Total 25 structural engineer job vacancies in Legal / Public / Security category in Ang Mo Kio, North East

Responsibilities:

• Designing, implementing, and managing security solutions to protect against cyber threats while ensuring seamless IT Infrastructure, Servers and Applications performance.
• Continuously optimize existing IT Infrastructure, Servers and Applications security policies and models, monitor and respond to threat detection event alerts and response handling, and enhance overall detection levels and coverage.
• Be responsible for vulnerability management (CVE, CVSS, OWASP Top 10), container, network & systems security, as well as cloud security tools and services
• Design, configure, and maintain firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and other security devices.
• Monitor and analyze security events and logs to identify potential vulnerabilities and incidents.
• Threat Prevention & Incident Response: Identify, investigate, and resolve security breaches and incidents.
• Develop and implement strategies to mitigate identified risks and vulnerabilities.
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Conduct regular audits of IT Infrastructure, Servers and Applications security to ensure compliance with security policies.
• Maintain compliance with industry standards such as ISO 27001, GDPR, or SOC 2.
• Create and maintain detailed network diagrams and security documentation.
• Work closely with IT teams to ensure robust security integration across systems.
• Educate employees on security best practices and emerging threats.
• Manage tools like SIEM, antivirus solutions, IDS/IPS and DLP software.
• Stay updated with the latest technologies, trends, and vulnerabilities in cybersecurity.

Requirements:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Relevant certifications (e.g., CISSP, CEH, CCNP Security, Palo Alto PCNSA) are a plus but not mandatory.
• 7 to 12 years of experience in the designing, implementing, and managing of IT Infrastructure, Servers and Applications security according to industry standards such as ISO 27001, GDPR, or SOC 2.
• Expertise in one or more IT Security Engineering topics, such as Secure Browsing, PAM, PKI, or Multifactor Authentication.
• Proven ability to contribute to the development of architecture, concepts, and processes in IT security.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.), firewalls, VPNs, intrusion detection / prevention systems (IDS/IPS), vulnerability management (CVE, CVSS, OWASP Top 10) and etc.
• Proficiency in firewall technologies (e.g., Fortinet, Palo Alto, Cisco ASA).
• Experience with vulnerability scanning tools and penetration testing.
• Experienced with cloud environments and cloud security principles. Knowledge in AWS/Azure cloud security tools and services.

Role Description

AtomIT Networks Pte Ltd is seeking a highly skilled and motivated Cyber Security Engineer to join our team in Singapore. This is a full-time, on-site role requiring hands-on expertise in Cybersecurity operations and solutions delivery. The Cyber Security Engineer will play a pivotal role in safeguarding our clients' networks, systems, and data against sophisticated cyber threats and vulnerabilities. This position demands a dynamic professional capable of operating in a fast-paced environment with 24x7 standby responsibilities to respond to critical incidents and ensure uninterrupted security operations.

Key Responsibilities

• Design, implement, and manage robust cybersecurity measures to protect networks, applications, and systems.
• Regularly monitor latest cybersecurity news and proactively identify & mitigate potential security risks.
• Monitor and analyze network traffic, logs, and alerts to detect and respond to security incidents promptly.
• Collaborate with cross-functional teams to align security strategies with business objectives.
• Create and update detailed documentation, including implementation plan, procedures, and incident reports.
• Stay updated with emerging threats and security technologies to implement proactive defenses.
• Provide 24x7 standby duty support to address urgent security incidents and maintain system integrity.

Qualifications

• Proven expertise in Cybersecurity, Network Security, and Information Security.
• Proficiency in security technologies such as firewalls, SD-WAN, IDS/IPS, WAF, SIEM, ZTNA, SASE, EDR and etc.
• Familiarity with cloud security across platforms like AWS, Azure, or GCP.
• Relevant certifications such as Fortinet NSE, Cisco CCNP Security, CISSP, CEH, AWS & Azure Security Specialization, or equivalent are highly desirable.
• Strong analytical skills and the ability to troubleshoot complex security challenges.
• Excellent communication and collaboration skills with a proactive, detail-oriented mindset.
• Hands-on experience in Vulnerability Assessment, threat modeling, and risk analysis is a plus point.
• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• Priority will be given to Singapore Citizens and Permanent Residents.

