Total 5 Manager civil engineer job vacancies in Legal / Public / Security category in The United States of America

The Mercedes-Benz AG Group CISO heads Mercedes-Benz’s Global Cyber Security Department (based in Stuttgart, Germany). We are looking for a Cyber Security SIEM Use-Case Engineer to join our Cyber Intelligence and Response Centre (CIRC). This role is crucial for the engineering, development, and continuous improvement of threat detection use-cases within our SIEM . You will also be involved in the engineering and development of custom rules to detect potential threats swiftly and creating transparency to map existing detection capabilities to the MITRE ATT&CK framework.

Key Responsibilities:

• Proactively create, test, and tune new detection use-cases in the SIEM
• Review and enhance existing detection use-cases using Machine Learning or User & Entity Behaviour Analytics (UEBA).
• Map detection use-cases to the MITRE ATT&CK framework to assess SIEM monitoring coverage.
• Perform regularly updates to threat detection engineering playbooks, processes, and documentation.
• Collaborate closely with the SOC to challenge and improve detection and prevention capabilities.
• Identify and implement SIEM use-cases to address blind spots.
• Coordinate with the log onboarding team and SIEM architect to validate new log sources for compliance and improve SIEM backend performance.
• Collaboration with Service Operations team to address challenges, process fulfillment, documentations, and improvement of Service Operations Quality.
• Provide governance on topic which related to operational stability.

Join us to play a pivotal role in enhancing our cyber security measures and protecting our global operations.

QUALIFICATIONS

Specific Knowledge

• Intense knowledge in using Splunk Enterprise Security (ES)
• Intense knowledge in developing and tuning detection use-cases (Correlation Searches) in Splunk based on Data Models
• Experience in Machine Learning and Risk Based Monitoring in Splunk is an advantage
• Ability to analyse and interpret security logs and events to identify potential threats and attack patterns
• Experience in validating data source compliant using the common interface model (CIM)
• Experience of setting up and utilize data models in Splunk
• Deep understanding of cyber security concepts to create detection use-cases targeting various phases of attack lifecycle
• Understanding of MITRE ATT&CK framework and detections of various tactics and techniques
• Experience and capable of creating interactive dashboards, alerts, reports in Splunk

Experience

• Degree from a reputable university or significant course work in Computer Science, Networking, engineering or other computer-related fields of study.
• At least 3 years of experience with demonstrable skillsets in SIEM use-case engineering, with over 5 years of experience
  in cybersecurity
• Previous relevant experience working in a security operational role, ideally within a Corporate, Military, or Police environment; engaging with and responding to a diverse array of internal stakeholders, including senior management
• Have good emotional intelligence and is a proven team player
• Rational and calm under pressure
• Fluency in the English language
• Effective oral and written communication skills
• Good timekeeping ability to cope with a tight deadline and achieve operational objectives
• Self-motivated with the ability to carry out assigned tasks with minimum supervision

This position is based in location Singapore. A valid and approved work visa is required for employment in Singapore in accordance to local labour law regulations. We regret to inform you that only shortlisted candidates will be notified.

The Security Engineer will support the day to day operations and development of the bank security suite of products with key objective in designing, developing, deploying, maintaining and enhancing the Bank’s Data Security capabilities which includes but is not limited to Data Loss Prevention (DLP), E-Mail Encryption and Operations.

Key Responsibilities:

• Support security solutions and infrastructure for Data Security Engineering services
• Transform business data security requirements to effective rules with consideration of operational impact
• Product research and define requirements for new projects, support product evaluation and technical Proof of Concept.
• Test and support Data Security solutions, system and infrastructure changes, upgrades, troubleshooting, patching and improvements.
• Support upgrades and migration to ensure Data Security solutions and or related platforms are maintained in tip-top working conditions with proper documentation and RCA.
• Conduct regression testing on new data security rules, use cases and enhancements.
• Manage and coordinate change process engagement with regards to current Data Security solutions.
• Automation development on existing processes and develop contextual data sets, reports and dashboards to provide management and service insights
• Provide support for all Audit and Regulatory requests

Others:

• Communicate effectively with a variety of internal teams and third party service providers/vendors for the delivery of Data Security services/solutions
• Capable of managing a variety of priorities and deliverables in an operational, interrupt driven environment with minimal guidance or supervision.
• Work within established practices and handling guidelines to triage device outages.
• Work with internal technical teams and engineers in technical troubleshooting and forums.
• Available to respond to any requests and assist with troubleshooting activities along with proper documentation.
• Resolve standard/routine issues with no guidance and complex/unusual issues with minimal guidance.

