Total 173 Legal / Public / Security job vacancies

Cyber Security Operations Engineer

What You’ll Do:

Person to perform/maintain the following:

• Network security management (e.g. intrusion prevention system, virtual private network)
• Web security management (e.g. URL filtering, web application firewall)
• End point security management (e.g. anti-malware, device control, application control, data loss prevention or network access control)
• Messaging security management (e.g. anti-malware, anti-spam, content filtering)
• Security & vulnerability management (security information and event management, security device systems management, device and application vulnerability management)
• Automation of management tasks

What You’ll Need:

• Degree in Computer-related disciplines
• At least 5 years of experience that covers management of enterprise security solution
• Experience in implementation and integration of Cyber Security Platform
• Possess knowledge across various information security technologies/areas in a large enterprise including firewalls, intrusion detection, encryption, Linux O/S, Windows O/S, databases, antivirus, patch management, vulnerability scanning, backup, logging and monitoring, remote access, application development, network security, application security, and change management
• Information Security or IT Controls Certification such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM) would be an added advantage

If the above role is a good fit for you, or if you know anyone whomight be good for the role, please get in touch with an updated CV and I'll bein touch!

EA Reg Number: R1660446

EA License Number: 07C3924 

Company Registration No: 200609504D

YOUR NEW JOB

As a Security Operations Engineer, you will support Security Operations Centre (SOC) activities, including security monitoring, incident investigation, threat hunting, and incident response.
You will act as a Level 2 security analyst, investigating alerts, identifying threats, supporting remediation activities, and improving overall security operations.
This is a 12-month renewable contract role. Work will be onsite at One-North, Mon – Fri office hours.

WHAT YOU’LL BE DOING

• Investigate and triage security alerts from SIEM, EDR/XDR, email, cloud, identity, and network security platforms
• Analyse security events to determine root cause, scope, and business impact
• Investigate phishing, malware, account compromise, and unauthorized access incidents
• Perform threat hunting activities using threat intelligence and MITRE ATT&CK methodologies
• Support containment, remediation, and recovery activities during security incidents
• Improve SOC processes, playbooks, detection rules, and monitoring capabilities
• Assist with onboarding and integration of new security technologies
• Support security reporting and documentation activities
• Participate in after-hours support when required

WHAT IS NEEDED FROM YOU

• At least 3 years of SOC, cyber security operations, or incident response experience
• Hands-on experience with SIEM, EDR/XDR, cloud security, or identity security platforms
• Strong understanding of cyber attack techniques, threat analysis, and MITRE ATT&CK
• Experience investigating and responding to security incidents independently
• Good analytical, troubleshooting, and problem-solving skill• Strong communication and documentation skills

WHAT WILL MAKE YOU STAND OUT

• Experience working in government, statutory board, or public sector environments
• Experience with threat hunting and advanced incident investigations
• Exposure to security automation, detection engineering, or SOC optimisation projects
• Relevant certifications such as Security+, CySA+, GCIH, GCIA, CEH, SC-200, or equivalent

• Experience developing and improving SOC processes and technologies.
• Proficient in SIEM tools such as Splunk, Microsoft Sentinel, Securonix, or equivalent.
• Expert-level knowledge of security monitoring tools, threat analysis, and digital forensics.
• Advanced understanding of cyber threat intelligence and TTPs (tactics, techniques, and procedures).
• Experience with security technologies such as firewalls, intrusion detection/prevention systems, and data encryption.
• Knowledge of security technologies such as Antivirus/Endpoint Detection and Response (EDR), Privilege Access Management (PAM), and Web Application Firewall (WAF).
• Ability to lead and coordinate cross-functional response teams under pressure.
• Strong written and verbal communication skills with the ability to explain complex technical concepts to non-technical stakeholders.

About the Role

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to manage. They will lead a team to manage Security Operations (SecOps), encompassing threat detection and response, incident management, vulnerability management, security monitoring, and continuous improvement of defensive capabilities.

WHAT YOU’LL BE DOING:

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.

• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premises and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.

• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.

• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit. 

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.

• Deploy new cyber security initiatives and roll out the platform together with SOC Team.

• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.

• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

People Development

• Supervise 8 team members.

• Drive a continues Learning and Development program for the team members through inhouse and external training programs.

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).

• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.

• Preferable to have security infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security. 

• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.

• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.

• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.

• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.

• Good interpersonal and communication skill.

• Strong leadership with a high integrity, proactive mindset, and strong ownership.

• Working experiences in insurance / banking / IT industry is preferred.

• Infrastructure Security: Windows, Linux, AS400.

• Security Advisory and Assessment, and incident management.

Roles & Responsibilities:

• Manage security solution operations, company security tasks (security inspections, campaigns, etc.)
• Security inspection tasks for SDSAP
• Security inspections and security-related tasks are carried out according to the security inspection schedule designated by the team.
• Providing technical support if customers encounter issues while operating security solutions(DRM, In-house solution).
• At the data center, asset inventory and procurement process tasks for SDSAP and SEC must be performed.
• Security asset house-keeping
• Support electronic solution operations, require regular meetings with customers.

