Total 237 support analyst job vacancies in Legal / Public / Security category in Singapore

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB

• Normal working hours
• Exposure to latest technology

About the company

Our client is an established multinational end user company. As part of their plan to invest in technology, they are now hiring a new SOC Engineer / Analyst (Cyber Defence)- Incident Response to be part of their Cyber Security team here in Singapore.

About the job

• Reporting directly to Head of Cyber Security, SOC, your role involves:
• Ensuring incident Responses towards IT security threats are well managed. Ensuring timely triage of cybersecurity incidents, investigation and incident response for Cyber security incidents
• Managing security operation to ensure implemented security technologies and controls are effective and adequate to protect the company
• Conducting Identifying root cause and remediating of cybersecurity incidents
• Providing advisory on security threats and vulnerabilities. This includes performing vulnerability scans and analyze results of scans
• Directing post-mortem activities following critical incidents
• Overseeing the development and execution of corporate security awareness and training programs. This includes getting the buy-in of senior business stakeholders which includes securing funding for IT security programs
• Enhancing early detection capability - Driving lessons learned activities after incidence closure to identify potential gaps in security control

Skills and experience required
As a successful applicant, you will have at least 3 years of experience in IT Security / SOC / Incident response / SIEM / Splunk / Incident response.

Whats on offer

This is an excellent opportunity to join an established company with ambitions to scale up their IT security capabilities.

To apply online please use the 'apply' function, alternatively you may contact Hoon Teck TAN at https://www.linkedin.com/in/hoonteck-nologyrecruitment/ (EA: 94C3609/ R1219669)

To apply, It will be great if you could share your CV to [email protected]. Alternatively, you can apply at https://lnkd.in/gUDBR7VB (EA: 94C3609/ R1219669)

• Monitor third party security feeds, forums, and mailing lists to gather information related to the client through automated means
• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Review vulnerabilities advisories
• Review and process threat intelligence reports
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assess each event based on factual information and wider contextual information available
• Review, propose and generate reports to automate or reduce low value event escalations
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations through SIEM Rules, DB scripts etc.
• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
• Assist the Security Analysts with the investigative works
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to detection Use Case
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

The Company:

Our client is a multi-national information technology company with its headquarters in Singapore. It is also the largest Systems Integrator domestically.

The Project:

This project consists of multiple teams deployed within Cybersecurity Operations Command Centre delivering mission critical 24x7 threat monitoring, prevention, analysis, intelligence to high-valued clients.

The Role :

1. Provide support for internet security surveillance activities.

2. Responsibility for managing and escalating security incidents, ensuring a prompt and effective response.

3. Assist in the thorough preparation of incident reports, contributing to comprehensive documentation of security events.

4. Assist in detecting and resolving issues arising from security incidents, and demonstrate a proactive approach to maintaining system integrity.

5. Provide first-level troubleshooting for serviced devices, and address and resolve security-related issues.

6. Work closely with engineers team to troubleshoot and resolve problems. Your expertise and insights will play a crucial role in finding effective solutions.

7. Stay informed about the latest security advancements by consistently reviewing security updates and ensuring that systems are up to date with the most current protective measures..

8. Provide support for the Level 1 (L1) team by assisting with resource management, helping to ensure operational continuity and efficiency.

9. Assist in the onboarding program for new security analysts, facilitate a smooth integration into the team and ensure familiarity with established protocols.

1. Minimum requirement is a Diploma with a module in IT or Cyber Security.

2. Having a security Analyst certification like Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA), or Computer Hacking Forensic Investigator (CHFI) is advantageous but not mandatory.

3. Preferably, candidates should have experience in one or more of the following areas:

• Management of IDS/IPS and firewall systems.
• Experience in Vulnerability Assessment, penetration testing, and risk assessment using various scanning and penetration testing tools.
• Knowledge of Unix, WIN2K, NT, and web server security practices such as OS tightening, SSO, and virus scanning.

