Job Responsibilities:

• Triage potential vulnerabilities identified by the application security program, contextualizing them with application and business knowledge.
• Review and analyze source code for business logic flaws and ensure security compliance prior to production release.
• Identify false positives, track and remediate vulnerabilities, and manage exception processes as required. Articulate cybersecurity standards applicable to technology and coding workflows to relevant stakeholders.
• Collaborate with teams to promote secure development practices and integrate security into the SDLC.
• Partner with DevSecOps engineers to enhance security measures using existing technologies and workflows.
• Review the performance of various controls, including but not limited to:

- Software Composition Analysis (SCA)

- Static Application Security Testing (SAST)

- Dynamic Application Security Testing (DAST)

- Interactive Application Security Testing (IAST)

- Runtime Application Self-Protection (RASP)

- Secrets Scanning and Container Security

- Secure Code Reviews and CI/CD Pipeline Security

• Conduct cyber governance activities, including risk assessments, system security reviews, and creating security plans for industrial control systems.
• Identify gaps in implemented controls, track remediation efforts, and provide updates to the risk register.
• Perform penetration testing and red teaming exercises to identify vulnerabilities in applications and environments.
• Provide actionable recommendations for remediation and track remediation progress.
• Draft, review, distribute, and maintain cybersecurity policies, standards, and standard operating procedures (SOPs).
• Ensure consistent and regular attendance, as it is a critical aspect of the role.

Job Requirements:

• Expertise in secure coding practices and their application across the software development lifecycle.
• Hands-on experience with security testing tools (e.g., SAST, DAST, SCA, container scanning tools).
• In-depth knowledge of application security frameworks and standards (e.g., OWASP, NIST, ISO 27001).
• Familiarity with CI/CD pipeline security and deployment environment security measures.
• Strong analytical and problem-solving skills, with the ability to identify and remediate security vulnerabilities effectively.
• Experience conducting risk assessments, developing security policies, and providing governance oversight.
• Strong communication skills to convey cybersecurity concepts to both technical and non-technical stakeholders.

To apply, simply click the "Apply" button or send your updated profile to [email protected]

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.

About the Client:

Our client is a Reputed Corporate and Investment Bank

Responsibilities:

• Production Level 3 support for Network and Security infrastructure.
• Actively involved in incident management (fault investigation, resolution escalations of all monitoring alerts and user-initiated problem calls/tickets) and request management
• Provide technical approval for any changes into Data Security systems and is accountable for any technical changes in the environment.
• involve in projects like End of Life, New Builds, migrations and technical upgrades of the solution managed by the team
• Ensures activity is performed in compliance with norms, standards, processes and procedures
• Gathering required evidence using multiple forensic tools to investigate any data leak incident, conducting interrogation if required, case closure and reporting
• Ensures documentation is up to date and relevant for use
• Lead the continuous improvement initiatives
• responsible to drive and deliver root cause for any high severity issues
• Focus on automation and optimum use of the team to improve efficiency

Requirements:

• Degree in Computer Science or Information Technology or Engineering.
• 6+ years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions
• Knowledge of different domains of IT Security
• Working & hands-on experience in administering the IT Security Solutions
• Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions
• Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;



Interested candidates, who wish to apply for the above position, please send in your resume to [email protected]

We regret that only shortlisted candidates will be contacted.

EA License No. 01C4394

EA Personnel Reg.No. R1104824 (Samsudeen Mohamed Basith)

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

“By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its local and overseas subsidiaries and affiliates collecting, using and disclosing your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services and such other purposes stated in our privacy policy. Our full privacy policy is available at www.persolkelly.com.sg. If you wish to withdraw your consent, please drop us an emailto let us know. Please feel free to contact us if you have any queries.“

We are representing our client in the Security industry to hire for a Senior Engineer.

Responsibilities

• Operate and maintain measurement and detection equipment for defense and security purposes.
• Manage software installations and system configurations.
• Address sales inquiries, oversee post-sales equipment delivery, and perform regular maintenance.
• Diagnose and repair technical issues with equipment.
• Generate basic reports and maintain strong customer relationships through effective communication.

Qualifications

• Higher Nitec/Diploma in Electrical & Electronics Engineering.
• At least 5 years of relevant experience.
• Strong problem-solving skills, a proactive learning attitude, and good interpersonal abilities.

Interested candidates, please apply here.

EA Personnel (Koh Pei Wen)

EA Reg: R23115205

APBA TG Human Resources Pte Ltd

EA License: 14C7275

As a Cloud Security Engineer, you will provide excellent technical guidance to customers adopting Google Cloud services. You will provide best practices on secure foundational cloud implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You will provide prescriptive guidance in ensuring customers receive the best of what Google Cloud Platform (GCP) can offer and you will ensure that customers have the best experience in migrating, building, modernizing, and maintaining applications in Google Cloud. Additionally, you will work closely with Product Management and Product Engineering to drive excellence in Google Cloud products and features.