Requirements:

• Diploma or Degree in Information Security or Information System or equivalent
• At least 1 year of experience in programming (coding & algorithm)
• Experienced in Windows and Linux Servers
• Good knowledge about IT system
• Good interpersonal skills
• Passion in IT security and technology
• Team player with high initiative, self-motivation and results-oriented mind-set
• Experienced in complex secured network design, VPN and WLAN implementation.
• Good communication, documentation, organizational and interpersonal skills
• Experience with networking, system administration and infrastructure architecture
• An employee with a high level of passion for work and a desire to work together for a long time.
• Work location: 61 TAI SENG AVENUE PRINT MEDIA HUB @ PAYA LEBAR IPARK

This position is responsible for :

·        Analyzes and defines security strategies basedon local context and identified threats

·        Implements security policies and coordinatessecurity actions at the country, LBU, and project levels

·        Ensures optimization of security CAPEX and OPEXby prescribing reliable, cost-effective solutions strictly adapted to needs

·        Advises and assists Country Chairs, EntityDirectors, and site managers to help them define the appropriate securityposture level

·        Recommends an OTOC security organization andvalidates internal or external recruitment of CSOs/security team members

·        Supports each CSO in their area to ensure theirskill development, completion of security training, and benefits from expertiseand experience to adopt the appropriate security posture level for evolvingthreats and security situations, and to handle emergency situations

·        Manages the CSO network in their area

·        Ensures Country Chairs and Entity Directors haveappropriate security plans, with the appropriate level of protection forpeople, facilities, and informational assets; also verifies proper POBmaintenance and implementation of measures regarding VPSHR compliance

·        Conducts security reviews in Company entities tocontrol effective protection of people and sites

·        Prescribes corrective or improvement measures tobe implemented and assists entities in action plan implementation

·        Evaluates and makes recommendations on theselection of security providers for subsidiaries

·        Identifies and updates security performanceindicators in their area

Additional information:

·        Anticipates threats, provides expertise, advice,support, and assistance in the security approach

·        Responsible for compliance with Company securityrequirements in their geographical area

·        Ensures compliance with the OTOC principle (OneTotalEnergies One Country) by guaranteeing that all Company entities present ina given country adhere to the same security standards

·        Co-manages subsidiary security budgets andcosts, evaluated by area of responsibility at several hundred million euros

·        Sovereign dimension: liaison with diplomaticrepresentations in their area: Ambassadors and Defense Attachés

·        Inter-company dimension: maintains aprofessional network with counterparts from major French companies and keyindustrial sector players in the area

Requirement
Qualification level required for the position : At least Bachelor or Master’s or equivalent level

Technical skills required for the position : - Experience in managing large projects - Experience in writing organizational and methodological documents

Behavioral competencies required for the position : - Rigorousness, strong responsiveness, and organizational skills are required -

Listening, perspective, and ability to convince are necessary

Specific knowledge required for the position : Good knowledge of the company's business and professions to be able to cross security vision and business challenges

Level of experience required for the position : - Minimum 15 years of executive experience in the security field with proven crisis

management skills - Successful managerial experience in operational situations or transverse management

Information Security Operations (Security Response & Incident Management)

Job Overview

• Operate Computer Security Incident Response Team (CSIRT)
• Manage Attack Surface Management (ASM); conduct security vulnerability assessments and remediation support
• Plan and execute security training and exercises; manage IT assets and patches; collect and leverage threat intelligence
• Operate cloud service application approval system; provide technical support and information dissemination to domestic and overseas group companies
• Analyze, investigate, and recover from security incidents, and develop recurrence prevention measures.

Required Skills & Experience

• Japanese (business) and English (business) to communicate with HQ in Japan
• 3+ years of experience in network, server, and cloud service (AWS, Azure, etc.) infrastructure design, deployment, and operations
• Experience with security incident response and CSIRT operations
• Hands-on experience with IT asset management and patch management
• Experience collecting and leveraging threat intelligence
• Experience with security vulnerability assessment and handling (discovery, validation, remediation recommendations)
• Experience planning and conducting security training and exercises
• Experience coordinating across departments and driving projects in large organizations
• Information security certifications (CISSP, CISM, Registered Information Security Specialist, CompTIA Security+, etc.)

Preferred Skills & Experience

• Experience with security operations in multinational/global organizations
• Cloud and endpoint management skills (SaaS/IaaS log operations, etc.)
• Work experience in the IT industry (SI vendors, technology vendors, etc.)
• Experience developing internal policies and guidelines
• Desired Qualities

Soft Skills

• Ability to explain and persuade based on the audience's perspective and knowledge level
• Proactive attitude and self-starter mindset
• Strong collaboration skills with ability to value teamwork and project harmony, and build balanced relationships

Job Description

Corporate Intelligence & Security Management (CISM) is looking for committed and professional Senior Security Officers to support operations within a Corporate Security Operations Centre (SOC) environment.

The successful candidate will play a key role in maintaining site security through access control, screening operations, incident management and customer service excellence.

Key Responsibilities

• Perform access control duties for staff, visitors and contractors.

• Manage visitor registration and contractor access processes.

• Support Security Operations Centre (SOC) activities and monitoring functions.

• Carry out security escorts when required.

• Respond appropriately to incidents, emergencies and security concerns.

• Prepare accurate incident reports and daily occurrence documentation.

• Enforce site security policies, procedures and safety requirements.

• Provide professional customer service to clients, visitors and stakeholders.

• Support operational requirements as assigned by supervisors and management.

Requirements

• Possess a valid PLRD Security Officer License.

• Hold a valid CSSPB certification (Security Screening of Person & Bag Check).

• Relevant security experience will be advantageous.

• Good communication and interpersonal skills.

• Good computer literacy and report writing skills.

• Able to work independently and as part of a team.

