Total 12 legal public security job vacancies in papua new guinea

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Plan, deploy and implement Data Loss Prevention on security projects and initiatives
• Responsible for management, advanced configuration, monitoring and fine tuning of Data Loss Prevention solution
• Configure, develop and maintain DLP tools & platform, SIEM and threat detection tools
• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 8 years of experience in IT Incident Management, DLP Operations or SOC
• Experience in multiple channels of DLP implementation and operations
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

• Work closely with internal and external stakeholders to manage the technical risk, security operation and SOC.
• Act as IT security expert for department in the areas of cyber security assessments, PAM, Database, WAF, Firewall and EPP/EDR.
• Perform risk assessment and identify mitigation controls for the risk area identified.
• Enhance and build cyber threat detection user cases and assist in analyzing and reducing false positive.
• Identify infection/compromise in the company utilizing threat intelligence and indicators of compromise (IOCs) from different threat Intel sources and regulators.
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Track, monitor and valid security-related and risk issues, provide an action plan to rectify the issues and prevent recurrence.
• Generate security reports and metrics as required.
• Provide timely and periodic update to managements on its security matters.
• Stay current on the latest Cyber threats, Attacks and vulnerabilities etc.
• Good diploma or degree in Computer Science, Digital Forensic or Engineering preferred.
• Preferred minimum of 6 years of relevant work experience in IT security auditing or security operation role.
• Strong knowledge in internet infrastructure, networking technology and security (i.e. DNS, DHCP, Firewall, WAF, IDS, IPS, VPN, APT and TCP/IP protocols)
• Working experience with major SIEM will be advantage
• Strong practical experience in Cyber security: Cyber kill chain, TTP, threat intelligence, malware triages.
• Demonstrated ability to multitask and is detail-oriented with inquisitive mind during case investigation.
• Good team player with strong communication skills with project teams, stakeholders, senior management, and contractors including both technical and non-technical personnel.
• Professional security related qualification (e.g. CEH, ECIH/GCIH, and ITIL) will be favorable although not mandatory technical skills

Position Summary:

Mainly supporting security aspect like firewall checkpoint, security appliances - configuration, troubleshooting, capacity planning. Supporting current operation and deployment of resiliency project.

Roles and Responsibilities:

• Directly reporting to Security Senior Manager
• Assist Architect team on new infrastructure design, implementation, and management of network solutions that form the core infrastructure, ensuring seamless integration across different platforms. This includes procurement of necessary equipment.
• To provide comprehensive product knowledge on the data technology required to deliver, support the networks infrastructure.
• Collaborate with the team to identify network and system needs, monitor performance metrics, troubleshoot, and resolve network-related issues, and implement improvements.
• Deliver project management for network activities encompassing upgrades, deployments, and migrations. Provide technical guidance and user support as required.
• Develop, maintain, and update documentation covering the network environment and operational procedures.
• Generate reports and detailed documentation outlining findings, implemented solutions, and recommendations for further enhancements.
• Oversee network environment to maximize performance, scalability, and minimize downtime.
• Closely coordinate and conform to Change Management policies, process, and procedures on any network changes.
• To implement approved changes, troubleshoot to identify root causes and implement effective solutions.
• Experience on Automating daily network tasks using scripting.
• Be available to provide on-call support as needed.

Qualification/ Requirements:

• Minimum Bachelor in Computer Engineering or equivalent
• Must equipped with CCNP or CCIE
• Network Infrastructure & Hardware: 5+ years experience managing large enterprise network with a strong focus on F5, Palo Alto, Cisco, and CheckPoint Technology.
• Network Devices: In-depth knowledge and proficiency with switches, firewalls, load balancers, routers, and ISE.
• Network Design & Troubleshooting: Expertise in designing, monitoring, and network & incident management (LAN, WAN, VPN).
• Experience with automation tools: Ansible, Python
• Experience with Deployment and automation, advantage to have experience building data center
• Proven track record of success in a fast-paced IT environment.
• Excellent communication and interpersonal skills, allowing you to effectively collaborate with both technical and non-technical stakeholders.
• Ability to work under pressure and delivery the project on time with minimum supervision.
• Certified and experienced with the mentioned technologies.
• 2 years contract

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Plan, deploy and implement Data Loss Prevention on security projects and initiatives
• Responsible for management, advanced configuration, monitoring and fine tuning of Data Loss Prevention solution
• Configure, develop and maintain DLP tools & platform, SIEM and threat detection tools
• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 8 years of experience in IT Incident Management, DLP Operations or SOC
• Experience in multiple channels of DLP implementation and operations
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Team Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Plan, deploy and implement Data Loss Prevention on security projects and initiatives
• Responsible for management, advanced configuration, monitoring and fine tuning of Data Loss Prevention solution
• Configure, develop and maintain DLP tools & platform, SIEM and threat detection tools
• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 5-6 years of experience in IT Incident Management, DLP Operations or SOC
• Experience in multiple channels of DLP implementation and operations
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

