Total 3 legal public security job vacancies in bedok south east

Key Responsibilities and Attributes :

Duties include providing support security infrastructure, which includes firewall, proxy, and remote access systems.
Investigation, documentation, and resolution of outages to critical business systems that may be caused by firewall, proxy, or remote access systems.
Escalation of issues to and tracking of progress in conjunction with Client engineering teams, vendors, or other technical resource teams.
Working incidents or projects beyond the scope of the level 2 team which may include scheduling multiple changes, software upgrades, or configuration activities to resolve.
Desired platforms/skills include:

Strong troubleshooting and communication skills, tcpdump/pcap/wireshark experience, Check Point Secure Platform Pro & Gaia, Juniper SRX, Bluecoat Proxy, Palo Alto Networks firewalls, Juniper SSL VPN appliances, Juniper Netscreen firewalls, Cisco ASA with AnyConnect client, Network routing with BGP, Linux/Unix experience preferred.
Also desired/emphasized is a strong analytical and quantitative capability with attention to detail ability to work in a demanding and environment, exhibiting a high degree of flexibility and ability to multi-task, seeking guidance where necessary, strong verbal and written skills are also desired.

Special Skills:
Specialists are required to analyse customer requirements to ensure all standards, policies and guidelines are upheld from the information security perspective and support routine compliance activities.
Eventually, specialists need to support technology improvements, such as new infrastructure install and hardware/software upgrades, and engineering support.
Relevant certifications preferred: Checkpoint/Palo Alto/Juniper firewalls.
Years of Related Experience: 2-4 years

Requirements:

• A bachelor’s degree in computer science or a related field such as computer engineering, computer networking, electrical engineering, or mathematics.
• Software engineering or development. Prior experience with coding and development is often required.
• Experience in the cybersecurity field. Whether as a cybersecurity engineer or cybersecurity consultant, network security engineer is all good field to work in.
• Certifications and training. There are numerous certifications and training offered via security or software vendors: CompTIA Security+, CISSP, or Microsoft AZURE Security Associate. There are many more. Gaining these certifications alone can lead to increases in your salary.
• Testing and auditing experience. Another valuable skill for security software developers is experience testing and auditing software (such as experience as a penetration tester) for vulnerabilities.

Key Responsibilities:
∙Coordinate with external vendors and collaborate with customers and SaaS providers to conduct IT Security Risk Assessments. Identify security threats, assess risks, and propose mitigation strategies for approval by the customer.
∙Coordinate the handling of security incidents, ensuring a timely response and resolution. Maintain a robust incident response process and documentation.
∙Manage and coordinate regular security audits, vulnerability scans, and penetration tests. Consolidate findings, ensure proper remediation, and provide feedback to stakeholders on risk mitigation efforts.
∙Maintain and update all security-related documentation, including policies, procedures, standards, and best practices. Ensure compliance with security frameworks such as ISO/IEC 27001, ISO/IEC 27018, SOC 2 Type 2, and CSA-STAR (Level 2).
∙Continuously monitor the security posture of the SaaS solution and related ICT systems. Provide regular reports on security risks and mitigation actions to stakeholders and customers.
∙Oversee the remediation of security vulnerabilities identified during security assessments, ensuring that appropriate actions are taken to address risks in a timely manner.
∙Provide clear, concise security reports and recommendations to customers, ensuring they understand the security posture of the SaaS solution and any risks or issues that need attention.
∙Take on ad-hoc security tasks as required to address emerging risks or assist with specific security projects or initiatives.

Qualifications:
∙Minimum of 3 years of experience in IT security, particularly in enterprise systems, cloud infrastructure, or SaaS environments.
∙A current professional information security certification (such as CISSP, CISM, CRISC, CGEIT, GSE) or equivalent is highly desirable.
∙In-depth knowledge of IT security management and governance, risk assessment, incident response, vulnerability assessments, penetration testing, and security audits.
∙Familiarity with international security standards and frameworks such as ISO/IEC 27001, ISO/IEC 27018, CSA-STAR, SOC 2 Type 2, NIST, and CIS.
∙Strong interpersonal, written, and verbal communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
∙The position requires the candidate to be based locally.
∙Strong problem-solving skills and the ability to make decisions under pressure.
∙Proven ability to work effectively with cross-functional teams and external vendors.
∙Attention to detail and a commitment to maintaining the highest standards of security.