Total 16 Senior Executive environmental engineer job vacancies in Legal / Public / Security category

• Perform security assessments, identify risks and gaps, and recommend improvement plans.
• Support the design, evaluation, and deployment of cybersecurity solutions including EDR, SASE, Zero Trust, and endpoint/network security controls.
• Participate in proof-of-concept activities, vendor evaluations, technical workshops, and customer engagements.
• Prepare assessment reports, technical documentation, project deliverables, and presentations.
• Collaborate with customers, vendors, and internal teams to ensure successful project delivery.
• Keep up to date with cybersecurity trends, threats, and industry best practices.

Qualifications:

• Degree in Information Technology, Cybersecurity, Computer Science, Computer Engineering, or a related discipline.
• At least 5 years of experience in cybersecurity, security engineering, security assessments, solution implementation, consulting, or related areas.
• Hands-on experience in security assessments, gap analysis, risk identification, and remediation planning.
• Experience engaging customers or stakeholders in advisory, consulting, or project delivery environments.
• Practical knowledge in one or more areas: EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
• Ability to assess cybersecurity risks and provide practical, business-focused recommendations.
• Strong communication skills to present technical concepts effectively to both technical and non-technical audiences.
• Experience with Cato Cloud or comparable SASE platforms.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, ISO/IEC 27001, or similar standards.
• Understanding of firewalls, VPNs, routing, Active Directory, Microsoft 365 security, and cloud connectivity.
• Relevant certifications such as CISSP, CISM, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, Azure Security, or equivalent.

To apply, please visit www.gmprecruit.com and search for Job Reference: 3W36XV68

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Bautista Gia Grace De Guzman | Registration No: R23111973

Our client, a well-known company is looking for candidates for the position of Senior Security Engineer.

Responsibilities

• Conduct security assessments, identify risks and gaps, and propose practical, actionable improvement and remediation plans.
• Support the design, evaluation, and implementation of cybersecurity solutions such as EDR, SASE, Zero Trust, and endpoint and network security controls.
• Engage in proof-of-concept activities, vendor evaluations, technical workshops, and customer discussions.
• Prepare assessment reports, technical documentation, project deliverables, and presentation materials.
• Coordinate with customers, internal teams, and vendors to deliver cybersecurity projects on time and within scope.
• Stay updated on emerging cybersecurity technologies, threats, and best practices to continuously improve service quality.

Key Requirements and Experience

• Degree in Information Technology, Cybersecurity, Computer Engineering, Computer Science, or a related field.
• Minimum 5 years of experience in cybersecurity, security engineering, security assessment, solution implementation, or cybersecurity consulting.
• Hands-on experience in security assessment, gap analysis, risk identification, and remediation planning.
• Experience working with customers or stakeholders in consulting, project delivery, or advisory roles.

Required Technical Skills

• Knowledge and practical experience in one or more areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
• Ability to understand cybersecurity risks and translate technical findings into practical recommendations.
• Ability to explain cybersecurity risks, solutions, and priorities clearly to both technical and non-technical audiences.

Preferred Qualifications

• Experience with Cato Cloud or similar SASE platforms.
• Knowledge of security frameworks such as NIST Cybersecurity Framework, CIS Controls, or ISO/IEC 27001.
• Familiarity with network and infrastructure fundamentals such as firewalls, VPN, routing, Active Directory, Microsoft 365 security, or cloud connectivity.
• Relevant cybersecurity certifications such as CISSP, CISM, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, Azure Security, or vendor certifications.

EA License No.: 01C4394 (PERSOL SINGAPORE PTE LTD)

Registration No.: R23112488 (Julian Nerchan)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Responsibilities

• Conduct security assessments, identify risks and gaps, and propose practical improvement plans.
• Support design, evaluation, and implementation of cybersecurity solutions such as EDR, SASE, Zero Trust, and endpoint/network security controls.
• Support proof-of-concept activities, vendor evaluations, technical workshops, and customer discussions.
• Prepare assessment reports, technical documentation, project deliverables, and presentation materials.
• Coordinate with customers, internal teams, and vendors to deliver cybersecurity projects on time and within scope.
• Stay updated on cybersecurity technologies, threats, and best practices to improve service quality.