The AVP - Perimeter Security Build Engineer seats within the Perimeter Security Services Team, focusing on maintaining next generation, large scale perimeter security solutions for the enterprise globally. The purpose is to ensure the overall health and integrity of Citi’s network and perimeter defence.

In this role you will be responsible to work on various large scale security initiatives, establish and utilize processes for perimeter security lifecycle management, influence stakeholders and drive the general security posture along with various peer groups and organizations.

As an Perimeter Security Build Engineer you will

• Configure, deploy and integrate firewall and remote access infrastructure for Citi environment
• Work with aligned technology teams to ensure deployment and decommissioning of devices happen according to approved Citi standard build baselines
• Perform troubleshooting related to project rollouts
• Create and maintain documentation and reports for the configuration procedures & support checklists
• Perform process review, reengineering and standardization to ensure risk-free efficiency
• Work with perimeter security engineering and vendors on understanding and utilizing standard builds
• Participate in new product/solution testing and rollout

Ideal background

• 3+ years of experience with multiple security disciplines and understanding of perimeter security solutions and concepts
• Experience with Check Point, Juniper SSL and Palo Alto firewall solutions
• Unix / linux experience
• Advanced written and verbal English communications skills
• Stakeholder management skills, with ability to communicate with stakeholders of varying seniority across business and technical functions.
• University degree or certifications in a relevant cyber security / networking area

Benefits

• exposure to a broad range of investment technology businesses and products
• access to our world-class testing lab with physical hands on using hundreds of devices in the IT security ecosystem
• competitive compensation package
• access to Citi’s huge training database and subscription to external online trainings
• a socially active team and communities with diverse networking opportunities

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Summary

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other’s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It’s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you’ll do more than join something — you’ll add something. There is a lot that goes into building the most secure yet user-friendly devices in the world. We are a unique Software Development group with a charter to secure our platforms, which include iOS software, iOS Devices, and Mac. We build solutions that are used by our customers, engineering teams, and manufacturing environments. We are looking for a candidate who is passionate about both software and hardware security and enjoys highly technical, hands-on role in a dynamic and fast paced environment. This role will be responsible for testing and securing the Software Development Life Cycle, world-wide hardware manufacturing ecosystem and associated global IT infrastructure. As a member of our fast-paced group, you will have the unique and rewarding opportunity to shape and improve the software that allows our products to surprise and delight billions of Apple’s customers every day. If you’re excited by the idea of making a real impact, and joining a team where we pride ourselves in being one of the most diverse and inclusive companies in the world, a career with Apple will be your dream job.

Description

Our organisation provides security server-side solution to enable various Apple product security features. As part of security team in this organisation, we are looking for someone who can drive advancements in security practices, proactively identifying security vulnerabilities, fortifying our platforms against emerging threats and enabling continuous innovation. The existing scope of the work includes the following and will be expanded with emerging new technology and new business initiatives.

• Perform penetration testing and vulnerability assessments on software applications, API services, and infrastructure.
• Develop and execute new test plans, methodologies, and tools for assessing hardware and software security.
• Conduct static code analysis to identify and triage application security issues. Work closely with DevOps and engineering teams to remediate application security vulnerabilities and implement security best practices throughout the Software Development Life Cycle (SDLC).
• Perform reverse engineering and forensic analysis on software & hardware to identify security vulnerabilities and its exploitability.
• Rotate between red and blue functions and conduct simulated attacks & defence. Develop security strategies, frameworks, tools, and processes to assess and improve security posture of the organisation.
• Collaborate with hardware design teams to integrate security best practices during product development.
• Document findings, prepare comprehensive reports, and provide detailed security recommendations for remediation.
• Fulfil on-call responsibilities for handling security-related incidents.
• Continuous learning and conduct security research to stay updated on the latest threats, vulnerabilities, attack vectors, and mitigation techniques.

