Total 255 Design Consultant job vacancies in Legal / Public / Security category in The United States of America

Job Description

The incumbent is responsible for delivering information security projects that are related to Advanced Analytics (AA), such as Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence Management and Vulnerability Management, including the execution of all project implementation activities.

Responsibilities

• Carry out pre-sales engagement for projects relating to AA

• Deploy AA related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)

• Develop SIEM correlation rules for security monitoring and detection of new threats

• Develop SIEM and Threat Intelligence report templates that are useful for analysis by the customers

• Develop playbooks for automated incident management

• Create technical documentation for the AA deployment

• Provide post-sales support services for corrective and preventive maintenance

• Carry out technical enablement

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology

• Knowledge and experience in information security technologies such as SIEM, Threat Intelligence and Vulnerability Management is preferred

• At least 3 to 5 years of IT security experience

• Good communication and written skills

• Positive working attitude

• Passionate in information security

Duties & Responsibilities:

• Carry out pre-sales engagement for projects relating to AA
• Deploy AA related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Develop SIEM correlation rules for security monitoring and detection of new threats
• Develop SIEM and Threat Intelligence report templates that are useful for analysis by the customers
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement

Requirements:

• Good Diploma or Bachelor’s Degree in Information Technology
• Knowledge in information security technologies such as SIEM, Threat Intelligence and Vulnerability Management is preferred
• At least 2 to 5 years of IT security experience
• Good communication and written skills
• Positive working attitude
• Passionate in information security

WithSecure Consulting delivers research-led cyber security to defend organizations, society and people from real-world attacks and build resilience into their approach. Our people are a mix of technical and creative experts – diverse, talented, and passionate people – working tirelessly to help us advance the industry with new ways of thinking. They lead their own development, in and out of the office. They call the shots when it comes to building a place to call home in our organization.

We currently have an opening for a Security Consultant within our Singapore office! Your role will involve carrying out penetration testing and security assessments of typical and unique pieces of technology to sophisticated and progressive cloud-native systems.

We’d also love you to do some research to ensure your skills remain relevant in a fast paced world of security.

How you spend the rest of the time that’s not working with clients is your call. WithSecure has a commitment to research. Based on their skillset and inclination, our consultants get a percentage of their time dedicated to security research. Whether it is used to investigate new software, hardware or protocols, we encourage our team to push the boundaries of what is possible!

What we need:

We solve complex cyber-security problems on a daily basis and to do that requires an interesting mix of skills. To be successful at WithSecure and help our clients with their challenges we know you’ll need the following:

1. A passion for security! You love computers, you love security and you love hacking things and solving problems. If this wasn’t your job it would be your hobby. Technical excellence. You know your subject area, but you’ll also know what that subject area is without us needing to say.

2. Self-motivation You’re not going to be told what to do all the time. You are capable of figuring out what spending time working is of benefit to WithSecure and our clients and then run with it. With great freedom comes great responsibility and you also seek out guidance from those around you when you need it.

3. Communication skills - How can we add value to our clients organisations unless we can tell them what we did, how we did it, and how they can fix it? But communication also extends to sharing your knowledge with your colleagues and the wider industry. Our consultants work as a team and all members are expected to suggest and implement improvements to procedures and products based on their experience and interaction with clients. They are also encouraged to share their knowledge with the WithSecure team as part of the company’s information sharing culture.

What are we looking for?

• An ideal candidate will have; 2-3+ years of experience delivering hands-on cyber security consultancy projects with clients;
• WebApp Testing. You know your way around Burp, and can perform SQLi without using SQLmap.
• Infrastructure Testing. You understand that this doesn’t just mean running Nessus.
• Mobile App Testing. You are familiar with Frida and know how to tweak existing or write new Frida scripts.
• Experience in supporting the end-to-end delivery of large consultancy projects, with a team.
• Support pre-sales/scoping – a strong ability to understand and quantify client requirements, and propose consultative approaches that will deliver the best possible outcomes for the client.
• Familiarity with regional regulatory requirements for cyber security – including MAS’s TRM expectations – and how they apply to our roles.
• Experience interfacing with non-technical, and technical stakeholders to deliver technical and non-technical information.
• Excellent verbal and written communication skills.
• Relevant practical certifications – valid and active OSCP and CREST (CRT)
• Additional advanced certifications pertaining to Cybersecurity would be a bonus (E.g: OSWE, OSEP, CRTO, AWS Security Speciality, Microsoft AZ-500)

What will you get from us

• Freedom – you will have the opportunity to define new ways of working how we engage with our customers, and how product value gets represented
• You will work together with experienced and enthusiastic colleagues, and within WithSecure you'll find some of the best minds in the cyber security industry
• A collaborative and supportive work environment with opportunities for career growth and advancement.
• Opportunities for continuous learning and development, including training, certification and research time.