Requirements

• Minimum 5 years of experience in cybersecurity, security engineering, security assessment, solution implementation, or cybersecurity consulting.
• Experience in security assessment, gap analysis, risk identification, and remediation planning.
• Experience working with customers or stakeholders in consulting, project delivery, or advisory roles.
• ⁠Knowledge and practical experience in one or more areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance
• Ability to understand cybersecurity risks and translate technical findings into practical recommendations.
• Ability to explain cybersecurity risks, solutions, and priorities clearly to technical and non-technical audiences.

GMP Recruitment Services (S) Pte Ltd | EA Licence: 09C3051 | VO UYEN AI LINH | Registration No: R22109232 

Position Overview:

Squarepoint is seeking a subject matter expert to join our Information Security team as a Senior Information Security Engineer. This senior position plays a pivotal role in strengthening our security posture by providing expert guidance, and driving improvements across key areas such as network, cloud, data, and system security. The successful candidate will act as an escalation point to the Security Operations, ensuring complex security problems are effectively analysed and resolved. This role includes overseeing security in critical IT projects, leading threat modelling for complex systems, auditing key systems for security gaps, and building automated capabilities to continuously validate controls’ effectiveness and system resilience. This position offers an opportunity to lead security initiatives and shape the security roadmap. A high degree of self-motivation and proactivity is mandatory for success in this role.

• Strengthen security across core areas, including network and system security, email security, cloud security, and data protection.
• Serve as a security advisor for IT projects, ensuring security requirements are met and risks are mitigated.
• Manage and optimize security tools, ensuring they are effectively deployed and maintained.
• Lead the design and development of security solutions and architectures to protect critical assets.
• Provide second-line support to Security Operations.
• Conduct threat modelling and risk assessments to identify vulnerabilities and drive proactive mitigation strategies.
• Oversee relationships with the Managed Detection and Response (MDR) provider, ensuring service effectiveness and continuous improvement.
• Execute security roadmap’s initiatives, aligning with business objectives and emerging threats.
• Collaborate with cross-functional teams to enhance security awareness and integrate security into business processes.

Required Qualifications:

• Minimum 5 years of hands-on experience in an information security role, such as security engineering, security architecture, security operations, or application security.
• Thorough understanding of security best-practices, principles, and system hardening techniques.
• Hands-on experience with threat modelling, security testing, including penetration testing, and automated security validation.
• Solid knowledge of cloud, network, and systems security concepts.
• Experience with scripting with one or more languages – Python and PowerShell experience is a plus.
• Familiarity with security tools such as EDR software, DLP solutions, vulnerability scanners, firewalls and email gateways.
• Strong analytical skills and problem-solving skills, with the ability to investigate complex problems and design pragmatic solutions.
• Effective communication skills to work with technical and non-technical teams.
• Degree in Engineering, Computer Science, or STEM related field.

Nice to have:

• Strong knowledge of risk assessment methodologies.
• Familiarity with security best practices, configurations, and threat management in Azure, AWS, and GCP.
• Ability to analyse software for security risks, including reviewing source code, performing static and dynamic analysis, and identifying vulnerabilities in application design and implementation.
• Familiarity with regulatory frameworks and security standards (e.g., SEC Cybersecurity rules, MAS TRM Guidelines, NFA Cybersecurity Guidance, GDPR etc.)
• Relevant security certifications.

The Company

Our client is seeking a Senior Security Engineer (APAC) to strengthen application and engineering security across the region. This is a hands-on role focused on Secure SDLC, Application Security, DevSecOps, secure deployments, and advisory support aligned to ISO and NIST frameworks.