Implement security operations strategy

• Contribute to the definition of the overall security strategy

• Align security operations functions with the organisation’s overall business objectives

• Advise senior leaders on critical issues that may affect corporate security objectives

• Advise the design and implementation of security policy and controls

• Provide expertise on security technologies and innovative security concepts

• Provide technical and operational oversight for security tool deployment and implementation

Operate/Monitor security systems

• Develop plans for operating/monitoring security systems (e.g. endpoint security tools, firewalls, etc)

• Guide the identification and measurement of critical security operations metrics

• Develop detection and alerting rules

• Review/approve firewall rules

• Review/approve changes on AV systems

• Monitor levels of service of the security operations

• Present periodic status reports to management

Security planning, review & compliance

• Coordinate ongoing reviews of existing security programs/protocols and planned upgrades

• Monitor compliance to security policies, regulations, rules and norms

• Participate in reviews/gap analysis of posture and compliance and follow-up with proposed treatment plan

• Authorised/Unauthorised software installation reviews

• Drive continuous improvement of security operations

Respond to security incidents

• Set internal guidelines for effective processing and escalation of incidents

• Review reports on incidents and breaches

• Develop contingency and disaster recovery plans for specific security incidents

• Coordinate prioritisation of alarms and resources for incident responses

• Oversee the development of emergency protocols

• Recommend systems and procedures for the prevention, detection, containment and correction of security breaches

• At least 15 years' of experience in IT Security

• Strong knowledge and experience in End User Computing, Server, Network and Security spaces

• Strong experience in supporting Windows, Linux, Vulnerability scanning tools, Firewalls and WAF

• Preferable experience in cloud-native security platforms and offerings from AWS or Azure

• Knowledge of patch management for OS and security products (Firewalls, Windows, Linux)

• Strong knowledge of endpoint security tools

• Preferred Knowledge of vulnerability assessment tools and techniques

• Preferred knowledge in conducting risk assessments

• Preferred Security/ITIL/Vendor certifications including but not limited to: (Fortinet NSE4, CISSP, CCSP, CEH, ITIL, CCNA-Security)

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Team Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 5-6 years of experience in IT Incident Management, DLP Operations or SOC
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

Position Summary:

The Security Engineer supports security systems and operations administration, monitoring and maintenance. He/She monitors security alerts and events.

He/She assists with the analysis of security-related information and events, escalation of incidents for validation and remediation.

He/She is required to be on standby with on-call availability with varied shifts including nights, weekends and holidays.

He/She is alert and vigilant in performing monitoring activities and is able to analyse and resolve security-related issues critically. He/She communicates clearly in his/her interactions with others and coordinates effectively with his/her team to perform security operations.

Role and Responsibilities:

• To Configure, implement and maintain all security platforms (E.g. Firewall, Intrusion Prevention, Web Application Firewalls, Web Proxies, DNSSEC)
• Perform assessment of Security Advisories and provide recommendations to the team
• Ensure that all security devices are configured in accordance network security best practices
• Perform periodic vulnerability testing and ensure the remediation of all findings
• Perform regular review of security logs to identify potential operational/security issues
• Perform regular patching of security devices to ensure that devices firmware are kept up to date
• Ensure that all incidents are resolved within the required SLA
• Ensure that all Service Requests are completed within the required SLA
• Ensure that Work Instructions are in place and kept up-to-date for the delivery of all operational tasks
• Continuously review and improve Operations Efficiency (E.g. improving operational efficiency through automation)
• Generates routine reports in the required format
• Secure users and servers internet access
• To support and implement new initiatives

Requirements / Qualifications:

• Possess a Bachelor Degree in Computer Engineering
• 5 years experience and knowledge in Enterprise IT infrastructure covering routing, switching, load balancers, data centre nexus/ACI and security devices
• Strong knowledge with Web proxy and CCNP is a must
• Experience working with automation tools (E.g. ansible), monitoring & observability and logging systems (E.g. ELK).
• Holding any of following professional certificate are preferable: CISSP, CISCO CCIE, PCNSE and ITILv4xtensive technical know-how of network security devices (E.g. Firewall, Intrusion Prevention, Web Application Firewalls, Web Proxies, DNSSEC)
• Hands-on experience in at least 2 of the security devices (E.g. Firewall, Intrusion Prevention, Web Application Firewalls, Web Proxies, DNSSEC)
• Strong problem-solving skills and be able to troubleshoot and resolve complex issues quickly.
• Strong technical skills in areas of systems engineering, systems administration, networking, and security.
• Proficient in at least one scripting languages (E.g. YAML, JSON, Bash)
• Excellent communication skills

Overall Summary:

Plan, design, develop and review infrastructure architectural solutions for on-prem/hybrid Cloud, throughout infrastructure lifecycles.

