Pte Ltd’s PDPA and e2i PDPA.

The Security Analyst is responsible for monitoring security systems, responding to alerts and incidents, and ensuring the organization’s security controls are effective. This role involves creating and tuning security device metrics, documenting processes, and identifying unusual activities by correlating events. Strong analytical skills, collaborative abilities, and an in-depth understanding of both current and emerging security technologies are essential to succeed in this position.

Key Responsibilities:

1. Security Monitoring & Advisory: Continuously monitor and provide guidance on security issues related to systems and workflows, ensuring that internal security controls are appropriate and functioning effectively.
2. Incident Response Coordination: Lead and coordinate responses to information security incidents, minimizing impact and supporting rapid resolution.
3. Policy Development: Create, update, and enforce information security policies, procedures, standards, and guidelines that align with best practices and compliance requirements.
4. Data Classification & Audits: Assist in data classification assessments, conduct security audits, and contribute to remediation plans as necessary.
5. Vulnerability Management: Collaborate with IT management to address security vulnerabilities and coordinate vulnerability assessment efforts.
6. Testing & Assessment: Conduct network penetration testing, vulnerability assessments, and comprehensive risk assessments to identify and mitigate security risks.
7. Server Hardening: Develop, coordinate, and review server hardening procedures for all platforms used within the organization’s environment.
8. Log Review & Analysis: Regularly review security logs from servers, networks, and other platforms to detect any security anomalies.
9. User Security Awareness: Design, conduct, and maintain user security awareness training to strengthen the organization's security culture.
10. Security Research: Stay informed of the latest security policies and conduct research to continually enhance the organization’s security posture.
11. Additional Security Duties: Undertake other security-related tasks as assigned to support organizational needs.

Qualifications & Requirements:

• Education: Bachelor’s degree in Computer Science, Information Technology, or equivalent.
• Experience: Minimum of 3 years in IT, with a background in security monitoring and response.
• Technical Skills:
  • Familiarity with IT network infrastructure, server platforms (Unix, Windows), and desktop systems (OS X, Windows XP and above).
  • Proficiency with security tools such as Security Endpoint solutions, HP ArcSight, QRadar, Rapid7 Nexpose, and Tenable Nessus.
• Certifications: One or more of the following certifications are required: QISP, CISSP, Cybersecurity Nexus, CompTIA Security.

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Security Analyst for Governance, Risk, and Compliance (GRC). This is a 3-year contract position.

Key Responsibilities:

Governance

• Coordinate with internal and external audit teams and assist in audit planning.
• Help deliver security awareness programs for staff and manage security governance efforts.
• Stay updated on IT trends and recommend best practices to align with governance policies.
• Support cybersecurity projects to ensure alignment with security objectives.

Risk Management

• Assist in identifying and assessing IT risks and managing vulnerabilities and threats.
• Support risk management in cybersecurity projects by focusing on threats and vulnerabilities.
• Track and monitor audit remediation actions related to risk management.
• Measure the effectiveness of security awareness programs to minimize risks from human error.
  

Compliance

• Ensure compliance with internal standards (ISO 27001, ISO 22301) and external regulations.
• Facilitate responses to internal and external IT audits.
• Participate in audit engagements and report on audit issues and remediation.
• Provide ongoing compliance reporting to ensure timely remediation of audit findings.

Requirements:

Educational Qualification(s)

• A University Degree in Information Technology, Cybersecurity, Risk Management, or Compliance, or an equivalent qualification.
• Desirable Certifications: CISSP, CISM, CISA, CRISC, or other relevant certifications.

Relevant Experience

• 3-5 years of experience in Information Security, IT Risk Management, or Compliance, preferably in a higher education or similar environment.
• Experience with IT security audits and compliance reviews in regulated industries.
• Experience with vendor security assessments and managing third-party security risks.
• Experience in security awareness training and working in cross-functional teams.

Knowledge Required

• Security Frameworks: ISO 27001, CTM, NIST, CIS controls, and their application in operational environments.
• Regulatory Standards: Understanding of the Cybersecurity Bill, PDPA, and related security laws.
• Risk Management: Knowledge of risk assessments, mitigation strategies, and identifying threats to information systems.
• Audit Processes: Understanding security audit processes, compliance, and remediation.
• IT System: Good knowledge of IT infrastructure, application management, and cybersecurity practices.
• GRC Tools: Experience with Governance, Risk, and Compliance platforms and software is advantageous.