• Positive work attitude with a strong sense of responsibility.

• Professional appearance and conduct.

• Able to perform rotating 12-hour shifts, including weekends and public holidays when rostered.
  

  Why Join Us

  • Above PWM salary package.
  • Performance bonus of up to 1.5 months' basic salary.
  • 5-day work week.
  • Corporate Security Operations Centre environment.
  • Structured training and development opportunities.
  • Career progression opportunities.
  • Professional and supportive management team.
  • Stable employment with a growing security organisation.

Security Operations Engineer

Location: Singapore, CBD
Employment Type: 12 months (renewable Contract)

Key Responsibilities:

• Administer and support security platforms, with a strong focus on CyberArk and Tenable.
• Perform day-to-day BAU activities including troubleshooting, patching, monitoring, and incident resolution.
• Manage privileged access management (PAM) solutions and ensure platform stability and security.
• Support security operations processes, ticket management, and vendor engagements.

Requirements:

• Hands-on experience as a CyberArk Administrator (not just an end user).
• Strong experience supporting CyberArk environments, including troubleshooting and maintenance.
• Experience with vulnerability management tools such as Tenable.
• CyberArk CDE (Certified Delivery Engineer) certification is mandatory.
• Good understanding of security operations, privileged access management, and cybersecurity best practices.

Preferred Skills:

• CyberArk plugin development and automation experience.
• Policy review and optimization expertise.
• Experience in CyberArk migration or upgrade projects.
• Scripting and process automation skills.

Job Description

Corporate Intelligence & Security Management (CISM) is seeking an experienced and motivated Security Supervisor to join our Security Operations Centre (SOC) team.

The Security Supervisor will be responsible for overseeing daily security operations, ensuring compliance with site security procedures, and leading officers to maintain a safe and secure environment for staff, visitors and contractors.

Key Responsibilities

• Supervise and manage day-to-day security operations within the Corporate SOC environment.

• Lead and guide security personnel during assigned shifts.

• Ensure proper implementation of access control procedures and security protocols.

• Oversee staff, visitor and contractor management processes.

• Coordinate security escorts and support operational requirements.

• Monitor incidents and ensure timely reporting, escalation and resolution.

• Conduct shift briefings, handovers and operational updates.

• Maintain accurate records, reports and documentation.

• Liaise professionally with client representatives, stakeholders and service providers.

• Ensure officers maintain high standards of professionalism, discipline and customer service.

• Support operational readiness and compliance with company and client requirements.

Requirements

• Possess a valid PLRD Security Officer Licence.

• Hold a valid CSSPB certification (Security Screening of Person & Bag Check).

• Minimum 2 years of supervisory experience in the security industry preferred.

• Good leadership, communication and interpersonal skills.

• Proficient in report writing and incident documentation.

• Able to work independently and make sound decisions during incidents.

• Positive attitude with a strong sense of responsibility and professionalism.

• Comfortable working in a corporate environment and interacting with stakeholders.

• Able to perform rotating 12-hour shifts, including weekends and public holidays when rostered.

• Perform security assessments, identify risks and gaps, and recommend improvement plans.
• Support the design, evaluation, and deployment of cybersecurity solutions including EDR, SASE, Zero Trust, and endpoint/network security controls.
• Participate in proof-of-concept activities, vendor evaluations, technical workshops, and customer engagements.
• Prepare assessment reports, technical documentation, project deliverables, and presentations.
• Collaborate with customers, vendors, and internal teams to ensure successful project delivery.
• Keep up to date with cybersecurity trends, threats, and industry best practices.

Qualifications:

• Degree in Information Technology, Cybersecurity, Computer Science, Computer Engineering, or a related discipline.
• At least 5 years of experience in cybersecurity, security engineering, security assessments, solution implementation, consulting, or related areas.
• Hands-on experience in security assessments, gap analysis, risk identification, and remediation planning.
• Experience engaging customers or stakeholders in advisory, consulting, or project delivery environments.
• Practical knowledge in one or more areas: EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
• Ability to assess cybersecurity risks and provide practical, business-focused recommendations.
• Strong communication skills to present technical concepts effectively to both technical and non-technical audiences.
• Experience with Cato Cloud or comparable SASE platforms.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, ISO/IEC 27001, or similar standards.
• Understanding of firewalls, VPNs, routing, Active Directory, Microsoft 365 security, and cloud connectivity.
• Relevant certifications such as CISSP, CISM, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, Azure Security, or equivalent.

To apply, please visit www.gmprecruit.com and search for Job Reference: 3W36XV68

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Bautista Gia Grace De Guzman | Registration No: R23111973

Our client, a well-known company is looking for candidates for the position of Senior Security Engineer.

Responsibilities

• Conduct security assessments, identify risks and gaps, and propose practical, actionable improvement and remediation plans.
• Support the design, evaluation, and implementation of cybersecurity solutions such as EDR, SASE, Zero Trust, and endpoint and network security controls.
• Engage in proof-of-concept activities, vendor evaluations, technical workshops, and customer discussions.
• Prepare assessment reports, technical documentation, project deliverables, and presentation materials.
• Coordinate with customers, internal teams, and vendors to deliver cybersecurity projects on time and within scope.
• Stay updated on emerging cybersecurity technologies, threats, and best practices to continuously improve service quality.