Duties & Responsibilities:

• Managing and leading a team of engineers for presales and project deliveries
• Supporting pre-sales engagement for projects relating to Advanced Analytics
• Responsible for ensuring projects are delivered in a timely manner
• Responsible for supporting presales activities in relation to developing solution design, bill of materials and scope of work
• Deploy Advanced Analytics solution related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the AA deployment
• Provide post-sales support services for corrective and preventive maintenance
• Carry out technical enablement to sales team and/or junior members of the team
• Perform consultancy activities such as conducting technical presentations and engagement to prospective customers, preparing scope of work, bill of materials and technical proposal for submission for tender bids
• Identity, evaluate and recommend new technologies that would be relevant to Adaptive Defence
• Provide mentorship and guidance to junior staff

Requirements:

• Bachelor’s Degree in Information Technology or Cyber Security
• Professional certificates such as SANS or ISC2 would be advantageous
• At least 7 years of IT security experience and experienced in a wide range of cyber-security technologies
• Technical knowledge in the following information security technologies & solutions is preferred: SOAR Platform / Threat Intel Platform / Threat Intel Feeds
• Experience in IT Network / System Administration will be a strong advantage
• Experience as a technical lead in large-scale projects involving multiple technologies as part of a turn-key solution
• Strong troubleshooting and analytical skills that can resolve issues as the final point of escalation
• Strong presentation, communication and written skills
• Basic project management skills
• Positive working attitude
• Passionate in information security

Responsibilities

• Engage clients to identify requirements relating to cyber security solutions for Data Protection
• Proposal, scope and size technical solutions for clients
• Deploy competency’s related projects and provide consultation to clients with regard to the deployment as a Subject Matter Expert (SME)
• Create technical documentation for the solution deployment
• Empower clients through technical enablement
• Provide post-sales support services for corrective and preventive maintenance when necessary

Requirements

• Good Diploma or Bachelor’s Degree in Information Technology
• At least 5 to 8 years of IT security experience
• Experience in leveraging and expanding the capabilities of existing analytical tools and technologies; recommend new technologies as appropriate
• Experience with web security, email security and Cloud Access Security Broker (CASB) and will be preferred
• Positive working attitude
• Good communication and written skills
• Passionate in information security
• Experience in programming and scripting is preferred

WithSecure Consulting delivers research-led cyber security to defend organizations, society and people from real-world attacks and build resilience into their approach. Our people are a mix of technical and creative experts – diverse, talented, and passionate people – working tirelessly to help us advance the industry with new ways of thinking. They lead their own development, in and out of the office. They call the shots when it comes to building a place to call home in our organization.

We currently have an opening for a Senior Security Consultant within our Singapore office! Your role will involve carrying out attack simulations (Red Teaming), penetration testing and security assessments of typical and unique pieces of technology to sophisticated and progressive cloud-native systems.

We’d also love you to do some research to ensure your skills remain relevant in a fast paced world of security.

How you spend the rest of the time that’s not working with clients is your call. WithSecure has a commitment to research. Based on their skillset and inclination, our consultants get a percentage of their time dedicated to security research. Whether it is used to investigate new software, hardware or protocols, we encourage our team to push the boundaries of what is possible!

What we need:

We solve complex cyber-security problems on a daily basis and to do that requires an interesting mix of skills. To be successful at WithSecure and help our clients with their challenges we know you’ll need the following:

1. A passion for security! You love computers, you love security and you love hacking things and solving problems. If this wasn’t your job it would be your hobby. Technical excellence. You know your subject area, but you’ll also know what that subject area is without us needing to say.

2. Self-motivation You’re not going to be told what to do all the time. You are capable of figuring out what spending time working is of benefit to WithSecure and our clients and then run with it. With great freedom comes great responsibility and you also seek out guidance from those around you when you need it.

