Total 413 job vacancies by Ensign Infosecurity (cybersecurity) Pte. Ltd.

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security monitoring use cases and automation playbooks.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Create, finetune and maintain SOAR playbooks
• Create and maintain UEBA use cases

Requirements

• At least 3 years of experience in security operations in a SOC environment
• At least 2 years of experience in creating, finetuning and maintaining correlation rules and playbooks
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as AWS Certified SysOps Administrator Associate, Microsoft Azure Administrator Associate, GCP Associate Cloud Engineer, equivalent or more.
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications
• Professional certificates such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage

Our Security Solutions team works closely with other security engineers to deliver security solutions to the project for our customers. You will play a part in the team to research, design, architect and implement security solutions such as SIEM and SOAR, etc.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Duties and Responsibilities

• Conduct implementation, maintenance, support and operation of the project's solution platforms
• Build and maintain a cloud infrastructure architecture aligning security, compliance, performance, and resilience
• Identity, evaluate and recommend new technologies/tools that can improve the security, resiliency and operational efficiency of the platform.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation
• Onboard and maintain log sources
• Crafting and maintaining log parsers / data flow for onboarded logs
• Management of SOC systems (including but not limited to SIEM, SOAR, Threat Intel, etc)
• Develop and maintain automation infrastructure for build and maintenance of solutions and to streamline manual operation tasks
• Management of solutions, including patch management
• Support vulnerability assessments by reviewing and providing remediation to the security hardening of the solutions.
• Involvement in improving and evolving workflow, processes and best practices to increase system maintenance efficiency and security standards.
• Sharing of knowledge through technical documentation, knowledge-based articles and sharing sessions with fellow peers in the team
• Collaborate with relevant parties and provide consultation as a Subject Matter Expert (SME) to deliver final project outcome
• Assess architectures and designs for security vulnerabilities; propose and build implementable alternatives
• Build and maintain monitoring, auditing, and reporting frameworks that produces artifacts that support security and compliance needs
• Proactively manage stakeholder communication related to deliverables, risks, changes, and dependencies

Requirements

Possess the following work experience:

• At least 3 years of experience in AWS, Azure and/or GCP, implementing, administrating and managing cloud network and resources (e.g., AWS EC2, IAM, CloudWatch, CloudTrail, Config, Lambda, Security Groups, WAF, Guard Duty, Inspector, Kinesis Data Firehose)
• At least 2 years of experience in Windows and RedHat Enterprise Linux configuration and troubleshooting
• Working experience in PowerShell, bash and/or python scripting, object-oriented languages, and web programming
• Working experience in DevOps/DevSecOps, CI/CD, Ansible, Terraform or equivalent
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications
• Demonstrated capacity to learn independently with minimal guidance on new technologies
• Demonstrate good verbal and written communication skills
• Strong awareness of data security, data governance and performance, with an ability to deliver these key non-functional requirements

In possession of:

• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Possession of critical thinking and contextual analysis abilities
• Professional certificates such as AWS Certified SysOps Administrator, Microsoft Certified: Azure Administrator Associate, Google Cloud Associate Cloud Engineer, equivalent or more·

Preferred Skills / Qualities

• Professional certificates in Security, RedHat, MCSE, or equivalent would be an advantage
• Working experience in network firewalls and web proxies would be an advantage
• Working knowledge of Rest API is preferred
• Professional certificates such as SIEM Certified Administrator, SIEM Certified Architect, SOAR Certified Administrator, or equivalent would be an advantage
• Professional certificates such as SANS or ISC2 would be an advantage

Duties and Responsibilities

• Perform vulnerability assessments, penetration testing and red teaming on a wide range of technologies including but not limited to Network, Web, Mobile, Thick Client Applications, Cloud, Kubernetes, and Operations Technology.
• Develop internal VAPT and red team capabilities through scripting, automation, and hands-on research into the latest exploitation tactics, techniques, and procedures (TTPs) of various threat actors.
• Lead and mentor a team of consultants on effective technical communication of vulnerabilities and remediation recommendations to clients.
• Organize and participate in Capture-The-Flag (CTF) events both internally and externally.

