Total 22 failure analysis engineer job vacancies in Legal / Public / Security category in D02 Anson, Tanjong Pagar

Job scopes

• Implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with.
• Define the process, provisioning, interfaces, provide recommendations.
• Securing at scale enterprise BigData Architectures with role-based access controls, DLP tools, monitoring tools to ensure proper data usage & reporting & prevention activities.
• Engage and execute Security Vulnerability Scanning activities ( HCR/NVA/Pen Test/ SAST/DAST activities etc) & resolve findings.
• Familiar with operational security processes
  o OS level patching
  o Application-level patching
  o Operational housekeeping and archival.
  o Server and application hardening procedure & steps
  o IM8 policy

Job requirement

• Bachelor’s degree in Computer science or equivalent
• Minimum 5+ years of experience as a Security Solution Architect
• Familiar with implementing HSM, EDRs, DLP , enterprise antivirus product implementation & operationalization.
• Familiar with container orchestration security (either OpenShift/CloudFoundation/Kubernetes), Securing containers, monitoring traffic. Container repository security, secure images.
• Must have a specialization in 1-2 areas of Cyber domains such as Identity Access Management, Cloud Security, Container orchestration platform security with a broad understanding of other areas.
• Familiar with Gov standard of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with cloud security tools & environment.
• Good to have experience with Thales CipherTrust & HSM., DigitalGuardian DLP Product Suite, vmWare CarbonBlack EDR, TrendMicro DeepSecurity Product Suite, Tenable Nessus, Burp Suite Enterprise
• Must have CISSP/CCSP/CCSK certification or its equivalent

Thank you for your interest!

We respect your privacy and all communication will be treated with confidentiality. If you wish to know more about this position or explore other roles, please prepare your updated profile and get in touch with our consultant at cristina.malijan@manpower.com.sg

Cristina Malabuyoc Malijan EA License No. 02C3423 Personnel Registration No. R1111547

Please note that your response to this advertisement and communications with us pursuant to this advertisement will constitute informed consent to the collection, use and/or disclosure of personal data by ManpowerGroup Singapore for the purpose of carrying out its business, in compliance with the relevant provisions of the Personal Data Protection Act 2012. To learn more about ManpowerGroup's Global Privacy Policy, please visit https://www.manpower.com.sg/privacy-policy

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

- Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)

- Guide IT managers of the group companies per the headquarters' directive.

- Effectively manage and analyze system logs on an ongoing basis.

- Remain updated about the latest security vulnerabilities and take immediate action if necessary.

- Collaborate with internal and external parties to ensure secure, smooth operations.

- Handle client inquiries about our proprietary applications.

- Automate redundant tasks using programming language skills.

- Regularly monitor and maintain system metrics dashboard and alerts.

- Educate colleagues and enhance company documentation about our IT infrastructure.

- Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

- At least 5 years of extensive experience in IT-related fields.

- Proficient reading and writing skills in Japanese.

- Exceptionally good communication and interpersonal skills.

- Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.

- Strong ability to configure SIEM and Power BI tools.

- In-depth familiarization with account management and data security.

- Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

- Proficiency in additional languages such as Chinese, Malay, or Thai.

- Proven experience with Cyber Incident Response Plan (CIRP).

- Expertise in vulnerability management, penetration testing, and implementing security incident response processes.

- Extensive experience in developing, implementing, and maintaining security policies.

- Knowledge of network security design and implementation.

- Experience in using vulnerability scanning tools and security tools.

- Proven record of enhancing cloud security through policy implementation and monitoring.

- Experience in promoting social engineering and phishing countermeasures.

- Ability to provide in-house security training.

- Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.

Location: Singapore / Jakarta , Indonesia / Manila, Philippines / Flexible Working Arrangement
(No visa sponsorship)

Company Overview
A leading digital insurance firm committed to transforming the insurance landscape through innovative technology and customer-centric solutions. The organization is dedicated to maintaining the highest standards of security and compliance in an increasingly digital world.

Position Overview
We are seeking a skilled professional to join the Group IT Office as Security Engineer. The successful candidate will oversee daily operational activities related to various security tools and systems, ensuring adherence to an optimal security policy framework that aligns with organizational standards. This role involves close collaboration with multiple business units across the region, including Singapore, Philippines, Indonesia etc..

