Total 10 job vacancies by Nearsource Pte. Ltd.

JD :

• Firewalls : Expert in checkpoint and Palo alto firewalls, beginner or intermediate knowledge in Cisco firewalls.
• Good in Azure Load balancers
• Experience in proxy servers. Prefer Symantec bluecoat ProxySG.
• Have knowledge of general network & security technologies / protocols like routing, DNS, LDAP, syslog, NTP, SNMP, SSH, HTTPS, AAA, SMTP, etc.
• Should be familiar with monitoring tools of the network security devices.
• Experience in log review, log monitoring, firewall rule review.
• Good in troubleshooting issues reported.

Optional (any 1 of below is mandatory)

• Cisco router and switches
• Cisco ISE
• Radware Anti-DDOS | Absolute vision
• Symantec 2FAVIP

JD :

• Firewalls : Expert in checkpoint and Palo alto firewalls, beginner or intermediate knowledge in Cisco firewalls.
• Good in Azure Load balancers
• Experience in proxy servers. Prefer Symantec bluecoat ProxySG.
• Have knowledge of general network & security technologies / protocols like routing, DNS, LDAP, syslog, NTP, SNMP, SSH, HTTPS, AAA, SMTP, etc.
• Should be familiar with monitoring tools of the network security devices.
• Experience in log review, log monitoring, firewall rule review.
• Good in troubleshooting issues reported.

Optional (any 1 of below is mandatory)

• Cisco router and switches
• Cisco ISE
• Radware Anti-DDOS | Absolute vision
• Symantec 2FAVIP

Mandatory Skills

We are looking for candidates who possess a robust understanding of RACF, rather than those primarily knowledgeable in MF application development. Our ideal candidate should demonstrate deep expertise in RACF and its related functionalities.

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Primary Skills (max 5 only) Degree or Diploma in Computer Science, Computer Engineering or Information Security related fields Deep understanding of various Operating Systems, e.g., Linux, Unix and Windows.Experience with programming/scripting (Python, PowerShell, etc Security certifications such as GSEC, GCIH, GCIA, GCFA, GCFE or GNFA are highly desirable Exp in MAS Cyber Hygiene (PSN06) and Technology Risk Management (PSN05) Notices, MAS Technology Risk Management Guidelines, and Cybersecurity Act and Cybersecurity Code of Practice (CCoP). Security certifications such as GSEC, GCIH, GCIA, GCFA, GCFE or GNFA are highly desirable. Secondary Skills (max 5 only) Implement, operationalise, and optimise new cybersecurity solutions as required. Monitors and stay aware of cybersecurity industry trends, tools, and techniques. Manage, operate, and optimise the organisation’s portfolio of cybersecurity solutions, e.g., IDS/IPS, email defences, EPP, vulnerability management, PAM, IAM/IGA, DAM, proxy, NGFW. Strong understanding and familiarity with regulatory requirements such as MAS Notice on TRM, MAS Notice on Cyber Hygiene, MAS Technology Risk Management Strong understanding of NIST Cybersecurity Framework Main Roles and Responsibilities (max 5 only) Provide Cybersecurity latest market trends and solutions and directions Manage Security Operation team on daily monitoring alarms to respond on the incidents Guide SOC analysts to search evidence and threat analysis for incident investigation. Draft Information security SOC risk management policies and procedures Cybersecurity solution such as SIEM, monitoring and Akamai’s Web Application

Summary

The Security consultant is a pivotal technical role essential for facilitating Zero Trust deployment initiatives. This role encompasses conducting thorough gap analyses, proficient project management, and delivering technical advisories. Collaboration with cross-functional regional teams across the Asia-Pacific region is integral to this role. The ideal candidate will exhibit a robust understanding of the Zero Trust framework (CISA Zero Trust Maturity Model and Microsoft Zero Trust Model), possess broad security experience, analytical acumen, and demonstrate a proactive approach to project management. This position will report to HQ.

Skills/Qualifications:

• At least 5+ years of experience in the cybersecurity industry.

• Consulting experience in Cyber domain.

• Proven experience in security engineering, with a focus on Zero Trust deployment.

• Consultation capability in related technology and or related service to customer.

• Great communication and interpersonal skills

• Bilingual (English / Japanese) preferred but not required (proficient English is a requirement)

• Proactive approach to problem-solving and project management, with a strong commitment to achieving objectives and deadlines.

• Project management experience.

Technology Proficiency:

• Core expertise in Microsoft technologies.

• Azure Active Directory (AAD), identity management and MFA

• Microsoft Endpoint Manager

• Network Security, Azure Virtual Network and Azure Firewall

• Data Protection, Microsoft Information Protection (MIP) classifying, labelling, and protecting sensitive data.

Main Responsibilities:

• Overall Security Posture: Support and maintain APAC’s information security strategy and ensure it is aligned with Global security strategy based on Zero Trust

• Zero Trust Deployment Support: Lead and support Zero Trust deployment initiatives, ensuring alignment with organizational objectives and security best practices, Possess a strong background in security with a focus on general high-level knowledge.

• Gap Analysis: Conduct comprehensive gap analyses to identify vulnerabilities and areas for improvement within existing security frameworks in APAC region. Perform APAC’s Information Security Risk Assessment in accordance with the Risk Register Policy and support information security risk assessments for APAC to determine the gaps to reach Zero Trust.

• Project Management: Effectively manage Zero Trust deployment projects, including planning, research, monitoring, and reporting.

• Technical Advisory: Provide expert technical guidance and advisory services to stakeholders, facilitating informed decision-making regarding Zero Trust implementation, although not responsible for implementation, must comprehend the technical aspects of security technology and planning.

