Total 5 Legal / Public / Security job vacancies

We are looking for a highly driven and self-motivated Cyber Security Consultant to join our team! As a member at our company, you will have the opportunity to work on new and exciting projects and develop your career.

JOB SUMMARY

You will participate in a variety of engagements, focusing on targets that may include network equipment, servers, applications, APIs, wireless infrastructures, mobile devices, and other information systems. Using a variety of tools and techniques that may include red teaming, you will have the opportunity to combine technical expertise with your imagination to discover innovative methods with the goal of ensuring customers remain one step ahead of its adversaries.

Hands on Responsibilities:

• Support the sales by attending security sales meeting (if necessary), effort estimation and provide security testing project timeline
• Develop the security acceptance test plan
• Provide expert technical support during the security testing activities
• Security test preparation, setting-up of testing environment, configuration and installation of the security testing tools
• Perform manual or automated security testing using commercial security testing tools
• Conduct Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests on network
• Conduct Whitebox Testing and Secure Code Review
• Conduct Network and Infrastructure Vulnerability Assessment and Penetration Testing
• Conduct Web, Mobile and Desktop Application Vulnerability Assessment and Penetration Testing
• Find and pinpoint the vulnerabilities of the assess target system / application
• Document and Report the vulnerabilities found in the system
• Provide professional recommendations / advice to mitigate and resolve the vulnerabilities
• Present the security testing results to the relevant stakeholders
• Provide weekly status reporting on the security testing activity progress

Requirements:

• Bachelor's degree, preferably in computer science or information systems, or equivalent work experience
• Minimum 3 - 5 years security experience in a security analyst, engineer, architect, consultant, or a similar role
• Minimum 3 years’ professional experience in conducting vulnerability assessment and penetration testing
• Required Certifications: Any of the followings:

1. CREST Registered Penetration Tester (CREST CRT)
2. CREST Practitioner Security Analyst
3. Offensive Security Certified Professional (OSCP)

• Knowledge in conducting security testing with the following guidelines and standards
• Experience in configering and setting of Sona Cube offline.
• High proficiency in manual and automated techniques for penetration testing (network equipment, servers, web applications, APIs, wireless, mobile, databases, and other information systems), as well as executing vulnerability assessments (injection, privilege escalation, fuzzing, buffer overflows, etc.)
• Tools – Proxies, Port Scanners, Vulnerability Scanners, Exploit Frameworks (ex: Burp, Nessus, Nmap, Metasploit)
• Experience/Knowledge in Semgreb will be advantage

Roles & Responsibilities

1. The role will focus on project delivery and implementation for security related products across infrastructure and systems.
2. Will also perform configuration, testing and maintenance support for the security devices.
3. Experience in Information Security Risk Management, Vulnerability Management and Assessments.
4. Serve as the Technical Support expert and capable of handling escalations, incidents, outages and infrastructure challenges.
5. Operate, manage and support the IT infrastructure and services implemented to meet prescribed service levels
6. Ensure that project implementation and operations are aligned to client technology standards and policies

Qualifications:

1. Diploma / Degree in Computer Science, Computer or Electronics Engineering or Information Technology or related disciplines
2. Minimum 2 years of relevant IT experience in implementing and managing complex IT infrastructure systems and services for commercial and Singapore government agencies
3. CISSP/CCSP/CISM/CCSK certification or its equivalent is preferred
4. Possess good technical skills with working knowledge and experience on cybersecurity technologies and tools - PAM (CyberArk), DAM (IBM Guardium, Imperva SecureSphere DAM), SIEM (Splunk, IBM Qradar, Endpoint (Trend Micro, Carbon Black) and VA scanner
5. Familiar with IM8 policies
6. Excellent problem-solving and analytical skills

Role Overview

We are seeking a Cyber Security Architect for cybersecurity solution projects.

The successful candidate will provide security architecture and assurance oversight throughout the project lifecycle, ensuring that security requirements are correctly interpreted, incorporated into system design, and validated through security testing and ongoing assessments.

This role will work closely with solution architects, engineering teams, project managers, and customers to ensure that solutions are secure by design and compliant with applicable security standards and regulatory requirements.

