Total 202 technical analyst job vacancies in Legal / Public / Security category in Singapore

SOC Cloud Monitoring Resources

1. Act as Incident first responder for a 24/7 SOC Cloud Operations

2. Monitor security sensors and review logs to identify network anomalies or intrusions

3. Perform initial analysis of security alerts

4. Escalate security incidents using established policies and procedures in a timely manner

5. Work with clients to analyse potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s)

6. Perform Response action based on standardize workflow

7. Assist with the development of incident response plans, workflows, and SOPs

8. Provide threat and vulnerability analysis security advisory services

9. Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management

10. Support 12 hours shift per day for 24 hours 365 days

About Us

Kronberg Capital is Max Kronberg’s personal equity investment office, which we will open as a boutique investment fund in the upcoming years. Current team consists of Max and one full-time analyst.

We are region- and industry agnostic and invest with a concentrated, bottom-up, long only approach. Mainly consumer facing companies.

We look for great companies off the beaten path, run by exceptional management, which we can buy with a significant margin of safety.

For further details about us, visit our website: https://kronberg-capital.com/

Job Description

The primary focus of the job lies in equity research, - analysis and monitoring of the investments.

Since we are a small investment office, job duties are a bit wider. This is a great opportunity to help creating new structures from scratch.

• Perform equity research and find suitable companies.
• Analyse equities based on the underlying fundamentals.
• Portfolio monitoring and reporting.
• Execution of market orders and transactions.
• Support with setting up the investment fund.
• Support with accounting, compliance, and other administrative requirements.

Job requirements

• At least 3 years of professional experience in equity research and analysis, preferably in a boutique public equity fund or SFO.
• CFA charterholder is a plus
• Similar investment philosophy and mindset as Kronberg Capital.
• Bachelor or Master’s degree in Finance, Accounting, Economics or equivalent from a reputable university.
• You are hands on and have a pragmatic approach.
• Strong analytical skills
• Self-starter personality, highly motivated with an international mindset and willingness to grow and learn

If you are interested, please apply with: your resume, an investment pitch (one pager) and expected salary range.

Join our Global Security Operations Centre team to identify risks that may impact Macquarie’s personnel and assets. Based in Singapore, you will be part of a global team in Houston, London, Hong Kong and Sydney.

At Macquarie, our advantage is bringing together diverse people and empowering them to shape all kinds of possibilities. We are a global financial services group operating in 34 markets and with 55 years of unbroken profitability. You’ll be part of a friendly and supportive team where everyone - no matter what role - contributes ideas and drives outcomes.

What role will you play?
As a Global Security Analyst, you will accurately synthesise emerging and developing information, communicate actionable intelligence, contribute to travel risk and threat assessment products, as well as take emergency phone calls and provide support during crisis situations. You will continuously monitor worldwide events in real-time through various channels to evaluate and disseminate information on any threats to Macquarie’s assets, office locations and travellers.

In this role, you will need to be flexible as shift work will be required to support our team’s 24/7 coverage. This includes periodic weekend shifts (approximately one weekend shift every five weeks) but no overnight shifts.

What you offer
• Strong research skills with demonstrated analytical expertise to accurately draw conclusions by synthesising raw data and information from multiple unrelated sources into a finished comprehensive product

• Excellent written and verbal communication skills

• Strong crisis management skills to quickly action any calls received on our team’s 24/7 hotline for staff to escalate safety and security incidents

• Comfortable to send out communications via a mass notification system to a large number of staff in the event of a crisis

• Strong client and result-focused orientation with experience working in a security role preferrable, but not essential

• Keen knowledge of world affairs and Open-source Intelligence experience.

We love hearing from anyone inspired to build a better future with us, if you're excited about the role or working at Macquarie we encourage you to apply.

About Technology
Technology enables every aspect of our business, for our people, our customers and our communities. Bring your unique perspective and join a global team who is passionate about accelerating the digital enterprise, connecting people and data, building platforms and applications and designing tomorrow’s technology solutions.

Benefits
Macquarie employees can access a wide range of benefits which, depending on eligibility criteria, include:

• Hybrid and flexible working arrangements
• One wellbeing leave day per year
• Up to 20 weeks paid parental leave as well as benefits to support you as you transition to life as a working parent
• Paid volunteer leave and donation matching
• Other benefits to support your physical, mental and financial wellbeing
• Access a wide range of learning and development opportunities

Our commitment to diversity, equity and inclusion
We are committed to providing a working environment that embraces diversity, equity, and inclusion. We encourage people from all backgrounds to apply for a role regardless of their identity, including gender, race, ethnicity, cultural identity, nationality, age, sexual orientation, gender identity, intersex status, marital or family status, neurodiversity, religion or belief, disabilities, or socio-economic background.

If you require adjustments to your working arrangements or the recruitment process, please let us know when applying.