Responsibilities

• We are looking for passionate and experienced security professionals to work with our strategic customers to help guide their vision, address risks and implement their security and compliance strategies on customer.
• The role will provide thought leadership and operate with a high degree of autonomy and visibility as part of our worldwide PSO specialist team. 
• Provide deep domain expertise in cloud security and be a trusted technical advisor to customers and solve complex cloud security & compliance challenges. 
• Work with customers to design and develop cloud security architectures and solutions to meet and exceed their security requirements, through deep dive discussions, strategic presentations/recommendations, and hands on implementation in Cloud environment. 
• Create and deliver best practices recommendations, tutorials, blog articles, sample code, and technical presentations adapting to different levels of key business and technical stakeholders.  Communicate effectively via video conferencing for meetings, technical reviews and onsite delivery activities. 
• Manage disparate senior stakeholders within customer environments to deliver consensus and drive positive customer outcomes on the Cloud platform. 
• Stay connected with the latest security trends throughout various industry verticals
• Travel regularly (up to 30%, although we also frequently use video conferencing) in-region for meetings, technical reviews, and onsite delivery activities

Minimum Qualifications (MQs) 

• Bachelor’s degree in Computer Science, Engineering or related technical field or equivalent practical experience. 
• Coding experience in one or more general purpose languages. 
• Experience managing customer projects to completion, working with engineering teams, sales and partners. 
• Experience architecting, developing, or maintaining secure cloud solutions. 
• Strong verbal and written communication skills (English and Mandarin Chinese), and the ability to develop high-quality technical documentation and presentation materials.

Preferred Qualifications 

• At least 10+ Year work experience of security architecture and/or security engineering experience  Hands on and deep knowledge of security principles. 
• Demonstrated experience in Cloud Security delivered within the context of customer facing roles. Experience understanding attacks and mitigation methods, in two or more of the following: Network protocols and secure network design; Operating system internals and hardening; Web application security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks. 
• Strong practical experience securing Kubernetes and containerized workloads.

We take great pride in delivering impeccable hospitality at the Hotel Miramar Singapore. Our well-equipped hotel is dedicated to providing modern, comfortable living and unparalleled friendly service. Our exceptional location is also one of the many reasons people choose to stay with us. We offer opportunities for career stability and advancement. We welcome you to join us!

The ideal candidate is a motivated, well-organized individual who possess strong leadership, analytical skills, problem-solving abilities, and collaboration skills.

Highlights:

• Attractive Salary Package with AWS and Performance Bonus
• Staff meals, dental and medical benefits, birthday voucher, F&B discounts, and complimentary season parking for staff.
• Career Progression
• Training Opportunity

Responsibilities:

• Manages Key Access Control
• Maintain the Log Book for contractors working in the hotel in accordance with company’s health and safety policies
• Operates, checks and performs security surveillance on the CCTV system
• Patrol the hotel building, premises and perimeter on a daily basis ensuring safety, and send reports.
• Member of the CERT team to provide assistance during the triggering of a fire alarm
• Regulate traffic control at the driveway
• Monitor suspicious packages and be aware of bomb and terror threat procedures
• Investigate and report all allegations of theft, criminal damage and other incidents
• Maintain the Security Log Book and send Incident Reports
• Manage undesirable behaviour in a professional manner, intervening and defusing potential altercations
• Handle Loss and Found items
• Liaise with Police in the absence of Security Supervisor
• Report any maintenance or hazard issues to the supervisor on duty
• Adhere to all Health and Safety Regulations
• Any other duties assigned by the Security Supervisor.

Requirements:

• 6 days’ work week.
• Possesses valid Security License issued by PLRD/SIRD.
• At least 1 year of experience in a similar capacity in the Hospitality industry.
• Positive attitude and able to take responsibility.
• Able to communicate clearly and work in a team.
• Able to work on rotating shifts, weekends and public holidays.
• Computer literate

HOW TO APPLY:

We want to hear from you! Interested candidates are invited to email your updated resume by 27 December 2024.

Walk-In (Singaporean/Permanent Resident only) :

You can visit the HR Office at Hotel Miramar any time from Monday to Friday, between 10:00 AM and 4:00 PM. Find us at room #02-25.

*Ensure your resume provided to us does not contain your full NRIC number during your job application. Only short-listed candidates will be notified

Cyber Security Specialist (VAPT)

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Strong in VAPT management.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Degree/Certifications in CyberSecurity.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

At InnoEdge, we work with organisations to protect them from cyber threats. We help detect new unknown cyber threats through research, fortify networks, and defend critical information infrastructures. Based in Singapore, our team consists of cybersecurity experts who use the advanced techniques and technologies to deliver cutting-edge solutions and services.

InnoEdge believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Collaboration is key to our success. We prioritise open communication, constructive feedback, and a willingness to help others. We are committed to creating a supportive work environment that encourages excellence, innovation, and continuous improvement. We're looking for individuals who share our values and are excited to join us on our cyber mission.

Responsibilities

• Technical Leadership:

a. Recommend research directions, conceptualize new security tools, and mentor junior researchers.

b. Conduct internal training workshops on analysis techniques, vulnerabilities discovery, and mechanism.

• Research and Analysis:

a. Conduct in-depth research on applications, reverse engineer closed-source code, and identify exploitable weaknesses.

b. Continuously learn about the latest application security and reverse engineering techniques.

• Development:

a. Assess and verify security through design and execute tests against industry standards CIA triad: Confidentiality, Integrity, and Availability, plus Authorization and Non-repudiation).

b. Develop proof of concept (e.g. code, scripts) to demonstrate the severity of discovered vulnerabilities and propose mitigations.

c. Develop cutting-edge tools to streamline the analysis process and improve efficiency.

• Documentation and Reporting:

a. Document findings, methodologies, and recommendations for both technical staff and executive leadership.

b. Effectively communicate findings and strategy to stakeholders.

• Contribution:

a. Contribute to the Singapore cybersecurity community through publishing whitepapers, blog posts, or presenting findings at relevant conferences.

