Total 17 Telecommunication Engineer job vacancies in Legal / Public / Security category in Kuala Lumpur City Centre

Job Description

• Opportunity to be a part of our Cyber Security Team in Singapore!
• Based in Singapore, the regional hub for Asia Pacific (AP) and top-ranked biopharmaceutical company on The Straits Times and Statista’s list of Best Employers in Singapore for four consecutive years (2020, 2021, 2022, 2023) as well as Great Place to Work-Certified™ company.
• Join the premier biopharmaceutical company that has been in Singapore for more than 25 years and in AP for over 60 years.

Primary Responsibilities

Provide continuous delivery and enhancement of Endpoint and Network Security solutions deployed.

• Align with Network and/or Endpoint Security Product Leads or Manager on Objectives and Key Results (OKRs).
• Lead in Endpoint and Network Security architectural design, integration and deployment on-premise or in the cloud environment.
• Engage and drive Network perimeter security controls (e.g. IPS/IDS, secure web gateway, firewalls) solutioning and product roadmap.
• Engage and drive Endpoint Detection & Response (EDR) or Next-Gen Anti-virus (NGAV) solutioning and product roadmap.
• Benchmark and assess security configurations and system performance impact.
• Support the integration requirement of the Network and Endpoint Security solutions to other security solutions such as Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR).
• Participate and contribute to cross-functional engagements, achieve risks and compliance objectives. Cross-functional teams include:
• Cyber Fusion Center in Singapore, or across EMEA and US regions
• Governance, Risk and Compliance Value Team
• Technology Infrastructure, Operations and Experience team on workstations, servers, and networks
• Participate in vendor and technology assessments, including proof of concept, stakeholder requirements to achieve business outcomes and resolve technical issues.

Leadership

• Foster collaboration, listen and learn from stakeholders and people with different cultures across functional areas.
• A team-focused mentality with the proven ability to work effectively with diverse stakeholders.
• Serve as a Subject Matter Expert (SME) and take ownership of the engineering domain knowledge.
• Supervise contractors and provide guidance on projects, being responsible for their technical deliverables.
• Mentor and guide junior engineer to become successful Subject Matter Expert (SME).
• Lead and influence the design and development of Endpoint and Network Security products and services.
• Ability to work extremely well under pressure while maintaining a professional image and approach.
• Effectively communicate as a technical consultant to both IT and business audiences.

Technical Skills

• Keep abreast of current and emerging Endpoint and Network security technologies and maintain aware of industry trends and threats.
• Good knowledge in Risk Management and Information Security, Cloud Security, and security standards or frameworks (e.g. ISO 27000 or NIST).
• Extensive knowledge and practical experience in 2 or more of the technologies: Endpoint Detection & Response (EDR), Network Security (IT/IoT/OT), Mobile Security, Email Security.
• Proficient in Cloud platforms and services (e.g. PaaS, IaaS, cloud native or third-party security services)
• Experience in security technologies implemented for the cloud environment will be a plus.

Education Minimum Requirement:

• Bachelor Degree in Computer Science, Cybersecurity, Information Systems or equivalent experience.

Required Experience and Skills:

• Approximately 5+ years of experience in Endpoint and Network Security implementations, for instance, Endpoint Detection & Response (EDR), Next-Gen Anti-virus (NGAV), Intrusion Prevention/Detection Systems, Secure Web Gateway.
• Good experience with Agile methodology and Software Development Lifecycle (SDLC).
• Ability to work independently and as team player in a fast-paced environment.
• Excellent oral and written communication skills and possess good presentation skills.
• Relevant certifications are desired (e.g. CISSP, AWS/Azure Cloud Certifications)

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one another’s thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace.

Current Employees apply HERE

Current Contingent Workers apply HERE

Secondary Language(s) Job Description:

Leadership

• Foster collaboration, listen and learn from stakeholders and people with different cultures across functional areas.
• A team-focused mentality with the proven ability to work effectively with diverse stakeholders.
• Serve as a Subject Matter Expert (SME) and take ownership of the engineering domain knowledge.
• Supervise contractors and provide guidance on projects, being responsible for their technical deliverables.
• Mentor and guide junior engineer to become successful Subject Matter Expert (SME).
• Lead and influence the design and development of Endpoint and Network Security products and services.
• Ability to work extremely well under pressure while maintaining a professional image and approach.
• Effectively communicate as a technical consultant to both IT and business audiences.