Responsibilities

• Monitor and respond to security events and incidents using established incident response plan/runbook and creating process and procedures where none are already established.
• Recognizing potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information.
• Work on escalated security incidents (malware infections, unauthorized access, malicious emails, Phishing, Distributed Denial of Service (DDoS) attacks, etc.)
• Coordinating with stakeholders with supporting third party security service providers to triage alerts, events or incidents.
• Creation of SIEM custom detection rules to identify suspicious cyber threats or anomaly activities.
• Experience in responding to security events, including front-line analysis and escalation, on hacktivist, cybercrime, and APT activity.
• Support cyber incident response plan/lifecycle to ensure proper assessment, containment, mitigation and documentation.
• Reviews incident data and provide root cause analysis and recommendations on how to prevent future occurrences
• Identify coverage and efficiency gaps in IR runbook, security data and response tooling.
• Be on standby rotation, responding to high severity incidents escalated by cyber security operations analysts.

The Ideal Candidate Should Possess

• Degree/Diploma or higher in Computer Science, Information Systems or equivalent
• At least 2 years of experience in cyber security operations or SOC environment.
• Proven and hands on experience in area of SIEM, IDS/IPS, EDR, data leakage prevention (DLP) and SOAR.
• Strong knowledge of various automated security control systems, encryption, message authentication, vulnerability assessment, threat intelligence intrusion detection, penetration testing and incident response.
• Good knowledge in Incident response lifecycle, different Operating Systems, TCP/IP networking and application layers.
• Professional security related qualification (e.g. SANS GCIA, GSEC, GCIH) will be favourable although not mandatory

We are looking for a Identity Defense analyst on a 12 months extendable contract basis.

You must have expereince in cloud security operations, conducting analysis/investigation and containment of potential data breaches or cyber security incidents.

Description:

• An Identity Defense analyst is accountable for researching, designing, engineering, implementing, and supporting solutions to prevent and detect anomalous use of accounts.
• The Identity Defense Specialist will support design efforts to build out new processes, controls, and supporting governance related to implementation of human and non-human account monitoring to protect.
• You will utilize in-depth technical knowledge and business requirements to help implement scalable solutions, inclusive of monitoring, alerting, and escalation frameworks focused on core account protections.
• Leveraging your knowledge of both common and emerging threats related to account take-over, you will have an opportunity to proactively develop, implement, and influence controls and policy within the digital identity domain.
• You will partner with leaders from line of business organizations to triage security events and report on impacting security incidents.
• The Analyst will regularly collaborate with experts in and out of our team, both in country and in other regions, so excellent communication skills are very important.
• The role will also involve discussion with employees as part of alert analysis and disposition.
• Build and monitor Splunk alerting and dashboards.
• Identify areas for further process automation, simplification, and improvement.
• Provide status updates for executives and stakeholders in non-technical terms encompassing risk, impact, containment, remediation, etc.
  Risk management.
• Comprehensively document analysis, investigative activities

Required Skills/Qualifications:

• 3+ years of experience with cloud information security related activities.
• 3+ years of experience in an operations focused cloud information security role.
• Experience conducting analysis/investigation and containment of potential data breaches or cyber security incidents.
• Ability to analyze data and evaluate relevance to a specific incident under investigation.
• Ability to handle multiple competing priorities in a fast-paced environment; ability to be decisive and take action without causing an undue delay.
• Ability to exercise independent judgment when responding to alerts.
• Ability to communicate effectively across all levels of the organization, to both technical and non-technical audiences.
• Familiarity with security vulnerabilities exploits and hacker techniques.
• Familiarity identity management standards, social engineering TTPs, and the incident response lifecycle.
• Familiarity with Splunk, and the ability to build queries, alerts, dashboards, etc.
• Knowledgeable of current authentication-based exploits.

Argyll Scott Consulting Pte Ltd

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore, is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research.

NIE invites suitable candidates to join the Division of Academic Computing & Information Services (ACIS) as a Senior IT Security Analyst (3-year contract).

Key Responsibilities:

Incident Response Leadership

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and maintain incident response playbooks and procedures.
• Coordinate with internal, external stakeholders, and vendors during incidents.
• Conduct post-incident reviews and report findings to management.

Monitoring and Detection

• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Perform threat hunting and proactive security assessments.
• Collaborate with IT teams to deploy and optimize security solutions.

AI and Automation

• Integrate AI and automation technologies to enhance security operations.
• Develop automated workflows and scripts for incident response and routine tasks using SOAR.
• Leverage machine learning and AI-driven tools for threat detection and analysis.
• Stay updated with advancements in AI and evaluate their applicability to security operations.
• Apply system design thinking to security solutions.

Threat Statistics and Reporting

• Analyze and compile statistics on threats relevant to the Institute.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.

Innovation and Continuous Improvement

• Evaluate and integrate new technologies to enhance security operations.
• Foster a culture of continuous improvement within the team.
• Encourage continuous learning and professional development.

