Total 5 legal public security job vacancies in D05 Clementi New Town, Hong Leong Garden, Pasir Panjang

We are seeking a skilled Pen tester to join our dynamic cybersecurity team(cyber offensive team). In this role, you will be responsible for conducting vulnerability assessments using testing tools, identifying security weaknesses across systems and networks, and ensuring that company's and clients infrastructure adheres to industry best practices for security and compliance.

• Conducting comprehensive penetration tests on a variety of applications and systems to identify security vulnerabilities.
• Basic understanding of networking and protocols (TCP/IP, DNS, HTTP, etc.).
• Use tools such as Nessus, Burp Suite, Wireshark,Rapid7 and Nmap.
• Prepare reports detailing vulnerabilities, risks, and remediation recommendations.
• Perform audits for compliance with industry standards and regulatory requirements such as PCI-DSS, HIPAA, and CIS benchmarks.
• Knowledge of operating systems (Linux, Windows).
• Awareness of OWASP Top 10 and common attack vectors.
• Work closely with IT teams and security professionals to remediate identified vulnerabilities, ensuring a robust defense against potential threats.
• Certifications like CompTIA Security+, CEH (Certified Ethical Hacker), or others (optional but advantageous).
• Ability to communicate complex technical findings clearly and effectively to both technical and non-technical stakeholders.

Roles & Responsibilities

Join our security team and help secure our organization through maintaining, engineering, and deploying security solutions. We use industry-standard security tools, in an automated fashion, to ensure our security teams can operate effectively and provide security to the company.

Responsibilities:

As an individual contributor on our Cybersecurity engineering team, youll have a broad set of responsibilities including (the mix will depend on your interests and skill level):

• Troubleshooting security problems
• Assist in the management and deployment of security products on endpoints, servers, and virtual desktops
• Design, operate, and maintain a vulnerability management program
• Assist the Security Team in responding to and remediating system and/or network security breaches
• Plan, implement, manage, monitor, and upgrade security measures for the protection of the organizations data, systems, and networks
• Ensure that the organizations data and infrastructure are protected by enabling the appropriate security controls
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor, then design and engineer the process for gathering that information
• Promotes best practices and design patterns
• Willing to do remote support for Helpdesk team escalated suppprt cases
• Willing to learn newer technology / product / solutions based on customers needs.

Required Skills:

• Proficient in exploring, evaluating, and integrating new technologies, programming languages, data models, or frameworks.
• Easily pick up new technologies and are keen to expand your knowledge
• Experience in the development of projects related to network and security automation.
• Experience in infrastructure and automation processes and tools including Ansible, and Terraform
• Fundamental knowledge of SSH, TCP/IP, UDP, SSL, HTTP, HTTPS, PKI, DNS, and other common protocols.
• Advanced experience in development in languages such as Python, bash, or Golang
• Advanced knowledge of security controls, audits, and configurations related to: Windows, Linux, ChromeOS, and macOS
• AWS

Preferred Experience (Optional but valued)

• Experience in common continuous integration tools such as GitHub Actions, Jenkins and CircleCI.
• Advanced experience with the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework
• Experienced DevOps or DevSecOps practitioner
• Advanced knowledge of security controls, audits, and configurations including SIEM (Splunk, QRadar) & EDR (Crowdstrike, Carbon Black)

Roles & Responsibilities

As part of cloud infrastructure team , Cloud Specialist engineer is responsibile to incorporate continuous improvement process in operations through constant monitoring, improve the operation metrics by continuous evaluation and reporting, and also optimize the capability, scalability, availability and security of the Cloud platforms to meet set requirements.