Requirements

• Familiarity with cyber security principles (e.g. networking, web development, vulnerability classes) and industry best practices (e.g. OWASP Top 10, MITRE ATT&CK Framework)
• Experienced in consulting, including internal and client facing experiences
• Ability to independently lead a project and communicate with clients
• Familiar with programming/scripting languages such as .NET, Python, Bash and PowerShell, etc.
• Possess relevant cybersecurity certifications or accredited experience from CTF and Bug Bounties
• Ability to travel overseas when required

Preferred Qualifications/Skills

• At least 5 years of consulting experience
• Proficient with security testing tools such as Nessus, Burp Suite, Frida, dex2jar, etc.
• Offensive Cyber Security Certifications (e.g. OSCP, CRT preferred)
• Mobile Application Development / Security Testing
• Red Teaming Tools such as Cobalt Strike, GoPhish, Sliver, Brute Ratel, etc.
• Source Code Review using automated scanners such as Checkmarx
• Reverse Engineering / Malware Development
• Static and Dynamic Analysis
• Experience in various security testing environments such as with the use of jumphosts, VPN, testing over GCC AWS/Azure, onsite/remote environments, etc.
• A self-motivated learner who is keen to develop and lead a team to be able to deliver professional services and grow local capabilities

Responsibilities:

• Collaborate with the team and be responsible for the delivery of client engagements, providing updates to the engagement and/or team lead
• Contribute to the project delivery of the Ensign Consulting – Threat Hunting & Response business; aligns with the project schedule for deliverables and milestones; adaptable to the needs and requirements of the engagement; communicates effectively with clients and internal stakeholders;
• Assist in the response to cyber security incidents and providing efforts in determining the criticality of an incident, investigation of incident actions, appropriate containment, and performing mitigation activities;
• Understanding and familiarity with the phases of the Incident Response life cycle of: analysis, containment, eradication, remediation, recovery;
• Ability to perform malware analysis and reverse engineering will be desirable;
• Contributing to the improvements of the incident response and threat hunting processes by taking advantage of the integration with new technologies and capabilities;
• Participating in the program development plan, which includes development of threat hunting hypothesis, and to continually improve IR Playbooks, SOPs alignments and training;
• Participating in the communication and documentation of the hunt results, details of incidents, and creating status reports of tasks performed to stakeholders;
• Staying abreast of the latest information security controls, practices, techniques and capabilities in the marketplace; leading internal skills development activities for information security personnel on the topic of security monitoring and incident response, by providing mentoring and by conducting knowledge sharing sessions;
• Familiarization with industry digital forensics tools and threat hunting platforms;
• Assisting in the preparation and delivery of clear and concise technical & management reports and formal papers (when necessary) on incident findings to the different levels of customer-end stakeholders including the management. This includes making appropriate level presentations to the customer’s stakeholders;
• Researching and keeping up-to-date with technological trends in relation to cyber security, threat hunting, and digital forensics;
• Performing other job-related duties as assigned

Key Responsibilities:

• General Sales Operations/Administration work is focused on sales analysis and reporting and includes:
• Selecting, managing, and training sales staff on sales related systems, databases, and associated processes
• Order processing and customer support including advising customers of product shortages, expected delivery dates, price changes, etc.
• Organizing sales seminars and workshops for customers
• Managing inventory of sales literature and brochures
• Conducting competitor research and maintaining a library of competitor information
• Preparing reports related to customer inquiries, sales trends, customer complaints, delivery/service problems, reasons for product returns, etc.