Minimum Qualifications

• Fluent in OOP such as C++, Windows or Linux APIs/syscalls and knowledge of common file formats, network protocols and encryption.
• - Demonstrated ability to:
• Reverse engineer C/C++ compiled binaries and recognize common algorithms and patterns in decompiled code.
• Perform type recovery on intermediate data structures and uncover logic and indirect calls within a module.
• Bypass common anti-RE and anti-debugging techniques and uncover original code obfuscated by a public obfuscator.
• - For a more senior role, we're looking for candidates who has the demonstrated ability to:
• Reverse engineer sophisticated software and other programs compiled in newer languages such as Golang, Rust, newer Pythons and non-C binaries.
• Recover complex code logic and indirect calls across multiple modules or files.
• Recover undocumented file format or encoded binaries through deep analysis of the program.
• Develop custom tools to recover the logic or emulate parts of the program.
• Uncover logic of heavily obfuscated or custom packed code.

Benefits

• Training & Development
• Performance Bonus
• Medical Benefits
• Hybrid Work Arrangements

If you meet these qualifications and are passionate about cyber security, we encourage you to apply for this exciting opportunity. We offer competitive compensation, a comprehensive benefits package, and a collaborative and dynamic work environment.

Overview

Mayer Brown is a leading global law firm with offices in 26 key business centres across the Americas, Asia, Europe and the Middle East. With approximately 200 lawyers in each of the world’s three largest financial centres — New York, London and Hong Kong — we are uniquely positioned to advise leading companies and financial institutions on their most complex legal needs. We have deep experience in high-stakes litigation and complex transactions across industry sectors, including our signature strength, the global financial services industry.

We are a collegial, collaborative and diverse firm where highly motivated individuals with an unwavering commitment to excellence receive the opportunity, support and development they need to grow, thrive and realise their greatest potential. We also encourage all our people to use their skills to support the wider community through our pro bono and community volunteering programmes. At Mayer Brown the principles of mutual respect, dignity and understanding are central to the way we work and help to provide an environment where diversity and inclusion are embraced.

Operating as Mayer Brown PK Wong & Nair in Singapore we have been working in a Joint Legal Venture since 1 January 2023. Singapore is one of our fastest growing offices in the region and it is an exciting time to join the firm as we transform.

Responsibilities

The Regional Security Manager (Asia) will be responsible for providing technical leadership for strategic projects and initiatives on the security roadmap, as well as participating in more general network security and architectural efforts. The person will collaborate with other managers, engineers and departments to apply and support best practices for security, server building, change management, account management, documentation, and user experience management.

Responsibilities:

• Encourage team to provide continuous feedback to one another and upper management of the Global Security team and the Chief Information Security Officer.
• Monitor and maintain the security status of the Firm’s network and the intellectual assets held, in accordance with the Firm’s security policies.
• Help the Global Information Security Manager and Global Director of Information Security/CISO as a liaison to the regional General Counsel and Risk Management.
• Perform e-discovery related matters, executing searches and producing output as required by the Firm.
• Ensure that Mayer Brown has a secure architecture for authorization and authentication internally, as well as business to business.
• Ensure that all security risks are managed, mitigated and communicated clearly and effectively.
• Ensure that objectives are achieved by working closely with all members of the IT organization and byparticipating with the Global Security Team within the security model.
• Ensure that change controls are adhered to and communicated to the partners and staff.
• Assist the Global Information Security Manager and Global Director of Information Security/CISO in leading the team past any internal and external barriers that affect the Firm’s security.
• Keep abreast of all specific security issues and communicate to the Global Manager of Information Security.
• Assist in development and maintenance of all documentation related to Global Security Team operations and functions.
• Classifying Information and Data – setting classification standards and defining security roles.
• Manage security projects and initiatives.
• Control access to the firm’s Information Systems and related security configurations.
• Secure hardware, peripherals and other equipment logically and physically.
• Develop, implement, and maintain in-house software security and hardware.
• Assist HR regarding personnel issues relating to security.
• Assist the Global Information Security Manager and Global Director of Information Security/CISO in mitigation of threats intelligence from external sources such as Government agencies, LS-ISAO community, and local law enforcement.
• Detect and respond to incidents of a security nature within the Mayer Brown environment.
• Address all Asia based tickets sent to security and assist other regions.
• Ensure monitoring and alert notifications are implemented in accordance with the business needs.
• Assist in the preparation, approval, implementation and adherence of the Information Security Policy within the firm.
• Assist in the development and authorization process of all new IT policies introduced, ensuring that the necessary security audits and tests are carried out prior to being introduced into production.
• Assist the Global Information Security Manager with client audits and questionnaires including .
• Ensure that third party providers of Mayer Brown are audited in relation to our security guidelines to protect the Firm’s data and assets.
• Regularly monitor the Firm’s compliance with the security policies and report on concerns.
• Regularly work with members of the global security team to monitor the firm’s client requirements in relation to security processes, policies, and guidelines.
• Identify and communicate to upper management the cause of all security incidents, making recommendations as to how the specific incidents can be mitigated in the future.
• Assist in ensuring that Mayer Brown’s employees appreciate the benefits of security to the organisation, themselves and their working environment.
• Review new builds periodically to verify all security standards are being met and applied.
• Ensure the IT Security site on Global Net stays updated with current material.
• Ensure whenever possible that undesirable use of IT facilities is prevented/minimised at all times.
• Perform digital forensics on technology as requested by Human Resources, Information Technology or General Counsel.
• Willing to travel 25% domestically / internationally as needed.
• Function where feasible in relation to security duties, in a variety of roles including technology expert and vendor coordinator including identifying viable technologies, gathering requirements and providing recommendations on specific solutions and firm policy modernization relating to Mobility.
• Assist the Global Information Security Manager in monitoring and controlling IT security expenses in Asia.
• Manage security vendors in relation to Asia matters.

