Total 952 Design Engineer job vacancies in Legal / Public / Security category in The United States of America

Engineers are responsible for installing and maintaining Security systems in line with current standards. You will deliver world-class service levels to our valued clients ensuring that the work is completed to a high standard and ensuring complete customer satisfaction in this front-line role.You Duties will include but are not limited to:
Installing & maintaining fire & security systems in line with current standards and customer requirements
Responding to service calls on all types of fire and security systems
Participate in an out-of-hours rota for service provision
Meeting attendance times and other KPIs and SLAs as required
Delivering first-class service levels to our customers
Work with the wider team within the business including the Coordinators and Management team to ensure that all jobs are covered and to ensure that your stock levels are maintained
Attend training sessions and Engineering team meetings as required.
Be responsible for identifying any personal training and development needs to help you deliver the best possible customer service and ensure that your manager is aware.
About youWe are looking for someone who has the drive and enthusiasm to provide an outstanding service to our customers every day. Our ideal candidate has:
Experience as a multi-disciplined engineer with a good all-round knowledge of Fire and Security Systems including IP and analogue CCTV, intruder alarms, networked access control systems and all types of fire alarms.
Technical background in the electrical/electronic industry
Experience of automated gates, barriers and shutters is a bonus
Must be IT literate and familiar with Microsoft Windows
Experience of front line customer service will be preferential
A full UK Driving Licence
You have to be flexible to travel and and work away, be part of an on call rota.

In this context, you’ll be joining as Security Engineer and reporting to the Indonesia Tribe Lead for Infrastructure. This role will be responsible for designing, building, implementing, and maintaining the security systems and infrastructure that protect an organization's networks, systems, and data.

The Security Engineer will be responsible for the following activities: 

• Develop and implement security architectures, protocols, and procedures to safeguard digital assets.

• Conduct security assessments, vulnerability scans, and penetration testing to identify weaknesses in the organization's security posture.

• Respond to security incidents promptly, investigate their root cause, and implement measures to prevent future occurrences.

• Monitor networks and systems for suspicious activity and potential security breaches.

•  Educate employees about cybersecurity best practices and the importance of maintaining a secure environment.

• Ensure that the organization's security measures comply with relevant industry regulations and standards.

• Facilitate conflict resolution and decision-making effectively.

• Contribute to the continuous improvement of our project management processes and methodologies.

 

Job Summary

The Security Engineer plays a crucial role in protecting an organization's digital assets and infrastructure in a hybrid environment. This professional is responsible for implementing and maintaining security measures to safeguard the organization's critical assets. They conduct regular security assessments, identify vulnerabilities, and develop operating plans to mitigate risks. The Security Engineer collaborates with cross-functional teams to ensure compliance with security standards and regulations and responds to security incidents and breaches. Additionally, they stay updated on the latest security technologies and trends to proactively enhance the organization's security posture.

Key Responsibilities
• Design, implement, and manage security measures for cloud environments.
• Conduct regular security assessments and audits of cloud infrastructure.
• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.
• Monitor and respond to security incidents, ensuring timely resolution.
• Implement and maintain access controls, encryption, and other security features.
• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.
• Develop and document security policies, procedures, and guidelines for cloud environments.

What we are looking for
Requirements:
• Bachelor’s degree in computer science, Information Security, or related field.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.
• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services
• Good knowledge in security
• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc

Please refer to U3’s Privacy Notice for Job Applicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/. When you apply, you voluntarily consent to the collection, use and disclosure of your personal data for recruitment/employment and related purposes.

Job Description & Requirements

Key Responsibilities

• Design, implement, and manage security measures for cloud environments.

• Conduct regular security assessments and audits of cloud infrastructure.

• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.

• Monitor and respond to security incidents, ensuring timely resolution.

• Implement and maintain access controls, encryption, and other security features.

• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.

• Develop and document security policies, procedures, and guidelines for cloud environments

Requirements:

• Bachelor’s degree in computer science, Information Security, or related field.

• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.

• Excellent communication skills and the ability to collaborate with diverse teams.

• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.

• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.

• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services

• Good knowledge in security

• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.

• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.

• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc.