4. General understanding of Information Security concepts.

5. Adequate understanding of Layer 1-7 Networking concepts is required.

6. Ability to follow predefined procedures, policies, and processes, and work under pressure.

7. Good communication skills (verbal, reading, and writing).

8. Working hours are from 9.00 AM to 6.30 PM, Monday to Friday.

• End of contract bonus

At AIA we've started an exciting movement to create a healthier, more sustainable future for everyone. It's about finding new ways to not only better people's lives, but to better the communities and environments we live in. Encompassing our ambition of helping a billion people live Healthier, Longer, Better Lives by 2030. And to get there, we need ambitious people who believe in playing an important part in shaping that future. People seeking unmatched career and personal growth opportunities, who are driven to work with, and learn from some of the most inspiring and supportive leaders in the business. Sound like you? Then read on. About the Role To meet various regulatory expectations by conducting quarterly BSC reviews and carrying out internal investigations in respect of any market misconduct committed by representatives. WE ARE LOOKING FOR Fulfill requirements under BSC framework via BSC reviews, customer call surveys, reviews of Mystery Shopping cases, and assignment of quarterly BSC grades to representatives and supervisors Conduct investigations by interviewing with relevant parties such as reps, leaders and clients, obtaining and assessing documentary evidence of alleged misconduct, and providing outcomes of investigations Prepare investigation reports, documenting the investigator's assessment and recommendations Mete out disciplinary actions in accordance to the Company's Market Conduct Standards Analyse common trends to identify high-risk representations and agencies Conduct portfolio reviews of high-risk representatives (through use of data analysis) Provide consult to stakeholders on BSC related matters WHAT YOU WILL HAVE Min Diploma At least 1 to 2 years of insurance sales advisory experience Market conduct and/or Balanced Scorecard experience preferred CMFAS 5 & 9 certified is a plus #LI-SC1 Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives. You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

At AIA we've started an exciting movement to create a healthier, more sustainable future for everyone. It's about finding new ways to not only better people's lives, but to better the communities and environments we live in. Encompassing our ambition of helping a billion people live Healthier, Longer, Better Lives by 2030. And to get there, we need ambitious people who believe in playing an important part in shaping that future. People seeking unmatched career and personal growth opportunities, who are driven to work with, and learn from some of the most inspiring and supportive leaders in the business. Sound like you? Then read on. About the Role Responsible for developing and implementing processes and controls to ensure compliance with rules and regulations that prevent financial crime What you will do: Perform periodic review, trigger event review and enhanced due diligence for higher risk customers and suspicious transactions (e.g. PEP, sanctions, adverse news, assignments, cash or cash equivalent transactions, etc.) according to applicable AML/CTF policies / guidelines / SOPs Review and assess alerts arising from name screening / transaction monitoring / customer risk scoring systems and liaise with other functional units (e.g. Life Operations) for necessary investigation and follow-up actions Identify and escalate higher risk customers / suspicious transactions / activities for senior management reporting / review and approvals Conduct investigation into suspicious activities and prepare suspicious transaction report for timely filing to Financial Intelligence Unit Contribute suggestions / support to improve system/operation processes and methodologies through participation of process improvement or digitalization projects, e.g. conduct user acceptance test, update operation manuals, etc. Maintain accurate regular review, risk assessment, trigger event review and enhanced due diligence records Assist to prepare AML/CTF related management reports Support risk assessment / compliance review on regular or upon ad-hoc request Carry out other ad-hoc tasks or projects, e.g. support regulatory reporting Exercise diligence in delivering quality work and strong commitment to agreed timeline. What you should have: Diploma/Degree in Finance, Business or any related field 2 to 3 years of experience in financial crime compliance role within insurance industry Good knowledge of AML/CTF control processes and MAS requirements Strong interest in developing career in insurance and AML/CTF space Team player and attention to details, able to take on high volume of workload and multi-tasking; at times may involve working beyond the normal office hours Excellent verbal and written communication skills Knowledge or exposure in any data analytics tool or AML System is a plus, e.g. Nice Actimize, SQL, Python Certifications pertaining to AML/KYC will be added advantage, e.g. ACAMS Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives. You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