Technical Skills

• Keep abreast of current and emerging Endpoint and Network security technologies and maintain aware of industry trends and threats.
• Good knowledge in Risk Management and Information Security, Cloud Security, and security standards or frameworks (e.g. ISO 27000 or NIST).
• Extensive knowledge and practical experience in 2 or more of the technologies: Endpoint Detection & Response (EDR), Network Security (IT/IoT/OT), Mobile Security, Email Security.
• Proficient in Cloud platforms and services (e.g. PaaS, IaaS, cloud native or third-party security services)
• Experience in security technologies implemented for the cloud environment will be a plus.

Education and Experience

• Bachelor Degree in Computer Science, Cybersecurity, Information Systems or equivalent experience.
• Approximately 5+ years of experience in Endpoint and Network Security implementations, for instance, Endpoint Detection & Response (EDR), Next-Gen Anti-virus (NGAV), Intrusion Prevention/Detection Systems, Secure Web Gateway.
• Good experience with Agile methodology and Software Development Lifecycle (SDLC).
• Ability to work independently and as team player in a fast-paced environment.
• Excellent oral and written communication skills and possess good presentation skills.
• Relevant certifications are desired (e.g. CISSP, AWS/Azure Cloud Certifications)

Others

• May require occasional off-hours work

Search Firm Representatives Please Read Carefully 
Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company.  No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails. 

Employee Status:

Regular

Relocation:

VISA Sponsorship:

Travel Requirements:

Flexible Work Arrangements:

Not Applicable

Shift:

Valid Driving License:

Hazardous Material(s):

Job Family:

IT Cyber Security (Digital)

Travel Required:

Up to 10%

Clearance Required:

Ability to Obtain Public Trust

What You Will Do:

We are looking for a skilled Security Engineer to analyze software designs and implementations from a security perspective, and identify and resolve security issues. You will include the appropriate security analysis, defenses and countermeasures at each phase of the software development lifecycle, to result in robust and reliable software program. The role is technical and the ideal candidate must have hands-on experience in computer security systems, networking, web-based protocols and frameworks.

• Implement, test and operate advanced software security techniques in compliance with technical reference architecture
• Perform on-going security testing and code review to improve software security
• Troubleshoot and debug issues that arise
• Provide engineering designs for new software solutions to help mitigate security vulnerabilities
• Contribute to all levels of the architecture
• Maintain technical documentation
• Consult team members on secure coding practices
• Develop a familiarity with new tools and best practices

• Adequate knowledge of web related technologies (Web applications, Web Services and Service Oriented Architectures) and of network/web related protocols
• Identify, define and document system security requirements and recommend solutions to management.

What You Will Need:

• US Citizenship is required
• 6+ years of software security experience
• 3+ years working in an Agile program
• DevOps experience
• Experience within Configuration Management
• Experience with Atlassian tools such as Jira and Confluence
• Experience in Cloud Computing
• Assess cloud providers and products to meet accreditation of applications operating in the cloud.
• Experience with identity and access management principles, networking routing techniques, social engineering.
• Educate and train clients on cloud computing services, private/public/hybrid cloud

• Assist in policy creation for Splunk, as well as redefining matrix need to prioritize incoming threats.
• create a review report base on event anomalies and export all logs from systems and networks into Splunk for security analysis.
• Implementing and managing Identity, SaaS and cloud infrastructure to mitigate and monitor for threats, vulnerabilities, anomalies, and cyber incidents.
• Support all regulatory reporting requirements (FISMA, PCI, privacy), continuous monitoring and auditing.
• Develop and publish policy, plans and procedures in collaboration with other program teams
• Assist in creating risk assessment reports, understand enterprise risk factors, recommend mitigations
• Prepare audit documentation and support internal and external auditors
• Deliver security presentations, threat intel briefings, custom lunch and learns
• Maintain vendor relationships and license renewals
• Deploy and manage technical security controls
• Inventory solutions for hardware, software, identity and cloud resources
• Continuous vulnerability remediation
• Endpoint detection and response
• Network detection and response

What Would Be Nice To Have:

• Configuration Management experience

The annual salary range for this position is $115,200.00-$172,800.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Parental Leave

• 401(k) Retirement Plan

• Group Term Life and Travel Assistance

• Voluntary Life and AD&D Insurance

• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts

• Transit and Parking Commuter Benefits

• Short-Term & Long-Term Disability

• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Care.com annual membership

• Employee Assistance Program

• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)

• Position may be eligible for a discretionary variable incentive bonus

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

06/02/2024

Address:

250 Yonge Street

Technology

Description

We are seeking an enthusiastic and passionate professional for a Senior Cloud Security wants to design and implement security solutions for systems and services in AWS and Azure. We need someone who can establish the highest standards that meet and exceed security governance solutions and practices, provide assurance to management and auditors, and ensure sustained protection by embedding controls in the operational and DevOps (CI/CD) practices with a focus on automation. We are looking for someone who has a high level of technical security expertise and who takes seriously the responsibility of monitoring, detecting, protecting and maintaining the security of data, systems and networks

You are a leader with a strong technical background. You're have demonstrated strength at developing and implementing secure cloud architectures using a risk based cyber security & data privacy strategy, defining security patterns, roadmap and operating model that leverages collaboration, facilitating industry standard information security governance, advising senior leadership on cybersecurity & privacy risks and threats and investment strategies, and documenting appropriate policies and procedures to manage information security risks.

As a qualified candidate, you will be part of the team driving BMO’s Cloud implementation.  As a member of this team, you should possess the ability to inspire yourself and all of our team. Based on your previous experiences you will inject new knowledge and skills into an already high performing team thus excelling our efforts to new heights.

Your Responsibilities

• Assess, design, implement, automate, and document security solutions, controls and processes for Amazon Web Service (AWS) and MS Azure cloud platforms;

• Develop and maintain Security patterns for Cloud Platforms and Services; Assess all cloud patterns to ensure adherence to best security practices and controls

• Design and implement DevOps processes, tools, and re-usable templates to incorporate security into application and infrastructure design patterns and the building of security controls into the CI/CD process.

• Build and deliver policies as code, automating security controls and best practices.

• Review and approve codes and changes with security implications (e.g. IAM Roles and Policies, Security Groups …etc.)

• Provide subject matter expertise on architecture, authentication, and systems security based on a clear understanding of our cloud engineering stack, services and data flow

• Lead focused and continuous cyber security risk assessments of new and existing technologies to identify risks, and appropriate controls that balance security and operability

• Provide effective and pragmatic cyber security guidance up-front in major technology projects, to enable the business to innovate securely

• Assist in investigation and remediation of security incidents and issues

• Be the cloud security subject matter expert for our Cloud Engineering group and its partners in any IaaS/ PaaS and SaaS implementations.

• Conduct risk assessments to identify potential security vulnerabilities in cloud environments and formulate strategies to mitigate these risks

• Ensure that cloud security practices align with relevant industry standards and compliance requirements, such as CIS, NIST etc.

• Work closely with Information Security, product and software development teams to assess cybersecurity risk, cloud controls, and recommend solution and remediation in the cloud environment

Your Mindset

• You are a self-starter, driven and can handle multiple projects and priorities.

• You are passionate about driving the DevOps mindset and culture in a fast-paced, challenging environment where you get the opportunity to work with a spectrum of latest tools and technologies to drive forward Infrastructure-as-Code and Infrastructure-as-a-Service.

• You are actively looking to improve the solutions you implement, understand the efficacy of collaboration and reaching out across functional borders and are keen to work in a team of CI/CD and Infrastructure specialists.

• As a member of this team, you should possess the ability to inspire yourself and all of our team. Based on your previous experiences you will inject new knowledge and skills into an already high performing team thus excelling our efforts to new heights.

Required Core Skills:

• A university degree in Engineering, Computer Science, or Information Technology.

• 5-8 years of experience developing and fielding security architectures and/or engineering

• Security certification such as CISSP or CCSP or CCSK or any Cloud Certified Professional or Specialty certification (e.g., AWS Certified Security Specialty, Microsoft Certified Solutions Expert).

• Knowledge of technical security control environments and compliance frameworks including CSA CCM, ISO27001, ISO 27017 and NIST

• Demonstrated Knowledge of cloud architecture, cloud operations, cloud-based identity access and management, security, automation and orchestration.