Qualifications and Experience:

Education

• 4 year degree or relevant work experience.

Certification

• CISSP, CEH, or relevant work experience regarding security and networks.

Computer Skills

• 7 years of experience in an Information Security department.
• Excellent working knowledge of CISSP, CEH and CISM.
• Excellent knowledge of the ISO 27001 security standards.
• Good working knowledge of networking.
• Excellent knowledge of security standards.
• Ability to effectively work with and communicate with the Firm’s clients
• Good documentation experience.
• Excellent knowledge of a Microsoft Exchange email environment.
• Good knowledge of Disaster Recovery.
• Good knowledge of authentication methods.
• Technical knowledge of cloud environments such as Azure and O365.

Performance Traits:

• Must work well with others and contribute to the success of the team, communicating openly with teammates. Willingly asks questions where appropriate and guides others whenever possible.
• Personable and approachable.
• Able to work on own without direct supervision.
• Adaptable and flexible.
• Customer-service focussed.
• Excellent telephone manner.
• Ability to work under pressure and meet strict deadlines.
• Uses own initiative.
• Ability to weigh business needs against security concerns and articulate issues to customers and senior management.
• Willingness to challenge the status quo.
• Ability to be on call and respond as necessary.

The above is a general description of the essential duties associated with this position and does not represent an exhaustive or comprehensive list of all duties.

We are no accepting applications from Recruitment Agencies for this vacancy.

The Team

Cundall’s security consultancy team’s mission is to play a key role in keeping people safe from the security threats and risks that affect them in their day to day lives. We also aim to protect our client’s assets and business, ensuring its continued operation in the event of a security incident – we pride ourselves on our exemplary track record of providing intelligent advice designing innovative security solutions.

The security consultancy team are a source of world leading expertise – and offer a pro-active and collaborative approach to skill development, and professional excellence.

The Role

This is an excellent opportunity for a talented and dynamic security design consultant to join the team in our Singapore office to play a role in ensuring the successful delivery of electronic security systems design for some of the most exciting and high-profile projects across the mixed-use, workplace and critical systems sectors.

As part of our established team of security consultants, you will prepare concept, developed and technical electronic security systems designs. The proposals you create will include schedules, schematics, design specifications and technical documentation all in keeping with client requirements, regulations and standards.

The Skills

You will have a good background in the design and engineering of security systems (including video surveillance, access control, intruder alarm, intercom and integrated security management systems) and will have gained experience in delivering these following the RIBA Plan of Work design stages or equivalent.

You will have proven ability in preparing specifications, reports, general arrangement drawings, schematics and carrying out site inspections and surveys. Also, crucially – you have a passion for creative and intuitive design.

It would also be beneficial if you have knowledge and / or experience of security and operational risk management and the application of physical security solutions (including but not limited to Hostile vehicle Mitigation (HVM), forced entry protection, blast and ballistic mitigation in order to achieve a holistic approach to security risk mitigations, but this is not essential.

Given the collaborative and client focussed nature of this role, excellent communication skills and the ability to use your initiative to overcome challenges are essential.

Job Responsibilities:

1. Network Setup and Maintenance:

Help set up and keep the organisation's network running smoothly by following the network design, ensuring everything works well, is reliable, and can handle future growth.

2. Security Management:

Follow and monitor security policies to protect the organisation's IT systems, including managing firewalls, VPNs, and security systems, and suggest improvements when needed.

3. Troubleshooting and Support:

Provide level 2 and 3 support for network and security issues. Escalate complex problems to the IT Manager when necessary and assist the Help Desk with general IT support.

4. Backup and Disaster Recovery:

Carry out and maintain backup and disaster recovery plans to minimise downtime and prevent data loss during problems.

5. System Monitoring:

Regularly monitor network performance and security alerts. Respond to issues promptly and take preventive steps to avoid problems, either directly or by working with external partners.

6. Documentation:

Keep all documentation related to network settings, security procedures, and IT support processes up to date so the IT team can easily access them

7. Compliance and Audits:

Ensure the network and security systems meet industry standards and assist in audits or assessments.

8. Collaboration:

Work closely with the IT Manager to align network and security efforts with broader IT goals and provide support when the IT Manager is unavailable.

9. User Training and Support:

Show good security practices and help train staff on network security. Provide general IT support to ensure everything runs smoothly.

10. Vendor Management:

Work with external vendors for network and security projects to ensure services are delivered on time and within budget.

Job Requirements:

Networking and Cybersecurity Skills:

• Good knowledge of setting up and managing network systems, including experience with routers, switches, firewalls, and VPNs. Understanding cybersecurity, such as threat management, is a plus, and certifications like CISSP, CEH, or CompTIA Security+ are preferred but not required.

Willingness to Learn:

• A strong desire to keep learning about the latest trends and technologies. Being open to taking courses on networking, cybersecurity, and IT support is important.

Experience with Tools:

• Some hands-on experience with network management tools and cloud-based networking and security services.

Problem-Solving Skills:

• Good at analysing problems and coming up with effective solutions for network and security issues.

Communication and Teamwork:

• Able to explain technical information clearly to people who may not have a technical background. Comfortable working in teams and willing to step in and help with IT Manager and Help Desk roles when needed

This role requires strong technical expertise, proactive problem-solving, and the ability to collaborate within a small team.