Company overview Nomura is an Asia-based financial services group with an integrated global network spanning over 30 countries. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Retail, Asset Management, and Wholesale (Global Markets and Investment Banking). Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit www.nomura.com Aon's Benefit Index ® , Nomura's benefits rank #1 amongst our competitors Function Overview: Nomura operates in a complex regulatory environment and the role of Compliance department is to ensure that the Firm operates in accordance with the applicable laws and regulations of the exchanges and regulators. Compliance department also works with all levels of the Firm to assist in the development and maintenance of a strong compliance culture and to support the embedding of appropriate behaviours within the firm's operating practices. Compliance department provides cover for each of the main businesses - Global Markets, International Wealth Management (IWM) and Investment Banking/Research, in which Financial Crime Compliance team ensures the effective implementation of the Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) Compliance regime in Nomura for its non-Japan Asia Pacific offices. Responsibilities: Financial Crime Compliance Analyst / Officer will be based in Nomura's Singapore office and reports to the Head of IWM Financial Crime Compliance, AEJ. Key responsibilities include: Reviewing and analysing due diligence information on new and existing clients in order to meet all regulatory requirements. Analyse challenging or high risk account opening situations and to make appropriate recommendations to Senior Management whether to on board a client or maintain an existing relationship and other suitable recommendations as to appropriate controls to be put in place. Liaise with the salespersons and relevant stakeholders on account opening-related and KYC queries. Conduct enhanced due diligence and liaise with external investigative firms on investigation reports. Review any suspicious activities or transactions arising from rolling review of client accounts. Liaise with audit and regulators on any KYC related issues. Requirements: University-level Degree preferably in a relevant discipline (Finance, Accounting, Business, Legal) 3 years' experience related AML / KYC client on boarding experience for high net worth clients and complex financial structures (such as trusts, personal investment vehicles, foundations etc.) Good understanding of relevant AML/CFT/laws and regulations. Ability to communicate clearly and confidentially; able to influence internal and external stakeholders Ability to directly address conflicts and escalate issues where appropriate Communicates well and across all levels, including senior management Good team player, proactive and able to adapt quickly. Diversity Statement Nomura is committed to an employment policy of equal opportunities, and is fundamentally opposed to any less favourable treatment accorded to existing or potential members of staff on the grounds of race, creed, colour, nationality, disability, marital status, pregnancy, gender or sexual orientation. DISCLAIMER : This Job Description is for reference only, and whilst this is intended to be an accurate reflection of the current job, it is not necessarily an exhaustive list of all responsibilities, duties, skills, efforts, requirements or working conditions associated with the job. The management reserves the right to revise the job and may, at his or her discretion, assign or reassign duties and responsibilities to this job at any time. Nomura is an Equal Opportunity Employer

Job Summary:

We're seeking a driven Security Analyst to fortify and safeguard manufacturing environments by identifying vulnerabilities, strengthening security protocols, and fortifying our systems. You'll collaborate across teams to bolster our security posture while ensuring the integrity of sensitive data.

Responsibilities:

• Linux & AWS Security: Conduct audits and assessments specifically tailored for Linux and AWS environments, rectifying detected vulnerabilities to uphold stringent security standards.
• Collaborative Security Initiatives: Work closely with engineering teams dedicated to building, scaling, and managing manufacturing infrastructure, ensuring robust security in application services, data pipelines, and logging mechanisms.
• Monitoring and Investigation: Vigilantly monitor, analyze, and investigate security alerts within these environments, pinpointing root causes and implementing proactive measures.
• Comprehensive Audits: Conduct thorough security audits and assessments, both for cloud and manufacturing setups, enhancing the overall security posture.
• Operational Support: Provide operational assistance for security-related projects, aligning implementations with security objectives.

Requirements:

• Experience: 4 to 6+ years of hands-on experience in securing Linux or Windows/AD systems in large-scale production environments.
• Cloud Proficiency: Strong expertise in AWS cloud platforms, ideally with experience using tools like Terraform, Ansible, or Chef for configuration management.
• Tool Proficiency: Familiarity with security platforms and tools such as Wazuh, Osquery, Wireshark, Zeek, and Suricata.
• Network Security: In-depth understanding of TCP/IP fundamentals, network services, and adeptness in analyzing network and host security logs.
• Cryptography and Security Measures: Knowledge of applied cryptography principles, including PKI, SSL, and key management practices.
• Communication and Problem-Solving: Strong communication skills, adept problem-solving capabilities, and the ability to work independently.

This role is on an initial contract basis of 12 months.

Morgan McKinley is hiring for the Security Analyst - Onsite role

Job Responsibilities:

• Work with partners to identify and resolve security weaknesses in the environments which could pose risk to the company.
• Fix detected vulnerabilities to maintain a high-security standard.
• Work closely with teams of engineers chartered with building, scaling, deploying and
  maintaining manufacturing infrastructure, application services, data and logging pipelines
• Monitor, analyze and investigate all related security alerts in the environment to identify the root cause.
• Conducting security audits & assessments for cloud & manufacturing environments.
• Operational support to security related requests and projects implementations.
• Enhance the security posture
  

Job Requirements:

• The candidate has 4 to 6+ years of hands-on experience in security audits for cloud and manufacturing environments.
• Skilled in using tools like Qualys and Microsoft Defender, handling security alerts, and managing identity and access. Additionally, they have expertise in Linux/Windows security, configuration management tools, and AWS platforms.
• The candidate is familiar with security tools such as MDE, Wazuh, Osquery, Wireshark, Zeek, and Suricata. They possess knowledge in TCP/IP, network services, cryptography, and problem-solving capabilities.