Key Responsibilities:

• Perform administration, support and operation of the project's security solution platforms and supporting infrastructure, focusing on Privileged Access Management (PAM), Network Intrusion Prevention System (NIPS), Wireless Intrusion Prevention System (WIPS), Network Access Control (NAC) and common systems (Windows and Linux OS, System Monitoring, Backup, Hypervisors and SAN Storage).
• Prepare professional reports and slide decks for submission to client on operational status
• Attend operational meetings with client
• Maintain and update documentation for operations, including asset lists, account lists, DR and health check plans
• Identity, evaluate and recommend enhancements to operational processes and procedures.
• Execute changes in accordance with the established change management process
• Support key activities including execution of BCP and DRP
• Implement approved service requests from the client within required timelines
• Support vulnerability assessments and remediate findings
• Support investigation of security incidents

Requirements:

• At least 5 years of experience in mid-sized Day 2 operations, out of which at least 2 years in providing technical support and administration of the focused security solutions
• At least 2 years of experience in supporting common systems and infrastructure is preferred
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Positive working attitude and a team player
• Strong interpersonal and communication skills, as this role entails 50% of time in client premises

Key Responsibilities

• Perform implementation, maintenance, support and operation of the project's security monitoring use cases
• Maintain understanding of the architecture and work with security team to understand the use cases to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Adhere to established change management process and other service management process in day-to-day tasks
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Review, propose and generate dashboards and reports to automate monitoring of systems and log and threat intelligence feed ingestion, and reduce low value event escalations
• Build rules and intelligence to detect threats in all monitored assets
• Implement and devise detection method of such threats in our security operations through SIEM use cases etc
• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Review and update data enrichment, including use of threat intelligence to enhance fidelity of detection
• Review and maintain UEBA data sources and use cases

Requirements

• 1- 2 years of experience in security operations in a SOC environment
• 1- 2 years of experience in creating, finetuning and maintaining correlation rules and SIEM dashboards
• Working experience in Regex and/or scripting
• Strong critical thinking / contextual analysis abilities
• Strong investigative and analytical problem solving skills
• Stakeholder management
• Meticulous with an eye for details
• Product certification such as Splunk Enterprise Certified Administrator or equivalent
• Professional certification such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage
• Good understanding of whole of government environment would be an advantage

Key Responsibilities

• Design, implement, and manage security measures for cloud environments.

• Conduct regular security assessments and audits of cloud infrastructure.

• Collaborate with cross-functional teams to integrate security best practices into cloud-based applications and services.

• Monitor and respond to security incidents, ensuring timely resolution.

• Implement and maintain access controls, encryption, and other security features.

• Stay up to date with industry trends and emerging threats to proactively address potential vulnerabilities.

• Develop and document security policies, procedures, and guidelines for cloud environments

Requirements:

• Bachelor’s degree in computer science, Information Security, or related field.

• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.

• Excellent communication skills and the ability to collaborate with diverse teams.

• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.

• Minimum five (5) years of relevant IT experience in deploying and managing application and services on cloud, including the design, development, implementation and/or management of the solution.

• Proven experience as a Cloud Security Engineer or similar role, with a focus on AWS cloud services

• Good knowledge in security

• Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.

• Proficient in security concepts related to infrastructure as code (IaC) and containerisation.

• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc.

A spin-out of telecom operator MyRepublic, MyRepublic Digital is an end-to-end digital enabler and accelerator that provides companies around the world the technology, skills and expertise needed to create frictionless customer experiences and thriving businesses.

Using a product-led approach, MyRepublic Digital aims to enable, simplify and accelerate digital transformation for aspiring digital brands. Its flagship offering is Encore: a cloud-native, all-digitalplatform-as-a-service that is ready to deploy pre-built with industry best practices and BSS/OSS features.

Role and Responsibilities

The incumbent will be responsible for the systems engineering to maintain the reliability and security of systems supporting a Cloud SAAS platform and some service provider Network Functions.