Being a specialist in the areas of Operational Technology Cyber Security, including Risk Assessment, Vulnerability Assessment and Penetration Testing;

• Perform technical reviews of cybersecurity solutions, servers, network devices (SCADA, DCS and PLC system and applications)
• Design and execute project by providing technical support, site installation, integration, testing and documentation
• Provide site support in FAT & SAT at clients' location
• Provide technical advice on solution alternatives, corresponding risks and implications
• Keep abreast of new developments in cybersecurity practices and technologies, as well as emerging threats and vulnerabilities

Requirements

• Bachelor’s Degree in Computing, Engineering, Information Security, Cyber Security or equivalent
• Minimum 2 years' of relevant experience
• Strong project management and communication skills (written and spoken)
• Knowledge of risk assessment & VAPT tools, technologies and methods for IT/OT security
• Possess information security certifications or related security product certifications such as CISSP, CISA, CEH, CREST Penetration Testing or equivalent
• Those familiar with ISA/IEC62443, NIST standards will have added advantage
• Candidates should have passion for OT security, is self-driven and independent
• When necessary, willing to go to critical infrastructure sites such as water treatment plant, power plant, manufacturing plant etc.

Responsible to ensure accurate and rapid response to security events. • Analyze security logs, SIEM alerts, and incident reports to identify and mitigate risks. • Respond to and investigate security incidents, including breaches, malware outbreaks, and phishing attacks. Monitor networks and systems for security breaches, alerts, and anomalous activity. • Conduct root-cause analysis to prevent future incidents and develop incident response procedures. • Provide analysis and trending of security log data from various security devices • Configure and maintain SIEM tools to align with the organization’s security objectives and threat landscape. • Create custom SIEM dashboards and reports for different stakeholders to visualize critical security metrics and incident data. • Develop and optimize SIEM content, including rules, alerts, and correlation logic, to improve threat detection and response. • Regularly review and tune SIEM rules to reduce false positives, enhance event correlation, and maintain relevance to evolving threats. • Document and update SIEM processes and configurations, ensuring a high level of data accuracy and availability. • Perform regular vulnerability scans and assist in patch management processes. Work with IT teams to prioritize and remediate them. • Recommend solutions to mitigate risks in any activity that may potentially impact security of existing IT and information management • Ensure compliance with industry regulations (e.g. GDPR, ISO 27001) and company policies. • Assist in the development, implementation, and maintenance of security policies, standards, and guidelines. • Assist in training staff on security best practices, including phishing awareness and data protection. • Help develop educational materials and conduct periodic security awareness training.

Requirements:

Bachelor Degree or Advanced Diploma in Computer Science, Information Technology,
• Cybersecurity from a recognized university or related field (or equivalent experience)
• At least 1-3 years in a cybersecurity role, with hands-on experience in SIEM content
management, network security, threat monitoring, or incident response.
• Strong knowledge of cybersecurity principles, practices, and technologies.
• Expertise in SIEM tools and content management, including rule creation, alert tuning, and report
customization.
• Proficiency with security tools like firewalls, IDPS, antivirus, and vulnerability scanners.
• Knowledge of scripting (Python, PowerShell) for automation within the SIEM environment is a
plus.
• Ability to analyze and interpret security data to identify vulnerabilities and potential threats.
• Excellent communication skills, with the ability to explain complex security concepts to nontechnical stakeholders.
• Strong analytical skills and attention to detail.
• Ability to work on-call or off-hours as needed to respond to security incidents.
• May require occasional travel for training or workshop.
• Experience in the application of threat modelling or other risk identification techniques.
• Detailed knowledge of system security vulnerabilities and remediation techniques, including
penetration testing and the development of exploits
• Breadth of knowledge in information security space with emphasis on TCP/IP network security,
operating system security, common attack patterns and exploitation techniques
• Relevant certifications (e.g., CompTIA Security+, Certified Information Systems Security
Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC)) are a plus
• Effective leadership skills and a team player.
• Strong sense of ownership and driv

Role Summary

The role is responsible for delivering and managing cloud security and endpoint security services, assessing policies and rules, safeguarding SaaS applications, data and endpoints. You’ll collaborate with colleagues supporting network and architecture assessment, threat modeling, vulnerability assessment, and security operations. This position supports the Enterprise Security Transformation practice and is focused on engineering secure methods of utilizing cloud infrastructure services and software to improve the overall security posture. Cloud security engineers may instruct other teams on proper coding methods. They may also investigate, create, and recommend innovative technologies or other methods that will enhance the security of cloud-based environments.

Roles and Responsibilities

• Protects system by defining access privileges, control structures, and resources.
• Safeguards information system assets by identifying and solving potential and actual security problems.
• Recognizes problems by identifying abnormalities; reporting violations.
• Determines security violations and inefficiencies by conducting periodic audits.
• Consolidate root cause analysis of past pentest results.
• Upgrades system by implementing and maintaining security controls.
• Require periodic after-hours/weekend support.
• Any other duties assigned by the Team Lead/Solution Architect.