Key Requirements and Experience

• Degree in Information Technology, Cybersecurity, Computer Engineering, Computer Science, or a related field.
• Minimum 5 years of experience in cybersecurity, security engineering, security assessment, solution implementation, or cybersecurity consulting.
• Hands-on experience in security assessment, gap analysis, risk identification, and remediation planning.
• Experience working with customers or stakeholders in consulting, project delivery, or advisory roles.

Required Technical Skills

• Knowledge and practical experience in one or more areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
• Ability to understand cybersecurity risks and translate technical findings into practical recommendations.
• Ability to explain cybersecurity risks, solutions, and priorities clearly to both technical and non-technical audiences.

Preferred Qualifications

• Experience with Cato Cloud or similar SASE platforms.
• Knowledge of security frameworks such as NIST Cybersecurity Framework, CIS Controls, or ISO/IEC 27001.
• Familiarity with network and infrastructure fundamentals such as firewalls, VPN, routing, Active Directory, Microsoft 365 security, or cloud connectivity.
• Relevant cybersecurity certifications such as CISSP, CISM, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, Azure Security, or vendor certifications.

EA License No.: 01C4394 (PERSOL SINGAPORE PTE LTD)

Registration No.: R23112488 (Julian Nerchan)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Responsibilities

• Conduct security assessments, identify risks and gaps, and propose practical improvement plans.
• Support design, evaluation, and implementation of cybersecurity solutions such as EDR, SASE, Zero Trust, and endpoint/network security controls.
• Support proof-of-concept activities, vendor evaluations, technical workshops, and customer discussions.
• Prepare assessment reports, technical documentation, project deliverables, and presentation materials.
• Coordinate with customers, internal teams, and vendors to deliver cybersecurity projects on time and within scope.
• Stay updated on cybersecurity technologies, threats, and best practices to improve service quality.

Requirements

• Minimum 5 years of experience in cybersecurity, security engineering, security assessment, solution implementation, or cybersecurity consulting.
• Experience in security assessment, gap analysis, risk identification, and remediation planning.
• Experience working with customers or stakeholders in consulting, project delivery, or advisory roles.
• ⁠Knowledge and practical experience in one or more areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance
• Ability to understand cybersecurity risks and translate technical findings into practical recommendations.
• Ability to explain cybersecurity risks, solutions, and priorities clearly to technical and non-technical audiences.

GMP Recruitment Services (S) Pte Ltd | EA Licence: 09C3051 | VO UYEN AI LINH | Registration No: R22109232 

• Administer, configure, and maintain network security technologies, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control solutions.
• Monitor network security events and investigate security alerts, incidents, and potential threats.
• Implement and maintain firewall policies, network segmentation, access controls, and secure connectivity solutions.
• Troubleshoot and resolve network security issues while ensuring minimal disruption to business operations.
• Conduct security reviews, vulnerability assessments, and configuration audits of network infrastructure.
• Support the design and implementation of secure network architectures and infrastructure solutions.
• Create and manage security architecture and design artefacts that embed security principles into enterprise systems and ensure alignment with organizational architecture standards and business objectives.
• Develop and maintain network security documentation, diagrams, standards, procedures, and operational guides.
• Collaborate with infrastructure, application, and enterprise architecture teams to ensure security requirements are incorporated into projects and operational activities.
• Support security incident response, root cause analysis, and remediation activities.
• Assist with compliance, audit, and risk management initiatives by providing technical expertise and evidence of security controls.
• Stay current with emerging cybersecurity threats, technologies, and industry best practices.

Required Skills and Experience

• Strong understanding of networking concepts, including TCP/IP, routing, switching, DNS, DHCP, VPNs, and network segmentation.
• Hands-on experience managing enterprise firewalls and security technologies.
• Knowledge of network security principles, security monitoring, threat detection, and incident response.
• Experience with vulnerability management and security hardening practices.
• Ability to interpret security requirements and implement appropriate technical controls.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent documentation and communication skills.

Qualifications

• Bachelor’s degree in information technology, Computer Science, or a related field.
• Minimum 7 Years of experience in network security, cybersecurity, or ICT infrastructure security roles.
• Should have experience in Azure Cloud environment  

Required Certifications

• CCNA or CCNP
• PCNSA
• AWS/Azure Certified

Responsibilities

• Install, configure, maintain, and troubleshoot electronic security systems including CCTV, Access Control Systems, Intrusion Detection Systems, Intercom Systems, and Visitor Management Systems.
• Support system integration, testing, commissioning, and handover of security solutions at customer sites.
• Design, configure, and maintain network infrastructure supporting security systems, including switches, routers, firewalls, VLANs, and wireless networks.
• Monitor security systems and network infrastructure to ensure optimal performance and system uptime.
• Perform preventive maintenance, system upgrades, firmware updates, and corrective maintenance for installed systems.
• Diagnose and resolve technical faults, alarms, and system failures in a timely manner.
• Support centralized security management platforms and monitoring systems.
• Ensure cybersecurity protection of security devices and networks through proper configuration and best practices.
• Coordinate with clients, vendors, and subcontractors for project execution, maintenance, and technical support.
• Conduct site surveys and support project implementation activities.
• Maintain accurate documentation including system configurations, network diagrams, maintenance reports, and service records.
• Provide technical support and training to customers and internal teams.
• Ensure compliance with company standards, safety requirements, and industry best practices.