● Evaluate, integrate, and deploy security tools including Zero-Trust Security, Identity and Access Management, Endpoint Detection and Response, Security Information and Event Management

● Evaluate, integrate, and deploy monitoring tools for Cloud and IT services

● Review system and security logs, create rules and automations to correlate events and incidents, build analysis reports for critical events

● Ensure internal and external compliance audits are completed and due diligence and remediation actions are carried out according to schedule Work with SRE’s and IT Support to test and deploy patches for security vulnerabilities

● Work with CREST-certified VA/PT provider to ensure all assets are scanned and vulnerabilities tracked and remediated

● Maintain Telephony, RADIUS and DNS service uptime of 99.9%

● Design and deploy engineering solutions to provide capabilities including:
○ Monitoring and Alerting
○ Security Lifecycle Management
○ Patching and Integration Testing
○ Infrastructure Orchestration
○ Systems Automation

● Incident Management

● Improve the security, design and reliability of the infrastructure

● Maintain systems documentation

● Accept and meet challenging deadlines

Qualifications

● Degree or Diploma in Computer Science or related field of study

● Experience with the following is preferred:
○ Cloud service providers: AWS /GCP
○ Compliance Standards: ISO27001 / CIS20 / SRII
○ Automation Frameworks: Ansible / Salt
○ Vulnerability Scanners: Accunetix, Tenable
○ WAF/IDS/IPS: Palo Alto / Fortinet / Wazuh
○ IAM: Okta / CyberArk / BeyondTrust
○ Collaboration tools: Slack / Jira / Confluence
○ Source Code Repositories: Gitlab / BitBucket
○ Hypervisors: ESXi / Proxmox
○ Monitoring Tools: Grafana / InfluxDB / Prometheus / Datadog / New Relic
○ Reverse Proxy: NGINX / Traefik

● Strong background in Linux is a must

● Good understanding of Networking

● Ability to write scripts in various languages such as Bash, Python, PHP

● Ability to self-learn

● Well organized, attention to details and able to multitask

● Desire to explore and learn new technologies

What we offer in return:

● Exciting opportunities to create and grow in a rapidly growing organisation that is a disruptor in the telco space.

● Amazing colleagues and culture that encourages you to do your best work while staying authentic and true to yourself.

● A work culture that puts your individual needs at the core: Remote, Hybrid or In-Office – choose a work rhythm that suits you and your team. We focus on outcomes and believe that you can deliver your best work, working anywhere, anytime.

● Wellness first. We believe that wellness goes beyond team celebrations and birthday parties. Our holistic approach to wellness gives you opportunities to recharge, connect and explore, at and outside work. In addition to the standard leave entitlements, we offer:

● 1 day of wellness leave every quarter for you to take or your health and wellbeing, and explore your personal passions.

● 20 days to work from anywhere each year, allowing you more flexibility to explore and connect with your interests while delivering work you will be proud about.

MyRepublic values and behaviour that we look for:

From being the first to launch 1Gbps broadband plans and the first network optimised broadband service for gaming in Singapore, to crafting workplace practices that put wellbeing at its core, our values guide us in everything we do at MyRepublic Digital. It’s the secret sauce that makes us tick. If you espouse the following, we know you would fit in great with us:

● Never Settle: We dream big. We are constantly curious and embrace bold ideas.

● Stronger Together: We create together. We win together, we fail together. We grow together, we celebrate together. We are at our strongest together.

● Empowered to Deliver: We deliver on our commitments. We are empowered to move fast and with confidence to get the right things done.

● We Care: We care for ourselves, one another and our customers. We value authenticity and embrace differences. We create the space to recharge, connect and explore to bring our best selves to work.

We believe that skills, knowledge, and experience can come from a diverse range of life experiences. You may not have ALL the listed requirements for this role but this should not hold back! If you believe that you have what it takes for this position, are willing to learn, and you identify with the values and mission of MyRepublic Digital, we would love to hear from you. We celebrate diversity and look forward to hearing from a diverse group of applicants. We do not discriminate on any factor in our hiring process.