• Clear understanding of security protocols and standards and experience with software and security architectures

• Extensive experience with Cloud native Security Solutions

• Firm grasp of networking protocols and operations. Comfortable with low level packet sniffing, working knowledge on Kali, Wireshark, Burpsuite, Metasploit, nmap, fiddler, sqlmap, nessus. Knowledge on network attacks, detections, and defenses

• knowledge of theoretical and applied cryptography, key management, and a strong understanding of cryptography algorithms such as RSA, AES, SSL vs TLS, PKI, etc

• Knowledge of Identity and Access Management concepts and technologies to secure production and corporate access, such as SSO, SAML Federated Identity, RBAC, authentication & authorization solutions

• Experience with scripting (Python, Perl, Bash, PowerShell) and API integrations

• Demonstrable internal and external relationship building skills and the ability to clearly articulate complex security concepts that influence decision making within a diverse corporate culture.

• Ability to lead an in-depth client meeting/workshop across a broad range of topics including discovery, cloud compliance, and security

• Strong programming skill with experience in API and Webhook development using Python, Node.js, Ruby, PowerShell and Shell Scripting languages.

Other Skills:

• Strong Interpersonal, communication and leadership Skills

• A critical thinker with strong research, analytics and problem solving skills

• Self-motivated with a positive attitude and an ability to work independently and or in a team

• Ability to communicate across business units and the ability to interface with and communicate complex technical concepts to a broad range of internal and external stakeholders

• Time management skills with the ability to manage multiple streams and lead less experienced architects

$92,400.00 - $171,600.00

Salaried

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

We’re here to help

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable 
• Familiarity with API Security, Mobile/Application Security, Cloud Security
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash scripting
• Familiar with a variety of DevSecOps toolkits, including Ansible, Jenkins, Artifactory, Jira, Terraform, Git/Version Control Software, or comparable technologies
• Familiar with a variety of Pentesting toolkits, including BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF

• Develop and oversee key performance indicators (KPIs) for security.
• Oversee service level agreements (SLAs) for security operations and create risk-based dashboards for reporting.
• Create and implement a comprehensive vulnerability management program, including managing activities related to vulnerability assessment (VA) and penetration testing (PT).
• Develop and implement security programs for network, server, and cloud environments, including onboarding processes and pre- and post-scanning activities.
• Conduct periodic configuration reviews based on CIS benchmarks.
• Manage the application security program by identifying and mitigating risks in collaboration with business application teams.
• Collaborate in managing the endpoint security, network security, and server security programs.
• Collaborate in managing the overall security operations management program.

• At least 3-5 years of documented work experience in security engineering.
• Prior practical knowledge of web, mobile, and cloud security.
• Hands-on experience in constructing and maintaining security measures such as firewalls, intrusion detection systems, antivirus software, authentication systems, content filtering, etc.
• Thorough understanding of IT infrastructure concepts across all layers, including Servers, Networks, End User Computing, and Cloud.
• Experience in designing and implementing risk-based information security programs.
• Hands-on experience in implementing standards such as ISO 27001, NIST, CIS, or equivalent.
• Hands-on experience in designing, implementing, and managing Data Leak Prevention programs.
• Hands-on experience in conducting application security assessments, both manual and tool-based.
• Gained solid understanding of OWASP, CIS, and NIST guidelines for application security.
• Experience in utilizing anti-malware solutions.
• Experience in designing security programs for cloud services, including IAAS, PAAS, and SAAS.
• Hands-on experience with native cloud security capabilities.
• Experience in implementing cloud security solutions like CASB.
• Excellent communication and presentation skills.
• Experience in collaborating with mid-level and senior-level management, with the ability to understand business processes and requirements.
• Understanding and effectively communicating security risks to core technology teams and business functions.
• Preferred certifications: CISSP, CCSP, CISM, ISO 270001 LI/LA.

Mavis Seeds by Sky Mavis is designed specifically for young people and students with the passion and aspirations to become professional engineers.

Job description

As a Security Engineer at Sky Mavis, you will embark on a journey to contribute to the security of our products and applications, playing a crucial role in the intersection of blockchain and gaming technology. This internship offers a unique opportunity to gain hands-on experience in securing cutting-edge blockchain applications and products.