Minimum Qualifications

• Understanding of fundamental IT domains including Networking, Operating Systems, Security Principles, Secure Coding Practices, Cryptography and System Administration.
• Hands-on experience in security penetration testing, red team exercises, Capture The Flag (CTF) competitions or security related hackathons.
• Understanding of software development and secure coding best practices.
• Respect diversity and inclusiveness in a global organisation with ability to collaborate and communicate effectively
• Ability to analyse complex problems, explore the greenfield and devise creative solutions.
• Willingness and ability to travel internationally (up to 1 weeks at a time).
• Strong team player with adaptability

Preferred Qualifications

• Knowledge in reverse engineering and exploit development.
• Understanding of cryptographic algorithms, secure boot, secure firmware update mechanisms is a plus.
• Understanding of hardware architecture, microcontrollers, processors, and firmware development and have knowledge in hardware security tools and techniques (e.g., JTAG, oscilloscopes.) is a plus.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services,

and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you

could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems,

and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything

we create is the result of people in different roles and teams working together to make each other’s ideas

stronger. That same passion for innovation that goes into our products also applies to our practices,

strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the

Threat Analysis and Incident Response function. A successful candidate will possess a proven technical

background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You

will work with a global team of security professionals on a follow-the-sun model with a primary focus on the

identification, containment, and mitigation of security incidents. This role is an integral part of the security controls

Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology

and processes with global reach. Apple is an Equal Opportunity Employer that is committed to inclusion and

diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants,

including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or

retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job

application or interview process, to perform essential job functions, and to receive other benefits and privileges of

employment. Please contact us to request accommodation.

Minimum Qualifications

More than 7 years of experience in Information Security with a focus on Incident Response, Security

Engineering, and/or Intrusion Detection

Proficient understanding of incident response automation strategies, with demonstrated ability to implement

them

Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors

Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues

In-depth technical knowledge of macOS or Linux Operating Systems

Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze

endpoint, network, and application logs

Proficient in one or more programming/scripting languages

Excellent verbal and written communication skills

Preferred Qualifications

Experience with disk and memory forensic tools

Experience writing and tuning IDS signatures

Experience triaging malware

About ST Engineering

ST Engineering is a global technology, defence, and engineering group with offices across Asia, Europe, the Middle East, and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence, and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Our history spans more than 50 years, and our strategy is underpinned by our core values – Integrity, Value Creation, Courage, Commitment and Compassion. These 5 core values guide every aspect of our business and are embedded in our ST Engineering culture – from the people we hire, to working with each other, to our partners and customers.

About our Line of Business – Mission Software & Services

Our Mission Software & Services business provides leading-edge mission critical command, control, and communications (C3) systems with secured IT infrastructure and managed services. We support our client’s innovation journey through design thinking, analytics, and AI-enabled decision support with our full suite of cloud computing solutions. We provide intelligent, actionable insights and sustainable solutions to our valued partners in diverse industries including defence, government, and commercial sectors.

Together, We Can Make A Significant Impact

The Security Engineer will participate in the development and implementation of secure system architectures. He/ She understands security principles in carrying out the assigned tasks to mitigate the risks posed by new technologies and business practices. He/ She contributes to the development of artefacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture. He/ She performs routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.

Be Part of Our Success

• Collaborate in the design of security controls and systems in alignment with security guidelines
• Assist in the testing and evaluation of new security technologies and controls
• Document the design, operation, use, and expected outputs of new systems
• Participate in the Implementation of new enterprise security architecture, technologies and enhancements
• Resolve issues that arise in implementation of new security systems
• Monitor security systems for strengths and weaknesses and propose improvements to address weaknesses
• Involve in the maintenance of security systems, platforms and associated software
• Collaborate in the development and implementation of custom disaster recovery drills and simulation tests on existing systems
• Assist in the resolution of identified problems and incidents

Qualities We Value

• Familiar with modern security architectures and cloud architecture design best practices
• Knowledge of Python is an advantage
• A good team player who can contribute and work effectively in a collaborative team environment.
• Candidates with critical thinking, analytical and creative problem-solving skills is highly desired.
• Attention to detail and quality is a desired attribute.