Job Requirements

• 3 years experience in AWS Cloud Security, Security Hub, Guard Duty, Inspector, etc.
• Strong understanding of SSDLC and security frameworks.
• Knowledge in OWASP Security Standards.
• In-depth knowledge of architecture, engineering, and operations of at least one enterprise IDS/IPS/SIEM platform.
• Hands on experience with vulnerability scanning and pentesting tools.
• Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations.
• Experience with identity and access management architectures and solutions including AD, RBAC, SSO, identity lifecycle management.
• Experience in IAM, secrets management, encryption technologies, SaaS services hardening, Kubernetes and container security
• Experience with Linux administration, shell scripting, and open-source security tools.
• Knowledge of security best practices in hardening and protecting cloud environments, networks, servers, endpoints, applications, and databases.
• Certifications in OSCP / CISSP / SANS / Other relevant security certifications.
• Excellent interpersonal skills, team player and independent worker.
• Ability to operate in a fast-paced work environment and deliver under pressure.
• AWS certification will be an added advantage.

· Over 5 years of experience in Information Security

• At least 2 years of direct experience in one of the Public Cloud platforms, such as AWS or Azure with strong knowledge of their security features.

• Ability to identify and drive remediation of public and hybrid cloud risks

• Experience in general security technologies, processes, and concepts.

• Industry-recognized security certifications (OSCP, CISSP, CISA, CEH, AWS Security, etc.).

• Working experience on SIEM / Analytics tools, eg: Securonix, Sentinel

• Working experience with common security operations systems, Intrusion Detection Systems (IDS/IPS), Security Incident Event Management systems (SIEM), anti-virus log collection systems, etc

• Strong analytical and problem-solving skills, with the ability to identify and address security risks and vulnerabilities

• Working knowledge of security systems and programs

• Ability to analyze and develop innovative recommendations and solutions.

• Sound fundamental knowledge of Internet technologies, such as TCP/IP, HTTP, SSL, DNS, OWASP Top10, and web servers (e.g. Apache, IIS, Nginx, etc.).

• Experience with web security concepts and technologies such as web application firewalls, and proxy.

• Familiarity with AWS technologies, such as CodePipeline, CodeBuild, CodeDeploy, CodeStar, Guardrails, Amazon ECS, AWS Lambda, and Open-source tools like Jenkins, Def

IT SECURITY engineer

We are a leading Regional IT and Cyber Security system integrator headquartered in Singapore with a presence in Malaysia & the Philippines. We are hiring talented individuals with a positive attitude to join us. We run SOC, a cybersecurity consultancy, and other professional services to local and regional customers.

Primary Functions:

· Responsible for providing technical assistance and support related to computer systems, hardware, or software

· Responds to queries, run diagnostic programs, isolate the problem, and determines and implements a solution

· To ensure that clients get prompt and quality service

· To document troubleshooting and problem-resolution steps

· To participate and provide knowledge transfer to customers when necessary

· Professional services implementation including but not limited to Linux, Wintel Server, Networking, CyberSecurity project implementation

· Create training manuals, documentation, and knowledge transfer documents

· Install and modify computer & Infrastructure based on in-house best practices

· To implement security control on the system and network devices

· Follow up with customers to ensure the issue has been resolved

· Provide technical assistance and support for queries and issues related to computer systems, Local area network (LAN), Wide area network (WAN), and other hardware/software via phone, email, and/or onsite according to stipulated SLA

Requirements and Skills:

· Diploma holder in IT and other IT Security certifications will be a plus

· Minimum 1-year experience in IT

· Fresh graduates are welcome as we will provide relevant training

· A good understanding of IT network, data storage, network, Wintel Server

· Resourceful, creative, independent, and able to work well in a team

· Required to work on-site when necessary

· Taking ownership of technical issues and working with customers and partners to resolve more advanced issues when necessary.

· Good written and verbal skills; excellent phone and email manners.

· Understanding of TCP/IP, OSI Layer, network security, Internet, DNS, network routing, switching, SMTP email, Linux, and Microsoft Windows

Other Information:

· Office Location: 67 Ayer Rajah Crescent #02-10 S139950

· Working hours: Mon-Friday, 9 am-6 pm

· Depending on the season and customer request may require to work outside working hours

· Monthly basic salary commensurate with qualifications and experiences

· Other benefits such as annual leave, medical, insurance, training opportunities, regional exposures, etc

· Additional performance bonus based on individual contribution towards company strategy and its financial performance

Contact: [email protected]

Role:

CCTV & Security Supervisor

• Project contract based (start from 29 Jan, estimated 27 months until project completion)
• Work Location: Changi Naval Base
• Project Office at (Lavender area)
• Working days: 5.5 days 8am to 5pm, Alt Sat Full Day
• Salary: $1600 to $3000

Requirements

• Degree in Construction Facility Management or equivalent, recognized universities under the BCA with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.

Job scope

• Supervise building CCTV & security system.

• Ensure compliance with CCTV Code & Security requirements.

• Conduct daily check on installation works.

• Conduct coordination work with other trades.

• Assure compliance to code of practice.

• Understand of CCTV & security system operation & function.

• Prepare & submit permit to work application.

• Ensure proper documentation is in order.

• Assist operation & construction team on site activities related to Fire & security system.

• Ensure that works carried out are following the Workplace Safety and Health Act.

• Other ad-hoc duties as assigned.