• Penetration Testing: Perform both black box and white box penetration tests, identifying vulnerabilities and providing actionable recommendations.
• Security Measures Design and Implementation: design and implement robust security measures for our products, integrating security best practices throughout the SDLC for our blockchain products.
• Code Reviews: conduct security code audits for Go, Rust, JavaScript/TypeScript, and Solidity projects, ensuring compliance with security standards.
• Automation Testing and SDLC Security: enhance security testing capabilities by contributing to automation testing processes and integrating security into the SDLC.

• Currently enrolled in the third year or of a related IT school or above.
• Knowledge of software development.
• Strong understanding of networks and network security principles.
• Knowledge of penetration testing methodologies.
• Knowledge of security code audit for Go, Rust, JavaScript/TypeScript, and Solidity projects.
• Knowledge of blockchain is an advantage, but not mandatory.
• Advanced skills in web exploitation, cryptography, and reverse engineering.
• Deep knowledge in certain areas, especially in Solidity smart contract auditing is preferred.
• Enthusiasm for blockchain technology.

• On-the-job training with experienced and supportive mentors.
• Hands-on experience with blockchain projects.
• Competitive salary with other allowances.
• Modern and well-equipped office right in District 1.
• Exclusive opportunity to be a full-time employee after 6 months.

Mavis Seeds by Sky Mavis is designed specifically for young people and students with the passion and aspirations to become professional engineers.

Job description

As a Security Data Engineer, you will work to support the development and maintenance of data infrastructure, systems, and processes. You will have the opportunity to gain hands-on experience in working with large datasets, implementing ETL (Extract, Transform, Load) processes, and contributing to the overall data architecture of the organization. This internship is ideal for individuals pursuing a career in data engineering and analytics.

1. Data Integration:

• Assist in designing and implementing ETL processes to extract, transform, and load data from various sources into the datalake.
• Collaborate with team members to ensure efficient data integration and flow across systems.

2. Data Modeling:

• Contribute to the design and development of data models to support business intelligence and reporting requirements.
• Assist in maintaining and updating data dictionaries and documentation.

3. Collaboration:

• Collaborate with Security Operation teams, including data scientists, and analysts to understand data requirements and deliver solutions.

4. Technology Evaluation:

• Stay informed about emerging technologies in data engineering and analytics.
• Assist in evaluating and implementing new tools and technologies to enhance data processing capabilities.

• Currently pursuing a Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• Strong understanding of database concepts, SQL, and data modeling.
• Familiarity with ETL tools and processes.
• Basic programming skills in languages such as Python.
• Knowledge of data warehousing concepts and best practices.
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.

• On-the-job training with experienced and supportive mentors.
• Hands-on experience with blockchain projects.
• Competitive salary with other allowances.
• Modern and well-equipped office right in District 1.
• Exclusive opportunity to be a full-time employee after 6 months.

Mavis Seeds by Sky Mavis is designed specifically for young people and students with the passion and aspirations to become professional engineers.

Job description

As a Security Development Engineer, you will be involved in the design, development, and implementation of security features within our software products. This internship is an excellent opportunity for aspiring software developers with a keen interest in cybersecurity to gain practical experience, contribute to our projects, and learn from seasoned professionals in the field.

• Collaborate with the development team to integrate security measures into software design and architecture.
• Assist in the implementation of secure coding practices to ensure the resilience of our software products against potential vulnerabilities.
• Work on projects related to vulnerability assessments, and security tool development.
• Research and stay informed about emerging threats, industry best practices, and advancements in security technologies.
• Collaborate with cross-functional teams to understand security requirements and implement effective solutions.

• Currently pursuing a Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• Strong programming skills in languages such as Python, Go, JS, or similar.
• Strong understanding of database concepts, SQL.
• Understanding of software development principles and best practices.
• Familiarity with security concepts such as cryptography, secure coding, and secure communication protocols.
• Ability to work collaboratively in an agile development environment.
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.

• On-the-job training with experienced and supportive mentors.
• Hands-on experience with blockchain projects.
• Competitive salary with other allowances.
• Modern and well-equipped office right in District 1.
• Exclusive opportunity to be a full-time employee after 6 months.