Requirements

• Diploma or Degree in Electronics, Electrical Engineering, Information Technology, Computer Science, Telecommunications, or related field.
• Minimum 3–5 years of experience in electronic security systems, CCTV, Access Control, or related ELV/security industry.
• Good understanding of IP networking concepts such as TCP/IP, VLANs, routing, switching, and wireless networks.
• Hands-on experience with CCTV systems, Access Control Systems, Intrusion Detection Systems, and integrated security solutions.
• Familiarity with leading security platforms such as Hikvision, Axis, Milestone, Genetec, Bosch, Honeywell, or similar systems.
• Basic knowledge of network security principles, firewalls, VPNs, and cybersecurity best practices.
• Experience in system installation, configuration, testing, and commissioning.
• Ability to troubleshoot hardware, software, and network-related issues.
• Strong communication skills and ability to work with customers and project teams.
• Ability to work independently and handle site-based work and multiple projects.
• Willingness to work after office hours or attend emergency maintenance when required.
• Certifications such as CCNA, Security+, or vendor certifications in CCTV/access control systems will be an added advantage.

IT Security Engineer (Governance, Incident Response& Vulnerability Management)

Mon to Fri Office hours/ Outram Work Location
Cat2B security clearance for this 1 year project renewable

Salary Package:
• Up to S$5,000 Basic
• 1 Month Performance Bonus
• S$50 Monthly Mobile Phone Claim
• Additional S$100 Staff Amenities Claim given for Night Deployment or Weekend Patching Activities

Join a growing cybersecurity team responsible for protecting critical enterprise IT systems, applications, and infrastructure. We are seeking a hands-on IT Security Officer who enjoys security operations, incident response, vulnerability management, and compliance activities. You will be under Agency payroll for this 1 Yr project renewable assignment.

Key Responsibilities

Security Governance
• Develop, review and maintain information security policies, standards and procedures
• Support security risk assessments and risk register management
• Ensure compliance with security frameworks and regulatory requirements

Threat Detection & Incident Response
• Monitor and investigate security incidents using SIEM and EDR platforms
• Perform incident triage, root cause analysis and risk assessment
• Coordinate incident escalation and remediation activities
• Maintain incident response plans and playbooks

Vulnerability Management
• Perform vulnerability assessments and coordinate remediation activities
• Work closely with infrastructure, application and system owners to address security findings
• Prioritize vulnerabilities based on risk and business impact
• Track remediation progress and reporting

Compliance & Auditing
• Support internal and external security audits
• Prepare security documentation and evidence collection
• Assist in compliance reporting and governance reviews

Good to Have Exposure
• Cloud Security (AWS, Azure, GCP)
• IAM, SSO, MFA and PAM solutions
• Data Loss Prevention (DLP)
• Security Awareness Training
• Third-Party Risk Management
• Application Security and Secure SDLC
• OT / ICS / SCADA Security

Requirements
• Minimum 3 years of IT Security or Cybersecurity experience
• Hands-on experience in Security Operations, Incident Response or Vulnerability Management
• Experience using SIEM, EDR and Vulnerability Scanning tools
• Familiarity with security frameworks such as ISO27001, NIST or CIS Controls
• Strong stakeholder management and communication skills
• Ability to work independently and coordinate with multiple technical teams

Preferred Certifications
• Security+
• CEH
• GSEC
• CySA+
• SSCP
• CISSP (Advantageous)
• ISO27001 Lead Implementer/Auditor (Advantageous)

If you enjoy investigating security incidents, managing vulnerabilities and strengthening enterprise security posture, we would like to hear from you.

EA LicenseNo: 09C4235 I EA Reg: R1103307 (Hong Mei Lin)

Key Responsibilities

1. Administer, configure, and maintain network security technologies, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control solutions.
2. Monitor network security events and investigate security alerts, incidents, and potential threats.
3. Implement and maintain firewall policies, network segmentation, access controls, and secure connectivity solutions.
4. Troubleshoot and resolve network security issues while ensuring minimal disruption to business operations.
5. Conduct security reviews, vulnerability assessments, and configuration audits of network infrastructure.
6. Support the design and implementation of secure network architectures and infrastructure solutions.
7. Create and manage security architecture and design artefacts that embed security principles into enterprise systems and ensure alignment with organizational architecture standards and business objectives.
8. Develop and maintain network security documentation, diagrams, standards, procedures, and operational guides.
9. Collaborate with infrastructure, application, and enterprise architecture teams to ensure security requirements are incorporated into projects and operational activities.
10. Support security incident response, root cause analysis, and remediation activities.
11. Assist with compliance, audit, and risk management initiatives by providing technical expertise and evidence of security controls.
12. Stay current with emerging cybersecurity threats, technologies, and industry best practices.

Required Skills and Experience

1. Strong understanding of networking concepts, including TCP/IP, routing, switching, DNS, DHCP, VPNs, and network segmentation.
2. Hands-on experience managing enterprise firewalls and security technologies.
3. Knowledge of network security principles, security monitoring, threat detection, and incident response.
4. Experience with vulnerability management and security hardening practices.
5. Ability to interpret security requirements and implement appropriate technical controls.
6. Strong analytical, troubleshooting, and problem-solving skills.
7. Excellent documentation and communication skills.