Key Responsibilities

• Responsible for security technology operations, maintaining and supporting all relevant security systems and tools.
• Collaborate with broader IT teams and focused on areas such as endpoint protection, data loss prevention, email security, network security, vulnerability scanning, encryption, and key management.
• Manage rule configurations, workflows, and system operations for each security tool/system.
• Ensure that all security rules are implemented in compliance with established standards, including necessary reviews and approvals for whitelisting and exclusions.
• Uphold baseline security standards for configuration management across all tools/systems.
• Develop and implement request, review, and approval workflows to ensure consistent handling and visibility across all security tools/systems.
• Oversee system administration tasks such as access approvals, patch verification, key rotations, and other operational changes.
• Establish service level agreements based on request severity to guarantee timely responses and resolutions.
• Address escalations for each security product to identify gaps or defects and propose effective workarounds or mitigation strategies.
• Facilitate knowledge sharing within the team to enhance operational expertise and ensure continuity in managing each security tool/system.
• Standardize operational documentation for procedures and playbooks into a centralized repository for consistency.
• Work collaboratively with cross-functional teams within the technology department to manage risks associated with security tools/systems.

Required Qualifications

• Strong skills in managing stakeholder expectations across business, technical, and operational teams.
• Demonstrated end-to-end ownership in various security domains to effectively resolve issues.
• Solid understanding of general technology concepts including servers, endpoints, databases, networking, applications, middleware, and cloud environments.

Education & Experience

• A Bachelor’s Degree in Information Security, Computing Engineering or a related field is required.
• At least 7 years of experience across several security domains such as endpoint protection, data loss prevention, email security, network security, vulnerability scanning, encryption, and key management is preferred.
• Experience within large organizations with regional exposure is desirable; prior experience in the financial services sector is an advantage.
• Relevant information security certifications (e.g., CISSP, CCSP, CompTIA Security+, CISA, CRISC) are beneficial.

If you are passionate about enhancing security operations and meet the qualifications outlined above, we encourage you to apply for this opportunity.


BeathChapman Pte Ltd

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

- Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)

- Guide IT managers of the group companies per the headquarters' directive.

- Effectively manage and analyze system logs on an ongoing basis.

- Remain updated about the latest security vulnerabilities and take immediate action if necessary.

- Collaborate with internal and external parties to ensure secure, smooth operations.

- Handle client inquiries about our proprietary applications.

- Automate redundant tasks using programming language skills.

- Regularly monitor and maintain system metrics dashboard and alerts.

- Educate colleagues and enhance company documentation about our IT infrastructure.

- Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

- At least 5 years of extensive experience in IT-related fields.

- Proficient reading and writing skills in Japanese.

- Exceptionally good communication and interpersonal skills.

- Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.

- Strong ability to configure SIEM and Power BI tools.

- In-depth familiarization with account management and data security.

- Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

- Proficiency in additional languages such as Chinese, Malay, or Thai.

- Proven experience with Cyber Incident Response Plan (CIRP).

- Expertise in vulnerability management, penetration testing, and implementing security incident response processes.

- Extensive experience in developing, implementing, and maintaining security policies.

- Knowledge of network security design and implementation.

- Experience in using vulnerability scanning tools and security tools.

- Proven record of enhancing cloud security through policy implementation and monitoring.

- Experience in promoting social engineering and phishing countermeasures.

- Ability to provide in-house security training.

- Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.

• CCNA/CCSA certification is preferred
• At least 1-2 years relevant experience is required.
• Good exposure and training is provided.

Responsibilities:

• Be responsible for Post-sales activities of Cybersecurity or Network Performance Monitoring products.
• Involve in Large-scale (Local & Regional) Project Implementation.
• Provide on-site implementation services including testing, deployment & documentation.
• Provide technical support in ensuring customer satisfaction.
• Analyse and clarify customer queries though troubleshooting and researching existing knowledgebase articles/known issues.
• Be on routine standby to support 24×7 maintenance support calls.
• Requires the ability to communicate issues clearly and concisely.
• Excellent written and verbal communication skills are a necessary part of the job.