Key Responsibilities

Security Architecture & Design

• Interpret and translate security requirements from customers, regulatory authorities, and project specifications into actionable security architecture designs.
• Design and review solution security architectures covering infrastructure, network, application, and cloud environments.
• Ensure appropriate security controls are embedded into system design following secure-by-design principles.
• Provide technical guidance to project teams on security design considerations and best practices.

Security Governance & Risk Assessment

• Assess security risks arising from design decisions, technical limitations, or deviations from required security controls.
• Evaluate and document security deviations, non-compliances, and compensating controls where necessary.
• Conduct risk assessments and recommend mitigation measures to maintain an acceptable security posture.
• Support security governance activities throughout the project lifecycle.

Security Assurance & Testing

• Support security acceptance testing and security validation activities prior to system deployment.
• Work with internal or external teams performing Vulnerability Assessment and Penetration Testing (VAPT) to ensure proper coverage and remediation of identified vulnerabilities.
• Review security testing outcomes and advise on remediation and risk mitigation strategies.

Continuous Security Assessment

• Participate in periodic security reviews and assessments during the operational lifecycle of deployed solutions.
• Identify opportunities to improve the security posture of implemented systems.
• Provide recommendations for security hardening and control enhancements.

Stakeholder Engagement

• Act as the primary security subject matter expert (SME) for assigned projects.
• Liaise with customers, regulatory authorities, auditors, and internal stakeholders on security architecture and assurance matters.
• Support project teams during design reviews, security assessments, and acceptance processes.

Requirements

Experience

• Minimum 8–10 years of experience in cybersecurity, with significant experience in security architecture, security assurance, or enterprise security design.
• Proven experience designing and implementing security architectures for enterprise IT systems.
• Experience supporting projects in regulated environments, government sectors, or critical infrastructure is advantageous.
• Familiarity with security testing processes, risk assessments, and security governance frameworks.

Technical Skills

Strong understanding of:

• Security architecture principles and frameworks
• Network security architecture and segmentation
• Identity and access management (IAM)
• Encryption and key management
• Logging, monitoring, and security analytics architecture
• Secure system and application design
• Risk assessment and security compliance frameworks

Certifications

Candidates should possess recognized cybersecurity certifications, particularly insecurity architecture and enterprise security governance.

Highly Preferred

• CISSP-ISSAP – Information Systems Security Architecture Professional
• SABSA Security Architecture Certification

Key Attributes

• Strong analytical and problem-solving abilities.
• Ability to translate security requirements into practical architecture solutions.
• Strong communication skills to engage both technical and non-technical stakeholders.
• Ability to provide independent security judgement and risk-based recommendations

Work location: Jurong East

About the Role

We’re looking for a hands-on Security Engineer / Architect to help secure our systems, data, and funds across our infrastructure.

You’ll work closely with IT, Infra, R&D, Web3, Product, and business teams to design practical security controls, lead security projects end-to-end, run offensive security exercises, and support ongoing security initiatives. This is a role for someone who is comfortable going from high-level architecture to very concrete implementation details and automation.

Responsibilities

Core Security Engineering

• Design and implement security controls to protect sensitive data, financial assets, and critical systems, ensuring integrity, confidentiality, and availability.
• Evaluate, recommend, and lead the implementation of security solutions (tools, platforms, processes) in a hands-on manner.
• Own security projects from inception to rollout, working closely with IT, Infrastructure, R&D, Web3 and other business units to ensure secure and timely delivery.
• Proactively identify and assess risks and vulnerabilities, and define/enforce mitigation strategies (technical and process).

Offensive Security, Testing & Bug Bounty

• Plan and execute penetration tests and targeted assessments (applications, APIs, infrastructure) either directly or by coordinating external partners.
• Lead or support red teaming / adversarial simulations to test detection, response, and real-world resiliency of critical workflows and infrastructure.
• Work with engineering teams on purple teaming style exercises: jointly validating detections, hardening controls, and improving runbooks.
• Own the technical side of the bug bounty / responsible disclosure process:
• Triage and validate incoming reports
• Coordinate with engineering owners
• Track remediation and communicate outcomes internally (and externally where needed)

Automation & Security Engineering

• Build and maintain security automation: scripts, playbooks, and pipelines that reduce manual toil (e.g., auto-enrichment of alerts, automated checks in CI/CD, policy-as-code).
• Integrate and tune SAST/DAST/SCA, IaC scanning, image scanning, and secrets scanning into CI/CD to catch issues early with minimal noise.
• Implement detection-as-code (e.g., for SIEM / logging platforms) and continuously refine alerts based on real incidents and red team learnings.