Roles & Responsibilities:

• Architect and design scalable and secure IT infrastructure, primarily on-premise as well as leveraging on cloud technologies, that is resilient, highly available and secured.

• Develop infrastructure solutions to meet project requirements and establish roadmaps, patterns, principles, standards and guidelines for on-prem infrastructure, and document them in various formats, diagrams and templates

• Validate, review and verify infrastructure aspects of project solutions and technical specifications, based on alignment with mandated enterprise policies and standards

• Own and drive architectural deliverables, working in close collaboration with stakeholders including Project Managers, Subject Matter Experts (SMEs) and vendors to achieve project outcomes and timelines from design to implementation.

• Assess new infrastructure technologies and participate in proof of concept, to assist in defining technology direction, roadmap, framework and policies to meet strategic business initiatives.

• Present, articulate and communicate deliverables including architecture related design, solutions, concepts, ideas and proposals to various stakeholders.

• Keep abreast of emerging trends and identify opportunities for improvement

• Review technical documentation including Technical Design Specs and VM Provisioning Requests

• The infrastructure scope covers, but not limited to, all aspects of cloud, servers, hypervisors, containers, operating systems, databases, middleware, devops, security, support tools, network, SDN as well as related governance framework.

Requirements / Qualifications

• Degree in Computer Engineering / Electrical and Electronic Engineering or equivalent discipline

• At least 7 years’ proven experience in a similar role

• Strong and in-depth technical knowledge and experience in administering and maintaining infrastructure domain areas such as Operating Systems (e.g., VMware, Nutanix, Red Hat, Windows Server), Networking (e.g., SDN, Cisco), Security (e.g. Cisco, Palo Alto,CheckPoint, F5), Automation (e.g., Ansible, Chef, Terraform), Cloud, etc.

• Certifications in the above areas would be advantageous (e.g. CCIE, CISSP, VMware VCAP, Windows Certified Engineer, RedHat Certified Engineer, AWS Solution Architect, Azure Solution Architect, TOGAF)

• Possess good knowledge of networks and networking concepts

• Possess good knowledge of ITIL processes

• Possess good knowledge on private, hybrid and public cloud environment and technologies which includes VMware vRealize Cloud automation, AWS, Azure and OpenShift

• Possess good security, audit and compliance knowledge

• Able to analyse and understand complex technical systems built from many separate software and hardware components, specifically web application architectures

• Strong passion for innovation and desire to learn new technologies

• Possess initiative, with a proactive, result-oriented mindset and able to work independently

• Track record of on-time, on-budget and to-specification delivery with the ability to support end-to-end delivery of solutions.

• Experience in driving complex IT infrastructure design and projects while optimizing costs

• Able to prioritise assignments whilst working on multiple concurrent projects

• Is meticulous and attentive to details

• A team player with Excellent communication, interpersonal and collaboration skills, capable of effectively communicating complex technical concepts and influencing various internal and external stakeholders, both technical and non-technical alike.

• 2 years contract

Test Engineering Services (TES) at Synapxe is embarking on a journey to constantly transform its services by exploiting state-of-the-art technologies and tools to enhance TES’ ability to offer specialized testing services to its stakeholders. TES is passionate about making an impact with lasting change and we aim to provide our stakeholders with automated and optimized testing solutions to not only help them speed-up testing but produce accurate, reliable, and repeatable results.

TES is planning to implement and roll out a Dynamic/Interactive Application Security Testing (D/IAST) solution. This will act as a control measure proposed for implementation in response to Secured-by-Design Framework v1.0 as recommended by CSA’s Cybersecurity Code of Practice (CCoP).

As an Application Security Testing Specialist, you will be responsible for:
• Leading the request for proposal from a technical perspective to procure a D/IAST solution.
• Defining and documenting technical product requirements and specifications for a D/IAST solutions, evaluating the solution proposals to perform fit/gap analysis, determining the detailed evaluation criteria and producing recommendations to prevent, detect and analyse security threats and weaknesses in the running application.
• Leading the implementation and roll out of the identified D/IAST solution; work with the senior manager and product vendor to plan, set-up, on-board, test and deploy the D/IAST solution.
• Automated application security using the D/IAST tool to perform application security testing, gather and understand reports, assess potential security vulnerabilities, work closely with the application developers/vendors to resolve any vulnerabilities, and present the risks to the business for acceptance or mitigation.
• Removing false positives from the reports and working closely with the development/test teams to automate test and embed security testing in the CI/CD pipe line.
• Developing comprehensive and accurate reports and presentations for both technical and management audiences and effectively communicating the findings and remediation strategies.
• Recognising and safely utilising attacker tools, tactics, and procedures
• Maintaining and performing routine maintenance on D/IAST monitoring servers, reports repository, agents, etc.