Skills and Competencies

• Analytical Skills: Ability to analyze security risks and make data-driven decisions.
• Communication Skills: Ability to convey technical security concepts to non-technical audiences and document findings.
• Problem-Solving: Strong problem-solving capabilities, particularly during security incidents.
• Attention to Detail: High focus on detail in audits and risk assessments.
• Project Management: Ability to manage multiple projects, prioritize tasks, and meet deadlines.
• Team Collaboration: Proven ability to work with cross-functional teams (IT, legal, compliance, vendors).

Other Personal Attributes

• Integrity and Confidentiality: High ethical standards and the ability to handle sensitive information.
• Proactivity: Ability to act independently and proactively address security challenges.
• Adaptability: Capable of adjusting to evolving security threats and changes in regulations.
• Resilience under Pressure: Ability to make sound decisions under pressure, particularly during audits or security incidents.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018942

• Degree in Computer Science/Information Technology or equivalent

• At least 3 years’ experience in IT

• Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and above)

• Experience in using security tools (Security Endpoint solutions, HP ArcSight, QRadar, Rapid7 Nexpose, Tenable Nessus))

• Certified with one or more of the following: QISP, CISSP, Cybersecurity Nexus, CompTIA Security+

Job Summary:

The IT Security Specialist will be responsible for the development, implementation, and ongoing review of a comprehensive security framework. This includes creating and maintaining security policies, performing audits, conducting risk assessments, and managing customer incident response plans. The role involves being the main point of contact for security-related matters and collaborating with customers to ensure the security of their ICT systems. The ideal candidate will have a strong background in IT security, including experience with networks, servers, databases, and security auditing.

Key Responsibilities:

• Review and develop security frameworks, information security policies, and related processes, ensuring they are up to date and aligned with best practices.

• Conduct security reviews and audits, including log analysis and security assessments of customer ICT systems.

• Perform security risk management exercises, identifying vulnerabilities and mitigating risks.

• Organize and conduct table-top security exercises to simulate potential security incidents.

• Conduct vulnerability assessments and coordinate penetration testing activities.

• Provide information security awareness training to project and internal teams.

• Develop and manage customer security incident response plans, leading incident resolution and response efforts.

• Serve as the primary point of contact and advisor for customers on ICT security-related matters.

• Project manage security initiatives during the implementation phase, ensuring timely and quality delivery.

Requirements:

• Minimum of 3 years of experience in IT security.

• Expertise in Networks, Servers (Windows and UNIX), and Database systems.

• Experience with IT security auditing and security assessments.

• Proficient in analysing logs from various sources and understanding protocols and traffic flows.

• Knowledge of security tools such as Active Directory, Endpoint Protection Solutions, Early Detection and Response Solutions, Database Activity Monitoring tools, and SIEM systems.

• Excellent communication and presentation skills.

• Proficiency in Microsoft Excel.

• Flexible, team-oriented approach with a strong focus on problem-solving.

• Strong organizational skills and the ability to work independently in a dynamic environment.

• Ability to multitask effectively between various projects and teams.

Certifications:

• CISSP certification is mandatory.

• Additional certifications like CISM, Security+, or certifications in security tools such as Imperva and Carbon Black are a plus

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

Team Introduction

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk.

We are seeking a Digital Forensics Analyst to join our Forensics & Litigation Support team. The analyst will partner with internal stakeholders, such as Legal, HR, Ethics, Investigations, and Insider Threat, to support investigations and provide technical expertise. The role will perform forensic preservation of relevant devices and data, respond to incidents, and perform detailed analysis of systems and data. The role will require an individual able to apply forensics concepts and industry best-practice in the preservation and analysis of newly developed technologies engineered internally at the company.

Responsibilities

- Preserve network and host-based digital evidence in an industry accepted and forensically sound manner that would be admissible in court proceedings.

- Coordinate digital forensics analysis on large scale matters.

- Communicate technical events and analysis to both technical and non-technical audiences.

- Perform Apple macOS host-based forensics, including the analysis of user events, the APFS/HFS+ file system, internal services, default applications, and relevant logs.

- Perform Microsoft Windows host-based analysis using both Windows and Linux based forensic tools.

- Perform analysis of Linux servers, including user events, daemons, security logs, and cron jobs.

- Perform acquisitions and analysis of Apple iOS and Android mobile devices.