Qualifications

1. Bachelor’s degree in information technology, Computer Science, or a related field.
2. Minimum 7 Years of experience in network security, cybersecurity, or ICT infrastructure security roles.
3. Should have experience in Azure Cloud environment  

Required Certifications

1. CCNA or CCNP
2. PCNSA
3. AWS/Azure Certified

Roles & Responsibilities

1. The role will focus on project delivery and implementation for security related products across infrastructure and systems.
2. Will also perform configuration, testing and maintenance support for the security devices.
3. Experience in Information Security Risk Management, Vulnerability Management and Assessments.
4. Serve as the Technical Support expert and capable of handling escalations, incidents, outages and infrastructure challenges.
5. Operate, manage and support the IT infrastructure and services implemented to meet prescribed service levels
6. Ensure that project implementation and operations are aligned to client technology standards and policies

Qualifications:

1. Diploma / Degree in Computer Science, Computer or Electronics Engineering or Information Technology or related disciplines
2. Minimum 2 years of relevant IT experience in implementing and managing complex IT infrastructure systems and services for commercial and Singapore government agencies
3. CISSP/CCSP/CISM/CCSK certification or its equivalent is preferred
4. Possess good technical skills with working knowledge and experience on cybersecurity technologies and tools - PAM (CyberArk), DAM (IBM Guardium, Imperva SecureSphere DAM), SIEM (Splunk, IBM Qradar, Endpoint (Trend Micro, Carbon Black) and VA scanner
5. Familiar with IM8 policies
6. Excellent problem-solving and analytical skills

Summary

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other’s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It’s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you’ll do more than join something — you’ll add something. There is a lot that goes into building the most secure yet user-friendly devices in the world. We are a unique Software Development group with a charter to secure our platforms, which include iOS software, iOS Devices, and Mac. We build solutions that are used by our customers, engineering teams, and manufacturing environments. We are looking for a candidate who is passionate about both software and hardware security and enjoys highly technical, hands-on role in a dynamic and fast paced environment. This role will be responsible for testing and securing the Software Development Life Cycle, world-wide hardware manufacturing ecosystem and associated global IT infrastructure. As a member of our fast-paced group, you will have the unique and rewarding opportunity to shape and improve the software that allows our products to surprise and delight billions of Apple’s customers every day. If you’re excited by the idea of making a real impact, and joining a team where we pride ourselves in being one of the most diverse and inclusive companies in the world, a career with Apple will be your dream job.

Description

Our organisation provides security server-side solution to enable various Apple product security features. As part of security team in this organisation, we are looking for someone who can drive advancements in security practices, proactively identifying security vulnerabilities, fortifying our platforms against emerging threats and enabling continuous innovation. The existing scope of the work includes the following and will be expanded with emerging new technology and new business initiatives.

Responsibilities

• Perform penetration testing and vulnerability assessments on software applications, API services, and infrastructure
• Develop and execute new test plans, methodologies, and tools for assessing hardware and software security
• Conduct static code analysis to identify and triage application security issues
• Work closely with DevOps and engineering teams to remediate application
• security vulnerabilities and implement security best practices throughout the Software Development Life Cycle (SDLC)
• Assist in application and infrastructure security reviews to identify gaps in best practices, and collaborate with stake holder teams to improve security posture 
• Perform reverse engineering and forensic analysis to identify security vulnerabilities and its exploitability
• Rotate between red and blue functions and conduct simulated attacks & defence. Develop security strategies, frameworks, tools, and processes to assess and improve security posture of the organisation.
• Collaborate with hardware design teams to integrate security best practices during product development
• Document findings, prepare comprehensive reports, and provide detailed security recommendations for remediation
• Fulfill on-call responsibilities for handling security-related incidents
• Leverage LLM technologies to create security testing and investigation tools
• Continuous learning and conduct security research to stay updated on the latest threats, vulnerabilities, attack vectors, and mitigation techniques

Minimum Qualifications

• Understanding of fundamental IT domains including Networking, Operating Systems, Security Principles, Secure Coding Practices, Cryptography and System Administration
• Knowledge of infrastructure security and physical security best practices
• Understanding of software development and secure coding best practices
• Ability to analyse complex problems, explore the greenfield and devise creative solutions
• CS/EEE with solid foundation of computer engineering
• Demonstrated up to 6 years of relevant experience

Preferred Qualifications

• Respect diversity and inclusiveness in a global organisation with ability to collaborate and communicate effectively
• Strong team player with adaptability
• Knowledge in reverse engineering and exploit development, especially with hands-on 
• experience in security penetration testing, red team exercises, Capture The Flag (CTF) competitions or security related hackathons
• Understanding of cryptographic algorithms, secure boot, secure firmware update mechanisms is a plus

Apple is an equal opportunity employer that is committed to inclusion and diversity, and thus we treat all applicants fairly and equally. Apple is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.

We are seeking a skilled Cybersecurity Engineer to safeguard our organization's digital assets through effective security measures and proactive risk management. This role emphasizes leadership in incident response, vulnerability assessments, and the establishment of comprehensive security practices.

Responsibilities:

• Lead the execution of security awareness training initiatives, including sessions, phishing simulations, and assessments to foster a culture of security compliance.

• Conduct thorough IT security risk assessments to identify vulnerabilities and drive remediation efforts across the organization.

• Oversee vulnerability assessments, penetration testing, and security audits, coordinating with internal teams and external vendors for effective tracking of findings.

• Develop and maintain security frameworks, policies, and guidelines in line with regulatory and governance requirements.

• Monitor security systems to detect unauthorized access and respond appropriately to threats.

• Direct incident response efforts, including investigation, root-cause analysis, and documentation for audit readiness.

• Research emerging security threats and propose effective mitigation strategies.

• Provide technical security advice to teams involved in infrastructure, applications, and business processes.

• Support governance and compliance assessments through meticulous maintenance of security documentation and risk metrics.