3. Communication skills - How can we add value to our clients organisations unless we can tell them what we did, how we did it, and how they can fix it? But communication also extends to sharing your knowledge with your colleagues and the wider industry. Our consultants work as a team and all members are expected to suggest and implement improvements to procedures and products based on their experience and interaction with clients. They are also encouraged to share their knowledge with the WithSecure team as part of the company’s information sharing culture.

What are we looking for?

• An ideal candidate will have; 4+ years of experience delivering hands-on cyber security consultancy projects with clients;
• Red Teaming. You were part of attack simulations in an operator role or even leading the engagement.
• WebApp Testing. You know your way around Burp, and can perform SQLi without using SQLmap.
• Infrastructure Testing. You understand that this doesn’t just mean running Nessus.
• Mobile App Testing. You are familiar with Frida and know how to tweak existing or write new Frida scripts.
• Experience in supporting the end-to-end delivery of large consultancy projects, with a team.
• Support pre-sales/scoping – a strong ability to understand and quantify client requirements, and propose consultative approaches that will deliver the best possible outcomes for the client.
• Familiarity with regional regulatory requirements for cyber security – including MAS’s TRM expectations – and how they apply to our roles.
• Mentor and grow the capabilities of fellow team members.
• Experience interfacing with non-technical, and technical stakeholders to deliver technical and non-technical information.
• Excellent verbal and written communication skills.
• Relevant practical certifications – valid and active OSCP and CREST (CRT, CCT-Inf or CCT-App)
• Additional advanced certifications pertaining to Cybersecurity would be a bonus (E.g: CCT-Inf/CCT-App/CCSAS, OSWE, OSEP, CRTO, AWS Security Speciality, Microsoft AZ-500, CKA, CKS)

What will you get from us

• Freedom – you will have the opportunity to define new ways of working how we engage with our customers, and how product value gets represented
• You will work together with experienced and enthusiastic colleagues, and within WithSecure you'll find some of the best minds in the cyber security industry
• A collaborative and supportive work environment with opportunities for career growth and advancement.
• Opportunities for continuous learning and development, including training, certification and research time.

Responsibilities:

· Perform day-to-day account work which includes developing program activities and a wide range of written materials (including strategy papers and press releases), coordinating events, maintaining client and media contacts, managing projects.

· Develop and manage projects/programs, including implementation plans, evaluation mechanisms, staffing plans, budgets and timelines.

· Develop all manner of content for media pitching, including pitch letters, press releases, specification sheets and media announcements.

· Communications plans for accounts and understands and track clients’ businesses.

· Presentations for clients relative to project management/program status under the supervision of the team leader.

· Act as a liaison between client, outside suppliers (graphic designers, photographers, A/V houses, etc.) and, as appropriate, other internal and external audiences (e.g., employees, media, interest groups).

· Assists with administrative assignments for client when required.

Requirements:

• Degree in Mass Communications/Marketing/Public Relations.

• Open to entry level candidates and those with 1-2 years of professional public relations other comms related role.

• Proficient in using the Microsoft Office suite of products.

• Strong language command; possess excellent writing and editing skills.

• Good communication and interpersonal skills.

• Organised and systematic; ability to adhere to deadline.

• Ability to work independently with minimal supervision.

Responsibilities

• Evaluate an organization’s security measures, including firewalls, encryption, and authentication protocols.
• Conduct regular system tests to identify any vulnerabilities that could be exploited by cyber attackers.
• Create comprehensive plans to secure computing networks and systems.
• Oversee the implementation of security solutions to ensure they meet the needs of the organization.
• Continuously monitor security systems and networks for irregular activities.
• Lead the response to security breaches or incidents, including providing post-event analyses.
• Conduct staff training sessions on security best practices and awareness.
• Keep abreast of the latest cyber security threats and trends.
• Ensure all cyber security practices comply with regulatory standards.
• Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.