Requirements:

• Bachelor’s degree or Diploma in Cyber Security, Computer Science, Computer Engineering or related field.
• At least 1-2 years relevant experience in IT industry providing network support and administration.
• Equip with knowledge & experience in networking such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Analytical and possess good troubleshooting skills.
• Willing to work extended hours and on standby duty.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to samantha@trustrecruit.com.sg or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Responsibilities:

• Manage and oversee z/OS Unix (Mainframe Access Management operations and audits).
• Drive and operationalize z/OS initiatives such as MFA (Multi-Factor Authentication) and STIG (Security Technical Implementation Guide).
• Write scripts/JCL to automate tasks and improve processes.
• Manage identity and access management processes, standards, and procedures to ensure control effectiveness and service quality.

Requirements:

• Bachelor’s Degree in Information Technology or a related field.
• At least 3–4 years of experience in Mainframe Security (RACF) administration/operations.
• Solid understanding of zSecure Admin and zSecure Audit modules.
• Good working knowledge of the Access Management lifecycle and processes.
• Excellent stakeholder management skills.

Interested Applicants, please email your resume to rupa.kankariya@manpower.com.sg (R1441955), stating the position as the subject title in the email. All Applications will be handled with strict confidentiality.

TRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.

Role Objectives:

The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only our company but also our group companies.

The role is not limited to security support but includes account management and technical support for clients and vendors.

With a strong grasp of our cloud-based infrastructure tools, the candidate will be fundamental in providing continuous technical support to clients and internal teams within the APAC region.

Key Responsibilities:

- Implement and maintain security configuration across our IT infrastructure (including M365, Google Workspaces, ClickUp, Bitbucket, and etc.)

- Guide IT managers of the group companies per the headquarters' directive.

- Effectively manage and analyze system logs on an ongoing basis.

- Remain updated about the latest security vulnerabilities and take immediate action if necessary.

- Collaborate with internal and external parties to ensure secure, smooth operations.

- Handle client inquiries about our proprietary applications.

- Automate redundant tasks using programming language skills.

- Regularly monitor and maintain system metrics dashboard and alerts.

- Educate colleagues and enhance company documentation about our IT infrastructure.

- Collaborate closely with the Tech department at Japan HQ.

Desired Skills and Experience:

- At least 5 years of extensive experience in IT-related fields.

- Proficient reading and writing skills in Japanese.

- Exceptionally good communication and interpersonal skills.

- Clear knowledge of AWS, Azure(Entra), and/or GCP Services, relating to software development.

- Strong ability to configure SIEM and Power BI tools.

- In-depth familiarization with account management and data security.

- Experience in creating, monitoring and responding to security events.

Preferred Qualifications:

- Proficiency in additional languages such as Chinese, Malay, or Thai.

- Proven experience with Cyber Incident Response Plan (CIRP).

- Expertise in vulnerability management, penetration testing, and implementing security incident response processes.

- Extensive experience in developing, implementing, and maintaining security policies.

- Knowledge of network security design and implementation.

- Experience in using vulnerability scanning tools and security tools.

- Proven record of enhancing cloud security through policy implementation and monitoring.

- Experience in promoting social engineering and phishing countermeasures.

- Ability to provide in-house security training.

- Professional security-related certifications such as CISSP, CISM, CEH are highly desirable.

We are looking for a dedicated Security Engineer to join our Cybersecurity Department. This role is pivotal in enhancing our security architecture and engineering efforts, requiring an individual who can serve as a subject matter expert (SME) in various security systems and solutions, particularly in Application Security.

Key Responsibilities:

• Security System Expertise: Serve as the SME in architecture and engineering for security systems managed by the Information Security Team; this is NOT a security operations position
• Design and Implementation: Plan, assess, design, operationalize, and maintain a range of security software and hardware solutions tailored to our enterprise needs.
• Risk Management: Identify, evaluate, and mitigate cyber risks within our IT infrastructure while staying updated on emerging threats and vulnerabilities associated with new technologies.
• Vendor Collaboration: Prepare requests for quotations (RFQs) and establish evaluation criteria, conducting proof of concept (POC) assessments during product evaluations in collaboration with vendors.
• Consultancy and Guidance: Provide expert consultancy and technical guidance on security best practices, advising infrastructure teams on relevant security design principles.
• Continuous Improvement: Recommend and drive initiatives aimed at enhancing the organization’s cyber security posture through innovative solutions.
• Project Management: Manage individual project priorities, deadlines, and deliverables with minimal supervision while fulfilling any relevant ad-hoc duties.