✅ Wee Yuan Huan

✅ Reg No: R21100383

✅ The Supreme HR Advisory Pte Ltd

✅ EA No: 14C7279

Job Description

• Industry/ Organization Type: IT/Cybersecurity
• Position Title: Security Penetration Tester
• Working Location: Tai Seng
• Working Hours: 5 days (Monday to Friday 8 AM – 5 PM / 9 AM – 6 PM)
• Salary Package: Basic Salary up to $6,000 + AWS + Performance Bonus
• Duration: Permanent

Key Responsibilities

• Conduct thorough penetration testing on web and mobile applications, networks, and cloud infrastructure.
• Identify, exploit, and document vulnerabilities in various systems and applications.
• Provide detailed reports on findings, including risk assessment and impact analysis.
• Recommend effective remediation strategies and work with clients to implement security measures.
• Develop and maintain security testing scripts and tools.
• Stay updated with the latest security trends, vulnerabilities, and technology advancements.
• Collaborate with internal teams to design and implement robust security solutions.
• Educate and train clients on security best practices and threat mitigation techniques.
• Participate in incident response activities as needed.
• Ensure compliance with industry standards and regulatory requirements.
• Any other ad-hoc duties as assigned

APPLY NOW!!!

• Bachelor’s Degree in Computer Science, Information Security, or a related field
• Has minimum 2 years of penetration testing experience or in a similar cybersecurity role
• Familiarity with programming and scripting languages is advantageous
• Proficiency in using penetration testing tools such as Metasploit, Burp Suite, Nessus, etc are an added advantage

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job(at)anradus.com.sg. Kindly indicate #69141 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it’s likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Key Responsibilities:

• Manpower Management: Manage the deployment and daily operations of security personnel at assigned sites.
• Planning and Optimization: Forecast site needs, plan duty rosters, and prepare for contingencies with meticulous attention to detail.
• Client Support: Be a reliable support system for Operations Managers and site supervisors, actively assisting with concerns and issues.
• Mentorship and Training: Facilitate on-the-job training for new and existing security personnel, ensuring competence and knowledge retention.
• Client and Management Collaboration: Foster positive relationships with client management, regularly propose service improvements, and deliver detailed reports.
• Investigative Proficiency: Conduct thorough investigations and prepare comprehensive reports on incidents or concerns.
• Standards and Compliance: Ensure personnel performance adheres to established standards, conduct site checks, and solicit client feedback through regular meetings.
• Continuous Improvement: Actively identify opportunities for service enhancements and present them to the management team.
• Documentation and Reporting: Maintain accurate and updated documentation for both onsite and office records.
• Adaptability and Flexibility: Be prepared to perform additional duties related to site operations and respond with initiative to unexpected situations.

Qualifications:

• Diploma in Security Management preferred, minimum of Advanced Certificate in Security Supervision acceptable.
• 2+ years of experience in a similar supervisory role within the security industry.
• Valid PLRD license (SS and above preferred).
• Proficiency in Microsoft Office suite.
• Excellent communication, interpersonal, and organizational skills.
• Strong analytical and problem-solving abilities.
• Meticulous attention to detail and a commitment to accuracy.
• Ability to work independently and as part of a team.
• Operational readiness, including responsiveness even outside regular working hours.

Avensys is a reputed global IT professional services company headquartered in Singapore. Our services include enterprise solution consulting, business intelligence, business process automation, and managed services. Given our decade of success, we have become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail, and supply chain.

We are currently looking to hire Spring Application Developer. This is an exciting opportunity to expand your skill set and achieve job satisfaction and work-life balance. I've included more details below.

Key Responsibilities:

- Configure, and manage Cisco Catalyst Switches (IOS), Cisco Nexus Switches (NXOS), and Alcatel Lucent Switches (AOS) to maintain a secure and efficient network infrastructure.

- Implement and maintain Palo Alto and Fortinet Fortigate Firewalls for network security and access control.

- Administer Alcatel Lucent Wireless Controllers to ensure a secure and robust wireless network environment.

- Utilize SolarWinds NPM (Network Performance Monitor) and NCM (Network Configuration Manager) for network monitoring and configuration management.

- Manage and maintain ClearPass Policy Manager for network access control and policy enforcement.

Qualifications:

- Bachelor’s degree in Computer Science, Information Technology, or related field.

- 3+ years of experience in network security engineering.

- Proficiency in Cisco Catalyst Switches (IOS), Cisco Nexus Switches (NXOS), and Alcatel Lucent Switches (AOS).

- Experience in configuring and managing Palo Alto and Fortinet Fortigate Firewalls.

- Hands-on experience with Alcatel Lucent Wireless Controllers.

- Familiarity with SolarWinds NPM / NCM for network monitoring and configuration management.

- Proficient in ClearPass Policy Manager for network access control and policy enforcement.

- Knowledge of network protocols, security architectures, and best practices.

- Strong analytical and problem-solving skills with attention to detail.

- Excellent communication and teamwork abilities.

Additional Preferred Skills:

Though not mandatory, the ideal candidate will also have exposure to the following technologies:

- Experience with other firewall solutions beyond Palo Alto and Fortinet, such as Check Point or Cisco ASA.

- Proficiency in network encryption protocols and VPN technologies.

- Understanding of network segmentation and micro-segmentation principles.

- Knowledge of intrusion detection/prevention systems (IDS/IPS).

- This role demands a proactive individual with a strong technical background in network security. If you possess these skills and are looking for a challenging opportunity in network security engineering, we encourage you to apply and become a valuable part of our dedicated team.

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [email protected]. Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS

Consultant Name: Zayn Atif
Avensys Consulting Pte Ltd
EA Licence 12C5759

A renowned Energy and utility solutions firm is looking for a Senior Manager, Security Governance in Singapore. The incumbent will be responsible for aligning the standards and excellence of security policies across all operational facilities/sites. This role will be parked under the HSSE Division (Group Health, Safety, Security and Environment).