The Role

• Drive and enhance Secure Software Development Lifecycle (SSDLC) practices across engineering teams
• Embed security controls and best practices into all stages of the application development lifecycle
• Conduct application security assessments, threat modelling, secure design reviews, and vulnerability assessments
• Identify, assess, and support remediation of application security risks and vulnerabilities
• Integrate security tooling and controls into CI/CD pipelines to support secure software delivery
• Drive automation of security testing including code scanning, dependency checks, secrets detection, and container security
• Work closely with DevOps, cloud, and engineering teams to ensure secure deployments across environments
• Act as a trusted security advisor to technology and business stakeholders across APAC
• Support governance initiatives and align security controls with ISO and NIST frameworks
• Partner with risk, compliance, infrastructure, and engineering teams on remediation and audit-related activities

Your Profile

• At least 7 years of experience in information security, application security, DevSecOps, or a related cybersecurity role
• Strong hands-on experience in Secure SDLC and Application Security
• Proven experience integrating security into DevSecOps and secure software deployment processes
• Solid understanding of secure coding principles, common application vulnerabilities, and remediation approaches
• Experience with SAST, DAST, SCA, container scanning, or similar security technologies
• Familiarity with cloud and modern application environments
• Good understanding of ISO and NIST security standards and frameworks
• Strong communication and stakeholder management skills, with the ability to work effectively across regional teams
• Relevant certifications such as OSCP, GWAPT, CSSLP, CISSP, or cloud security certifications will be an advantage
• Experience in regulated environments and exposure to enterprise-scale application environments will be preferred

Apply Today

Please send your resume, in WORD format only and quote reference number Ref No DC13460646, by clicking the apply button. Please note that only short-listed candidates will be contacted.

Robert Half International Pte Ltd. Co. Registration no.: 200612189E | EA Licence no.: 07C5595 | Dmitriy Chervinskyi EA Registration no.: R22108655

By clicking ‘apply’, you give your express consent that Robert Half may use your personal information to process your job application and to contact you from time to time for future employment opportunities. For further information on how Robert Half processes your personal information and how to access and correct your information, please read the Robert Half privacy notice: https://www.roberthalf.com.sg/privacy-statement. Please do not submit any sensitive personal data to us in your resume (such as government ID numbers, ethnicity, gender, religion, marital status or trade union membership) as we do not collect your sensitive personal data at this time.

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

• Hands-on ownership of Azure AD/Entra ID Security and O365 Conditional Access design and implementation.
• End-to-end ownership of cloud and infrastructure security as part of a holistic infrastructure operating model.
• Owned cloud and infrastructure security as a core component of the end-to-end infrastructure operating model to ensure seamless security integration.

about the company
We need a potential infrastructure leader who builds security into the very DNA of our systems.

We are looking for a Senior Infra Security Engineer who "owns" the environment. You aren't just managing tools; you are designing and implementing the secure foundation of our global infrastructure.

about the job

• Take full ownership of the infrastructure security lifecycle from initial architectural design and "shift-left" deployment to day-to-day operational excellence.
• This is not a "support" task. You will lead the design and hands-on implementation of our Azure AD / Entra ID ecosystem, including complex O365 Conditional Access policies and IAM frameworks.
• Build and secure scalable Azure and AWS environments, ensuring every VNET, Firewall, and PaaS service is hardened against modern threats while optimized for cost and performance.
• Drive the transition to a modern operating model by automating security controls using Terraform or similar tooling, ensuring compliance is "baked in" by default.
• Beyond prevention, you will own the technical execution of Disaster Recovery and Business Continuity plans, ensuring our global operations remain uninterrupted.

skills and experience required
At least 8+ years of experience, but more importantly, a track record of owning infrastructure. You can describe the "why" and "how" behind the systems you’ve built.

Hands-on expert in Microsoft Azure/AWS, with specific, demonstrable experience in securing Entra ID (Azure AD) and designing sophisticated Conditional Access workflows.

Understand how a firewall change affects the application layer and how an IAM policy impacts the developer workflow.