Our Commitment That Goes Beyond the Norm

• An environment where you will be working on cutting-edge technologies and architectures.
• Safe space where diverse perspectives are valued, and everyone’s unique contributions are celebrated.
• Meaningful work and projects that make a difference in people’s lives.
• A fun, passionate and collaborative workplace.
• Competitive remuneration and comprehensive benefits.

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems, and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything we create is the result of people in different roles and teams working together to make each other’s ideas stronger. That same passion for innovation that goes into our products also applies to our practices, strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the Threat Analysis and Incident Response function. A successful candidate will possess a proven technical background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You will work with a global team of security professionals on a follow-the-sun model with a primary focus on the identification, containment, and mitigation of security incidents. This role is an integral part of the security controls Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology and processes with global reach.

Minimum Qualifications

• More than 7 years of experience in Information Security with a focus on Incident Response, Security Engineering, and/or Intrusion Detection
• Proficient understanding of incident response automation strategies, with demonstrated ability to implement them
• Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors
• Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues
• In-depth technical knowledge of macOS or Linux Operating Systems
• Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze endpoint, network, and application logs
• Proficient in one or more programming/scripting languages
• Excellent verbal and written communication skills

Preferred Qualifications

• Experience with disk and memory forensic tools
• Experience writing and tuning IDS signatures
• Experience triaging malware

Apple is an Equal Opportunity Employer that is committed to inclusion and diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants, including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Job Descriptions

• Maintain systems plus controls to protect unauthorized access, disclosure, modification and deletion of information through resources and computer networks.
• Support logs, categorizes, prioritizes, tracks, and routes:

1. Incidents reported by users or
2. Alarms raised by monitoring tools

• Interact directly with business technical specialist to guide on authentication, authorization and encryption solutions.
• Investigate known and suspected information security events and develop related reports.
• Conduct hardware and software security alerts as available.
• Resolve issues through responding IT threats and vulnerabilities.
• Conduct routine security risk analysis, evaluate business needs against collision, vulnerabilities and search resulting risks.
• Implement Change Request and Service Request.
• Perform patching on security equipment.
• To implement change request and service request.
• Apprised of the current state of computer security in place in the organization
• Technically proficient and up-to-date in basic computer security policies and practices
• Proactive in preventing Cyber-Security Incidenti.
• To perform technical security assessment for IT & Network components:

1. Vulnerability assessment,Penetration testing, Opportunistic Hacking, Web application security testing, Security source code review etc.
2. To monitor and track the identified vulnerability, issues and fix detected vulnerabilities to maintain a high-security standard.
3. Be familiar with browser, Web service, cloud security, mobile applications security, and operating system security conceptsiv. Understanding of leading vulnerability scoring standards and ability to translate vulnerability severity as security risk

• Perform forensic investigation if required
• Review all security logs.

Job Requirements

• Minimum 2 to 4 years IT relevant experience on security and 1-year experience in cyber security
• Preferably with Certifications such as CREST, OSCP and CISSP.
• With PenTest, Vulnerability Assessment & Risk Assessment experience
• Strong in technical skill
• Able to handle demanding service response and recovery turnaround
• Able to manage daily support tasks to meet stringent SLA requirements
• Excellent scheduling and multitasking skills
• Meticulous and process-oriented
• Good, hard-working attitude with ability to work well under pressure
• Good communication skills English (written, spoken)
• Good analytical skills with ability to work with others to resolve problems.
• Good organization skills, with ability to properly document and track information.
• Dynamic, customer oriented, experience working in a fast paced environment.
• Good Knowledge of following product will be advantageous:- Splunk, FireEye and Nessus Manage

Responsibilities

• Bachelor’s degree in computer science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Join our cyber security team and be part of transforming our digital experience and delivering innovative capabilities for Nine.  We offer a flexible working environment in a culturally diverse and high functioning team. 