• Manage IT security audit processes, ensuring timely handling of documentation and addressing auditors' queries.

Requirements:

• A recognized degree in Cybersecurity, Computer Science, IT, or a related field.

• A minimum of 3 years of experience in an IT security role.

• Strong understanding of security frameworks (e.g. ISO/IEC 27001, NIST Cybersecurity Framework), risk management methodologies, and awareness of the top 10 OWASP vulnerabilities.

• Preferred certifications: CRISC, CISM, and/or CISSP.

• Comprehensive hands-on experience with cybersecurity technologies including EDR and NDR solutions, firewalls, vulnerability scanning tools (e.g. Nessus), email security, DLP, Microsoft Purview, IPS, web security controls, and secure network protocols.

• Excellent collaboration skills, enabling effective teamwork across technical teams and stakeholders.

Interested candidate who wish to apply for the advertised position, please click “Apply”. We regret that only shortlisted candidates will be notified 

EA License No.: 01C4394 (PERSOL Singapore Pte Ltd) 

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy. 

[Order Number: 1093349]

Responsibilities:

• Manage post-sales activities for cybersecurity or network performance monitoring products.
• Implement large-scale projects locally and regionally.
• Provide on-site implementation services, including testing, deployment, and documentation.
• Offer technical support to ensure customer satisfaction.
• Analyze and clarify customer queries through troubleshooting and researching existing knowledgebase articles/known issues.
• Be on routine standby to support 24×7 maintenance support calls.
• Communicate issues clearly and concisely.
• Demonstrate excellent written and verbal communication skills.
• Perform any other ad-hoc tasks as assigned.

Requirements:

• 1 year of relevant experience in the IT industry providing network support and administration.
• Knowledge and experience in networking, such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Willingness to work hard and eagerness to learn about new technologies.

To Apply, please kindly email your updated resume to

cv_gary@goodjobcreations.com.sg

Please kindly refer to the Privacy Policy of Good Job Creations for your reference:

https://goodjobcreations.com.sg/en/privacy-policy/

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

EA Personnel Name: Gary Ho Cheng Xuan

EA Personnel Reg. No.: R1549767

EA License No.: 07C5771

We welcome and encourage all applications to submit your application using this link: https://www.lego.com/en-sg/careers/job/legal-operations-manager-apac-china-ip-contracts-e67df73018b310011c43cc517a430000

Are you passionate about intellectual property, commercial contracting, and supporting global business operations in a complex international environment? Join the LEGO Group and play a key role in safeguarding our brand and supporting legal operations across the APAC and China region!

Core Responsibilities

• Support trademark border enforcement activities across the APAC/China region, including collaboration with customs authorities
• Assist with global trademark and copyright clearance work to help protect the LEGO Group’s intellectual property portfolio
• Draft, review, and negotiate contracts across multiple legal areas and jurisdictions, including manufacturing, procurement, sales, and marketing agreements
• Ensure legal accuracy and alignment with corporate policies, contracting standards, governance requirements, and applicable legal frameworks
• Identify material legal risks where appropriate and support effective risk mitigation
• Communicate complex legal concepts clearly and concisely to non-legal interested parties to support informed decision-making
• Contribute to the streamlining and standardization of legal processes, templates, negotiation guides, and playbooks
• Support the development and improvement of legal tech platforms and digital contracting solutions
• Collaborate closely with internal partners, external advisors, and regional teams across APAC and globally

This role is located in Singapore, and no relocation assistance is offered for this position.

Play your part in our team succeeding

The LEGO Group continues to grow, increasing the demand for scalable and high-quality legal services across regions. As part of the newly established Tax and Legal Operations team within Business Service Operations (BSO), this role supports the business by delivering legal operational excellence across intellectual property and commercial contracting activities!

Do you have what it takes?

• Hands-on experience working with intellectual property rights within the APAC/China region
• Experience supporting trademark border enforcement activities and collaborating with customs authorities
• Experience with copyright and trademark clearance work
• Strong contract drafting, review, and negotiation skills across multiple legal areas, including procurement, marketing, sales, and manufacturing agreements
• Experience working in a corporate legal department or law firm environment
• Strong communication skills with the ability to explain complex legal concepts clearly to non-legal partners
• Ability to manage multiple priorities and meet deadlines in a dynamic international environment

What would be an advantage?

• Chinese language skills for effective collaboration with partners are a plus
• Knowledge of Vietnamese and/or Chinese legislation and legal frameworks is an advantage

Applications are reviewed on an ongoing basis. However, please note we do amend or withdraw our jobs and reserve the right to do so at any time, including prior to any advertised closing date. So, if you're interested in this role we encourage you to apply as soon as possible.

What’s in it for you?

Here is what you can expect:

Family Care Leave - We offer enhanced paid leave options for those important times.

Insurances – All colleagues are covered by our life and disability insurance which provides protection and peace of mind.

Wellbeing - We want our people to feel well and thrive. We offer resources and benefits to nurture physical and mental wellbeing along with opportunities to build community and inspire creativity.

Colleague Discount – We know you'll love to build, so from day 1 you will qualify for our generous colleague discount.

Bonus - We do our best work to succeed together. When goals are reached and if eligible, you'll be rewarded through our bonus scheme.

Workplace - When you join the team you'll be assigned a primary workplace location i.e. one of our Offices, stores or factories. Our hybrid work policy means an average of 3 days per week in the office. The hiring team will discuss the policy and role eligibility with you during the recruitment process.