You can bridge the gap between high-level roadmaps and low-level configuration, communicating effectively with both the C-suite and the engineering team.

whats an offer
The permanent opportunity for a Senior Infrastructure Security Engineer, will pay a salary range of $ 8,500 - $ 9,800 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

Key Responsibilities

• Lead the monitoring and analysis of security events across networks, applications, and systems.
• Oversee incident response activities, ensuring rapid containment, investigation, and remediation.
• Conduct advanced threat hunting and forensic analysis to identify sophisticated attacks.
• Develop and enforce security policies, standards, and procedures across the organization.
• Collaborate with IT, compliance, and business units to align security initiatives with organizational goals.
• Evaluate and recommend new security tools, technologies, and processes.
• Prepare and review reports on security posture, risks, and incident trends.
• Stay ahead of emerging threats, vulnerabilities, and regulatory requirements.
• Assist with security audits and assessments.

Qualifications

• Bachelor’s or Master’s degree in computer science, Cybersecurity, or related ffeld.
• 5–8 years of experience in cybersecurity.
• Strong expertise in SIEM platforms, intrusion detection/prevention, endpoint protection, and cloud security.
• In-depth knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and regulatory standards (MAS TRM, PDPA and Cyber Hygiene).
• Proven experience in incident response, digital forensics, and threat intelligence.
• Excellent leadership, communication, and stakeholder management skills.
• Excellent analytical, problem-solving, and communication skills.

Preferred Skills

• Advanced certifications such as CISSP, CISM, OSCP.
• Fluency in English and Chinese, to support our expanding base of Chinese-speaking customers
• Experience with cloud security (AWS, Azure)
• Experience with security automation and orchestration (SOAR).
• Familiarity with DevSecOps practices and secure software development lifecycle.
• Ability to translate complex technical risks into clear business impacts.

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Additional job description

The new Singapore-based team will be dedicated to scaling our operations and risk reduction efforts through advanced automation and remediation. Our mission is to safeguard billions of users by efficiently triaging external security reports and proactively eliminating vulnerabilities across Google's products and infrastructure. We aim to evolve into a self-sustaining, AI-driven operation that provides deep insights into vulnerability trends while fostering a community of security researchers.

Qualifications

Job responsibilities

• Review designs and look for vulnerabilities, both with one-time reviews and long-term engagements. Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Drive large-scale remediation efforts that eliminate entire vulnerabilities across Google’s products and infrastructure.
• Guide the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
  

Preferred qualifications

• 1 year of experience in leading technical risk analysis in an enterprise environment.
• Experience building or deploying automated tools (e.g., large language model based agents) for security workflows such as triage automation or bug fixing.
• Experience with cross-functional or cross-product teams.
• Experience consulting on security/security protocols.
• Excellent communication skills.

Location: Melbourne

Team: Business Systems & Security

Reporting to: Head of Business Systems & Security

The PaperCut Story

At PaperCut, we believe two things: great code can change the world, and a great flat white can change your morning.

Now, let's be honest, "print management" doesn't usually make people leap out of their chairs. But here at PaperCut, we’ve turned the most boring part of IT into one of the most exciting and impactful jobs in tech. How? Simply put, our code saves trees!

We’re a BCorp-certified company on a mission to make our customers' printing waste-free, easy, and secure. With a global footprint spanning 195 countries and 140 million end users, we are a true Australian success story moving forward into the cloud, SaaS, and beyond print.

What you’ll actually be doing

• Influencing without Hierarchy: You’ll work across our diverse tech stack  (Java, Go, React, TypeScript etc.), across the organisation, to ensure security is baked into the SDLC from day one.

• The Helpful Expert: You’ll be the person developers want to talk to. You’ll help them run threat models for new features and coach them on writing code that is secure by design.

• Modern Cloud Security: You’ll take ownership of securing our global SaaS offerings (along with the DevSecOps team), focusing primarily on Google Cloud Platform (GCP) with some exposure to AWS.

• Technical Compliance: You’ll work with our Legal team to ensure we meet ISO27001 and other standards, not by filling out spreadsheets, but by building the technical controls that make those standards a reality.

• Scaling the Practice: You’ll help us select and tune the right mix of SAST, DAST, and SCA tools to keep our pipelines fast and our code safe.