Forensics Capability Development

• Enhance the team's digital forensics capabilities.
• Develop forensic investigation procedures and protocols.
• Train team members in forensic tools and methodologies.
• Oversee the collection, preservation, and analysis of digital evidence.
• Collaborate with legal and compliance teams to ensure regulatory alignment.
• Conduct regular drills and simulations for forensic readiness.

Requirements:

• Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certification(s) in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred
• Minimum of 8 years of progressive experience in IT security, with a focus on Incident response
• Minimum of 4 years of experience in a security operations center, with proven leadership capabilities.
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration
• Proven experience in managing incident response and performing threat hunting
• Proven experience in integrating AI and automation in IT Security using Security Orchestration Automated Response (SOAR) technologies.
• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), traffic and packet analysis, digital forensics, and cloud security.
• Experience in Blue/Purple teaming, firewall, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF) administration, virtualization, and cloud technologies.
• Experience in monitoring and administering host-based intrusion detection systems.
• Knowledge and experience in Linux/Windows/Database technologies preferred.
• Strong knowledge of industry standards and information security policy frameworks.
• Hands-on experience with scripting and automation tools to enhance security operations.
• Ability to conduct gap analysis of current processes and identify opportunities for improvement.
• Evaluate internal and external environments for threats related to Information Security and act as a subject matter expert to ensure these are properly addressed and controlled.
• Continuously improve event correlation and alerting processes and use cases to detect potential incidents.
• Automate manual processes to enhance security incident response.
• Experience with network security assessment tools.
• Excellent leadership and team management skills, with the ability to inspire and motivate a team.
• Strong communication skills, with the ability to effectively interact with stakeholders at all levels, including University administration.
• Demonstrated ability to drive strategic initiatives and lead a team through change.
• Exceptional problem-solving skills and the ability to think critically under pressure.
• Ability to interview stakeholders to define and document business requirements.
• Provide advice and guidance on response action plans for information risk events and incidents based on incident type and severity.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018131

A 12-months contract assigned to one of our MNC client

Work Location: Thomson Road Area

Salary Range : $6,000-$8,500

Job Description

Perform Authorization activities which includes following:

1. Analyse issues related to Authorization for all system which are already live

2. Perform deploy for Authorization related roles

3. User to role mapping that are required as part of new Go Live.

4. Perform Design to deploy for new requirements as part of Change Request or defects.

5. SAP Security and Authorization for Fiori

6. SAP FIORI (basic knowledge)

7. SAP S4HANA

A 12-months contract assigned to one of our MNC client

Work Location: Thomson Road Area

Salary Range : $6,000-$8,500

Job Description

Perform Authorization activities which includes following:

1. Analyse issues related to Authorization for all system which are already live

2. Perform deploy for Authorization related roles

3. User to role mapping that are required as part of new PHI Go Live.

4. Perform Design to deploy for new requirements as part of Change Request or defects.

5. SAP Security and Authorization for Fiori

6. SAP FIORI (basic knowledge)

7. SAP S4HANA​

• Up to $9,900 Basic with Attractive Bonus and Company Benefits
• Fintech Company
• Centrally Located

Join Our Client’s Team as a Cybersecurity Engineer!

Our client, a leading fintech company, is looking for an experienced Cybersecurity Engineer to join their dynamic team.

What You'll Do:

• Manage and optimize cybersecurity tools and solutions.
• Implement and improve new cybersecurity systems.
• Assist with incident response and mitigation.
• Stay updated with the latest cybersecurity trends and tools.
• Support other cybersecurity tasks as needed.

What You'll Need:

• Degree or Diploma in Computer Science, Computer Engineering, or Information Security.
• 3+ years of experience in cybersecurity operations with hands-on experience in AWS, Azure, or Google Cloud.
• Cybersecurity certifications such as CISSP, GIAC, or GSEC are highly valued.
• Strong knowledge of Linux, Unix, and Windows.
• Programming/scripting skills (Python, PowerShell) are a plus.
• Familiarity with MAS Cyber Hygiene and Technology Risk Management Guidelines.

Interested candidates, please submit your updated resume in MS Word format by clicking the Apply Now button. Alternatively, you can email your resume to Frieda Chan at [email protected].

We regret that only short-listed candidates will be contacted.

Careerally Pte Ltd | EA Licence: 24C2215
Frieda Chan | EA Registration No: R2199193

Security Operation Team supports Security Systems and processes to secure our clients IT Application systems and infrastructure .The team is responsible for Security system administration,security processes .

