Total 9 legal public security job vacancies in Engineering category in New Quay, Ceredigion, SA45 9SE

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Plan, deploy and implement Data Loss Prevention on security projects and initiatives
• Responsible for management, advanced configuration, monitoring and fine tuning of Data Loss Prevention solution
• Configure, develop and maintain DLP tools & platform, SIEM and threat detection tools
• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 8 years of experience in IT Incident Management, DLP Operations or SOC
• Experience in multiple channels of DLP implementation and operations
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Team Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Plan, deploy and implement Data Loss Prevention on security projects and initiatives
• Responsible for management, advanced configuration, monitoring and fine tuning of Data Loss Prevention solution
• Configure, develop and maintain DLP tools & platform, SIEM and threat detection tools
• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 5-6 years of experience in IT Incident Management, DLP Operations or SOC
• Experience in multiple channels of DLP implementation and operations
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Team Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 5-6 years of experience in IT Incident Management, DLP Operations or SOC
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

Job Description

• Design and develop the red team's customized secure system (remote control program), and ensure that the endpoint protection can be bypassed such as Crowdstrike, Windows Defender, 360 Safeguard
• Reverse analysis of common EDR and HIDS to identify methods for bypassing detection, and embed security principles into the design of system architectures to mitigate the risks
• Research the persistence solutions under common operating systems such as Windows, MacOS, and Linux
• Perform red team engagements related to the periodic review and audit activities of infrastructure security systems (IDC network, office environment, cloud native) and maintain documentation of security standards and procedures

Requirements

• Minimum 3 years of relevant work experience
• Extensive experience in RAT (Remote Access Tool) development, with the ability to customize attack frameworks like Cobalt Strike
• Extensive experience in anti-endpoint protection, providing solutions to bypass the detection of EDR such as CrowdStrike, Windows Defender, 360 Safeguard
• Experience in persistence solutions under common operating systems (Windows, MacOS, Linux)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Proficient in scripting/programming languages like C/C++, Go, PowerShell, Javascript, ASM, etc
• Strong reverse engineering skills with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, etc
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

The candidate is part of the Data Loss Prevention (DLP) project and operation team. He/she will be reporting to the DLP Team Lead and be assigned with project and operational work and responsibilities which includes but not limited to, processing requests, investigate operational issues and facilitate security investigation by providing the necessary information in accordance with approved policy and procedures as well as process improvement.

• Diploma/Degree in Computer Science, Engineering or equivalent
• At least 5-6 years of experience in IT Incident Management, DLP Operations or SOC
• Good team player as well as strong communications skills
• Strong analytical skills and ability to work independently

Purpose

The principal role is to manage the security platform for the 3.5GHz C-Band RAN system so as to ensure the RAN network is adequately protected and secured against cybersecurity threats and incidents.

Duties and Responsibilities:

1. Oversee the overall operation and functions of the JVCo security platform.
2. Monitor Cyber Security Events for the JVCo 3.5 GHz C-Band Radio systems, including: Review event logs from the respective systems and ensure that there are no anomalies in the logs. Raise report on any security incidents to IMDA/SH/M1.
3. Coordinate with StarHub and M1 to administer cybersecurity measures to prevent, manage and respond to cybersecurity threats and incidents.
4. Coordinate with StarHub and M1 to assess and monitor the compliance of the JVCo with the JVCo/SH/M1 organization cybersecurity policy.
5. Work with Starhub and M1 to engage external vendor to perform Vulnerability Assessment in order to ensure compliance to IMDA 5G security requirement.
6. Collaborate with StarHub and M1 to engage external parties to perform external and internal Penetration Test for Network and Applications.
7. Ensure the security platform is up to date with tracking and identifying the latest security threat to the JVCo network and system.
8. Conduct regular scanning of JVCo RAN System to ensure the accuracy of the Asset Inventory and track any Vulnerabilities in the Asset.
9. Facilitate and work with StarHub and M1 in the preparation for any audit (e.g TCS, Mobile TIRA).
10. Administer all system and user management functions of the 5G security platform, which include: Assigning access right to users of StarHub, M1 and the equipment vendors, upgrading softwares and hardwares, and system/database maintenance.

Job Requirements

Qualifications:

1. Degree in Computer / Telecommunication Engineering or related qualification or possess at least three years of related working experience.

Technical Skills:

1. Experience in conducting Vulnerability Assessment and Penetration Test
2. Experience in conducting security audit and setting cyber security policy
3. Experience in managing Cyber Security Operation
4. Candidates with CISSP/CISA/GIAC or equivalent certification is an advantage

Interpersonal skills:

1. Able to work independently and is also a good team player.
2. Possess good communication skills.
3. Strong commitment to work and have good initiatives.

How to apply

Apply via myCareersFuture or send your CV directly to careers@antina.com.sg.

Antina is a company driven by ability and hardwork. We adopt fair employment practices and employment decisions will be based on merit, qualifications and abilities. Antina does not discriminate in employment opportunities or practices on the basis of race, colour, religion, sex, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Visit our company website at www.antina.com.sg for more information.