Children are our role models. Their curiosity, creativity and imagination inspire everything we do. We strive to create a diverse, dynamic and inclusive culture of play at the LEGO Group, where everyone feels safe, valued and they belong.

The LEGO Group is highly committed to equal employment opportunity and equal pay and seeks to encourage applicants from all backgrounds (eg. sex, gender identity or expression, race/ethnicity, national origin, sexual orientation, disability, age and religion) to apply for roles in our team.

The LEGO Group is fully committed to Children’s Rights and Child Wellbeing across the globe. Candidates offered positions with high engagement with children are required to take part in Child Safeguarding Background Screening, as a condition of the offer.

Thank you for sharing our global commitment to Children’s Rights.

Just imagine building your dream career.

Then make it real.

Join the LEGO® team today.

This position is being recruited to support regional information security operations and strengthen cybersecurity capabilities across overseas regions.

Responsibilities:

·      Support the implementation and operation of information security controls and solutions across overseas regions, covering areas such as infrastructure, network, endpoint, application, data, and identity security.

·      Participate in security projects and initiatives, including planning, coordination, deployment, and ongoing improvement activities.

·      Assist in the implementation of governance, risk, compliance, privacy, and data protection initiatives.

·      Support the development and maintenance of security standards, procedures, and technical baselines.

·      Collaborate with regional and global teams to improve overall cybersecurity capabilities.

·      Provide ad-hoc support for regional and global cybersecurity initiatives as required.

Requirements:

·      Bachelor’s degree in information security, Cyber Security, Computer Science, Information Technology, or a related field.

·      At least 2 years of working experience in information security, cybersecurity, network security, IT infrastructure, system administration, or related areas.

·      Familiar with common information security technologies and concepts, such as network security, endpoint security, IAM, data protection, vulnerability management, SOC/SIEM, or cloud security.

·      Familiar with information security and privacy frameworks, such as ISO 27001/27701, ITIL, or related standards and best practices.

·      Basic knowledge of networking and operating systems (Windows/Linux).

·      Good analytical, problem-solving, and communication skills.

·      Able to work effectively with teams across different regions and cultures.

·      Security certifications (e.g. CISSP, CISA, CCSP, Security+, CCNA/CCNP) are an advantage.

·      Candidates with a Diploma and strong relevant working experience will also be considered.

·      Excellent communication and interpersonal skills in both English and Chinese (to liaise with Mandarin speaking stakeholders).

A Security Engineer I is professional responsible for designing, implementing, and maintaining technical security measures, focusing on vulnerability management, threat detection, and infrastructure protection. They secure cloud/on-prem environments using automation (Python, Terraform) and tools like SIEM or EDR, often collaborating with DevOps to remediate security risks and strengthen security posture.

Essential Functions:

• Develop and maintain security policies, guidelines, and lead implementation in all systems, including AWS and in particular CloudTrail, EKS, AWS Inspector, EC2, EMR, S3, AWS Identity Center, RDS, Security Hub, Guard Duty.

• Architect, design, implement, support, and evaluate security-focused tools and controls to meet security and compliance needs.

•  Integrate security checks into the CI/CD pipelines to ensure continuous compliance and shift left security practice.

• Utilize tools like Terraform or Cloud Formation to build, deploy and enforce compliance and secure cloud infrastructure.

• Utilize networking (VPC, Firewall, Transit Gateways), container security and encryption.

• Builds scripts (phyton, bash) and serverless functions (AWS Lambda) for alerting on anomalies, misconfigurations and threats include automations to auto respond to such threat actors/findings.

• Oversee threat management and security incident handling, including the coordination of investigations and reporting of security incidents to management, in alignment with business.

•  Work with the team and QSA on PCI (level 1 & level 2 service provider) & SOC initiatives for the company.

• Ensure that security is factored into the evaluation, selection, and configuration of hardware, applications and software.

• Ensure audit trails, systems logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements. Provide support and guidance for legal and regulatory compliance efforts, including audit support.

• Promote information security awareness throughout the company. Stay current with security technologies and threats by monitoring vendor and industry publications and attending training.

• Secure sensitive data, manage user credentials through principal of least privileges, track user activity.

• Proactively identify security risks and implement practices that meet standards for information security, by analyzing current systems, and working with IT and the business. Partner with development and infrastructure teams to identify and remediate vulnerabilities Develop mitigation plans.

Qualifications:

• Bachelor Degree in Computer Science or related technical field

• 3 to 5 years in cybersecurity experience within a professional environment

• Certified Information Systems Security Professional certification is a plus

Knowledge, Skills and Abilities:

• Experience with IDS/IPS, file integrity, internal/ external penetration & vulnerability tests, FIM, SEIM, Log aggregation tools required

• Development and scripting experience to build automation: Lambda, Terraform, Cloud Formation, API Integrations

• Understanding of the software development life cycle and CI/CD pipelines

• Ability to execute process and standards around code quality and the deployment lifecycle including SAST and DAST

• Experience in SIEM, MDR, EDR, DLP Identity Management, WAF, WAS, Incident Response, attack surface management

• Proactively find weaknesses in applications and network through audits, penetration tests and security assessments

• Prepare reports on security metrics, attempted attacks, document findings and actions taken

• Proven record of learning new languages, skills and technologies quickly, with minimal guidance

• Takes initiative, stays focused, always accountable

• Thrives in a fast-paced environment with the ability to focus on achieving the target whole minding longer term goals along the way

• Excellent communication skills

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/ or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740