What you bring to the table

• Deep Technical Roots: You’ve spent time in the weeds of information security and are comfortable reading and reviewing code.

• The "Uplift" Mindset: You measure your success not by how many tickets you open, but by how much more secure the engineering teams become because of your guidance.

• Cloud Fluency: You have a strong understanding of GCP or AWS and how to secure containerised workloads at scale.

• Ambition to Lead: You aren't looking for a "Lead" role just yet—you want to stay hands-on while developing the skills to lead a practice and mentor other engineers.

Why Join PaperCut?

• Values-Driven: We’re guided by our values: Caring, Honest, Intelligent, and Nimble (CHIN). They aren't just posters; they’re how we build products and treat each other.

• Melbourne Born & Bred: We are a true Australian success story, still owned and run by our founder right here in Melbourne.

• Share the Success: We offer all permanent employees a Share the Success bonus, ensuring that when the company thrives, our people do too.

• Real Impact: PaperCutters are involved in strategic decisions through collaborative leadership groups. We respect expertise and give you the autonomy to build.

• Generous Leave: Including up to 18 weeks of parental leave and a genuine commitment to Diversity, Equity, Inclusion, and Belonging.

The PaperCut Pledge

Ghosting is for Halloween, we commit to responding to every single applicant. Our hiring process is designed to be enjoyable, thorough, and fair, allowing you to show the best version of yourself.

Ready to trade your old code for code that saves trees? Apply now—the first coffee is on us!

About the Role

We’re looking for a hands-on Security Engineer / Architect to help secure our systems, data, and funds across our infrastructure.

You’ll work closely with IT, Infra, R&D, Web3, Product, and business teams to design practical security controls, lead security projects end-to-end, run offensive security exercises, and support ongoing security initiatives. This is a role for someone who is comfortable going from high-level architecture to very concrete implementation details and automation.

Responsibilities

Core Security Engineering

• Design and implement security controls to protect sensitive data, financial assets, and critical systems, ensuring integrity, confidentiality, and availability.
• Evaluate, recommend, and lead the implementation of security solutions (tools, platforms, processes) in a hands-on manner.
• Own security projects from inception to rollout, working closely with IT, Infrastructure, R&D, Web3 and other business units to ensure secure and timely delivery.
• Proactively identify and assess risks and vulnerabilities, and define/enforce mitigation strategies (technical and process).

Offensive Security, Testing & Bug Bounty

• Plan and execute penetration tests and targeted assessments (applications, APIs, infrastructure) either directly or by coordinating external partners.
• Lead or support red teaming / adversarial simulations to test detection, response, and real-world resiliency of critical workflows and infrastructure.
• Work with engineering teams on purple teaming style exercises: jointly validating detections, hardening controls, and improving runbooks.
• Own the technical side of the bug bounty / responsible disclosure process:
• Triage and validate incoming reports
• Coordinate with engineering owners
• Track remediation and communicate outcomes internally (and externally where needed)

Automation & Security Engineering

• Build and maintain security automation: scripts, playbooks, and pipelines that reduce manual toil (e.g., auto-enrichment of alerts, automated checks in CI/CD, policy-as-code).
• Integrate and tune SAST/DAST/SCA, IaC scanning, image scanning, and secrets scanning into CI/CD to catch issues early with minimal noise.
• Implement detection-as-code (e.g., for SIEM / logging platforms) and continuously refine alerts based on real incidents and red team learnings.

Policy, Operations & Collaboration

• Develop, refine, and maintain security policies, standards, and procedures, with a strong focus on data, funds, and access security.
• Contribute to day-to-day security operations and monitoring, including reviewing alerts, supporting incident response, and improving detection & response capabilities.
• Collaborate with stakeholders (IT, HR, Infra, R&D, Product, Trading, and other teams) to align security initiatives with business goals and product roadmaps.