Security Engineer | Work from home | Sydney CBD Your new company An exciting new opportunity is available for a Security Engineer at a SME Consultancy. This is a permanent position, located in the Sydney CBD and gives you to option to work from home up to 3 days per week. Your new role In your new role, you will be responsible for playing an integral role in protecting the company's information systems' integrity, confidentiality, and availability. You will be proficient in securing, managing , and administering the company's network infrastructure is crucial in protecting it from cyberattacks and reducing the risk of security breaches. What you'll need to succeed

Experience with ISO 27001 compliance and external ISO Audit.
Quarterly Internal Audit and ISMS metric
Maintenance of asset register, risk register, obligations register, incident, and improvement registers.
Security Applications including DarkTrace, CrowdStrike, FortiAnalyzer, firewalls, VPN, email filtering, Incident Response: Remediation and Escalation of alerting
Experience with Active Directory, GPO, SharePoint, and ACL Management.
Previous experience with Vulnerability management, vendor score monitoring, Cyber security score management
Cloud platform management (Azure, AWS, GCP).
Creation of KB articles/documentation.

What you'll get in return

Competitive salary and benefits package
Opportunities for career growth and advancement
Supportive and inclusive work culture
Training and development programs
Collaborative and team-oriented environment
Recognition and rewards for outstanding performance
Modern and well-equipped office facilities
Diverse and challenging projects
Opportunities to work on cutting-edge technologies

What you need to do now If you're interested in the job, click "apply now" to forward an up-to-date copy of your CV to charlie.pym@hays.com.au or call me on 0292492278. If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career. Please click here to apply.

About Sky Mavis

Sky Mavis, the pioneer behind the blockchain game Axie Infinity, is revolutionizing the virtual gaming world with innovative technology and infrastructure. We are committed to fostering a dynamic and inclusive work culture where individuals can bring their authentic selves to the table. As a team of entrepreneurial disruptors and gamers, we are driven by a shared passion for making a meaningful impact and embrace the challenges and critiques that come with being at the forefront of technological advancement. 

About the job

As a Security Operations Engineer at Sky Mavis, you will be at the forefront of ensuring the security and integrity of our decentralized applications and infrastructure. The ideal candidate will bring a minimum of 2 years of experience in security operations, proficiency in Python, and a strong background in security orchestration, automation, and response (SOAR). Familiarity with Kafka and a passion for blockchain technology are definite advantages.

Duties & Responsibilities

• Scripting and Automation: Develop and maintain Python scripts to automate security processes, contributing to the efficiency of our operations.
• Incident Response: Hands-on experience with intrusion analysis, email analysis, malware analysis, incident response, or security engineering.
• SOAR Implementation: Design, deploy, and maintain security orchestration, automation, and response workflows to enhance our incident response capabilities.
• Log Management: Utilize Kafka and other tools to manage and analyze security logs, proactively identifying and mitigating potential risks.
• Cross-functional Collaboration: Work closely with development, infrastructure, and other teams to integrate security into every aspect of our technology stack.
• Cloud Monitoring: Implement and manage cloud monitoring.

Experience: Minimum of 2 years of experience in a security operations role

Technical Skills:

• Proficiency in Python scripting.
• Experience with security orchestration, automation, and response (SOAR) platforms.
• Familiarity with Kafka and log management.

Preferred Skills:

• Experience or Interest in Blockchain Technologies: Whether you've actively engaged with blockchain technologies as a user or gained technical expertise in the field, we value hands-on experience or a keen interest that reflects your understanding of the blockchain landscape.
• Cybersecurity in Gaming: General knowledge of cybersecurity practices specific to the gaming industry, including protection against hacks, fraud, and other security threats that may impact both traditional and blockchain-based games.
• Communication Skills: Excellent verbal and written communication skills, with the ability to convey technical concepts to both technical and non-technical stakeholders.

 

1. Managing of Security operation solutions and ensuring availability to support business operation.
2. Resolve and escalate related issues and outages promptly. Including liaising with vendors or other IT Personnel for problem resolution.
3. Analyzing cyber threat from network traffic, security logs and relevant security data.
4. Assessing vulnerabilities, risks and cyber security threats and their impact to applications.
5. Perform security incident response and root cause analysis.
6. Evaluating and recommending cyber security technologies and solutions.
7. Involvement in implementing and managing IT security related projects.