Requirements:

• Educational Background: A degree in Computer Science or a related field, complemented by at least 5 years of experience in information security, particularly in application security – as architect / engineer (NOT security operations).
• Certifications: Professional certifications such as CISSP, CSSLP, or CEH are preferred.
• Technical Proficiency: Demonstrated experience with security products and security technologies including EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, and network security tools; ability to review firewall requests is essential.
• Knowledge Base: Strong understanding of common web/mobile application vulnerabilities along with experience in vulnerability management is advantageous. Familiarity with cyber threats and exploit methods is also required.
• Communication Skills: Excellent verbal and written communication skills are crucial for articulating complex concepts clearly.
• Proactive Attitude: A positive mindset with a strong sense of urgency in addressing high-priority issues is essential. The ability to work both independently and collaboratively within a team environment is highly valued.

If you are interested in the above cybersecurity job or other security engineering opportunities, please apply with your updated CV or send to Shannagh Wu at Shannagh.Wu@ethosbc.com

Reg No. R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Our client is a leading fintech who is looking to onboard an Infosec Engineer to be part of their cyber fusion centre.

Responsibilities:

• Configure, troubleshoot, and maintain security infrastructure hardware and software.
• Develop and implement effective security measures to protect company data and network infrastructure.
• Regularly track and report on the performance of these security measures.
• Deep understanding of comprehensive cybersecurity architectures.
• Develop and update the company’s information security strategy, ensuring it aligns with industry best practices and business objectives.
• Identify, define, and document system security requirements.
• Prepare and maintain technical documentation.
• Recommend solutions to management based on these requirements.
• Install and manage software for monitoring systems and networks for security breaches and intrusions
• Establish and enforce preventive measures to mitigate potential security threats.
• Educate and train staff on information system security best practices.
• Foster a security-aware culture within the organization.

Experience:

• Preferable to have 3+ years of relevant experience
• Knowledge in managing security solution stated above.
• Strong understanding of cybersecurity principles, practices, and solutions.
• Effective communication and analytical abilities.
• Ability to analyze complex security systems and identify vulnerabilities and solution.
• Expertise in computer programming and scripting languages.
• CISSP, or any related vendor certification (preferred)
• Proficient in managing a range of security devices, including but not limited to:

· Email Security

· IDPS

· Attack Surface Monitoring

· Anti-Malware Solution

· Web Application Firewall

· Certificate Management System (CMS)

• Partner closely with CISO of a front-running FinTech in digital banking space
• Cloud environment with direction in automation; high growth environment

Responsibilities:

• Partner closely with infrastructure dpt on security matters and solutions; end-to-end lifecycle
• Security patch rollouts across cloud platforms, data centre systems
• Maintain and formulate cloud security policies, including cloud desktop security policies
• Oversee, implement and administer all infrastructure related security solutions; including but not limited to firewall, Web Application Firewall (WAF), Mobile Device Management (MDM), IAM systems, Key Management Systems (KMS), Hardware Security Modules (HSM)
• Security Posture management and engagement, especially in cloud environment
• Resolve and troubleshoot incidents in security systems and device outages with respective IT teams and vendors
• Comply with MAS and regulator security requirements and ensure the bank is up to industry security standards

Requirements:

• BS/MS in Computer Science/Cybersecurity with 5+ years experience in network security, endpoints security, and identity access management.
• Experience with cloud-based security systems and services implementation and operation; understanding of cloud computing, OS, networking, and their security aspects.
• Knowledge of technical security controls aligned with frameworks like NIST CSF, MAS TRMG, MAS Cloud Advisory.
• Experience deploying and automating security systems; comfortable with handling configurations
• Proficiency in English and Chinese for communication with regional stakeholders for internal & external communications and engagement

If you are interested in the above job or other related cyber security positions, please send your updated CV to Shannagh.Wu@ethosbc.com

Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

• Join a global level team with agile, culturally inclusive culture
• Exposure and active work on a large range of security technologies and domains, from DLP, network security, endpoint protection, email security, engagement etc.
• Front-running technology enhancement mindset, and ready for highly efficient operational role

Your role & responsibilities:

• Maintain and support in-scope security systems and tools.
• Work with a team of security professionals covering various security domains.
• Manage rule, configuration, workflow, and system management for each tool/system.
• Ensure security rule implementation aligns with group standards and undergoes appropriate reviews.
• Govern system administration including access approvals, patch verification, and key rotation.
• Establish service level agreements for request handling.
• Address gaps or defects in security products through escalation and proposing mitigation controls.
• Conduct knowledge sharing to ensure security business continuity.
• Standardize operational documentation for consistency.
• Collaborate with cross-functional teams to manage security tools/systems.

