Total 538 information security analyst job vacancies in Legal / Public / Security category in The Philippines

Responsibilities:

·      Support daily network security operations, including monitoring and basic security controls

·      Assist in vulnerability management for network devices, servers, and endpoints (scan, track, follow-up)

·      Support security monitoring and alert handling (e.g., firewall, endpoint, network logs)

·      Perform basic log analysis to identify abnormal or suspicious activities

·      Assist in incident investigation and response

·      Work with IT and regional teams to follow up and close security issues

·      Support implementation and improvement of basic security controls (network, end point, server)

·      Contribute to administrative and routine security-related tasks as needed

·      Provide ad-hoc support to group-wide security projects and initiatives

Requirements:

·      Bachelor’s degree in Information Security, Cyber Security, Computer Science, or related field

·      1–3years of experience in information security, IT security, or system/network administration

·      Basic understanding of network fundamentals (TCP/IP, firewall, VPN, etc.)

·      Basic knowledge of operating systems (Windows/Linux) and endpoint security

·      Experience with security tools or platforms (e.g., SIEM, EDR, firewall solutions)

·      Familiar with vulnerability management or basic security operations concepts

·      Able to work with teams across regions

·      Experience working in an international or cross-regional environment is a plus

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You are a recognized expert in at least two security domains and use your leadership skills to manage a team that sets the direction and goals for solving Google-wide problems. You identify fundamental security problems at Google and drives major security improvements in Google infrastructure.

Additional job description

As the foundational Security Engineering Manager for Google Vulnerability Rewards Program (VRP) in Singapore, you will lead a team of security and software engineers. You will scale our vulnerability handling capacity by architecting AI-driven agents for triage, reproduction, and automated bug fixing. Beyond operations, you will drive unified risk reporting and lead large-scale remediation projects to eliminate entire vulnerability classes across Google.You are a proven leader with a technical foundation and broad application security expertise—spanning web, mobile, API, and threat modeling.

Qualifications

Job responsibilities

• Maintain a high level of operational independence while collaborating closely with global leads in the US and Zurich to align on technical direction.
• Oversee the Singapore-based triage and remediation rotation, ensuring effective vulnerability reproduction, severity assessment, and bug filing for incoming security reports.
• Steer the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.
• Build and maintain a unified vulnerability analysis pipeline and dashboarding system to provide executive-level insights into emerging threats and program return on investment (ROI).
• Drive large-scale remediation efforts that eliminate entire classes of vulnerabilities across Google’s products and infrastructure.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in a technical leadership role; overseeing projects, with 2 years of experience in a people management, supervision/team leadership role.
• Experience with the bug bounty lifecycle, including triage, severity assessment, and researcher community management.

Preferred qualifications

• Master’s degree or PhD in Engineering, Computer Science, or a related technical field.
• Experience building or deploying automated tools (e.g., LLM-based agents) for security workflows such as triage automation or bug fixing.
• Experience driving large-scale security improvements and collaborating with product teams to remediate widespread technical issues.
• Proven track record of managing engineering teams and a background in software security, particularly in vulnerability reproduction and variant analysis.

Responsibilities:

·      Monitor security alerts and perform initial analysis

·      Investigate security events using SIEM and related tools

·      Perform log analysis to identify suspicious activities

·      Support incident investigation and response

·      Help improve detection rules and monitoring coverage

·      Work with teams in different regions on security operations tasks

·      Contribute to administrative and routine security-related tasks as needed

·      Provide ad-hoc support to group-wide security projects and initiatives

Requirements:

·      Bachelor’s degree in information security, Computer Science, or related field

·      1–3years of experience in security operations, SOC, or related work

·      Familiar with basic SOC processes (alert handling, incident response)

·      Experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk)

·      Basic log analysis capability (Windows, Linux, network logs)

·      Able to work with teams across regions

·      Experience working with overseas or cross-regional teams is a plus

Supervises Security personnel on assigned shifts to ensure compliance with policies and procedures.

• In the absence of the Safety/Security Manager, functions on assigned shift as primary on center contact for on-duty supervisors, law enforcement agencies and other on-duty staff for immediate response to situations requiring Safety and Security staff attention.
• Continually makes physical inspections and security checks of grounds and facility and documents results.
• Performs safety/security officer duties and provides supervision to staff to protect life and property against theft, vandalism, misappropriation, fire, flood, or similar disaster on assigned shift in compliance with government, corporate, and management directives.
• Informs the Safety/Security Manager or designee of anything that warrants immediate attention, including major incidents, extreme emergencies, unscheduled arrival of important visitors, etc.
• Investigates incidents on center and provides clear and accurate reports.
• Controls disturbances and assists staff in de-escalating situations.
• Completes required security logs, documentation, and records accurately and on time.
• Accurately logs employees, visitors, vendors, and students as they enter and exit the center.
• Adheres to safety practices in all areas of responsibility.
• Fosters and sustains a conducive environment, ensuring it remains free from harassment, intimidation, and disrespect.
• Attends all required staff training opportunities.

- At least 5 years experience with configuration and security analysis module

- Define security policy and validate configuration items of managed SAP landscape

- Familiar with alerting capablitiies for proactive security manage-ment

- Knowledge of integration with Guided Procedure to automate secu-rity check and assess effectiveness of security measures - Knowledge of Simple Diagnotiss Agent (SDA) and CCDB availa-ble in Focused Run

- Knowledge of XML programming languages used in Focused Run policies

We are seeking a strategic yet hands-on Information Security Officer to join our growing cyber security function. This role bridges security governance with practical technical implementation ensuring that security requirements are translated into effective, real-world controls.