- Perform acquisitions and analysis of cloud platforms, such as Microsoft Azure, Amazon Web Services, Google Cloud Computing and/or others.

- Write detailed forensic reports for investigations.

Minimum Qualifications

- A bachelor’s degree in a computing field.

- 3-5 years in digital forensics analysis experience.

- Holds an industry accepted certification validating digital forensics capiblities: GCIH, GCFA, GCFE, CFCE, GREM, X-PERT, EnCE, CCE, etc.

- In-depth understanding of computer forensic principles, including digital and mobile forensics, log analysis, cloud-based systems, database structures, querying languages and common digital forensics tools.

- Knowledge and experience of Windows, Unix and Mac host-based forensics, Mobile OS’s and command line.

- Working knowledge of hardware configuration and network/data communications, software development and scripting, database technology and database exploitation/forensics.

- Experience with seizure of evidence, chain of custody and conducting analysis.

- Knowledge of data loss prevention systems and how they detect potential host and network-based data loss technologies or other insider threat risks.

Preferred Qualifications

- Completed the SANS course FOR518: Mac and iOS Forensic Analysis and Incident Response

- Experience in writing affidavits, depositions and serving as an expert witness in court proceedings.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

As an IT Security Analyst, you will be responsible for assessing and managing cybersecurity risks by evaluating technologies and solutions against industry standards. You will identify, analyze, and prioritize potential security threats while developing and implementing effective risk mitigation strategies. Regularly maintaining and updating the organization’s risk register will also be part of your duties.

Risk Management

• Evaluate technologies against cybersecurity standards.
• Identify and prioritize security risks.
• Advise on cloud security for platforms like AWS and Azure.
• Update and maintain the risk register.

Compliance

• Stay updated on IT security regulations (e.g., PCI-DSS, ITRM, IM8).
• Develop and enforce security policies.
• Monitor compliance and report to stakeholders.

Security Operations

• Monitor and mitigate potential data loss events, and investigate suspected incidents.
• Investigate security incidents and implement appropriate response measures.

Business Continuity

• Review and update crisis plans.
• Organize simulation exercises.

Qualifications:

• Bachelor’s degree in Cybersecurity, IT, or equivalent experience.
• At least 3 years of experience in IT security and compliance.
• Strong knowledge of IT security frameworks.
• Familiarity with security tools (e.g., DLP, SIEM).
• Experience with cloud platforms (AWS, Azure).
• Cloud security certification (e.g., CCSP, AZ 500) is a plus.
• CISA, CISM, or CISSP certification is an advantage.

Job Description

Western Digital’s Global Physical Security Organization is seeking a highly talented and motivated individual to join the team. Our business unit is a 24/7 model where you may be required to work outside of normal business hours to address critical operational and technology issues. You must be able to drive complex technical solutions that provide scalability, efficiency, and effectiveness. This position is primarily responsible for the APAC regions physical security systems program, but the role will also provide guidance and support for our locations globally.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Agile in addressing troubleshooting issues and service requests
• Responsible for knowing status, locations of, quantities of, vendor, model, make and technical specifications of each system component, including connectivity requirements.
• Monitor performance of the system, highlight any issues, follow up on solution to resolution:Initiate purchase order, service call, work order, etc., as necessary.
• Verify that work was completed as requested.
• Provide training and guidance on security systems; create and maintain operator instructions, procedures, security system drawing, and related documentation as appropriate.
• Partner and drive physical security operations and systems technology with internal business units like IT, Real Estate, Legal, EH&S, Finance, Procurement when required
• Strategically improve system end users experience on a variety of applications
• Define physical security systems and technology roadmaps that drive overall program success
• Skilled in presenting solutions at a high level to internal key stakeholders
• Integrate and perform case studies, conduct research into product requirements to improve security systems and technology
• Familiar with internal tools, tracking and reviewing requests such as ServiceNow, Smartsheet, etc.
• Assist in deployment of enterprise level access control systems, video management systems, visitor management systems, etc.
• Work with multiple third-party vendors and SOCs to help maintain the global standard in security systems and technology
• Familiar with Windows, Linux and SQL, Networking, and IoT devices
• You will work to integrate a variety of security devices into existing network infrastructure including but not limited to: PSIM, C-Cure, Lenel, AMAG, Milestone, AXIS, ISOS, SWN, etc.
• Participate, oversee and drive project meetings and execute end-to-end, ensuring on-time delivery
• Configuring and maintaining APAC Security Systems, including hardware, system software, and security applications.
• Diagnosing and resolving hardware, software, networking, and system issues when they arise.
• Monitoring system performance to ensure everything runs smoothly and securely.
• Researching and recommending new approaches or system to improve the security system infrastructure. Enhance the current security model.
• Providing technical support when requested or be available at the site for further assistance.
• Works with users to identify system requirements; develops processing procedures and systems modifications to meet these specifications.
• Deploy, maintain, and troubleshoot core business applications, including application servers, associated hardware, endpoints, and databases.
• Document any processes, which employees need to follow in order to successfully work within our security systems
  