• You should have experience managing following security tools such as Email Security Solutions, Firewalls, Privileged Access Management (PAM), Anti-virus, HIPS/HIDS and Endpoint Detection and Response (EDR), and Multi-factor Authentication, will be helpful in your role and learn the rest on the job.
• Experience with deployment of cybersecurity solutions, including Firewalls, Email Security, Internet content filtering and endpoint protection solutions.
• Articulate systems and methodologies as well as reply to security-related events and support in remediation efforts
• Liaise with other support teams, or product teams as required to resolve requests/issues in a timely manner
• Conduct IT security incident investigation on the IT environment.
• Develop and support emergency procedures and oversee incident responses as well as the investigation of security breaches and assist with disciplinary and legal matters associated with such breaches as required.
• Support the development and implementation of security standards, guidelines and processes to ensure the ongoing maintenance of logical security

To apply please click the Apply button or send us your updated profile to [email protected]

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is undergoing a growth phase and are on the lookout for talent. Applicants are encouraged to follow Percept Solutions on LinkedIn @ https://www.linkedin.com/company/percept-solutions/ to stay up to date on our upcoming roles and events.

Job Description:

• Acts as a Subject Matter Expert (SME) for the planning, implementation, management, monitoring, and upgrading of security measures and systems for the protection of the organization's data, systems, and networks
• Is the technical expert for complex projects and partner with others to successfully drive them to completion. Identifies internal and or external challenges, vendor and/or regulatory issues; recommending process, product or service improvements to address
• Provides technical leadership, mentorship, and guidance to junior levels of the Cybersecurity organization.
• Act as a highly competent contributor for the planning, implementation, management, monitoring, and upgrading of security measures and systems for the protection of the organization's data, systems, and networks.
• Stay up to date on emerging security and technology trends; assess and communicate their feasibility to leadership.
• Act as a technical resource for routine or low-risk projects and partner with others to successfully drive them to completion.
• Develop technical documentation, graphs, and flowcharts to effectively communicate complex information with guidance from Senior or Principal level engineers.
• Identify internal or external challenges, vendor and/or regulatory issues; recommend process, product or service improvements to address.
• Provide troubleshooting for known security and network problems.
• Respond to all security events as required.
• Participate actively in the change management process, providing technical representation for the organization.
• Daily administrative tasks, reporting, and communication with the relevant departments in the organization.
• Communicate technical concepts, anticipate potential objections, and persuade peers and working groups to adopt an appropriate point of view.
• Provides technical mentorship and guidance to Associate-level positions of the organization.
• Must be able to perform the professional, clinical and or technical competencies of the assigned unit or department.
• These statements are intended to describe the essential functions of the job and are not intended to be an exhaustive list of all responsibilities. Skills and duties may vary dependent upon your department or unit. Other duties may be assigned as required.

Job Requirements

• Recognised University degree or equivalent.
• Minimum 5 years relevant experience, security systems and acute healthcare setting in an executive or managerial role.
• Familiar with setting up and managing full suite of security systems, including technical planning, budgeting, installation, testing, troubleshooting, programming applications and systems setup.
• Familiar with cybersecurity requirements, processes and workflows. Ability to work with multiple stakeholders to meet these requirements and ensure systems readiness and effectiveness are maintained.
• Strong interpersonal skills with eye for detail and high level of initiative.
• Strong leadership skills, excellent communication, and negotiation skills.
• Able to work under stress, make assessment and sound judgement calls with incomplete information.
• Ability to navigate through different interest groups, administrative processes, time, and resource limitations to reach win-win situation.

If you are interested in the position, do kindly drop your most updated resume to [email protected]

Thank You.

Leon Leong De Cong

R1551708

Recruit Express Pte Ltd (Healthcare & Lifesciences Division)

EA License: 99C4599

Summary of the role

The primary responsibility of the Red Team Analyst is to protect Marina Bay Sands' gaming, retail, and hospitality sectors from cyber threats. This includes conducting adversarial simulations, red/purple team exercises, and security assessments. All duties are to be performed following Marina Bay Sands’ policies and procedures. All duties are to be performed in accordance with the department and Marina Bay Sands’ policies, practices and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

Adversarial Simulation:

• Perform comprehensive analyses and simulations to mimic cyber threats and identify vulnerabilities.
• Execute threat-led penetration testing and red/purple team exercises using frameworks such as MITRE ATT&CK and TIBER-EU.
• Conduct attack simulation exercises using Tactics, Techniques, and Procedures (TTPs) that cyber threat actors use to plan and execute cyber-attacks.

Red Team Activities:

• Conduct authorized offensive security operations to test the effectiveness of cyber defenses and simulate cyber-attacks.
• Execute penetration tests on external and internal infrastructures, web applications, and mobile applications to identify security weaknesses and misconfigurations.
• § Perform social engineering assessments (email phishing, vishing, physical access attacks) to simulate password theft, system infiltration, and malware/ransomware deployment.
• Perform source code reviews to identify software vulnerabilities and detect malicious embedded code.
• Assess security configurations for cloud, server, network, and middleware infrastructures.
• Review IT architecture for both cloud and on-premises environments.

Forensics and Incident Response:

• Lead cyber incident investigations and response efforts.
• Collaborate with cybersecurity specialists to maintain and update security testing methodologies.
• Perform other related duties as assigned.