Education

• Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution
• Data Security product certifications will be favorable although not mandatory

Technical Skills

• Overall experience 3 to 6 years of experience
• 1 to 2 years of relevant experience in managing and deploying Data Security solutions such as Data Loss Prevention, Sensitive Data Discovery, Information Rights Management
• Knowledgeable with the variety of Data Security technologies and familiar with the industry trends and best practices
• Hands-on experience with Operating Systems (Windows, Unix, Linux), networking technologies (routers/firewalls), end user technologies (Windows, iOS, Android) and endpoint management platforms (MDM) in relation to Data Security
• Familiar with cloud technologies (e.g. AWS, Azure, GCP) in relation to Data Security controls (e.g. Microsoft Purview, Microsoft IRM, CASB)
• Knowledgeable with cryptographic standards and secure data transmission methodologies
• Analytical problem solver and good at troubleshooting technical issues

Soft Skills

• Good written and verbal communication skills
  Process aware mindset
• Strong analytical and problem solving skills
  Effective time management and organizational skills.
  Team player, including ability to establish and maintain effective working relationships within and across the organisation

Other Requirements

Willingness to perform on-call duties as and when required

Test Engineering Services (TES) at Synapxe is embarking on a journey to constantly transform its services by exploiting state-of-the-art technologies and tools to enhance TES’ ability to offer specialized testing services to its stakeholders. TES is passionate about making an impact with lasting change and we aim to provide our stakeholders with automated and optimized testing solutions to not only help them speed-up testing but produce accurate, reliable, and repeatable results.

TES is planning to implement and roll out a Dynamic/Interactive Application Security Testing (D/IAST) solution. This will act as a control measure proposed for implementation in response to Secured-by-Design Framework v1.0 as recommended by CSA’s Cybersecurity Code of Practice (CCoP).

As an Application Security Testing Specialist, you will be responsible for:
• Leading the request for proposal from a technical perspective to procure a D/IAST solution.
• Defining and documenting technical product requirements and specifications for a D/IAST solutions, evaluating the solution proposals to perform fit/gap analysis, determining the detailed evaluation criteria and producing recommendations to prevent, detect and analyse security threats and weaknesses in the running application.
• Leading the implementation and roll out of the identified D/IAST solution; work with the senior manager and product vendor to plan, set-up, on-board, test and deploy the D/IAST solution.
• Automated application security using the D/IAST tool to perform application security testing, gather and understand reports, assess potential security vulnerabilities, work closely with the application developers/vendors to resolve any vulnerabilities, and present the risks to the business for acceptance or mitigation.
• Removing false positives from the reports and working closely with the development/test teams to automate test and embed security testing in the CI/CD pipe line.
• Developing comprehensive and accurate reports and presentations for both technical and management audiences and effectively communicating the findings and remediation strategies.
• Recognising and safely utilising attacker tools, tactics, and procedures
• Maintaining and performing routine maintenance on D/IAST monitoring servers, reports repository, agents, etc.