Qualifications

REQUIRED:

• At least 6 years of experience in security system administration and project management or in professional IT / System with demonstrated experience related to physical Security etc.
• Front end programmer, Create basic user interface.
• Knowledge of security best practice in hardening and protecting cloud environment, MSSQL database and applications.
• Proficiency with Access Control, Video Management Systems,
• Security Hardware, Locks, Sensors, IoT devices etc.
• Excellent communication skills. Fluent in English both writen and spoken
• Ability to construct working relationships with cross-functional teams and key stakeholders
• Ability to provide systems and technology solutions that meets corporate standards
• Ability to manage multiple vendors and budgets

PREFERRED:

• Associates or Bachelor’s degree in Computer Science, Engineering, Information Systems or related experience
• Certified in AMAG, Lenel, C-Cure, Genetec, Milestone or equivalent
• Certifications CCNA, SQL, CompTIA or equivalent
• Familiar with cloud and virtualization environments
• 5+ years of experience testing, piloting, and supporting physical security hardware
• Experienced in presenting to key internal stakeholders
• Experienced in system integrations, migrations, and cutover projects in a variety of environments
• 5+ years of experience in designing and deploying large enterprise security systems
• SME in physical security design and standards
  

- 1-year outsourced contract

- Up to $5,000 + Allowance

- Mon – Fri: 8:30am – 6pm

- AMK

Job Responsibilities:

• Apprised of the current state of computer security in place in the organization
• Technically proficient and up-to-date in basic computer security policies and practices
• Proactive in preventing Cyber-Security Incident
• To perform technical security assessment for IT & Network components - Vulnerability assessment, Penetration testing, Opportunistic Hacking, Web application security testing, Security source code review etc.
• To monitor and track the identified vulnerability, issues and fix detected vulnerabilities to maintain a high-security standard
• Be familiar with browser, Web service, cloud security, mobile applications security, and operating system security concepts
• Understanding of leading vulnerability scoring standards and ability to translate vulnerability severity as security risk
• Perform forensic investigation if required
• Review all security logs

Period:

• 1-year outsourced contract

Working Hours:

• Mon – Fri: 8:30am – 6pm

Salary:

• Up to $5,000 + Support allowance $200

Location:

• AMK

Requirements:

• Degree in Computer Engineering, Computer Science or equivalent, although consideration will be given to experience and certifications in lieu of degree.
• At least 2-3 years' experience in cyber security
• Certifications such as CREST, OSCP and CISSP.
• Special Knowledge or Skills:

1. Perform PenTest, Vulnerability Assessment & Risk Assessment
2. Strong in technical skill
3. Able to handle demanding service response and recovery turnaround
4. Able to manage daily support tasks to meet stringent SLA requirements
5. Excellent scheduling and multitasking skills
6. Meticulous and process-oriented
7. Good, hard-working attitude with ability to work well under pressure
8. Good communication skills English (written, spoken) to serve English-speaking clients
9. Good analytical skills with ability to work with others to resolve problems.
10. Good organization skills, with ability to properly document and track information
11. Dynamic, customer oriented, experience working in a fast paced environment
12. Good Knowledge of following products will be advantageous:

- Splunk

- FireEye

- Tenable

Interested applicants, kindly email your detailed resume (MS Word format is preferred):
[email protected] (Registration no: R1332758)

Please ensure that applications sent through email are no bigger than 1Mb.

We thank all applicants for your interest but regret to inform that only shortlisted candidates would be notified.

Success Resource Centre Pte Ltd (EA License Number: 04C3201)

3 Shenton Way, #19-01 Shenton House, Singapore 068805

T: 6337 3183 | F: 6337 0329 | W: www.successhrc.com.sg