Background & Experience

• 5+ years of hands-on experience in cybersecurity, with a proven track record designing and implementing security solutions, frameworks, and policies.
• Experience with security architecture, risk assessments, and vulnerability management in complex, fast-paced environments.
• Demonstrated experience in at least one of:

----- Penetration testing / offensive security (infra, apps, APIs, or Web3), or

----- Running or working closely with red team / purple team engagements

• Experience triaging and managing security findings from scanners, pen tests, and bug bounty programs (HackerOne, Bugcrowd, self-hosted, etc.).
• Demonstrated ability to deploy and administer IAM platforms (e.g., Okta or similar) and define robust access models (RBAC, SSO, MFA).
• Competence in configuring and managing EDR and MDM solutions across a diverse device and user base.
• Hands-on experience with regulatory and compliance requirements relevant to financial institutions or crypto companies (e.g., SOC 2, ISO 27001:2022, DORA, NIST, CIS).
• Interest in Web3 / crypto (DeFi, trading platforms, digital asset custody/security, etc.) is highly advantageous
• Comfort with at least one scripting / programming language (Python, Go, TypeScript, etc.) to build automations, integrations, and internal tools.

Competencies & Personality

• Strong team player who enjoys working cross-functionally with IT, HR, Infra, R&D, Product, Trading, and business stakeholders.
• Genuinely passionate about cybersecurity, offensive and defensive — enjoys thinking like an attacker but building like an engineer.
• Experience embedding security best practices into day-to-day workflows (development, infrastructure, operations) and driving automation over manual checks.
• Ability to articulate complex security concepts in clear, practical terms to both technical and non-technical audiences.
• Values ownership, accountability, and clear communication, and is comfortable operating in a fast-changing environment with high autonomy.
  

Certifications

Must-have

• OSCP – we expect a deep, hands-on understanding of offensive techniques, not just theory.

Nice to have

• CISSP, CISM, or equivalent broad security leadership/architecture certifications.
• Relevant GIAC certs (e.g., GWAPT, GCPN, GSEC, GCLD, GCIA, GIAC Cloud / Web / Exploit tracks).
• Cloud security certifications (e.g., AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer).
• Kubernetes / container security or general K8s certifications (CKS, CKA, etc.).

We are seeking an experienced and proactive Senior Cyber Security Engineer to join our Global Cyber Security Operations team. This role requires an experienced security professional responsible for executing and supporting cybersecurity operations globally but with a focus on our manufacturing facility. This role has a primary focus on global insider risk management and data loss prevention (DLP), while also providing hands‑on operational support for local manufacturing risks. You will work closely with our Security Operations Center (SOC), incident response teams, and other IT stakeholders to stay ahead of emerging threats and ensure we’re able to build great products securely.

ESSENTIAL DUTIES AND RESPONSIBILITIES: 

Insider Risk Management & Data Protection

• Assist in the management and configuration of Sandisk governance controls related to data security
• Execute day‑to‑day operations of insider risk management and data security controls using Microsoft Purview, MIP, IRM, and DLP technologies.
• Monitor, triage, and investigate insider risk alerts and data loss events using Microsoft Purview, Microsoft Defender, and SIEM tooling, following defined procedures and escalation paths.
• Conduct detailed analysis and documentation of insider risk and data protection incidents, including evidence handling and recommended follow‑up actions.
• Support tuning and refinement of DLP and insider risk policies to improve signal quality and reduce false positives, in coordination with platform owners and senior analysts.

Endpoint Detection, Response & Manufacturing Security

• Perform hands‑on monitoring, investigation, and response activities using Microsoft Defender for Endpoint and CrowdStrike Falcon in an enterprise environment.
• Investigate endpoint‑based alerts affecting manufacturing office systems, engineering workstations, and privileged users, correlating activity across EDR, identity, and data signals.
• Support incident response efforts impacting the manufacturing site, including containment actions, evidence collection, and post‑incident documentation.
• Maintain awareness of manufacturing‑specific risks, including engineering workflows, shared systems, and IP‑sensitive environments.

Automation, Scripting & Analysis

• Use scripting and basic programming to support investigations, data analysis, and operational efficiency.
• Develop and maintain simple scripts or queries (e.g., PowerShell, Python, KQL) to assist with alert triage, log analysis, data validation, and reporting.
• Leverage scripting to reduce repetitive manual tasks while operating within established security tooling and change controls.