Job Requirements

• Minimum diploma with at least 3-5 years of hands-on cybersecurity experience in relevant areas.
• Preferred certifications: CISSP, OSCP, CRTP, CRTO, OSWE.
• Experience in Gaming, Banking, or Critical Infrastructure InfoComm Industry is an advantage.
• Effective verbal and written communication skills.
• Proficiency with offensive security tools such as Cobalt Strike, Empire, Havoc, Mythic.
• Experience in setting up red teaming Command and Control (C2) infrastructure, including web/proxy servers, redirectors, domain frontingSkills in developing malicious payloads and understanding obfuscation and encryption techniques.
• · Proficiency in at least one scripting language (e.g., Bash, PowerShell) and/or programming language (e.g., Python, C, C#, C++, Java).
• Understanding of basic networking concepts and Internet protocols (e.g., TCP/IP, HTTP(S), SMTP, DNS, SSL/TLS).
• Knowledge of industry-recognized security testing standards and penetration testing methodology.
• Strong understanding of enterprise technologies, operations, and security evaluations.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

Summary of the role

The primary responsibility of the Governance Analyst is to perform duties in one or more of the following areas: vulnerability management, cyber data governance, risk and verification, cyber policy/standards/standard operating procedures development, and penetration testing and red teaming. All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures.

Job Scope

This Analyst is expected to perform within the areas of at least one of the following:

• Cyber governance, risk and verification which performs risk assessments, system security and industrial control system zone security plans including listing controls, gaps in implemented controls and tracking remediation of gaps, and provides input to the risk register
• Network and Operating Systems Security Configuration assessment which performs security configuration reviews including hardening controls, firewall rules review, web/application security configurations
• Penetration testing and red teaming which includes performing security testing to identify security vulnerabilities on LVSC applications and environment, providing recommendations for remediation, and tracking and remediating found issues.
• Cyber policy/standard and standard operating procedure creation, review, distribution, and maintenance
• Vulnerability management which includes successfully scanning the LVSC computing environment for secure configurations and vulnerabilities, researching and eliminating false positives, tracking and remediating found issues, and tracking and performing the exception processes
• Performs other related duties as assigned.

Job Requirements

• Minimum diploma with at least 5 - 8 years cyber security hands-on experience in one or more of the areas listed in place of a degree.
• Preferrable to have a current and in good standing CISSP or similar certification, and Offensive Security (OSCP, OSWE, OSEP) or Crest (CRT, CCT) certifications
• Demonstrated experience in at least 1 area in the following list:
• Cyber Vulnerability Management
• Cyber Governance, Risk and Verification
• Cyber Policy/Standard/Standard Operating Procedures
• Cyber Penetration Testing and Red Teaming
• Working knowledge of threats and vulnerabilities and their significance to cyber risk, network operations, and end-point security
• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

IT Security Analyst - Contract role for 12-Month

Role Descriptions:
• Perform regular security checks, monitor, and document security incidents
• Collaborate with technical teams to identify, resolve, and mitigate events by implementing countermeasures
• Provide analysis and trending of security log data from both infrastructure and applications within the organisation
• Ensure the integrity and protection of networks, systems, and applications through monitoring of vulnerability sources
• Understand, execute, and continuously improve standard operating procedures and security standards
• Handle escalations from technicians or level one support and provide relevant technical support to minimise operational disruptions
• Work with appointed Suppliers to resolve IT security incidents
• Prepare monthly meeting reports and highlight security issues found
• Liaise and co-ordinate meetings on IT security matters relating to organisations
• Perform other ad-hoc tasks assigned by the supervisor

Task List:
• Reviews and highlights cybersecurity risk involvement and deviations from the IT Security Policy
• Maintains IT Security Risk Register
• Generates and follow-up on baseline scan and hardening compliance checks
• Compiles and review collated security logs and performed deep analysis for any potential cybersecurity threats within
• Manage and track Security Advisories Principals
• Generate and follow up on vulnerability scan results
• Reviews and correlates the information gathered from various sources of security logs/events
• Handles security alerts from security services & devices
• Manages incident response and handling process
• Handles Change Requests requested by users/departments
• Handles reporting (Service Management, PWC, Ops Meetings, Weekly Security Updates)

Requirements:
• Degree or Diploma with skills relevant to Cyber Security
• Hands-on experience and a comprehensive understanding of Cyber Security Compliance and Governance.
• Organised and able to multi-task in a fast-paced environment
• Outstanding analytical skills
• Knowledge of Infrastructure and Application security is an added advantage
• Self-starter, a keen learner with a ‘can-do’ attitude, resourceful and service-oriented
• Experience in cyber security project management skills
• Proactive Team Player
• Eye for detail
• Do not mind doing mundane work yet, always looking into ways of doing it better.
• Experience in Security tools/software administration
• Strong analytical and problem-solving skills
• Excellent debugging and troubleshooting skills
• A team player with a good working attitude
• Good communication skills in both oral and written
• Relevant certifications such as CEH, GCIH, Security+, Network+, Specialist Diploma in Cybersecurity preferred, but not mandatory