Requirements:

• Bachelor’s Degree in Information Security, Computing Engineering, or equivalent.
• 6+ years of experience in security domains such as data loss prevention (DLP), endpoint protection etc.
• Experience in organizations with regional exposure, preferably in the fintech / financial services / technology industries.
• Strong sense of ownership in various security domains, strong understanding in technology concepts ; end-to-end, including codes reviews
• Agile, inquisitive, proactive, and strong skills in problem solving and analysis

If you are interested in the above job or other information security opportunities, please send your updated CV to Shannagh.Wu@ethosbc.com

Reg No. R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Responsibilities:

• Provide Presales support on cybersecurity & PKI security products/ solutions to clients and partners.
• Execute post-sales installation, technical support (L1-L3) and maintenance services of cybersecurity & PKI products/solutions.
• Troubleshoot reported issues and collaborate with technology vendors for escalation when required.
• Ensure the completion and follow-up of daily operations and tasks.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Requirements:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• 1-2 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:
• Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
• Microsoft based Certificate Authority, Prime Key EJBCA
• Window/Linux/UNIX OS environments
• Hardware Security Module (HSM)
• Key Management System (KMS)
• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is advantageous.
• Professional certifications in cyber security or networking will be advantageous.
• Initiative with a positive working attitude.
• Hardworking and eager to learn new technologies and skills.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to ref10@trustrecruit.com.sg or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Responsibilities:

• Provide Presales support on cybersecurity & PKI security products/ solutions to clients and partners.
• Execute post-sales installation, technical support (L1-L3) and maintenance services of cybersecurity & PKI products/solutions.
• Troubleshoot reported issues and collaborate with technology vendors for escalation when required.
• Ensure the completion and follow-up of daily operations and tasks.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Requirements:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• 1-2 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:
• Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
• Microsoft based Certificate Authority, Prime Key EJBCA
• Window/Linux/UNIX OS environments
• Hardware Security Module (HSM)
• Key Management System (KMS)
• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is advantageous.
• Professional certifications in cyber security or networking will be advantageous.
• Initiative with a positive working attitude.
• Hardworking and eager to learn new technologies and skills.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to ref10@trustrecruit.com.sg or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Job description

• Front-running digital bank with strong presence in Asia
• Exposure in application security & vul mgt with a digital / virtual banking platform
• Openings for junior and mid-level professionals
  

Responsibilities:

Conduct vulnerability assessments, source code reviews, and internal penetration tests on web and mobile applications to identify security risks.
Enhance the bank’s vulnerability management process, including identifying, tracking, and remedying vulnerabilities.
Coordinate with external pentest teams for independent penetration tests, manage security findings, and oversee remediation efforts.
Participate in security reviews during system design and architecture stages of business projects.
Collaborate with development and DevOps teams to integrate security into the software development lifecycle (SDLC) and advise on vulnerability mitigation.
Improve security controls integration into CI/CD pipelines.
Provide secure coding training and guidance to development teams.
Ensure applications follow standard security principles and respond to security incidents related to application security.
Manage the bank’s application security systems and uphold security policies and operational procedures.

Requirements:

• Bachelor's or Master's degree in Computer Science, Computer Engineering, or Cybersecurity
• 5+ years of experience in cyber security; supervisory / management experience will be a bonus
• Coming from banking, fintech, digital banking, virtual banking industries will be a bonus!
• Proficiency in conducting application and infrastructure security assessments.
• Familiarity with application security and vulnerability assessment tools such as Burp Suite, Kali Linux, Fortify,Nessus, and NMAP.
• Strong analytical and communication skills for real-time problem-solving.
• Ability to learn quickly and stay updated on vulnerability management and penetration test technology.
• Relevant certifications such as OSCP and CISSP are advantageous.
• Proficiency in English and Mandarin for communication with Mandarin-speaking stakeholders.