This is an expansion of the Cyber Security Engineering team, focused on managing End User risk - configuring, maintaining, and continuously improving cyber security tools such as Cloud Access Security Broker, Zero Trust Network Access, Cloud DLP, Secure Web Gateway, Endpoint Privilege, and EndPoint Management. This will include reviewing and improving monitoring and access controls for other critical SaaS services such as Google Workspace, Slack, JIRA, Confluence.

You will work alongside other members of the Cyber Security Engineering team who are responsible for researching, architecting and implementing Cyber Security capabilities for the Nine group.

This role will also be exposed to other Cyber Security tools, including endpoint privilege, vulnerability management and identity tools amongst others.

The Cyber Security Support Engineer plays a crucial role in safeguarding Nine’s critical systems and data by overseeing key controls that protect Nine’s data and content.  This role involves maintaining and tuning robust policy settings that control access to key applications and portals, managing access to applications, troubleshooting cyber security application issues and responding to service interruptions and incidents. 

This role will also assist the team in performing other key security functions such as vulnerability management, help coordinate vulnerability remediation efforts, and ensure continuous improvement of security posture. Other cyber security engineering tasks involve product evaluation and implementation, risk management and security incident response. 

Key accountabilities of this role is to:

• Implement, configure, and maintain endpoint solutions to securely manage, monitor, and control access.

• Define and enforce policies and procedures for the management of endpoints ensuring compliance with industry standards and regulations.

• Conduct regular reviews and assessments to identify and remediate security risks related to SWG, CASB and DLP.

• Monitor and audit privileged activities, ensuring compliance with policies and promptly addressing any anomalies or security incidents.

• Conduct regular vulnerability assessments, penetration tests, and security scans on systems, networks, and applications to identify vulnerabilities and weaknesses.

• Stay informed about emerging threats and vulnerabilities by monitoring security advisories, research reports, and threat intelligence sources.

• Translate threat intelligence into actionable insights for managing end user risk

Cyber Security, Associate Engineer

Salary: up to $4000+

Responsible in maintaining and improving the organization’s cybersecurity posture on an ongoing basis. S/he will work with external experts to implement security solutions, and work with vendors to monitor, detect and contain cybersecurity incidents to minimize impact to the organization.

Responsibilities

• Assist in the development of information security policies, processes / procedures and guidelines on an ongoing basis.

• Work with vendor to conduct security assessments and penetration tests.

• Identify security gaps, perform threat risk assessments in current setup and propose mitigating measures.

• Standardize and refine security incident response and escalation processes.

• Mitigate and contain threats when detected.

• Escalate security incidents and non-compliances on a timely basis.

• Work with IT infrastructure team to evaluate, implement and enhance the network perimeter security, endpoint security, SIEM.

• Monitor information security alerts triage, mitigate, and escalate issues as needed.

• Conduct information security awareness training.

• Provide security advisory to end users on regular basis.

• IT Security Management of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc.

• Keep abreast of industrial IT security advancements and introduce appropriate security enhancements to IT infrastructure and systems.

• To perform daily monitoring of logs and review of security notifications and alerts, and assist on the assessment and reporting weekly trends, incidents and security events. Abnormalities found in the review of security events must be reported to the Cyber Security Manager.

• To provide daily technical support in terms of Cyber Security operations for Sophos Endpoint Protection, Cisco FTD Firewall, Advanced Email Threat Protection, Web Application Firewall, Cisco Email Security, DG DLP, Tenable SCCV, Splunk, Cisco Umbrella, etc.

• Attend to any other reasonable duties as assigned by the Senior Cyber Security & IT Governance Manager and IT Director.

Requirements

• Degree/ Diploma with min 2 years related work experience in cybersecurity management in Singapore.

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (vulnerability assessment, penetration testing), application security, security technologies (system hardening, IDS/IPD, firewall), security incident response and security assessment.

• Good command of written and spoken English.

• Excellent interpersonal and communication skills.

• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision.

To apply:

Please email Resume in Microsoft Word format

Please state your Position/ positions applied on the “on TOP” of your resume.

Please state Available Commencement Date or notice period

Please state current and last SALARY and Expected Salary in your resume.

Please state Reasons for leaving current & previous Employment.