Job Description:

• Level 1 technical support for the customers and focus on fulfilling and resolving assigned incidents and service requests.
• Monitoring and reporting of systems: Network/System/Website up time and security alerts
• Assisting with the processing of user accounts, assisting in complex ticket requests, and participating in escalations with subject matter experts
• Hands-on experience in Unix/Linux and Windows administration
• Strong foundation in Internet protocols (TCP/IP) and security concepts
• Hands-on experience in Security Information Event Management System (SIEMS)
• Strong ability to understand and analyze log and network packet data
• Strong foundation in security threat and attack countermeasure
• Analytical problem solving and troubleshooting skill
• Effective time management and organizational skill
• Handles day to day call activities and volume
• Support and enhance internal processes, particularly Incident Management and Problem Management
• Ability to provide technical support over the phone and email with professional demeanor
• Require working on 3 varied shifts including night, weekends and holidays.

• Conduct macroeconomic research (quantitative and qualitative data) to draft a comprehensive white paper to government agencies on a Special Economic Zone
• Investigate public policies that will impact macroeconomic forces and financial markets (e.g., government policies on firm/individual-level outcomes)
• Monitor and keep abreast of Cambodian public policy regulations and communique
• Review government legislation and regulatory proposals and provide technical recommendations
• Examine statistical data on the exchange of goods and services in the region, and propose tax and business incentives to drive investments
• Research financial products, issuance, and related policies, and conduct peer benchmarking with financial centers in the region
• Prepare reports, presentations, and correspondence material to advance the development of the SEZ

Qualifications

• 3 -5 years of experience in a public policy, economics research, or consultancy role for Associate Level
• Academic English is mandatory, business Chinese fluency is advantageous

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

We are seeking a SOC L1 Engineer who will be part of our growing Global Operations & Delivery team, which monitors, investigates, and resolves security incidents, violations, and suspicious activities. Our global Operations group takes innovative approaches and uses the most cutting-edge technologies to transform the operations of our customers and secure the security landscape.
Level 1 SOC Analyst:

Job Description

· Resolve, escalate, report, and raise recommendations for resolving and remediating security incidents

· Handle the advanced monitoring of system logs, SIEM tools, and network traffic for unusual or suspicious activity

· Set up SIEM solutions and troubleshoot connectivity issues

· Investigate and resolve security violations by providing post-mortem analysis to illuminate issues and possible solutions

· Collate security incident and event data to produce monthly exception and management reports

· Report unresolved network security exposure, misuse of resources, or noncompliance situations using defined escalation processes

· Assist and train team members in the use of security tools, the preparation of security reports, and the resolution of security issues

· Develop and maintain documentation for security systems and procedures

· Recommend, schedule, and apply fixes, security patches, and any other measures required, in the event of a security breach

Experience & Qualifications Required

· Minimum 1 years of experience as a Analyst working as part of a SOC team

· Experience with SIEM vendors such as QRadar, ArcSight, RSA, and LogRhythm, Splunk.

· Experience in incident response, and in writing procedures runbooks and playbooks

· Ability to work with customer’s IT and security teams

Job Description & Requirements

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire Cyber Security Defensive Operation Analyst. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Description

Provide Intelligence driven approach towards incident response affecting any client assets and providing containment, eradication and recovery of affected assets involved in a cybersecurity incident in a timely and efficient manner. Further, the role requires the mitigation of identified threat, addresses identified vulnerabilities and provide incident coordination towards internal stakeholders and external customers. The role enables the business of company by providing an agile security operation capabilities.

· Conduct technical analysis and triaging of triggering alerts ingested from company log sources to determine impact, scope of impact and determine corresponding remedial actions to mitigate, contain and/or otherwise limit the impact of the incident

· Analysing, triaging, and processing security threats to identify potential risk gaps and corresponding organizational impact by conducting in-depth analysis of the identified threat, attack vector or intelligence information.

· Working closely with the CIRC threat intelligence team to aid in the enhancement of contextual analysis and providing threat hunting support towards Open Source Intelligence (OSINT) related Indicators of Compromise (IoCs)

· Taking the lead in managing client's nd users and stakeholders in providing cybersecurity incidents updates and other related activities that might arise from time to time during the incident coordination, remediation and recovery.

· Provide duty analyst support for the CIRC operations during weekends, utilizing a pre-defined duty roaster, ensuring the continued operations and monitoring of threats and triggering alerts 24 by 7, follow the sun model.

· Provide project coordination support to assigned projects by the Head of Global Defensive operations towards the roll out, implementation and acting as the point of contact for local stakeholders towards the implementation and coordination of the projects assigned.

· Provide technical inputs towards the virtual teams as assigned by the Head of Global Defensive operations towards the operational directions, method determination and other related administrative support required from time to time.