Requirements

• Min Bachelor’s degree in Computer Science, Cyber Security, or a related field.
• At least 3 years of experience in a cyber security role.
• Required certifications: CREST Registered Penetration Tester (CREST CRT) & Offensive Security Certified Professional (OSCP)
• Strong understanding of firewalls, VPNs, Data Loss Prevention, IDS/IPS, Web-Proxy, and Security Audits.
• Ability to identify and mitigate network vulnerabilities and explain complex security issues to non-technical stakeholders

Nafisah

R2096014

Job Title

Security Technical Consultant (Remote: Southern ID, Northern CO, MT, ND, SD or WY)

Job Description

In this role you will provide pre and post-sale technical support in the specialized area of Security. You will own services pertaining to antivirus, Microsoft OS patching, firewalls, encryption, and solution security optimization. You will consult, configure, implement, troubleshoot, and maintain ownership on new services offered from the Hospital Patient Monitoring (HPM) solutions team to key customers throughout parts of CO and ID, MT, ND, SD and WY.

You are responsible for (but not limited to)

• Capably acting as the subject matter expert (SME) by collaborating and consulting effectively with sales and service partners, as well as customers and healthcare institutions, to ensure successful integration of solutions into the customer IT environment and to achieve overall business objectives.

• Applying industry standard practices and Philips standard implementation to all customers who choose Philips solutions.

• Delivering consultative services within the assigned domain of the resource.

• Deploying and/or integrating software solutions within the purview of the associated domain for complex IT solutions which carry proprietary real-time life critical data and are required to reliably output to hospital IT environments.  Take initiative to educate customers to maintain their systems.

• Leveraging insights to drive service innovation leads that align with customer needs.

• Resolving technical issues and offering proactive technical support.

• Documenting solutions to ensure support teams and other consultants can participate in support and onward development.

• Contribute to the collective learning of Philips, seeking to share knowledge globally; assessing and sharing repeatable processes that can be leveraged across multiple projects.

• Practice strong configuration management and version control.

• Participate as a key member of the implementation project and/or support team; fostering collaboration through sharing experiences, information, perspectives, skills, and expertise.

• Drive continuous improvements of implementation methodology and service offerings based on customer feedback.

You're the right fit if:

• You’ve acquired 3+ year of professional working experience in the IT technologies or electronics industry, preferably in a field or hospital-based service environment.  Experience with patient monitoring, telemetry units, ventilators, and defibrillators highly preferred as well as a Working knowledge of electronic circuit boards, processors, and computer hardware including applications, programming, and systems functionality

• Your skills include network configuration and/or troubleshooting experience, and you have obtained the Cisco certifications at the professional level required – CCNP Enterprise with Security concentration (CCNA-S) and/or Certified Information Systems Security Professional (CISSP). Demonstration of skill sets from completions of one or more of the following courses are preferred:

  • 802.1X - Introduction to 802.1X Operations for Cisco Security Professionals

  • SISAS - Implementing Cisco Secure Access Solutions o CISSP Certification Prep Course

  • SSNGFW - Securing Networks with Cisco Firepower Next Generation Firewall v1.0

  • SISE - Implementing and Configuring Cisco Identity Services Engine v3.0

  • SENSS - Implementing Cisco Edge Network Security Solutions

• Microsoft and other certifications are desirable – Microsoft Certified Technology Specialist (MCTS), Microsoft Certified IT Professional (MCITP), VMWare.  

• You have a bachelor’s degree in computer science, electronics, biomedical, or other related disciplines or equivalent combination of education and experience.

• You must be able to successfully perform the following minimum Physical, Cognitive and Environmental job requirements with or without accommodation for this Field Service position.

• You must be able to:

  • Work in an office/home office and/or remote setting, as well as in a hospital/healthcare environment; adhere to requirements.

  • Work flexible hours

  • Wear all required personal protective equipment.

About Philips

We are a health technology company. We built our entire company around the belief that every human matters, and we won't stop until everybody everywhere has access to the quality healthcare that we all deserve. Do the work of your life to help improve the lives of others.

• Learn more about our business.

• Discover our rich and exciting history.

• Learn more about our purpose.

• Read more about our employee benefits.

If you’re interested in this role and have many, but not all, of the experiences needed, we encourage you to apply. You may still be the right candidate for this or other opportunities at Philips. Learn more about our commitment to diversity and inclusion here.