If you are interested in the above or other cyber security positions, please kindly send your updated CV to Shannagh.Wu@ethosbc.com

Reg No.R1981018

BeathChapman Pte Ltd

Licence no. 16S8112

We are seeking for skilled IT Security engineer - Cybersecurity with 2 - 4 years of experience or fresh graduates encouraged to apply

• Senior Cybersecurity Engineer (min with 4-year experience)
• Cybersecurity Engineer (min with 2-year experience)

Job Requirements:

Operating Hours:

Mon – Thu: 8.30am – 6pm

Fri: 8.30am – 5.30pm

Note: Engineer is expected to standby to work after office hours, weekends, and public holiday.

Scope of Work:

For Security & Vulnerabilities Assessment and Remediations Management

• Engineer shall perform vulnerabilities assessment based on the vulnerabilities identified by Customer Cyber Security team and any other security vendors.
• Engineer shall work closely with Customer Cyber Security team and/or any other security vendors to provide the remediation and/or workaround solution to close the vulnerabilities.
• Engineer shall test the remediation and/or workaround solution in the development environment first before deploying the remediation

to production.

• Engineer shall prioritise and resolve all the vulnerabilities according to customer remediation timeline.
• Engineer shall perform the necessary coordination with various parties for impact analysis, schedule for downtime, patching and any other related.
• Engineer is required to provide the necessary documentation on vulnerabilities remediation before implementation on production.
• Engineer is required to provide the necessary fall-back plan if the implementation fail on production.
• Engineer is required to raise the necessary ticket for implementation and schedule for downtime.
• Engineer is required to provide the necessary monthly report on vulnerabilities assessment, remediation schedule, status etc.
• The software products within the scope are as follows:

i. Solaris OS

ii. Linux OS (Oracle Linux, RedHat Linux, other Linux variations)

iii. Windows OS

iv. Hypervisor such as Nutanix, VMware Esxi, Vxrail, Microsoft Hyper-V and Azure, Oracle VM for x86 and Sparc

v. Web Server (Apache and IIS)

vi. OpenSSL

ICT Infrastructure Project Delivery and System Administration

• Engineer shall ensure smooth rollout of customers projects.
• Engineer to provide technical support for the project coordination, implementation, and rollout work of all customer projects.
• Engineer to provide IT consultancy services which includes but not limited to providing technical advice for the infrastructure services required for the setup, configuration, and commissioning of the customer projects.
• Engineer shall ensure all systems are well maintained.
• Engineer is expected to function as part of customer team in providing 24x7 operation support for system implementations arising from system changes, patches and security vulnerabilities fixes.
• To ensure the reliability and good working condition of the systems, the Engineer is expected and not limited to perform the following maintenance tasks.
• Periodic OS/firmware evaluation and recommendation exercises to recommend standard versions of OS/firmware for various intranet hardware platforms; quarterly for extranet and internet hardware platforms. The exercises shall cover security aspects, availability aspects, as well as pitfalls on operational aspects.
• Prepare, coordinate and execute the OS/firmware patching/upgrading of computer devices in accordance to the schedule and frequency stipulated by customer.
• Perform basic housekeeping tasks such as server configuration, backup, daily syslog/alert monitoring, health check, ORCA trend charts monitoring, etc.
• Monitor server performance via customer’s existing monitoring tools or scripts.
• Engineer assigned shall undertake to collect/review relevant statistics that may facilitate troubleshooting, capacity planning and performance tuning. Such statisticsshall be made available to customer either on a monthly or on a per-need basis should exceptions arise. The proactive measures that apply and are not limited to are as follows:
• Network performance indicators – network load, utilization etc.
• Hardware resource performance indicators – CPU, memory, etc.
• Continual assessment on overall performance & network health collectively to identify potential bottlenecks by looking at resource and traffic profiles.
• Performance indicators shall be reflected in a section within the monthly reports for ease of reference and discussions.
• Reviews of server setup to support Capacity Planning purposes shall be carried out every 6 months.
• Condition of current server performance
• Proposal to enhance or tune the server for better performance
• Updates of firmware and hardware releases that may affect the eventual performance and upgrade path of the components – such information as imminent obsolescence, End-of-Sales and End-of-Support status must be communicated to customer.

Requirement:

• Degree/Diploma in Information Technology/Computer Science or equivalent
• Working experience in Network Security
• Knowledge of Networking, firewall and other security technology.