Responsibilities:

• Develop and maintain group-level asset security across all regional sites
• Oversee data security and governance
• Provide guidance and support to all sites to ensur operational excellance in security practices which includes Security Strategy, Incident Response and Investigation, Security Training, and Group Reporting etc.
• Conduct regular assessments and audits to identify areas for improvement and ensure compliance with security standards.
• Handle projects to build policies on risk impact, buildings, properties and facilities.

Requirements:

• Bachelor's Degree in Security Management or any relevant disciplines
• 10+ years of experience in security policies and governance
• Familiar with regional and group-level operational security exellence
• Experienced in security asessment and audits
• Strong communication and interpersonal skills
• Individual contributor position
• 1-2 monthly travels per month
• Full onsite arrangement

If you are interested, please apply with your updated CV. Only shortlisted candidates will be contacted.

We are looking for a skilled IT Security Engineer to join our client for a 1-year direct contract. The successful candidate will bring strong expertise in information security and hands-on experience managing security projects from start to finish.

Responsibilities:

• Lead and execute security projects across various domains, including endpoint, network, and application security.
• Implement and manage security tools, such as Web Proxy, Endpoint Protection, Email Security, and Vulnerability Scanners.
• Assess system security through threat modeling and propose effective solutions.
• Explore and integrate emerging security technologies to strengthen the organization’s security posture.
• Collaborate with teams to ensure secure deployment and operation of cloud environments.

Requirements:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related field.
• 5 years experience in IT Security, with deep expertise in one or more security domains.
• 3 years hands-on experience in end-to-end IT security projects or project delivery.
• Familiarity with security tools and frameworks.
• Security certifications (CISSP, CISM, AWS Certified Security, etc.) are highly desirable.
• Experience with cloud security is an added advantage.
• Thrives in fast-paced and demanding environments.

This role is a great opportunity to work on impactful security projects in a dynamic environment.

Title: Cloud Security Engineer

Industry: SI

Job Summary
Looking for an experienced Cloud Security Engineer to guide clients in implementing secure cloud solutions, addressing security challenges, and ensuring compliance. This role involves designing architectures, delivering technical guidance, and collaborating with internal and external stakeholders to ensure successful cloud adoption.

Responsibilities

• Act as a trusted advisor to customers, providing expertise in cloud security and compliance.
• Design and implement cloud security architectures tailored to client requirements through in-depth discussions, presentations, and hands-on implementation.
• Create best practices, tutorials, and technical content for various audiences.
• Collaborate with senior stakeholders to drive positive outcomes and consensus.
• Stay informed about the latest security trends and apply them in solutions.
• Deliver services both remotely and onsite, with occasional travel (up to 30%).

Qualifications

Minimum Requirements:

• Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent experience.
• Coding proficiency in one or more programming languages.
• Proven experience managing customer projects to completion.
• Expertise in designing, developing, or maintaining secure cloud solutions.
• Strong communication skills in English and Mandarin, with experience creating technical documentation.

Preferred Qualifications:

• 7+ years of experience in security architecture or engineering.
• Practical knowledge of key security principles and cloud security delivery.
• Familiarity with mitigating attacks in areas such as network design, OS hardening, web application security, and incident response.
• Hands-on experience securing Kubernetes and containerized workloads.

(EA:20C0196)

R22108971

Job Summary

• To perform general duties of a Security Officer and work closely with employees to ensure a secure environment for guests, staff and hotel’s properties.
• To protect life and property which includes prevention and deterrence of crimes.
• To perform static duties at hotel lobby and staff entrance, patrol on guest floor and hotel premises, monitor CCTV cameras and perform any other duties as assigned to the Security Control Room.
• To be aware of important event developments in the hotel in order to carry out duties effectively and efficiently.
• To create security and fire safety awareness among staff and guests. To carry out fire fighting function as and when necessary.
• To respond immediately to guests and staff for their needs or requests for security assistance, and to follow-up with security investigations when necessary.

Job Requirements

• Valid Security License
• Able to perform 3 rotating shift

Job Responsibilities:

• Perform screening of passengers at designated zones
• Perform x-ray screening of checked-in luggage and manual bag checks when necessary
• Use of security screening equipment when required
• Any other security related roles at the airport

Job Requirements:

• 5-6 days work week depending on shift
• Able to work long hours shift

EA Personnel Name: Nicholas Poh
EA Personnel No: R24123432
EA License No: 16C8443

Cyber Security Specialist (VAPT)

Job Description

Architect, design, review and implement cyber security resilient in our product and projects. You are familiar with cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment.

Responsibilities

• Responsible in managing CyberSecurity VAPT, Vulnerability Assessment, Risk Management and Testing.
• Manage Network and Cloud Security Risk Assessment and Audit.
• Involved in handling Government Projects related to risk, security attacks and system solutions.
• Consultancy on software and hardware for security vulnerabilities and risks
• Plan VAPT, execution, result analysis and provide fix recommendation.
• Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
• Familiar with IM8 requirements and CIS, NIST security benchmark, cyber security tools to perform preliminary scan.

Skills Required

• Strong in knowledge in CyberSecurity, Risk Assessment, VAPT, Vulnerability and Cloud Security.
• Strong in VAPT management.
• Technically incline in CyberSecurity, Cloud, Risk and Vulnerabilities.
• Possess knowledge of IM8 and Government projects experience is preferred.
• Degree/Certifications in CyberSecurity.
• Possess CyberSecurity certifications.
• Possess Government domain is preferred.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : [email protected]

Yong Jeline (Reg. No. R1101621)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)