Philips Transparency Details  

The pay range for this position is $80,500.00 to $138,000.00 The actual base pay offered may vary depending on multiple factors including, job-related knowledge/skills, experience, business needs, geographical location, and internal equity.   ​

​

In addition, other compensation, such as an annual incentive bonus, sales commission or long-term incentives may be offered. Employees are eligible to participate in our comprehensive Philips Total Rewards benefits program, which includes a generous PTO, 401k (up to 7% match), HSA (with company contribution), stock purchase plan, education reimbursement and much more.  Details about our benefits can be found here.  ​

​

At Philips, it is not typical for an individual to be hired at or near the top end of the range for their role and compensation decisions are dependent upon the facts and circumstances of each case.  

Additional Information

US work authorization is a precondition of employment. The company will not consider candidates who require sponsorship for a work-authorized visa, now or in the future.

Company relocation benefits will not be provided for this position.  For this position, you must reside with the territory: Southern ID, Northern CO, MT, ND, SD or WY. Candidates must also reside with 1-hour of a major airport.

#LI-PH1

#LI-Remote

#ServiceD

Philips is an Equal Employment and Opportunity Employer/Disabled/Veteran and maintains a drug-free workplace.

11th March, 2024 About CyberCX At Cyber CX, we are driven by our purpose to secure the world, we are the protectors and defenders of our customers and communities. We fearlessly share our opinion an expertise.   Led by industry experts and delivered by cyber security specialists committed to their craft, CyberCX represents the region’s best cyber security talent, applying unmatched cyber security expertise to protect and defend both local and international organisations from cyber threats.  How you will make an impactWork with our customer base to deliver cloud security services in line with the agreed scope, CyberCX standards, and relevant industry standards or frameworks.    Day-to-day you will: Lead standard client engagements; and/or support complex and dynamic client engagements in cloud security. Core responsibilities may entail but are not limited to performing or supporting engagement planning, stakeholder management, engagement governance, risk management, delivery management and quality assurance. Prepare and present high-quality deliverables (written or…

Click here to view more detail / apply for Security Consultant

TransUnion's Job Applicant Privacy Notice

What We'll Bring:

This role is a senior member of the TransUnion Global Threat Operations Center, which includes TDS/SOC analysts and incident handlers as well as folks responsible for red teaming, intelligence analysis, and technical threat researchers. This role will focus on proactive monitoring and alert enhancements when not leading Threat Detection response efforts to complex attacks against TransUnion.

What You'll Bring:

5 years of experience in SOC monitoring (identifying, investigating, and responding to complex attacks)
• Minimum of 3 to 5 years of Incident Response experience
• Strong host forensics analysis skills (EDR, Static & Dynamic analysis)
• Experience with investigative technologies such as SIEM, packet capture analysis and Memory analysis tools
• Strong understanding of threat landscape in terms of the tools, tactics, and techniques of Threats employing both commodity and custom Malware
• Understanding of networking and security fundamentals of Windows, Unix/Linux, and Macintosh
• Strong understanding of Cloud-based technologies (CASB, O365, AWS, Azure)
• Intermediate to Advanced level understanding/use of Splunk
• Intermediate to Advanced level understanding of programming concepts and the ability to apply them in a language like PowerShell or Python.
• Reverse engineering skills a plus.

Impact You'll Make:

• Serve as a technical leader. • Mentor and share expertise with junior Threat Detection Services staff. • Act as an escalation point between the Threat Detection Services team and IR. • Participation in TDS emergency on call rotation escalated up from 24 x 7 TDS monitoring. • Remote position

TransUnion Job Title

Sr Consultant, Information Security

Our Client is a world renowned carrier company with ongoing IT projects and is looking to expand their IT team. They are seeking a highly motivated and experienced Cyber Security Solutions Specialist / Consultant to join our vibrant Information Security Team. As a key contributor, you will play a critical role in implementing, optimizing, and maintaining cutting-edge security solutions that protect our organization from ever-evolving threats.

Working location: Changi, East

Your Impact:

• Become the go-to expert (SME) for our security systems: Leverage your deep understanding to unlock their full potential and ensure maximum protection.
• Architect and execute comprehensive security strategies: Plan, assess, design, and deploy the latest security software and hardware solutions.
• Champion innovative security initiatives: Identify and recommend solutions that strengthen our security posture and stay ahead of emerging threats.
• Guide and educate: Provide expert consultancy, technical guidance, and training to empower other teams.
• Collaborate with stakeholders: Partner with infrastructure teams to design secure solutions and advise on firewall requests.
• Stay vigilant: Continuously research emerging threats and vulnerabilities, proposing effective mitigation strategies.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Deliver with excellence: Manage project priorities, deadlines, and deliverables independently with minimal supervision.