Policy, Operations & Collaboration

• Develop, refine, and maintain security policies, standards, and procedures, with a strong focus on data, funds, and access security.
• Contribute to day-to-day security operations and monitoring, including reviewing alerts, supporting incident response, and improving detection & response capabilities.
• Collaborate with stakeholders (IT, HR, Infra, R&D, Product, Trading, and other teams) to align security initiatives with business goals and product roadmaps.

Background & Experience

• 5+ years of hands-on experience in cybersecurity, with a proven track record designing and implementing security solutions, frameworks, and policies.
• Experience with security architecture, risk assessments, and vulnerability management in complex, fast-paced environments.
• Demonstrated experience in at least one of:

----- Penetration testing / offensive security (infra, apps, APIs, or Web3), or

----- Running or working closely with red team / purple team engagements

• Experience triaging and managing security findings from scanners, pen tests, and bug bounty programs (HackerOne, Bugcrowd, self-hosted, etc.).
• Demonstrated ability to deploy and administer IAM platforms (e.g., Okta or similar) and define robust access models (RBAC, SSO, MFA).
• Competence in configuring and managing EDR and MDM solutions across a diverse device and user base.
• Hands-on experience with regulatory and compliance requirements relevant to financial institutions or crypto companies (e.g., SOC 2, ISO 27001:2022, DORA, NIST, CIS).
• Interest in Web3 / crypto (DeFi, trading platforms, digital asset custody/security, etc.) is highly advantageous
• Comfort with at least one scripting / programming language (Python, Go, TypeScript, etc.) to build automations, integrations, and internal tools.

Competencies & Personality

• Strong team player who enjoys working cross-functionally with IT, HR, Infra, R&D, Product, Trading, and business stakeholders.
• Genuinely passionate about cybersecurity, offensive and defensive — enjoys thinking like an attacker but building like an engineer.
• Experience embedding security best practices into day-to-day workflows (development, infrastructure, operations) and driving automation over manual checks.
• Ability to articulate complex security concepts in clear, practical terms to both technical and non-technical audiences.
• Values ownership, accountability, and clear communication, and is comfortable operating in a fast-changing environment with high autonomy.
  

Certifications

Must-have

• OSCP – we expect a deep, hands-on understanding of offensive techniques, not just theory.

Nice to have

• CISSP, CISM, or equivalent broad security leadership/architecture certifications.
• Relevant GIAC certs (e.g., GWAPT, GCPN, GSEC, GCLD, GCIA, GIAC Cloud / Web / Exploit tracks).
• Cloud security certifications (e.g., AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer).
• Kubernetes / container security or general K8s certifications (CKS, CKA, etc.).

Check Point’s mission is to provide industry-leading security solutions that redefine the security landscape. We achieve our mission by constantly developing innovative and cutting-edge technology solutions focused on real customer needs, while challenging ourselves to grow and excel.

If you want to be part of the fascinating and fast-growing Cyber Security industry, where your unique talent and value will be recognized, Check Point Software Technologies is where you want to be.

Join now and become a part of the success story that secures tens of thousands of organizations of all sizes around the globe.

Join Check Point’s leading sales & engineering team and take your career one step ahead.

Career Graph

Check Point is looking for a visionary, experienced, and strategic Cybersecurity Leader to head the APAC Lead Technologists team. In this expanded leadership role, you will manage a team of 12+ Lead Technologists spread across five strategic regions—Greater China (GCR), Australia & New Zealand (ANZ), ASEAN & South Korea (ASK), India, and Japan.

As the APAC Regional Leader, you will drive technical innovation, team enablement, and strategic field engagement aligned with our cybersecurity vision. You will also be a core interface to Check Point’s global product, R&D, and sales leadership teams.