Interested candidates may apply through the application system or send it to [email protected]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Koh Boon Sien
EA Licence No: 11C5502
EA Registration No. R1110345

Job Summary:

We're seeking a driven Security Analyst to fortify and safeguard manufacturing environments by identifying vulnerabilities, strengthening security protocols, and fortifying our systems. You'll collaborate across teams to bolster our security posture while ensuring the integrity of sensitive data.

Responsibilities:

• Linux & AWS Security: Conduct audits and assessments specifically tailored for Linux and AWS environments, rectifying detected vulnerabilities to uphold stringent security standards.
• Collaborative Security Initiatives: Work closely with engineering teams dedicated to building, scaling, and managing manufacturing infrastructure, ensuring robust security in application services, data pipelines, and logging mechanisms.
• Monitoring and Investigation: Vigilantly monitor, analyze, and investigate security alerts within these environments, pinpointing root causes and implementing proactive measures.
• Comprehensive Audits: Conduct thorough security audits and assessments, both for cloud and manufacturing setups, enhancing the overall security posture.
• Operational Support: Provide operational assistance for security-related projects, aligning implementations with security objectives.

Requirements:

• Experience: 4 to 6+ years of hands-on experience in securing Linux or Windows/AD systems in large-scale production environments.
• Cloud Proficiency: Strong expertise in AWS cloud platforms, ideally with experience using tools like Terraform, Ansible, or Chef for configuration management.
• Tool Proficiency: Familiarity with security platforms and tools such as Wazuh, Osquery, Wireshark, Zeek, and Suricata.
• Network Security: In-depth understanding of TCP/IP fundamentals, network services, and adeptness in analyzing network and host security logs.
• Cryptography and Security Measures: Knowledge of applied cryptography principles, including PKI, SSL, and key management practices.
• Communication and Problem-Solving: Strong communication skills, adept problem-solving capabilities, and the ability to work independently.

This role is on an initial contract basis of 12 months.

Key Responsibilities and Attributes:

· Provide Technical Application Support for the Security Infrastructure and Applications.

· Production and UAT Environment Troubleshooting expertise.

· Capacity, performance and Stability reporting and Management.

· Maintenance of scripts and other tools for system monitoring and process automation.

· Provide Technical Mentoring.

· Lead Operations-related projects and Security assessment for the infrastructure associated with the applications in scope.

· Leadership Skills to Document and do knowledge transfer to other team members.

· Be responsible to assess the risk and associated impact of all operational issues and change events and react quickly to escalate to technology management in a timely manner when required.

· Work closely with the infrastructure team to ensure the operational requirements are met during application integrations.

· Continuously keep the Knowledge Share repository up to date.

· Strong interpersonal and communication skills.

· Strong analytical skills and attention to detail.

· Ability to work across all levels of the organization.

· Proven ability to work with demanding global partners within aggressive timelines; solid problem solving, analytical and technical abilities.

Qualifications :

Strong candidates will possess the following qualifications:

· Bachelor’s degree in information technology or any other equivalent

· Knowledge and 3-5 years of experience in Operations support or System Administration

· Knowledge and experience with the following Operating Systems is a must: Red Hat, Linux, Windows System, or other Unix-based Operating Systems

· Hands on experience with Unix scripting, SQL, or any other equivalent

· Knowledge of Security tools and hands-on experience with some of the following technologies is an added advantage:

o Multi-Factor Authentication and Authorization Technologies: Safeword Premier Access, Cisco ISE, CITI2EE End to End Encryption, Cloud IAM, SiteMinder

o Data Security Technologies: Cortosis, DTAAS, Ionic

o PKI Technology and Encryption Systems: Entrust, MS-PKI, Venafi Encryption Director, OCSP, Hashicorp

o Identity Management Technologies: SailPoint, Powerbroker

o Privileged Access and Vault Management Technologies: CyberArk, SCAPDAP, WAIS

o Monitoring or Automation Tools: Tivoli, Sensu, Autosys, ServiceNow

· Knowledge of the following components would be a good addition:

o Web Servers (Apache, IIS, Sun One Web servers)

o Application Servers (WebLogic, WebSphere)

o Databases (Oracle, SQL server, Sybase)

o Programming languages (Java, Perl, C/C++)

o Understanding of security, network architectures and protocols.

o Familiarity of Compliance and risk management frameworks and methodologies (ISO27002, SDLC)

o Certifications (CISSP, ITIL, CCNA/CCNP, CEH, RedHat, MCSE, Cloud)

Working knowledge in Key and certificate encryption, life cycle and end-to-end communication.