What you bring:

• Proven track record: Minimum of 5 years in information security, preferably with application security expertise.
• Certified expertise: Holding recognized certifications like CISSP, CSSLP, or CEH is a plus.
• Proven implementation experience: Demonstrated knowledge of conducting security product POCs and RFQs.
• Hands-on experience: Familiarity with implementing and maintaining tools like EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, and network security solutions.
• Technical prowess: Deep understanding of at least one security area like network design, zero trust, IoT, or cryptography.
• Security-minded: Keen awareness of common web/mobile application vulnerabilities and the ability to mitigate them.
• Communication maestro: Possess strong verbal, written, presentation, and interpersonal skills.
• Positive and proactive: Exhibit drive, initiative, enthusiasm, and a sense of urgency when tackling critical issues.
• Team player: Thrive in both independent and collaborative work environments.

APPLY NOW! Interviews are ongoing! Email to dayna.chiam@stellar-link.com

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

Our Client is a world renowned carrier company with ongoing IT projects and is looking to expand their IT team. They are seeking a highly motivated and experienced Cyber Security Solutions Specialist / Consultant to join our vibrant Information Security Team. As a key contributor, you will play a critical role in implementing, optimizing, and maintaining cutting-edge security solutions that protect our organization from ever-evolving threats.

Working location: Changi, East

Your Impact:

• Become the go-to expert (SME) for our security systems: Leverage your deep understanding to unlock their full potential and ensure maximum protection.
• Architect and execute comprehensive security strategies: Plan, assess, design, and deploy the latest security software and hardware solutions.
• Champion innovative security initiatives: Identify and recommend solutions that strengthen our security posture and stay ahead of emerging threats.
• Guide and educate: Provide expert consultancy, technical guidance, and training to empower other teams.
• Collaborate with stakeholders: Partner with infrastructure teams to design secure solutions and advise on firewall requests.
• Stay vigilant: Continuously research emerging threats and vulnerabilities, proposing effective mitigation strategies.
• Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
• Deliver with excellence: Manage project priorities, deadlines, and deliverables independently with minimal supervision.

What you bring:

• Proven track record: Minimum of 5 years in information security, preferably with application security expertise.
• Certified expertise: Holding recognized certifications like CISSP, CSSLP, or CEH is a plus.
• Proven implementation experience: Demonstrated knowledge of conducting security product POCs and RFQs.
• Hands-on experience: Familiarity with implementing and maintaining tools like EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, and network security solutions.
• Technical prowess: Deep understanding of at least one security area like network design, zero trust, IoT, or cryptography.
• Security-minded: Keen awareness of common web/mobile application vulnerabilities and the ability to mitigate them.
• Communication maestro: Possess strong verbal, written, presentation, and interpersonal skills.
• Positive and proactive: Exhibit drive, initiative, enthusiasm, and a sense of urgency when tackling critical issues.
• Team player: Thrive in both independent and collaborative work environments.

APPLY NOW! Interviews are ongoing! Email to dayna.chiam@stellar-link.com

We regret to inform that only shortlisted candidates would be notified.

Chiam Lee Ping Dayna

Consultant

Reg. No: R1764404

Stellar- Link Partners Pte Ltd (EA License: 21S0698)

Job Responsibilities:

1. Support sales efforts by attending security sales meetings when necessary, providing effort estimations, and outlining project timelines for security testing.
2. Develop security acceptance test plans.
3. Offer expert technical support during security testing activities.
4. Prepare for security tests by setting up testing environments, configuring, and installing security testing tools.
5. Conduct manual or automated security testing using commercial security testing tools.
6. Perform Greybox Testing (Authenticated) and/or Blackbox Testing (Unauthenticated) Penetration Tests.
7. Conduct Whitebox Testing and Secure Code Review.
8. Perform Network and Infrastructure Vulnerability Assessment and Penetration Testing.
9. Perform Web, Mobile, and Desktop Application Vulnerability Assessment and Penetration Testing.
10. Identify and pinpoint vulnerabilities in the assessed target systems/applications.
11. Document and report identified vulnerabilities in the system.
12. Provide professional recommendations and advice to mitigate and resolve vulnerabilities.
13. Present security testing results to relevant stakeholders.
14. Provide weekly status reports on the progress of security testing activities.