Your mission will be to accelerate innovation, influence product strategy, elevate customer confidence, and empower your team to deliver world-class security outcomes across the region.

Big Splash Impact You Make in this Role

Step into a high-visibility, high-impact regional leadership role based in Singapore. You will define and drive the technical direction and operational execution of the Lead Technologist function across Asia Pacific. Working closely with senior stakeholders, your role will focus on:

• Building a scalable and impactful regional LT structure, aligning to key APAC business goals.
• Coaching and enabling the 12+ Lead Technologists to deliver technical leadership in customer engagements.
• Driving strategic programs and technology evangelism across executive CxO stakeholders.
• Leading innovation discussions on AI Security, Zero Trust, Cloud Security, Threat Intelligence, Incident Response, and more.
• Partnering with Product, R&D, and Field Sales Leadership to align regional needs with product evolution.

What you will work on

• Lead and manage the APAC Lead Technologist team across five sub-regions (GCR, ANZ, ASK, India, Japan), including hiring, onboarding, and performance development.
• Define quarterly goals and KPIs for the team in line with business priorities.
• Drive regional executive engagement through Executive Briefings, Innovation Workshops, and Roadmap Sessions.
• Influence product direction and roadmap through regional customer use cases and competitive analysis.
• Collaborate with SE Directors and Sales Leaders to drive adoption of innovation and field-led technology programs.
• Deliver strategic enablement programs for Systems Engineers, focused on emerging trends and Check Point technology pillars.
• Represent APAC in global LT forums and act as the bridge between field insights and global product planning.
• Lead by example in customer engagements, POCs, and workshops for strategic deals.
• Lead discussions about industry trends and emerging changes in the security landscape, covering areas such as the Zero Trust Security Model, Endpoint Security, Cloud Security, Blockchain Security, IoT Security, Incident Response & Forensics, Network Security, Threat Intelligence, ERM, ESAM, AI & ML in Cyber Security, Security Automation & Orchestration, and Data Privacy Regulations.
• Own quarterly reporting of LT impact on regional pipeline acceleration, win ratios, and customer adoption.
• Evangelize Check Point solutions externally at industry events, conferences, CISO forums, webinars, etc.
• Maintain technical thought leadership through authored blogs, whitepapers, or public speaking opportunities.

What you bring On Day One with Yourself

• 15+ years of professional experience in cybersecurity or enterprise IT, including at least 5 years in regional or technical leadership roles.
• Proven ability to lead and develop high-performing, cross-cultural teams across APAC or other diverse regions.
• Deep expertise in modern cybersecurity domains such as Zero Trust, Threat Intelligence, Cloud Security, Endpoint, AI/ML, and Security Automation & Orchestration.
• Strong technical credibility, with hands-on experience in architecture design, complex POCs, CLI tools, automation, and scalable distributed systems.
• Confident engaging both technical teams and executive stakeholders (CxO level), with excellent communication and presentation skills.
• Demonstrated experience in strategic influence and thought leadership, including public speaking at conferences, leading webinars, or publishing blogs/whitepapers.
• Effective in navigating matrixed environments, collaborating across product, field, and global stakeholder groups to drive regional alignment.
• Passion for innovation, mentorship, and elevating the technical bar across a regional team.
• Strong strategic thinking and analytical skills, coupled with the ability to roll up sleeves and drive tactical execution.
• Proactive and self-driven, with a proven ability to prioritize, adapt, and deliver results in fast-paced and ambiguous environments.
• Familiarity with traditional and modern collaboration channels to connect with leadership and technical teams.
• Holds relevant industry certifications in cybersecurity (e.g., CISSP, CISM, CCSP) and/or domain-specific technologies.
• Willingness and ability to travel up to 40% of the time for business needs.

What you'll get in return

• Influence Check Point’s strategic roadmap and regional execution.
• Lead a high-performing regional team with global visibility.
• Exposure to cutting-edge, award-winning cybersecurity technologies.
• Work alongside visionary leaders and exceptional talent.
• Opportunities for global career growth and development.
• Make a real-world impact helping secure enterprises across Asia Pacific.