· Provide guidance and technical support in mentoring and guiding newer members of the team in technical and incident management skills and processes.

Qualification

· Degree from a reputable university or significant course work in Computer Science, Networking, engineering, or other computer-related fields of study.

· One or more of the following professional certifications is beneficial: CISSP, GCIH or similar.

· Have good emotional intelligence and is a proven team player

· Rational and able to remain calm under pressure

· Fluency in the English Language

· Effective oral and written communication skills

· Good timekeeping ability to cope with a tight deadline and achieve operational objectives

· Self-motivated with the ability to carry out assigned tasks with minimum supervision

· Proficient understanding of cyber and IT security risk, threat, and prevention measure.

· Proficient understanding of networking and network security technologies.

· Good understanding of Forensic tools and methodolgy used in incident response

· Good knowledge of security standards and best practices

· Good understanding of various operating systems

· Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills

· Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.

· Knowledge of Microsoft Office suite (Word, Excel, PowerPoint, and Access)

· Knowledge of Splunk is beneficial

WHAT’S ON OFFER:

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected] Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS:

Consultant Name : Jyotsana Madnani

Avensys Consulting Pte Ltd

EA Licence 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.

· 15+ years of Experience in managing network and security infra.

· 10+ years’ Experience in handling major network security projects (ex: SDWAN)

· 10+ years’ Experience in handling Firewalls/IPS/F5/Pulse/Proxies, Routers/Switches.

· Excellent analytical skills

· Excellent oral and written communication

Working for banking client , as part of their IT security team, you will be carrying out the following

Key Responsibilities

Day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

To work with internal teams to validate alerts

Perform investigatin of usage behavior trends to discover potentially fraudulent

Understand business applications to be able to analyze, recognize and identify potentially anomalous activities

Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

Carry out DLP System Ruleset change requests in accordance to change management procedures

Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

To work with internal cyber security teams to ensure investigations are comprehensive and to track and follow up on all escalated incidents to closure

Requirements

Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

Excellent analytical and investigative skills

Prior experience with analytical platforms

Experienced with working with machine learning enabled platforms would be advantageous

Experience with administration and operation of DLP Systems preferred

Experience in development and fine tuning of DLP Ruleset preferred

Knowledge of Cyber Security would be advantageous

Relevant working experience in SOC environment and related processes will be added advantages

Interested candidates please email your latest resume to [email protected]

Job Responsibilities

Insider Threat Analyst is an operational role within UOB’s Group Security Operations Center. The incumbent will be responsible for the continuous monitoring, analyzing, and investigating of insider threats and data leakage incidents. He/She must have good analytical and investigative skills to recognize and detect anomalous behavior.

Key Responsibilities

§ To participate in the day-to-day monitoring, triaging, and investigating of potential suspected anomalous usage behavior alerts

§ To work with internal teams to validate alerts within stipulated SLA

§ To perform analysis on usage behavior trends to discover potentially fraudulent activities

§ To perform continuous review and improvement on current monitoring operations to enhance effectiveness of monitoring

§ Work with external partners to resolve issues or implement improvement to monitoring

§ To gain good understanding of internal business applications to be able to analyze, recognize and identify potentially anomalous activities

§ Investigate Data Loss Prevention (DLP) alerts and escalate DLP incidents in accordance to the DLP incident response and handling procedures

§ Carry out DLP System Ruleset change requests in accordance to change management procedures

§ Support management reporting of DLP incidents and statistics for ad-hoc and monthly reporting

§ Coordinate DLP audit requests; respond to questions or reporting requirements from local authorities as required

§ To work with internal cyber security teams to ensure investigations are comprehensive and to track and follow up on all escalated incidents to closure

Job Requirements

Education

§ Diploma/Degree in Business Information Technology/Business Analytics from recognized academic institutions

Technical Skills and Experience

§ Minimum 3-5 years of relevant experience as an insider fraud/threat analyst in a financial institution

§ Excellent analytical and investigative skills

§ Prior experience with analytical platforms

§ Experienced with working with machine learning enabled platforms would be advantageous

§ Experience with administration and operation of DLP Systems preferred

§ Experience in development and fine tuning of DLP Ruleset preferred

§ Knowledge of Cyber Security would be advantageous

§ Relevant working experience in SOC environment and related processes will be added advantages

Soft Skills

§ Good communication skills

§ Strong analytical and problem-solving skills

§ Ability to adhere to work processes and procedures

Other Requirements

§ Ability to work independently

§ Ability to work well with the rest of the team and department

Job Description

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success, we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking for Cyber Security Defensive Operation Analyst who has proven track record in IT Industry. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Cyber Security Defensive Operation Analyst

Contract Duration: 1 year, subjected to approval for renewable

Working Hours/ Location: Monday – Friday (9am to 6pm) at Westgate Tower office; Hybrid work arrangement of 2 days per week in office, remaining days work from home

REQUIREMENTS

Qualification

· Degree from a reputable university or significant course work in Computer Science, Networking, engineering, or other computer-related fields of study.