1. MAIN TASKS AND RESPONSBILITIES
   1. Managing of Security operation solutions and ensuring availability to support business operation.
   2. Resolve and escalate related issues and outages promptly. Including liaising with vendors or other IT Personnel for problem resolution.
   3. Analyzing cyber threat from network traffic, security logs and relevant security data.
   4. Assessing vulnerabilities, risks and cyber security threats and their impact to applications.
   5. Perform security incident response and root cause analysis.
   6. Evaluating and recommending cyber security technologies and solutions.
   7. Involvement in implementing and managing IT security related projects.

About the Role

As a Security Engineer with Tyro you will be working within a team to implement, deploy and support security tooling and controls across a number of Tyro Technology and Business units. You'll have the opportunity to get involved in delivering a number of different projects across DLP, UAM, WAF and PAM within a fast growing and constantly evolving payments and banking environment.

What you'll do

Improve, maintain and build enterprise class security services for our customer and corporate environments in the cloud and on premise
Operate centralised security controls that are highly efficient through automation and provide self service to other technology teams (e.g. such as vulnerability management, user access automation, and identify provisioning)
Improving and maintaining tooling to measure how well security controls are implemented by distributed teams
Provide advanced technical support for issues related to the systems you help build
Be a key contributor in team planning and prioritisation sessions

What you'll need
Strong base in information security and system administration
3+ years experience in a systems support role with at least 1 year related to cloud and security implementations
Coding/scripting skills in a high level language
Knowledge of infrastructure technologies, such as Linux, Cloud Services and Operational Tooling

The Sales Engineer (SE) builds and maintains influential relationships with Vendors, Partners and Customers, creating demand and opportunities for our products, solutions, and services, specifically focused on Enterprise security. The SE adopts a consultative approach to the sales process by understanding a customer’s business needs to position a technical solution with authority, appropriately tailoring the messaging to their audience. 

On-going duties include developing a sales and channel development strategy, prospecting, pipeline reporting, initiating contact with potential and prospective channel partners, consulting regularly with existing clients, understanding their strategic business objectives, assessing their strategies and solutions in relation to those objectives, developing proposals to meet those objectives and selling your recommendations at the appropriate level to the clients' organisation, utilizing Positive Collaboration with Internal Stakeholders to proactively identify and take ownership of delivering cross-sell opportunities incorporating company’s portfolio and promote both our Security and Visibility messaging as well as Refence Architectures.

Essential duties and responsibilities

• Sales Engineering
• Drive supplier and customer engineering relationships at multiple levels to grow sales and market share.
• Keep up to date on Industry trends to identify and position cross-sell and account expansion opportunities.
• Increase revenue and market share through execution of key strategic priorities for allocated Vendor Blueprints including:
  • Pre-Sales Consulting
  • Channel Enablement
  • Solution Analysis Design (BOM) and Implementation
  • Proactive Demo/POC
  • Professional Services
• Compliance reporting for allocated Vendor Blueprint and Partner Requirements
• Develop and promote Commercially Viable Reference Architectures supporting company’s Security and Visibility message, incorporating one or more of company’s vendor’s solution sets.
• Attend and actively participate in strategic branch meetings and QBR.
• Develop and drive strategic technical plans by supplier line or customer solutions.
• Organize engineering customer events.
• Take ownership of development plan including:
  • Completing and maintaining our compliance training, key vendor certification
  • Attending training programs in-line with the company’s and vendors requirements
  • Extend continued internal education for yourself and internal staff

General

• Comply with product/branding guidelines of all vendors
• Ensure all relevant marketing related information is disseminated to staff and customers as appropriate.
• Additional duties as requested by the Business Manager from time to time

Job Complexity

• Core to this activity is exhibiting behaviours that support the success of goals as well as ensuring company’s obligations to the Channel are met in a professional and timely manner.
• Proactive, positive, collaborative and outcomes driven
• Typically resolves complex problems or problems where precedent may not exist
• Works independently
• Solves complex problems; takes a new perspective using existing solutions
• Acts as a guidance resource for colleagues with less experience
• Represents the level at which career may stabilize for many years
• Uses best practices and knowledge of internal or external business issues to improve products/services or processes