ING Bank

ING Bank covers Wholesale and Retail Banking in Asia Pacific. Our Wholesale Banking business is present and active in 11 major economies in the Asia Pacific, namely Australia, China, Hong Kong SAR, India, Indonesia, Japan, Philippines, Singapore, South Korea, Taiwan and Vietnam

Job Description

Together with the people in your squad, you are responsible for implementing IT Security capabilities and delivering security & risk awareness. Preferably you have been a DEV or OPS engineer background in order to easily participate in various technical (security) discussions and drive the integration of IT Security in the DevOps way of working. Your main responsibilities in IT Security are:

• Execute and review vulnerability scans and penetration test results, propose & agree upon mitigation actions.
• Assessment of network security and technical assurance of platforms security
• Evaluate impact from unresolved/unpatched vulnerabilities and security issues.
• Review current corporate policies and help redefine procedures for better security.
• Participate in global security engineering guilds to harmonize security practices.
• Provide deep level subject matter expertise for specific technologies based on potential implementation risks.
• Review and define requirements for information security solutions.
• Assess applications for design related security risks and assist teams in determining appropriate remediation for issues identified.

Your additional responsibilities are:

• IT & Security Risk Assessment
• Security Design
• Key Control Testing
• Data Analysis & Reporting
• Configuration/build review activities

We are looking for:

You are an energetic and proactive IT Security professional with a passion for the securing WB Tech environments and a positive, “Do it-Try it-Fix it” mentality. Enhancing the security controls and ultimately make ING safer, is a challenge to you. Close cooperation with and between the DevOps squads is your greatest achievement.

This role requires emphasis on the following:

• You have excellent problem-solving skills and are passionate about IT Security.
• You are inspiring and show energy and passion.
• You are interested to bring one way of working regarding the implementation of IT Security & IT Risk controls across countries.
• You are able to design technical Security solutions

Education and background

• Risk and security mind-set, security background
• Strong technical knowledge and awareness; including software development, infrastructure, engineering and operations.
• Good understanding of network and application security.
• Experience with application security toolset –Checkmarx CxSAST, Acunetix, Webinspect
• Strong Team Player and have experience in working with teams in and across sites.
• Professional and intellectual IT skills at bachelor or university level
• 5 years’ of relevant working experience as IT Security engineer.
• Must hold at least one of the following certifications: Certified Information Security Systems Professional (CISSP), and/or Certified IT Systems Auditor (CISA).
• SANS GSSP-Java/Net or CSSLP certification, Offensive Security Certified Professional (OSCP) or relevant certifications from other vendors is a plus.
• Strong proficiency in both verbal and written English

Responsibilities:

• Oversee the effective implementation of the IT Security Risk framework and Global Technology (GT) governance routines and requirements, using established tools and documented procedures. This includes documentation to enable tracking, monitoring, and escalation of technology risk related issues to management, and acting as an ambassador of the risk culture.
• Assess regulatory (e.g. MAS, HKMA, CBRC, OJK, RBI, etc) changes impacting technology and operations and drive related risk mitigation program with required stakeholders. Manage regulatory relationships, where relevant.
• Works with Application Managers, Enterprise Control functions and COOs across the line of businesses to ensure that IT Security Risk and Control gaps are identified and remediated.
• Manage senior stakeholders communication and reporting
• Develop and socialize potential risk mitigation strategies
• Drive risk engagement & management and issue identification, in particular, E2E risk management includes ERP, RCSA, eRIC, SIAI, JDI, AIAI, RIAI etc.
• Drive QA (Quality Assurance) testing, Business Continuity for applications, Sustainability Program and new toolset adoption with JIRA for Risk management.
• Foster the Identify, Escalate, Debate risk culture
• Identify opportunities for enhancing or streamlining execution of risk management processes; partner across multiple divisions to execute.
• Collaborate across the GCIBT application groups, Risk Leads and enterprise process owners (including Global Information Security) to respond to Internal and External Audits, Exams, and Regulatory/Clearing Inquiries & Assessments.
• Quality assurance and Global Information Security related findings program oversight
• Assist business and process owners with remediating the most significant risks including Audit Issues, Self-Identified Audit Issues, Compliance Identified Audit Issues, Regulatory Issues
• Practice and promote good risk culture and risk management within GCIBT, leading participation in technology risk activities.