Requirements

• Good learning attitude
• Has advanced knowledge and experience in MS Excel (V lookup and Pivot table) and MS Word
• Able to work under tight deadlines

Responsibilities

• Managing and leading a team of engineers for SOC engineering operations
• Front customer engagement for engineering tasks / initiatives
• Responsible for ensuring tasks are delivered in a timely manner
• Responsible for understanding customer’s requirement for engineering tasks / initiatives
• Responsible for ensuring SOC core services uptime
• Responsible for making service-wide impact assessment in the event of issues
• Responsible for making service wide impact assessment before approving change requests
• Responsible for overall capacity management and monitoring
• Responsible planning for development of engineers’ skills and competency
• Provide mentorship and guidance to junior staff

Requirements

• Bachelor’s Degree in Information Technology or Cyber Security
• Professional certificates such as SANS or ISC2 would be advantageous
• At least 7 years of IT security experience and experienced in a wide range of cyber-security technologies
• Technical knowledge in the following information security technologies & solutions is preferred: SIEM, SOAR, UEBA, EPP, EDR, Virtualization, Networking, Big Data
• Experience in IT Network / System Administration is a requirement
• Experience as a technical lead in large-scale projects involving multiple technologies as part of a turn-key solution
• Strong troubleshooting and analytical skills that can resolve issues as the final point of escalation
• Strong presentation, communication and written skills
• Basic project management skills
• Positive working attitude
• Passionate in information security

Responsibilities

• Serve as the principal advisor to Customer’s business systems involving the security of the operating unit’s IT Systems.
• Perform security related statistics assessment, recommendation and reporting
• Develop and maintain baseline security standards (BSS) for servers, databases, network devices and monitoring tools
• Plan, schedule and conduct periodic BSS compliance assessment against servers, databases, network equipment and monitoring tools
• Fronting of Security Audit
• Lead in investigations, identification and managing risks, into Medium to Low Information Security incidents and threat.
• Escalate Critical/High Security incident to Incident Manager and support incident manager in the investigation.
• Oversee resolution of security related incident
• Monitor, analyze, recommend and follow through the appropriate action for security vulnerabilities and patches
• Project Advisory on IT Security and Compliance
• Administration and Control of Privileged Accounts Access Authentication Systems
• Participate in Cyber Security activation and Disaster Recovery exercise
• Perform verification, validation and risk assessment of report generated from Vulnerability Assessment and/or Web Application Penetration Test
• Expected to be attached to customer’s site as and when required.

Job Requirement

• Bachelor Degree or Diploma in Electronics, Computer Engineering or related disciplines.
• At least 3 years of relevant experiences in a cyber security setting.
• Possesses relevant experiences with any of the following:
• Vulnerability Assessment, IDS/IPS configuration/monitoring, Firewalls, TCP/IP packet analysis, Log analysis, and understanding of exploiting vectors
• Familiar with information security requirements/ standards across various industries.
• Working knowledge of best practices for incident response, network architecture, current networking technologies, security requirements, features of networks and applications, Cyber Security trends and related security issues.
• Relevant certifications such as CISSP, CISA will be advantageous

• Lead the overall day-to-day work of the infrastructure operations ensuring events and/or incidents are responded to in adherence to established processes
• Institute strong governance to lead and direct infrastructure operational team with standard operating procedures (SOPs) and workflows
• Ensure that existing procedures are followed and that all procedures are documented in accordance with guidelines
• Explore new solutions and technologies, integrate learning and recommendations for operational efficiency and continual improve of the infrastructure for better user experience
• Identify and define service delivery risks and offer, own, and manage risk mitigation strategies
• Identify chronic operational and security issues, and ensure they are managed appropriately
• Provide overview of operational challenges, risks and opportunities to leadership team
• Manage and escalate roadblocks that may jeopardize operations, infrastructure, and SLAs
• Oversee the operational personnel’ daily tasking and serve as a mentor to provide leadership to operational personnel
• Escalate issues to leadership in a timely manner with appropriate information regarding risk, action times and root cause analysis
• Recruitment, hiring, managing, supporting and career development to infrastructure operation personnel

Requirements

• Degree in Computer Science, Information Systems, or related discipline or equivalent experience
• Minimum 5 years of relevant work experience in the security operational field. Experience with SOC environment will be ideal
• Demonstrates broad knowledge of infrastructure technologies, trends and strategy
• Provide in depth technical expertise for both tactical and operational initiatives
• Strong analytical skills to define risk, identify potential threats, and develop action/mitigation plan.
• Strong knowledge of Information Systems Security
• Good knowledge of Windows/LINUX Operating System, Storage, Networking and Backup solutions

Key Responsibilities:

• Develop new custom parsers for parsing and field extraction of new log source types, including testing and finetuning
• Research, evaluate and identify the most appropriate mechanism for efficient parser development
• Modify and enhance existing parsers to adopt to log variants
• Document the newly created or modified parsers
• Work with engineering team to deploy and test the new or modified parsers
• Update development progress and issues to team lead
• Provide inputs to Delivery Managers on log format changes required to reuse existing parsers

Requirements:

• At least 3 years of relevant work experience in log management, log onboarding to SIEM, connector development, scripting and/or data engineering
• Certified as Splunk Core Power User or higher
• Experienced in Splunk Processing Language and Regex
• Good working knowledge of cloud environment (AWS and/or Azure)
• Please note that this role will be 8 months direct contract.

We are looking for an experienced senior engineer to be part of the team that design, build and maintain a robust security services platform on Cloud environments. The candidate will be a key technical lead within the Cloud platform team in our System Integration business unit. He will be responsible for the architecture, design, implementation, and maintenance of a cloud-based security platform that meets ISO27001 and SOC2 compliance requirements. The ideal candidate should have hands-on experience in DevSecOps, cloud operations, and the ability to design and implement complex cloud solutions.

Key Responsibilities:

• Work with the Cloud Technical Committee to establish Ensign’s cloud platform architecture and framework for running cloud services
• Collaborate with customers, stakeholders, and cross-functional teams to identify business requirements, design solutions, and create technical architecture and implementation plans
• Take part in reviewing, establishing and refactoring of the polices and framework for the governance of the cloud platform's usage
• Architect, design, and implement a secure and scalable cloud platform for providing security services such as identity and access management, network security, application security, and data protection
• Develop product roadmap for future enhancements of Ensign’s cloud platform
• Develop and maintain technical documentation, including architecture diagrams, design documents, and SOPs to ensure the platform meets compliance requirements
• Design and implement DevSecOps processes for continuous delivery and integration of security services to cloud environments
• Implement and manage cloud infrastructure and services, including virtual machines, containers, networking, and storage services on AWS, Azure, and GCP
• Ensure the platform meets industry standards for security and compliance, such as ISO27001, SOC2, and GDPR
• Provide technical leadership and guidance to the team, including mentoring junior staff, performing code reviews, and ensuring quality control of deliverables
• Participate in technology evaluations and recommendations to ensure the security platform is using the latest cloud technologies and best practices
• Develop and implement disaster recovery and business continuity plans for the security services platform

Qualifications:

• Bachelor's degree in Computer Science, Information Technology or related field
• Minimum of FIVE (5) years of experience in designing and implementing cloud-based solutions on AWS, Azure, and GCP
• Hands-on experience in DevSecOps, cloud operations, and cloud security best practices
• Strong knowledge of security technologies such as identity and access management, network security, application security, and data protection
• Experience in developing and maintaining technical documentation and implementing compliance requirements such as ISO27001, SOC2, and GDPR
• Excellent communication skills, with the ability to communicate technical concepts to non-technical stakeholders
• Strong problem-solving and analytical skills, with the ability to work independently and as part of a team
• Possess cloud certifications such as AWS Solutions Architect Associate, Azure Administrator Associate or GCP Associate Cloud Engineer
• Expert-level cloud certifications such as AWS Solutions Architect Professional, Azure Solutions Architect Expert, or GCP Professional Cloud Architect are a plus

• Develop strategy for analysing enterprise-wide fraud risks within the client environment, with an emphasis on thematic reviews; micro-trend identification and plausible emerging risks against established industry good practices.
• Establish the necessary fraud program policies and associated standards to identify risks; ensuring that these are identified, measured, monitored and controlled consistent with the customer’s risk appetite.
• Design and implement a technology-led fraud program for clients leveraging automation to meet fast-paced and high-volume transactions business environments.
• Provide guidance to Fraud Operations teams in the creation of service management program to ensure continuous improvement of the Fraud detection program.
• Design, develop and integrate investigation process as well as material fraud risk escalation process for Fraud Operations team to execute.
• Identify and operationalise continuous monitoring process to ensure key metrics for Fraud, aligning with their risk and control taxonomy.
• Perform Enterprise-wide aggregate fraud risk assessment and management reporting for customers’ management, executives and Board of Directors.
• Proactively manage stakeholder communication related to deliverables, risks, changes, and dependencies
• Communicate, collaborate, and work effectively across distributed teams internally and externally in a diverse and global environment