KPIs and Measurables

• Achievement of revenue and quote margin targets
• Achievement of maximum vendor market share
• Ability to design, document and actively manage rolling activity plan aligned to the vendor strategy (Blueprint) over 3 – 6 months.
• Use Salesforce for sales pipeline and activity tracking
• Proficiently deliver vendor pitch to prospective new partners, or developing partners
• Regular and consistent engagement with vendor and channel partners
• Leverage marketing support to provide channel partners demand generation capabilities, leveraging vendor funds to outsource where required.
• Ability to communicate effectively and work in a team environment
• Customer and vendor service focus and feedback

At SafetyCulture, we help businesses get better everyday. As the operational heartbeat of working teams, our technology gives workers a voice and leaders the visibility to make smart decisions. We’re constantly evolving our platform, expanding into sensors/IoT, Scalable and Event-Driven Architecture to name a few, but we believe there’s more to be done.

Recently valued at AU$2.7Bn, we’re investing our resources into creating and shaping a better workplace for all. We are growing fast and looking for talented, self-motivated people that value collaboration, growth and learning to join our team.

As we continue to scale, we have an exciting new opportunity for a Security Engineer II to join our Foundational Engineering team. The ideal person should bring experience around Cloud and IT Security, with a track record of working within engineering teams to ensure secure code, functions, and architecture are delivered.

We use a modern technology stack including;

Infrastructure: AWS, Kafka, Kubernetes, Terraform
Back end: Golang and Node.js
Front end: React.js

How you will spend your time:
- Identify and correct security misconfigurations in AWS accounts
- Perform log analysis to detect and respond to security events
- Participate in security assessments of networks, systems and applications delivered internally and externally
- Manage and, where possible, automate security controls and reporting (vulnerability management, system hardening, logging and monitoring, system integrity, honeypots, source code reviews)
- Review and recommend technical and non-technical improvements to system and network security controls
- Provide support to business stakeholders with security-related inquiries
- Create and update documentation

What you'll need:
- AWS-based infrastructure and services knowledge
- Good understanding of CI/CD pipelines and ways of implementing security inspections
- Familiarity with security assurance, security analysis, vulnerability management, system hardening programs
- Passion for security and automation
- Be able to work autonomously as part of a global team

Some experience that's nice to have:
- Kubernetes knowledge
- System administration and / or software engineering background (Node.js / GO or Python)
- Experience working with the CrowdStrike suite of tools
- Experience securing corporate I.T systems such as Okta, GSuite, Kandji & InTune
- Experience with configuration management tools like Ansible and Terraform

More than a job!
- Equity with high growth potential, and a competitive salary
- Flexible working arrangements, we encourage you to create the best work blend while working from your home and the local SafetyCulture office;
- Access to professional and personal training and development opportunities;
- Hackathons, Workshops, Lunch & Learns;
- We encourage involvement in the community, open source work, attending talks and events, and experimenting with new technologies.

Office benefits:
- In-house Culinary Crew serving up daily breakfast, lunch and snacks;
- Barista coffee machine, craft beer on tap, boutique wines and a range of non-alcoholic beverages;
- Wellbeing initiatives such as subsidised fitness programs, EAP services and generous parental leave policy;
- Quarterly celebrations and team events, including the annual Shiplt global offsite;
- On-site gym,Table tennis, board games, books library, and pet-friendly offices.

We’re committed to building inclusive teams and cultivating a sense of belonging so our people can bring their whole authentic selves to work each day. We seek to make reasonable adjustments throughout our recruitment process to create an even playing field for all candidates. Thanks to the tireless efforts of the entire SafetyCulture team we’ve built an incredible culture which has seen us recognised as a Best Place to Work in Australia, the US and the UK.

Even if you don't meet every requirement listed in the ad, please consider applying for this role. We prioritise inclusion and value individuals with potential over a checklist of qualifications. Don't rule yourself out, hit that apply button if this job resonates with you You can find out more about life at SafetyCulture via Youtube, Twitter, Instagram and LinkedIn.

To all recruitment agencies, we do not accept resumes or partnership opportunities. Please do not forward resumes to SafetyCulture or any of our employees. We are not responsible for any fees associated with unsolicited resumes.