Job Description

• Design and develop the red team's customized secure system (remote control program), and ensure that the endpoint protection can be bypassed such as Crowdstrike, Windows Defender, 360 Safeguard
• Reverse analysis of common EDR and HIDS to identify methods for bypassing detection, and embed security principles into the design of system architectures to mitigate the risks
• Research the persistence solutions under common operating systems such as Windows, MacOS, and Linux
• Perform red team engagements related to the periodic review and audit activities of infrastructure security systems (IDC network, office environment, cloud native) and maintain documentation of security standards and procedures

Requirements

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, Statistics, or other related fields
• Minimum 3 years of relevant work experience
• Extensive experience in RAT (Remote Access Tool) development, with the ability to customize attack frameworks like Cobalt Strike
• Extensive experience in anti-endpoint protection, providing solutions to bypass the detection of EDR such as CrowdStrike, Windows Defender, 360 Safeguard
• Experience in persistence solutions under common operating systems (Windows, MacOS, Linux)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Proficient in scripting/programming languages like C/C++, Go, PowerShell, Javascript, ASM, etc
• Strong reverse engineering skills with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, etc
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

Job Description

• Conduct cyber risk assessment (red team engagement) in support of technology initiatives to emulate the APT adversary scenarios, and help identify IT related risk and determine appropriate controls to mitigate risks
• Monitor, track, and manage unknown risk mitigations and exceptions, and ensure adequate monitoring capability is incorporated into solutions
• Research the undiscovered vulnerabilities (0-day) against different IT infrastructures, including operating systems (Windows/Linux), cloud native (Kubernetes/Docker), network devices (routers/switches/firewalls/VPNs), and endpoint management (VMware Workspace ONE/IPMI)
• Deliver the exploit code and plugins for identified vulnerabilities

Requirements

• Bachelor’s degree or higher in Computer Science, Information Technology, Programming & Systems Analysis, Engineering, Statistics, or other related fields
• Minimum 3 years of relevant work experience
• Hands-on experience in writing standalone PoCs of infrastructure vulnerabilities, including writing exploit codes based on known PoCs of vulnerability descriptions
• Familiar with common vulnerability classes such as buffer overflows, command injection, insecure deserialization
• In-depth understanding of modern security mitigations and methods to bypass them (e.g. stack cookies, SafeSEH, DEP, ASLR, CFG, etc)
• In-depth understanding of security mechanisms of Windows/Linux systems, and familiar with offensive techniques in ring0/ring3
• Experience in vulnerability analysis, fuzzing, reverse engineering, or advanced exploitation techniques, with proficiency in tools such as IDA Pro, OllyDBG, WinDBG, GDB, Burp Suite, etc
• Proficient in programming languages like Python, Go, or Java
• Strong communication skills and effective teamwork spirit
• Self-starter and fast learning ability

The successful candidate will join a team of Systems Engineer primarily responsible for maintaining on-premises and cloud applications, servers, storage, and network equipment. The position reports to the IT Delivery Manager/Lead and will be expected to plan, install, configure, and manage all aspects of IT infrastructure to ensure reliable, secure, and cost-effective delivery of services.

Staff level, for the successful candidate will be determined based on their experience level and the technologies they are skilled in.

[Primarily Duties]

· Improve and maintain the network infrastructure and network security setup and architecture.

· Design, configure, deploy, and maintain all network and security solutions, both on-premises and in the cloud.

· Proactively work to improve reliability, stability, and security of the cloud and on-premises environments.

· Perform troubleshooting, performance tuning and capacity planning.

· Create and update documentation.

· Work with developers to deploy and maintain applications, including hardening and vulnerability remediation.

· Research and evaluate new hardware and software solutions.

[Secondary Duties- common]

On top of the primary responsibility, he/she will be required to perform the following duties on a rotational basis

1. Daily operation task, e.g. backup, system maintenance, system performance monitoring, end user PC support.

2. After office hours standby duty to attend to system alerts and to provide 2nd level support to our helpdesk and software developer when they encounter problems

Requirements

· Degree/Diploma in Information Technology, Computer Science or equivalent.

· Preferably to have sound working experience in implementing, managing and perform disaster recovery for the following: -

a) Network Infrastructure and security architecture, i.e. Subnetting, Micro segmentation technologies, security zoning, air gapping, WAN optimization, zero trust networking, etc.

b) Kubernetes architecture on premise and Azure

c) Microsoft Azure architecture and security solution

d) Good understanding of networking and security solutions, e.g. Core switch, Cisco Routers, F5/Azure WAF, F5 load balancer/GTM, Allot, Fortigate, Palo Alto.

a) IPv4/v6 Networking

b) Security related certification, CISSP, CEH or equivalent will be desirable but not essential

· Additional experience/certification in the following is not mandatory but will be strongly advantageous:

a) Enterprise Storage

b) AWS experience

c) Worked in a system integrator environment before.

· Candidates must possess strong analytical and problem-solving skills, have good aptitude in learning new skills, be a team player, and can work in a fast pace environment with minimum supervision.