Responsibilities

• Monitor third party security feeds, forums, and mailing lists to gather information related to the client through automated means

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting

• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds

• Review vulnerabilities advisories

• Review and process threat intelligence reports

• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients

• Assess each event based on factual information and wider contextual information available

• Review, propose and generate reports to automate or reduce low value event escalations

• Build rules and intelligence to detect such threats and proliferate to all monitored networks

• Implementing and devising detection method of such threats in our security operations through SIEM Rules, DB scripts etc

• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available

• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)

• Assist the Security Analysts with the investigative works

• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst

• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to detection Use Case

• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity

• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT)

• Possessed deep interest in open source research and critical thinking / contextual analysis abilities

• Investigative and analytical problem solving skills

• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security

• Related professional cyber security certification, such as GCIA, CEH, will be preferred

• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor

• Ability to research and characterize security threats to include identification and classification of threat indicators

Responsibilities:

• Provide basic support to end-users and application teams for security tools, including installation, configuration, and troubleshooting.
• Collaborate with vendors to acquire necessary updates, patches, and support for security tools.
• Assist in monitoring security tool alerts and notifications, escalating potential issues to the appropriate teams when necessary.
• Maintain an up-to-date inventory of all IT security tools, including antivirus software, EDR, microsegmentation, and other security solutions.
• Regularly reconcile security tools inventory with active licenses and installations to identify discrepancies and ensure accurate asset management.
• Generate reports on tool inventory, license status, and reconciliation results for management and compliance purposes.
• Maintain organized records of reconciliation activities, updates, and communications with vendors.

Qualifications:

• Basic understanding of IT security principles and practices.
• Strong organizational and documentation skills.
• Attention to detail and a focus on accuracy.
• Familiarity with IT security tools and their functions.
• Effective communication skills to collaborate with internal teams and vendors.

Duties and Responsibilities

• Build and maintain a cloud infrastructure architecture aligning security, compliance, performance, and resilience, for clients
• Assess architectures and designs for security vulnerabilities; propose and build implementable alternatives for clients
• Oversee the management and remediation of identified security flaws within our development platforms
• Build and maintain monitoring, auditing, and reporting frameworks that produces artifacts that support security and compliance needs for clients
• Develop processes that produce artifacts that support security and compliance requirements
• Implement best practices for cloud security on the client’s cloud platforms
• Proactively manage stakeholder communication related to deliverables, risks, changes and dependencies

Requirements

• Implementing security best practices on AWS/ Azure/ GCP/ Ali Cloud
• Implementing AWS or Azure systems, including the equivalent of AWS EC2, IAM, CloudWatch, CloudTrail, Config, Lambda, Security Groups, WAF, Guard Duty, Inspector
• Significant scripting experience using with Python/ Javascript
• Significant knowledge in orchestration platforms
• Familiar or keen in consulting, including both internal and client facing experience
• Strong experience in DevOps development practices and CI/CD pipelines
• Significant experience as a security-focused developer and DevSecOps practices
• Excellent presentation and briefing skills

Duties and Responsibilities

• Build and maintain a cloud infrastructure architecture aligning security, compliance, performance, and resilience, for clients
• Assess architectures and designs for security vulnerabilities; propose and build implementable alternatives for clients
• Oversee the management and remediation of identified security flaws within our development platforms
• Build and maintain monitoring, auditing, and reporting frameworks that produces artifacts that support security and compliance needs for clients
• Develop processes that produce artifacts that support security and compliance requirements
• Implement best practices for cloud security on the client’s cloud platforms
• Proactively manage stakeholder communication related to deliverables, risks, changes and dependencies

Requirements

• Significant scripting experience using with Python or Javascript
• Familiar or keen in consulting, including both internal and client facing experience
• Familiar in DevOps development practices and CI/CD pipelines
• Good communication skills