Requirements:

• Bachelors’ or Masters’ degree in Engineering, Computer science, Information Technology or related studies.
• At least 8 to 15 years of experience in IT Security risk management and audit experience preferably in Banking/FI domain preferred. Must have relevant experience in executing Risk initiatives within a tech risk function, compliance or technology audit role.
• Knowledge of Singapore MAS and APAC Banking/FI domain regulations & understanding of regulatory risk management preferred. Experience in leading IT programs for proactively identifying regulatory risk exposure and potential non-compliant areas.
• IT Security Industry certifications i.e. CISA, CISM, COBIT foundation, etc preferred.

Certifications (Added Advantage):

• Certified in Cybersecurity
• Certified Payment Security Practitioner (CPSP)

Please refer to the attached Job description for more details on role and responsibilities. MKUH is committed to equal opportunities and improving the working lives of our staff and as such we offer a range of flexible working practices. We promote an inclusive workforce and encourage applications from applicants from all backgrounds. We reserve the right to expire vacancies prior to the advertised closing date once a sufficient number of applications have been received. MKUH uses identification scanning technology to confirm the authenticity of documents; all prospective employees of MKUH will have their original documents verified using this technology. By applying for this role, you accept if successful, that information from your application will be transferred into the national NHS Electronic Staff Record (ESR) system. Your personal data may be transferred from the Trust to another NHS organisation where your employment transfers within the NHS. This is in accordance with the streamlining programme which aims at saving you time and improving efficiencies within the NHS when your employment transfers. Upon commencing employment with the Trust, all employees (except Medical & Dental Staff on national terms and conditions) are subject to a probationary period lasting a period of six months with an option to extend for a further six months to a total of 12 months.

Principal Security Operations Engineer

Job Description:

1. Developing and implementing security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.
2. Leading the design and implementation of security controls, including firewalls, intrusion detection systems, endpoint protection, and security information and event management (SIEM) systems.
3. Conducting regular security assessments and vulnerability scans to identify potential risks and vulnerabilities.
4. Responding to and investigating security incidents and breaches, and implementing measures to prevent future occurrences.
5. Managing and monitoring security systems and tools to detect and respond to security events and threats.
6. Collaborating with other IT teams to ensure security best practices are followed during system and software development.
7. Providing guidance and support to junior security operations engineers and other team members.
8. Staying up-to-date with the latest security trends, threats, and technologies, and making recommendations for improvement.
9. Participating in incident response and disaster recovery planning and testing.
10. Collaborating with external vendors and partners to ensure the security of third-party systems and services.

Requirements:

• Bachelor's degree in Computer Science, Information Systems, or related field.
• Strong technical knowledge and experience in security operations, network and systems administration, and incident response
• Experience with programming languages (Rust is a plus), Embedded Systems, Hardware peripherals.
• Familiarity with Operating System Security (e.g. Linux, Windows).
• Excellent problem-solving and analytical skills.
• 6+ years of professional experience in hardware and firmware security.
• Chinese speaking to liaise with Chinese counterparts

Interested applicants, Kindly email your updated resume to yvonne.chai@quesscorp.sg and we regret that only shortlisted candidates will be notified

Yvonne Chai Cheng Man

(EA License: 23115356 | UEN: 201715683K)

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

Responsibilities:

• Implementation of the IT Security Risk framework and Global Technology (GT) governance routines and requirements, using established tools and documented procedures. This includes documentation to enable tracking, monitoring, and escalation of technology risk related issues to management, and acting as an ambassador of the risk culture.
• Works with Application Managers, Enterprise Control functions and COOs across the line of businesses to ensure that IT Security Risk and Control gaps are identified and remediated.
• Develop and socialize potential risk mitigation strategies
• Assist to drive risk engagement & management and issue identification, in particular, E2E risk management includes ERP, RCSA, eRIC, SIAI, JDI, AIAI, RIAI etc.
• Assist to drive QA (Quality Assurance) testing, Business Continuity for applications, Sustainability Program and new toolset adoption with JIRA for Risk management.
• Assist to foster the Identify, Escalate, Debate risk culture
• Identify opportunities for enhancing or streamlining execution of risk management processes; partner across multiple divisions to execute.
• Collaborate across the GCIBT application groups, Risk Leads and enterprise process owners (including Global Information Security) to respond to Internal and External Audits, Exams, and Regulatory/Clearing Inquiries & Assessments.
• Involve in Quality assurance and Global Information Security related findings program
• Assist business and process owners with remediating the most significant risks including Audit Issues, Self-Identified Audit Issues, Compliance Identified Audit Issues, Regulatory Issues
• Practice and promote good risk culture and risk management within GCIBT, leading participation in technology risk activities.
• Assess regulatory (e.g. MAS, HKMA, CBRC, OJK, RBI, etc) changes impacting technology and operations and drive related risk mitigation program with required stakeholders.