• 8 years of experience with SAST/DAST/IAST/RASP methodologies and technologies to catch security flaws in the software?
• Hands-on experience with a wide-range of security tools such as MF Fortify, WebInspect, Contrast Security Assess and Protect, IBM AppScan, Checkmarx, MS Threat Modeling, BurpSuite, etc.
• Eager to collectively learn, share and solve problems within the area of application security testing in the area of healthcare domain?
• Consistent attention to details and work under pressure to achieve agreed targets/goals
• Work with intra-teams, and building rapport with the stakeholders and be able to manage difficult people
• Think out of the box and carries the courage to try and implement unconventional approach to deliver solutions

The Security Engineer will support the day to day operations and development of the bank security suite of products with key objective in designing, developing, deploying, maintaining and enhancing the Bank’s Data Security capabilities which includes but is not limited to Data Loss Prevention (DLP), E-Mail Encryption and Operations.

Key Responsibilities:

• Support security solutions and infrastructure for Data Security Engineering services
• Transform business data security requirements to effective rules with consideration of operational impact
• Product research and define requirements for new projects, support product evaluation and technical Proof of Concept.
• Test and support Data Security solutions, system and infrastructure changes, upgrades, troubleshooting, patching and improvements.
• Support upgrades and migration to ensure Data Security solutions and or related platforms are maintained in tip-top working conditions with proper documentation and RCA.
• Conduct regression testing on new data security rules, use cases and enhancements.
• Manage and coordinate change process engagement with regards to current Data Security solutions.
• Automation development on existing processes and develop contextual data sets, reports and dashboards to provide management and service insights
• Provide support for all Audit and Regulatory requests

Others:

• Communicate effectively with a variety of internal teams and third party service providers/vendors for the delivery of Data Security services/solutions
• Capable of managing a variety of priorities and deliverables in an operational, interrupt driven environment with minimal guidance or supervision.
• Work within established practices and handling guidelines to triage device outages.
• Work with internal technical teams and engineers in technical troubleshooting and forums.
• Available to respond to any requests and assist with troubleshooting activities along with proper documentation.
• Resolve standard/routine issues with no guidance and complex/unusual issues with minimal guidance.

Education

• Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution
• Data Security product certifications will be favorable although not mandatory

Technical Skills

• Overall experience 3 to 6 years of experience
• 1 to 2 years of relevant experience in managing and deploying Data Security solutions such as Data Loss Prevention, Sensitive Data Discovery, Information Rights Management
• Knowledgeable with the variety of Data Security technologies and familiar with the industry trends and best practices
• Hands-on experience with Operating Systems (Windows, Unix, Linux), networking technologies (routers/firewalls), end user technologies (Windows, iOS, Android) and endpoint management platforms (MDM) in relation to Data Security
• Familiar with cloud technologies (e.g. AWS, Azure, GCP) in relation to Data Security controls (e.g. Microsoft Purview, Microsoft IRM, CASB)
• Knowledgeable with cryptographic standards and secure data transmission methodologies
• Analytical problem solver and good at troubleshooting technical issues

Soft Skills

• Good written and verbal communication skills
  Process aware mindset
• Strong analytical and problem solving skills
  Effective time management and organizational skills.
  Team player, including ability to establish and maintain effective working relationships within and across the organisation

Other Requirements

Willingness to perform on-call duties as and when required

As a Security Engineer, specializing in firewalls, your primary mission is to fortify our organization's cybersecurity defenses while maintaining the business up and running. You will lead efforts to design, implement and manage robust security solutions for the whole Accor group. Collaborating closely with cross-functional teams, you will enhance our security posture and ensure a resilient and secure environment

1. Design:

- Collaborate with internal technical teams, customers, and external strategic partners to define, deliver and improve high-quality network segmentation for all Accor’s hotels and the hotel standard

- Engage with the whole Cyber Security team to develop security policies, protocols, and procedures.

2. Act as a L3 engineer:

- Install, configure, and maintain firewalls and network security devices, to ensure a secure and reliable access to corporate resources while following the security standard.

- Provide timely subject matter expertise for incidents and requests related to network security.

- Maintain the procedures for these tools.

3. Expertise & transversal:

- Coordinate with the MSSP in charge of the hotels’ firewall

- Assist the whole team on other subjects and tools related to Cyber Security.

- Stay up to date with emerging security threats, vulnerabilities, and technologies.

- Advise on and enforce the Security policies across the group.