• 8 years of experience with SAST/DAST/IAST/RASP methodologies and technologies to catch security flaws in the software?
• Hands-on experience with a wide-range of security tools such as MF Fortify, WebInspect, Contrast Security Assess and Protect, IBM AppScan, Checkmarx, MS Threat Modeling, BurpSuite, etc.
• Eager to collectively learn, share and solve problems within the area of application security testing in the area of healthcare domain?
• Consistent attention to details and work under pressure to achieve agreed targets/goals
• Work with intra-teams, and building rapport with the stakeholders and be able to manage difficult people
• Think out of the box and carries the courage to try and implement unconventional approach to deliver solutions

Overall Summary:

Plan, design, develop and review infrastructure architectural solutions for on-prem/hybrid Cloud, throughout infrastructure lifecycles.

Roles & Responsibilities:

• Architect and design scalable and secure IT infrastructure, primarily on-premise as well as leveraging on cloud technologies, that is resilient, highly available and secured.

• Develop infrastructure solutions to meet project requirements and establish roadmaps, patterns, principles, standards and guidelines for on-prem infrastructure, and document them in various formats, diagrams and templates

• Validate, review and verify infrastructure aspects of project solutions and technical specifications, based on alignment with mandated enterprise policies and standards

• Own and drive architectural deliverables, working in close collaboration with stakeholders including Project Managers, Subject Matter Experts (SMEs) and vendors to achieve project outcomes and timelines from design to implementation.

• Assess new infrastructure technologies and participate in proof of concept, to assist in defining technology direction, roadmap, framework and policies to meet strategic business initiatives.

• Present, articulate and communicate deliverables including architecture related design, solutions, concepts, ideas and proposals to various stakeholders.

• Keep abreast of emerging trends and identify opportunities for improvement

• Review technical documentation including Technical Design Specs and VM Provisioning Requests

• The infrastructure scope covers, but not limited to, all aspects of cloud, servers, hypervisors, containers, operating systems, databases, middleware, devops, security, support tools, network, SDN as well as related governance framework.

Requirements / Qualifications

• Degree in Computer Engineering / Electrical and Electronic Engineering or equivalent discipline

• At least 7 years’ proven experience in a similar role

• Strong and in-depth technical knowledge and experience in administering and maintaining infrastructure domain areas such as Operating Systems (e.g., VMware, Nutanix, Red Hat, Windows Server), Networking (e.g., SDN, Cisco), Security (e.g. Cisco, Palo Alto,CheckPoint, F5), Automation (e.g., Ansible, Chef, Terraform), Cloud, etc.

• Certifications in the above areas would be advantageous (e.g. CCIE, CISSP, VMware VCAP, Windows Certified Engineer, RedHat Certified Engineer, AWS Solution Architect, Azure Solution Architect, TOGAF)

• Possess good knowledge of networks and networking concepts

• Possess good knowledge of ITIL processes

• Possess good knowledge on private, hybrid and public cloud environment and technologies which includes VMware vRealize Cloud automation, AWS, Azure and OpenShift

• Possess good security, audit and compliance knowledge

• Able to analyse and understand complex technical systems built from many separate software and hardware components, specifically web application architectures

• Strong passion for innovation and desire to learn new technologies

• Possess initiative, with a proactive, result-oriented mindset and able to work independently

• Track record of on-time, on-budget and to-specification delivery with the ability to support end-to-end delivery of solutions.

• Experience in driving complex IT infrastructure design and projects while optimizing costs

• Able to prioritise assignments whilst working on multiple concurrent projects

• Is meticulous and attentive to details

• A team player with Excellent communication, interpersonal and collaboration skills, capable of effectively communicating complex technical concepts and influencing various internal and external stakeholders, both technical and non-technical alike.

• 2 years contract

· Perform analysis, prioritization and classification of risk.

· Handle day-to-day security vulnerability assessments and operational request.

· Provide security vulnerability assessment reports and advise system operator on security vulnerability and resolution.

· Proactive monitoring of remediation plans and progress.

· Schedule security checks in accordance with reporting schedules.

· Continuous enhancement of existing security vulnerability assessment process.

· Verifies security controls are implemented accordingly.

· Review security incident reports

· Evaluate the type and severity of security events

· Assist with establishing procedures for handling detected security events

· Create final incident report detailing the events of the incident

· Prepare periodic status reports for presentation to management

· At least 5 year working experience in vulnerability management and incident response.

· Familiar with at least one vulnerability scanner.

· Strong analytical skills and ability to work independently.

· Good team player as well as strong communications skills with stakeholders at all levels

· Possess QISP, CEH, CISSP and/or related security certification.

· Experience in healthcare industry is an added advantage.

· Degree in Computer Science, Engineering or equivalent.