• Cross-Functional Collaboration: Collaborate closely with cross-functional teams across the APAC region to ensure seamless integration and alignment of Zero Trust initiatives with broader organizational objectives.

• Documentation: Maintain accurate documentation of Zero Trust deployment processes, procedures, and best practices for reference and future optimization.

Additional General Responsibilities:

• Promote the use of ‘right-sized’ solutions for APAC, including Global Shared Information Security Services, to drive increased standardization and effective use of security resources.

• Promote an information security-conscious culture.

• Collaboratively work with APAC to develop and implement processes that meet Global information policy and standards.

• Support information security activities across APAC (align activities where possible, foster joint plans, etc.).

• Collaborate with APAC’s legal and compliance to ensure APAC is compliant with local information security laws and regulations.

• Support the efforts of APAC’s Security delivery resources to execute to expectations.

• Encourage the development of innovative ideas that solve root causes of identified problems.

• Build and develop cross functional relationships within APAC to engender support of security projects.

• Coordinate technical input and recommendations from GISS to APAC

• Work on global initiatives as part of working groups (e.g.: standards refresh, new technology discussion, etc.)

• Proven experience in a network support role, with a strong focus on datacenter and building networks.
• In-depth knowledge of firewall management and experience with firewall technologies, including Checkpoint and Palo Alto.
• Proficiency in supporting a variety of network devices, including Cisco routers and switches.
• Familiarity with WAN and LAN technologies, including routing protocols and network segmentation.
• Strong troubleshooting and analytical skills, with the ability to diagnose and resolve complex network issues.
• Relevant certifications in network technologies, such as CCNA, CCNP, Check Point Certified Systems Administrator (CCSA), and Palo Alto Networks Certified Network Security Engineer (PCNSE), are advantageous.

• Proven experience in a network support role, with a strong focus on datacenter and building networks.
• In-depth knowledge of firewall management and experience with firewall technologies, including Checkpoint and Palo Alto.
• Proficiency in supporting a variety of network devices, including Cisco routers and switches.
• Familiarity with WAN and LAN technologies, including routing protocols and network segmentation.
• Strong troubleshooting and analytical skills, with the ability to diagnose and resolve complex network issues.
• Relevant certifications in network technologies, such as CCNA, CCNP, Check Point Certified Systems Administrator (CCSA), and Palo Alto Networks Certified Network Security Engineer (PCNSE), are advantageous.

Cloud Security Engineer is responsible:

• • Design, implement, and manage security measures for cloud environments.
• • Conduct regular security assessments and audits of cloud infrastructure.
• • Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• • Monitor and respond to security incidents, ensuring timely resolution.
• • Implement and maintain access controls, encryption, and other security features.
• • Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• • Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for

• • Bachelor’s degree in Computer Science, Information Security, or related field.
• • Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• • Excellent communication skills and the ability to collaborate with diverse teams.
• • Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• • Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• • Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• • Good knowledge in security
• • Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• • Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• • Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Mandatory Skills

Responsibilities:

• Manage and drive z/OS Unix (Mainframe Access Management operations and audits).
• Lead the completion of z/OS initiatives such as MFA and straight through processing for IDM processing requests.
• Automate manual processes through scripting or via zSecure.
• Possess strong knowledge of designing and reviewing RACF access groupings.

Key Requirements:

• At least 8 years of experience working in a z/OS environment including experience with REXX, Assembler, COBOL, JCL, TSO/ISPF
• Install, configure, and upgrade z/OS and subsystems using SMP/E
• Monitoring system performance and perform system tuning
• Technical support for z/OS and subsystems including engagement of IBM and vendors for problem determination and resolution
• Experience with IBM z15 hardware and peripherals, able to perform hardware configuration changes using HCD/IODF
• Experience with system automation and scheduling tools such as IBM System Automation, Netview, IBM Tivoli Workload Scheduler(OPC).
• Familiarity and support of 3rd party software such as FileAid/Expediter, IBM Omegamon, RMF, ChangeMan
• Solid experience in mainframe security, RACF access controls, IBM zSecure, MFA
• Provide process automation support and maintain SOP documentation
• Support backup/recovery and disaster/recovery planning and testing
• Support periodic system configuration reviews and audit reviews
• Strong communication skills and the ability to work collaboratively in a team environment
• Experience with zLinux and zVM will be advantageous
• Bachelor’s degree in IT or equivalent. A major in IT security or related areas would be an added advantage.
• Minimum of 5 years of experience in Mainframe Security (RACF) administration/operations provided by z/OS UNIX system services (USS), CICS, DB2, and WebSphere MQ with hands-on regulatory compliance knowledge.
• Good to have strong experience with using zSecure Admin and zSecure Audit modules.
• Good working knowledge of Access Management lifecycle and processes.
• Experience in banking or financial services institutions preferred

Job Responsibilites and Qualification:

· Participate in requirements gathering and use case development;

· Minimum of 3 years of experience working with SailPoint technologies (IdentityIQ), concepts and features;

· Develop technical project plans and aid in project resourcing;

· Develop and execute test cases and test plans for SailPoint solutions;

· Development background (i.e. JAVA);

· Ability to communicate with all levels of the organization in comprehensive manner (i.e. translate and present technical information to business);

· Experience with IdentityIQ Administration and Implementation;

· Develop or contribute to technical project plans with regular tracking and reporting;

· Front end tech: Angular.js is ideal;

· Bachelor’s Degree in Computer Science, Computer Engineering or a closely related field;

· Strong IAM domain knowledge;

· Strong working knowledge of Java and the ability to write scripts.