· One or more of the following professional certifications is beneficial: CISSP, GCIH or similar.

· Have good emotional intelligence and is a proven team player

· Rational and able to remain calm under pressure

· Fluency in the English Language

· Effective oral and written communication skills

· Good timekeeping ability to cope with a tight deadline and achieve operational objectives

· Self-motivated with the ability to carry out assigned tasks with minimum supervision

· Proficient understanding of cyber and IT security risk, threat, and prevention measure.

· Proficient understanding of networking and network security technologies.

· Good understanding of Forensic tools and methodolgy used in incident response

· Good knowledge of security standards and best practices

· Good understanding of various operating systems

· Good understanding of the Cyber Kill Chain and the ability to display clear analytical skills

· Previous experience in a corporate or enterprise environment, engaging with and responding to a diverse array of internal stakeholders, including senior management.

· Knowledge of Microsoft Office suite (Word, Excel, PowerPoint, and Access)

· Knowledge of Splunk is beneficial

Threat hunting/threat intelligence experience is mandatory:

· Experience with Threat Hunting techniques (endpoint and network data)

· Strong understanding of attack lifecycle and common attack vectors, tools and techniques

· Ability to leverage existing data to identify anomalies / IOA / TTP

· Ability to develop / maintain detection/prevention use cases

· SIEM (Splunk ES) and EDR (CrowdStrike) experiences

· Strong report writing and communication skills

· Nice to have:

o Experiences in leveraging AI / ML for Threat Hunting

o Experience with OT / ICS and Cloud environments

o Experience working with threat intelligence platforms and premium intelligence sources/feeds

Job descriptions

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected] Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS:

Consultant Name : Seema Verma

Avensys Consulting Pte Ltd

EA Licence 12C5759

Privacy Statement:

We take your personal data protection seriously and adhere to both EU and local data protction regulations.

Upon submission of your CV, you grant Avensys Consulting permission to retain your personal information in our electronic database, unless you specify otherwise. This data will be used to evaluate your suitability for current and potential job openings within our organization. Should you wish to have your personal data removed at any point, a simple notification to us will suffice.

Rest assured, we will not disclose your personal information to any third parties, and we remain steadfast in our commitment to providing equal opportunities to all applicants.

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

• MNC at CBD
• Salary: $9,000 - $12,500 per month
• Permanent position

Responsibilities

• Perform or coordinate the core operational cyber-security functions such as incident handling, incident response, vulnerability management, penetration testing, application security, data leakage prevention and identity/access management.
• Participate in response planning and remediation actions.
• Review existing and proposed system configurations and designs to ensure compliance with security controls and baselines.
• Participate in or conduct cyber-security assessments, and evaluate proposed changes, and/or execute action plans to enhance cyber-security resilience and risk mitigation.
• Design, implement, operate and maintain security tools, advance detection solutions with minimal supervision and guidance.
• Enhance cyber-security operations functions through process enhancements and stakeholder engagement.
• Lead enhancement of cyber-security functions through vendor/supplier identification, scope of work development, justification, contract review, contract negotiation and procurement engagement.
• Execute and communicate enhancement strategy of cyber-security functions using measured goals, proper tracking and reporting.
• Establish, maintain and enforce procedures, guidelines and baselines related to security for the users and administration of IT systems.
• Collaborate with stake holders from other IT functions for cyber gaps remediations efforts and provide security review consultations if required.
• Assess cloud security and propose improvements or solutions
• Implement security and data protection solutions in the cloud
• Strong understanding of API management and application integration methodologies
• Perform other miscellaneous duties as directed

Requirement:

• Bachelor's degree in the IT field.
• 9 years’ experience in IT and/or cybersecurity field.
• At least 5 years work experience at information security service-company or cybersecurity department.
• Intermediate or Advanced GIAC certifications in any of Cyber Defense, Penetration Testing, and/or Digital Forensics & Incident Response domains preferred (examples: GPEN, GWAPT, GCIH).
• CISSP or equivalent professional certification is preferred.
• Strong knowledge with emerging technologies, such as intelligent automation, artificial intelligence (AI)/ machine learning (ML)
• Strong Knowledge of modern cloud technology components and deployment patterns
• Cloud security certification is preferred (CCSP, CCSE, AZ 500, GCSA, CompTIA Cloud+ etc)
• Experience developing software such as Python or scripting language
• Strong knowledge of REST APIs implementation
• Proficient in written and oral English.
• Proficient in SIEM and Log Management Solutions. – SOAR solutions recommended.
• Understanding and familiarity with securing cloud infrastructure.
• Proficient in both Windows and Unix/Linux operating system implementation and administration.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to [email protected]

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

Tel: 6950 9748

http://www.peopleprofilers.com

[email protected]

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376