We want you to join our team!
We are looking for an experienced individual as a Cyber Security Engineer in Singapore and keen to pursue a career in a consulting firm. The candidate will be the principal cyber security engineerx and expert for multiple infrastructure domains. The candidate will design and implement security solutions as well as provide level 3 support to the operations teams.
Key Responsibilities
- Subject matter expert responsible for the review, design and implementation of security solutions that meet current and future needs of the organization.
- Define the requirements, scoring criteria, and conduct proof of concept reviews of new products to determine the best technology to implement.
- Hands-on technical design, test and implementation activities together with related Technology parties (e.g. platform teams, datacentre teams, vendors) and handover/transition to the appropriate Production Support teams.
- Documentation for deployed solutions to meet PMS and SDF standards & guidelines & obtain all required signoffs.
- Final escalation point for deep technical security issues.
- Managing and dealing with technical as well as senior stakeholders, vendors, including peers from other departments
- Mentoring and training junior team members
Who Are We Looking For?
Communications
Essential
A strong command of spoken and written English.
Good to Have
Demonstrable ability to engage with customers across technology teams and provide remotely located management with confidence that priorities are well attended to
Soft Skills
Essential
- 5+ years’ experience working in a team delivering technology centric customer focused services.
- Involvement with process improvement initiatives.
- 3+ years’ experience working as a technical lead on large scale projects.
- Successfully delivered at least 1 large project.
- Prior experience in running Proof of Concept evaluations.
- Self-starter, ability to work independently without direct supervision.
Good to Have
- 7+ years’ experience in a multinational financial institution.
- Experience in balancing conflicting priorities and negotiating an acceptable resolution.
- Experience in using metrics to highlight and report issues.
- Lead architect or engineering experience for complex projects.
- References to service improvements personally led or championed.
Cyber Security Skills
Essential
- A sound grasp of the fundamental Information Security principles.
- Track record in designing and delivering security related solutions.
- A basic understanding of information risk management practices.
- Experience in defining corporate technology standards.
Good to Have
Knowledge of security related standards such as ISO27k, Common Criteria, MAS TRM, PCI-DSS.
Expert level experience in at least one or more of the following, with some level of experience or knowledge in most:
[Database Security Monitoring]
Essential
5+ years’ solution design, engineering, testing and deployment experience with Database Activity Monitoring solutions.
Good to Have
- Prior experience with Imperva SecureSphere DAM or equivalent solutions.
- Good understanding of Hadoop and Big Data.
[Host-based Security Monitoring]
Essential
5+ years’ solution design, engineering, testing and deployment experience with Host-based Intrusion Detection Systems solutions.
[Security Monitoring Infrastructure]
Essential
- 5+ years’ experience in engineering, implementing and configuring SIEM tools.
- Good understanding of the logging/auditing systems used by major vendors, including those on Operating Systems, Databases and Network equipment.
- Experience in scripting on both Unix and Windows.
- Ability to define and design meaningful security reports from data caught within SIEM tools.
Good to Have
Prior experience with Splunk.
[Cloud and Virtualisation]
Essential
- 5+ years’ architecting and engineering experience with deploying solutions in AWS & Azure Cloud and VMWare’s virtualisation technologies.
- Good knowledge and understanding of cloud technologies, Jenkins, Vx pipeline, Terraform with the ability to deploy solutions into a cloud service securely.
[Integration with Active Directory and other Enterprise systems]
Essential
- 5+ years’ hands-on experience in integrating solutions with enterprise security solutions such as the Active Directory, privileged access management systems, SIEM and other monitoring systems.
- Excellent understanding of how Active Directory works past the GUI interface.
- Good understanding of DNS, Web Proxy, E-mail infrastructure and other network services and how to integrate with them.
[Firewall and Webservices]
Essential
Good understanding of Firewall, web proxy and Network IDS technologies.
[VA and Malware]
Essential
Prior experience in testing, configuring and deploying enterprise level antivirus infrastructure.
[Network]
Essential
- Excellent understanding of TCP/IP networking fundamentals.
- Good understanding of NAC and VPN technologies.
- Good understanding of multifactor authentication systems and how to integrate them in an enterprise environment.
[Unix]
Essential
Excellent understanding of Unix security and hardening practices.
[Windows]
Essential
Excellent understanding of Windows security and hardening practices.
Other requirements
Educational
Essential
Bachelor Degree in Engineering, Computer Science/Information Technology or its equivalent.
Good to have
An Information Security degree, qualification or certifications for example from: SANS, GIAC, EC Council, (ISC)2, etc.
Technical skills
Essential
- AWS certifications
- Experience of engineering security solutions.
- Good understanding of TCP/IP networking concepts.
- Strong knowledge of either Unix or Windows.
Good to have
- Process Improvement techniques.
- Knowledge of SQL.
- Knowledge or either Unix or Windows scripting languages.
- Able to perform data manipulations and analysis in either MS Excel or MS Access
Sounds good? Interesting, I hope? Do send your updated CV to
[email protected] to learn more. Or give a shout here on LinkedIn and we will try try and check if our interests align!