• Candidates for this role should have subject matter expertise implementing security controls and threat protection, managing identity and access, and protecting data, applications, and networks in cloud and hybrid environments as part of an end-to-end infrastructure.
• Design, build, maintain, and enhance authentication and security services in Azure and AWS.
• Plan, coordinate, and execute infrastructure and security projects, from inception to delivery.
• Review, approve, and consult on Terraform Azure deployments submitted by other teams.
• Provide detailed solution consulting with regard to our Azure and Microsoft authentication infrastructure and related services.
• Take primary ownership of the complete lifecycle of several existing security products.
• Participate in off-hour emergency support rotation.
• Maintain the security posture, identify, and remediate vulnerabilities by using a variety of security tools, implement threat protection, and respond to security incident escalations.
• Deliver subject matter expertise of Microsoft 365 with emphasis in security, architectural design, migration, management, and support of implementations.
• Provide overall Microsoft 365 security expertise including strong knowledge of Azure Active Directory, Microsoft cloud app security, Azure Information Protection, Data loss prevention, Information Rights Management, Intune (Conditional access/ MDM), single sign-on and multi-factor authentication and related technologies (including Microsoft Enterprise Mobility + Security)
• Monitoring and remediation of risks events from Azure and Microsoft 365 security and compliance dashboards.
• Lead and participate in ongoing Microsoft 365 security projects and strategy discussions.
• Document Security procedures, guidelines, training material and best practices
• Deliver M365 Security related training sessions at main offices and key project sites
• Willing to learn and implement other cloud solutions like AWS, G-Cloud etc.
• Support global cyber security projects, e.g., Identity and Access Management, Data Loss Prevention (DLP), SIEM, Incident Management etc.
• Proactive Customer Engagement – Understand and support their key solutions, workloads, and priorities on Azure including regular engagement on trend analysis, proactive monitoring, and event planning.
• Strategic Project Execution – Own project-level Azure issues and actively drive them towards resolution whilst ensuring support and engineering readiness for key milestones.
• Critical Problem Resolution – Lead Azure Support to drive fast mitigation of issues impacting critical workloads and provide timely communication in a 24x7x365 global support environment.
• Case Ownership – Directly own a subset of customer support cases from end to end. Deliver a great customer support experience. Continuously grow Azure technical skills.
• RCA Ownership – Own and drive the timely delivery of quality root cause analysis (RCA) to understand and prevent future occurrence of reported issues.
• Engineering Engagement – Relentlessly champion and advocate driving product feedback, feature requests to address customer pain points and improve Azure resiliency.
• On call Responsibility – This position will require some on-call commitment to provide 24/7 support to our strategic S500 customers
• Excellent Communication: Must have the ability to empathize with customers and convey confidence. Able to explain highly technical issues to varied audiences. Able to prioritize and advocate customer’s needs to the proper channels. Take ownership and work towards a resolution.
• Customer Obsession: Passion for customers and focus on delivering the right customer experience.
• Growth Mindset: Openness and ability to learn new skills and technologies in a fast-paced environment.
• Preferred to have certification such as AZ-500, CISSP, SSCP, GIAC Certified.
• Core IaaS: Compute, Storage, Networking, High Availability
• Data Platform and Bigdata: SQL Server, Azure SQL DB, HDInsight/Hadoop, Machine Learning, Azure Stream Analytics, Azure Data Factory / Data Bricks
• Azure PaaS Services: Redis Cache, Service Bus, Event Hub, Cloud Service, IoT suite, Mobile Apps, etc.
• Identity and Authentication: SSO/Federation, AD/Azure AD, ADFS, etc.
• Preferred but not required: Cosmos DB, Azure Kubernetes Service
• Experience in one or more automation languages (PowerShell, Python, C#, Open Source)

A highly skilled and motivated Penetration Testing Engineer who thrives in dynamic and fast-paced environments. You have a keen eye for vulnerabilities and a deep understanding of security protocols and systems. You are adept at thinking like an attacker to identify and mitigate potential security risks before they can be exploited. Your passion for cybersecurity drives you to stay updated with the latest trends and techniques, ensuring that our systems are always one step ahead of potential threats. You are a critical thinker, excellent communicator, and a collaborative team player who can work independently when needed. Your technical acumen is matched by your problem-solving skills, making you a valuable asset in safeguarding our technology and data.

• Conducting comprehensive penetration tests on a variety of applications and systems to identify security vulnerabilities.
• Developing and executing test plans, scenarios, and scripts to uncover potential weaknesses.
• Collaborating with development and engineering teams to remediate identified vulnerabilities.
• Preparing detailed reports on findings and recommending corrective actions.
• Staying current with emerging security threats and attack vectors.
• Providing input on security policies, procedures, and standards to enhance our security posture.
• Contributing to the development of secure software and hardware solutions.
• Building customer trust by ensuring our technology is robust and secure.
• Reducing the risk of security incidents and minimizing potential damages.
• Advancing the overall security awareness and practices within the organization.
• Helping to shape the future of cybersecurity practices within the industry.

Skills Required:

• Extensive experience with penetration testing tools and methodologies.
• Strong knowledge of network and application security principles.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Experience with security assessment tools like Metasploit, Burp Suite, and Nessus.
• Relevant certifications such as OSCP, CEH, or CISSP are a plus.
• Detail-oriented with strong analytical skills.
• Excellent communication skills, both written and verbal.
• Proactive and self-motivated.
• Strong problem-solving abilities.
• Team player with a collaborative mindset.

Cybersecurity Forensics Engineers are also responsible for ensuring adherence to legal and regulatory requirements pertaining to digital evidence handling and chain of custody. These responsibilities and standards will be leveraged to develop training as well as mentoring of junior members. Cybersecurity Forensics Engineers are also responsible for researching, evaluating, and designing technical security solutions for the agency; providing technical security assessment support; developing, maintaining, and monitoring an effective Information Security program to provide logical and physical protection of the company's technical resources. Enterprise accountabilities include executing security engineering practices for IS projects; conduct product research and participate in the selection process of technologies to support security requirements.

Skills Required:

• Experience with Windows, Apple OSX, and Linux operating systems operations and artifacts
• Experience with SIEM technologies, including Splunk, or Elastic
• Experience with forensics tools, including Magnet Axiom, Falcon-NEO, Cellebrite, Encase, X-Ways Forensics, Autopsy, Sleuth Kit
• Experience with Wireless detection systems such as Yorkie-Pro
• Experience with performing forensic imaging, remote collection, and forensic analysis
• Experience with malware analysis, including static, dynamic, and reverse engineering
• Experience with performing root cause analysis and following through with all phases of the incident response lifecycle
• Minimum 6 to 8 years of experience in cyber forensic investigations.
• Bachelor’s Degree, or equivalent experience in Cybersecurity, and/or Information Systems Management, Information Technology
• Must meet 8570 certification requirements at the time of hire. IAT Level III (e.g., CASP+ CE, CCNP Security, CISA, CISSP, GCED, GCIH, CCE, GCFA, EnCE or CCSP
• CSSP-Manager is preferred
• Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI
• Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form.