Key Requirements:

1. Possession of one of the following certifications:CREST Registered Penetration Tester (CREST CRT)
   Offensive Security Certified Professional (OSCP)
   
2. Knowledge of conducting security testing adhering to guidelines and standards such as:Open Web Application Security Project (OWASP Top 10 Frameworks)
   Common Vulnerability Scoring System (CVSS)
   Common Vulnerabilities and Exposures (CVE)
   Common Weakness Enumeration (CWE) / SANS Top 25 Software Errors
   
3. High proficiency in manual and automated techniques for penetration testing across various systems and applications, including but not limited to network equipment, servers, web applications, APIs, wireless systems, mobile applications, and databases. Techniques include vulnerability assessments for injection, privilege escalation, fuzzing, buffer overflows, etc.
4. Familiarity with tools such as Proxies, Port Scanners, Vulnerability Scanners, and Exploit Frameworks (e.g., Burp, Nessus, Nmap, Metasploit).

Interested candidates, who wish to apply for the above position, please send in your resume to priyanka_tewari@persolkelly.com.

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd
EA License No. 01C4394
EA Reg No: R1875348 (Tewari Priyanka)

**********************************

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available

Responsibilities

• Understand the current system security measures and implement security enhancements in line with organizations goals and objectives

• Conduct regular system tests and audits by validating and verifying technical controls in minimizing the risk

• Good understanding of business requirements, identify key security requirements and articulate it to business effectively and efficiently in terms of actual risk and safeguards, risk management

• Good understanding of guidelines such as MAS TRM, ISO and NIST standards or equivalent

• Good knowledge on Security Incident Response and run book preparation for emerging and new threats, applying safeguards where possible to minimize the threat.

• Sound understanding on Ransomware, XSS, Injection and other similar attacks

• Participate in various business meetings to understand the entire data flow and recommend security solutions to mitigate the concerns/risks

• Good knowledge and understanding of encryption technologies (both symmetric and asymmetric algorithms) and its applications

• Participates in various compliance programs, audits the report and recommend to reflect the accurate security posture to make business decisions

• Establish and oversee a formal vulnerability and testing program.

• Oversee the patch cycle and ensure that patches are performed at regular intervals

• Participate in Account Recertification programs and be a key player to take ownership and sign appropriate forms necessary as security exceptions

• Liaise with Internal Audit, Corporate Compliance, Office of General Counsel and Risk.

• Conduct security campaigns to organization such as Phishing, Data Leakage, etc.

• Management to remediate new and outstanding issues; track security-related issues in the GRC system.

• Participate in design activities and provide various solutions to ensure security is not compromised at various phases of the program lifecycle

• Recommend and provide templates where possible for end users to assist in minimizing the security risks

• Train other staff and external clients as necessary.

• Manage, coach, lead and develop a small/mid staff of GRC personnel.

• Directly responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.

• Establish and oversee formal risk analysis and self-assessments program for various Information Services systems and processes.

Requirements

• Degree/Degree in IT / Computer Science / related discipline with 12-15+ years of relevant experience in Cyber Security.

• Should have played Security Lead Role in Transformation and Operate program.

• Experience in industry frameworks such as ABS, SSAE, SOC2 etc.

• Good understanding of the following :

• Infrastructure and Network security, Cloud Security, Identity and Access Management, Privileged Management (CyberArk), Compliance with Banking Regularity compliance (BFSI), HIPAA, PCI and the NC Identity Theft law., Firewall security, IDS/IPS placement, SIEM tools, Wireless Security, End point security, Data Loss Prevention, Web Application Security, Threat Hunting/Threat Intel

• Familiarity with industry compliance and security standards including MAS TRM, HKMA, PCI DSS, ISO 27001 and NIST

• Working experience in Cyber Security SecOps

• Customer focused with strong communication, Strong written and verbal communication skills

• Able to multi-task and prioritize incidents & requests accordingly.

• Strong analytically with a natural ability to solve complex issues.

• Industry and Technology certifications such as CRISC, CISA, CISSP, CISM, CEH

• Excellent customer interfacing skills.

Licence No: 12C6060