Work Style & Attributes

• Self‑motivated and dependable, with a strong work ethic in an on‑site, semi‑isolated environment.
• Comfortable operating as an individual contributor with defined scope and responsibilities.
• Collaborative and approachable, with a service‑oriented mindset toward local manufacturing and IT teams.
• Detail‑oriented and risk‑aware, with an appreciation for balancing security controls against manufacturing uptime and business impact.
• Strong analytical and critical-thinking skills with high attention to detail.
• Clear and concise written and verbal communication, including to non-technical stakeholders.
• Ability to remain composed and effective under pressure during active security incidents.
• Team-oriented and collaborative with a proactive, security-first mindset.
• Ability to approach security challenges with genuine curiosity and a questioning attitude, consistently digging deeper to understand the "why" behind alerts, behaviors, and anomalies rather than accepting surface-level conclusions.

We are seeking a highly experienced Cloud-Native Security Engineer to design, implement, and manage enterprise-level security solutions across cloud environments. The role involves security governance, risk management, and secure platform development, ensuring robust protection for cloud and containerized systems.

Key Responsibilities

• Design and implement Cloud Security Posture Management (CSPM) frameworks
• Develop automated security monitoring, detection, and remediation pipelines
• Establish and enforce security governance and control mechanisms
• Perform security assessments, penetration testing, and vulnerability management
• Integrate security practices into SDLC / DevSecOps pipelines
• Enhance container and Kubernetes security, including policy enforcement and runtime protection
• Develop and maintain security platforms such as WAF, IDS/IPS, and SIEM systems
• Lead incident response, threat analysis, and risk mitigation activities
• Collaborate with cross-functional teams to strengthen overall security posture

Job Requirements

• Strong hands-on experience with AWS, GCP, or Azure
• Expertise in Kubernetes and container security
• Experience in CSPM tools and cloud governance frameworks
• Knowledge of DevSecOps and CI/CD security integration
• Experience in penetration testing and vulnerability management
• Familiarity with enterprise security architecture and compliance standards

Preferred Qualifications

• CISSP certification
• AWS Solutions Architect – Professional certification
• Kubernetes certifications (CKA / CKAD / CKS / KCNA)
• Experience in AI-driven security solutions is an advantage

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Additional job description

Enterprise Data Protection (EDP) is an overarching cybersecurity program that delivers holistic security controls across Google's systems and enables the enforcement of consistent security policies on all platforms housing Google’s IP.

EDP develops and delivers native security controls while influencing, integrating, and driving security standards across other teams. We focus on proactive, preventive measures designed to mitigate threats before they occur.

In EDP, you will engineer the next generation of data protection by building infrastructure that safeguards Google’s intellectual property and user data. We deliver reliable, high-scale systems and seamless Data Loss Prevention (DLP) solutions that balance security with developer usability, ensuring every Googler can work securely and resiliently across the globe.

Qualifications

Job responsibilities

• Design, build, and implement security solutions to identify, measure, and remediate security gaps in Alphabet's infrastructure using public clouds (e.g., Google Cloud Platform) and on-premise physical networks.
  
• Review designs for cloud architecture and already deployed infrastructure to perform technical security assessments, develop threat models, provide design feedback, report security findings and provide remediation recommendation.
  
• Design solutions and develop documentation that ensure Alphabet's infrastructure using public clouds (e.g., Google Cloud Platform), on-premise physical networks, and other third-party hosted software and systems to the security standards.
  
• Build security tools and processes using Python or Go for critical infrastructure protection, monitoring, and remediation.
• Conduct security reviews of core corporate and production infrastructure.

Minimum qualifications

• Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
  
• 5 years of experience with security in attacks and mitigation methods.
  
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Preferred qualifications

• Experience developing threat models and performing technical security assessments of systems.
• Understanding of networking concepts (e.g., protocols, topologies, encryption).
  
• Ability to design and develop new security control implementations.