Requirements:

• Bachelors’ or Masters’ degree in Engineering, Computer science, Information Technology or related studies.
• At least 5 to 7 years of experience in IT Security risk management and audit experience preferably in Banking/FI domain preferred.
• Must have relevant experience in executing Risk initiatives within a tech risk function, compliance or technology audit role.
• Experience in proactively identifying regulatory risk exposure and potential non-compliant areas.
• IT Security Industry certifications i.e. CISA, CISM, COBIT foundation, etc preferred.
• Knowledge of Singapore MAS and APAC Banking/FI domain regulations & understanding of regulatory risk management preferred.

Certifications (Added Advantage):

• Certified in Cybersecurity
• Certified Payment Security Practitioner (CPSP)

Are you looking for an awesome place to work, where you can proudly be your authentic self, and be part of #oneteam?  


We are looking for a passionate team player who aligns with our values and culture, takes pride in their unique contributions, and can challenge the status quo with disruptive thinking. If this sounds like you, come and join us!




As an Infrastructure Security Engineer at Vocus, you will play a critical role in ensuring the integrity, confidentiality, and availability of our infrastructure. Working within the Network Operations team, you will be responsible for designing, implementing, and maintaining security measures to protect our network, systems, and data from threats.
Responsibilities:

Design and implement security controls to protect the company's infrastructure, including Operational Technology, Networks, Servers, Databases, and Applications.
Conduct regular security assessments and vulnerability

... Click here to view more detail / apply for 1989 ? Infrastructure Security Engineer

Job Responsibilities:

• Maintain systems plus controls to protect unauthorized access, disclosure, modification and deletion of information through resources and computer networks.

• Support logs, categorizes, prioritizes, tracks, and routes

i. incidents reported by users or

ii. alarms raised by monitoring tools

• Interact directly with business technical specialist to guide on authentication, authorization and encryption solutions.

• Investigate known and suspected information security events and develop related reports.

• Conduct hardware and software security alerts as available.

• Resolve issues through responding IT threats and vulnerabilities.

• Conduct routine security risk analysis, evaluate business needs against collision, vulnerabilities and search resulting risks.

• Implement Change Request and Service Request.

• Perform patching on security equipment.

• To implement change request and service request.

• Apprised of the current state of computer security in place in the organization

• Technically proficient and up-to-date in basic computer security policies and practices

• Proactive in preventing Cyber-Security Incident

i. To perform technical security assessment for IT & Network components - Vulnerability assessment, Penetration testing, Opportunistic Hacking, Web application security testing, Security source code review etc.

ii. To monitor and track the identified vulnerability, issues and fix detected vulnerabilities to maintain a high-security standard.

iii. Be familiar with browser, Web service, cloud security, mobile applications security, and operating system security concepts

iv. Understanding of leading vulnerability scoring standards and ability to translate vulnerability severity as security risk

• Perform forensic investigation if required.

i. Review all security logs.

Requirements:

• IT relevant experience on security

• Preferably with Certifications such as CREST, OSCP and CISSP.

• With PenTest, Vulnerability Assessment & Risk Assessment experience

• Strong in technical skill

• Able to handle demanding service response and recovery turnaround

• Able to manage daily support tasks to meet stringent SLA requirements

• Excellent scheduling and multitasking skills

• Meticulous and process-oriented

• Good, hard-working attitude with ability to work well under pressure

• Good communication skills English (written, spoken)

• Good analytical skills with ability to work with others to resolve problems.

• Good organization skills, with ability to properly document and track information.

• Dynamic, customer oriented, experience working in a fast paced environment.

• Good Knowledge of following product will be advantageous:

-Splunk, FireEye and Nessus Manager