You will strengthen the organization’s security posture by designing, implementing and validating security controls aligned with regulatory, business and technology requirements. You will work closely with internal stakeholders across IT and business units and, where applicable, support client engagements as a trusted security advisor.

This role focusses primarily on technical security implementation, control effectiveness, and risk reduction, rather than people management or purely policy-driven work.

Key Responsibilities

1.      Information Security Framework & Procedures

• Collaborate with Information Security (InfoSec) Department to interpret security policies and translate them into practical, organization-wide procedures.

• Design, document and maintain standardized security processes aligned with internal policies and external standards (e.g. ISO 27001, SS 714:2025).

• Ensure Security procedures are pragmatic, scalable, and adopted across business units.

• Continuously review and improve procedures to reflect changes in technology, risk landscape, and regulatory requirements.
  

2.      Security Review & Technical Assessment

• Assess gaps between current security practices and defined security benchmarks and drive hands-on improvements.

• Perform relevant security assessments such as configuration reviews, vulnerability assessments and control effectiveness reviews.

• Review and refine existing security and operational procedures to ensure effectiveness and scalability.

• Lead the implementation and rollout of new or updated security controls and procedures, ensuring smooth integration into existing technical and operational workflows.

• Validate that implemented controls meet policy and regulatory requirements, maintaining appropriate documentation for audit, assurance and continuous improvement purposes.
  

3.      Stakeholder Enablement & Advisory

• Act as the subject matter expert for information security across the organization and on client projects where applicable.

• Communicate security risks, trade-offs and recommendations clearly to both technical and non-technical stakeholders.

• Deliver targeted security awareness and training sessions to improve organizational cybersecurity maturity.

• Mentor and support process owners and system owners to ensure long-term ownership and sustainable execution of security controls.
  

4.      IT Collaboration & MIS Security Oversight

• Collaborate closely with IT, infrastructure, application and MIS teams.

• Periodically assess MIS-related systems, process, and data flows from an information security and risk perspective.

• Advise IT and MIS stakeholders on security control design, configuration hardening, and risk mitigation measures.

• Validate that MIS solutions and system implementations align with organizational security policies, approved architectures, and regulatory requirements.

• From time to time, support or assist with MIS-related tasks and initiatives where security input or technical understanding is required, particularly during system changes, reviews, or implementation.
  

Required Qualifications & Skills

Relevant Experience

• Demonstrated experience in information security, cybersecurity risk management, IT risk or IT audit, with hands-on involvement in implementation or validating security controls.

• Experience working in complex IT environments involving multiple systems, platforms, or regulatory requirements.

• Working experience with implementation and maintenance of solutions such as Microsoft Intune/Entra, Apple Business Manager, Wazuh is highly advantages.
  

Expertise

• Strong understanding of cybersecurity principles, security architectures, risk management concepts, and control frameworks.

• Practical experience applying security standards and frameworks such as ISO 27001 or equivalent.
  

Communication

• Ability to explain security concepts, risks, and requirements clearly to business leaders, technical teams, and cross-functional teams.

• Comfortable influencing without direct authority and working collaboratively across teams.
  

Certifications

• Security certifications such as CISA, CISM, CISSP or equivalent practical experience designing, implementing, and assessing security controls in real-world environments.
  

Analytical Mindset

• Strong ability to analyse complex environments, identify hidden security or compliance risks, and recommended pragmatic, risk-based solutions.

• Detail-oriented, with the ability to balance security rigor with business practicality.
  

What Success Looks Like in This Role

• Security policies are translated into controls and procedures that are consistently implement and understood across the organization.

• Security gaps are proactively identified, prioritized, and remediated.

• MIS and IT system demonstrate measurable improvement in security posture and audit readiness.

• Stakeholders view the Information Security Officer as a trusted advisor who enables secure and scalable business operations.

Security Executive
$3,000-$3,200

As a Security Executive is essentially a frontline leader who ensures that security operations at a site run smoothly, safely, and in line with company and client expectations.
They’re the operational backbone of a site’s security, sitting between management and ground officers.

Duties and Responsibilities

·      Oversee daily security operations at the assigned site. This includes deployment of officers, managing shifts, ensuring proper coverage, and responding to incidents or emergencies.

·      Lead and supervise security officers on-site. Provide guidance, conduct briefings,enforce discipline, and ensure all staff follow standard operating procedures(SOPs).

·      Monitor staff performance and service standards. Identify training needs, coach team members, and ensure officers are competent in handling security duties and emergency situations.

·      Handle security incidents such as trespassing, theft, or safety breaches. Prepare detailed incident reports and escalate issues to management when required.

·      Identify gaps in operations and recommend improvements to enhance security effectiveness and efficiency.

·      Act as the main point of contact for clients at the site. Address concerns, ensure service expectations are met, and maintain good working relationships.

·      Ensure all operations comply with company policies, legal requirements, and safety regulations. Conduct regular checks and audits to maintain standards.

·      Manage rostering, attendance, documentation, and reporting. Ensure all records are accurate and up to date.

·      Developing and implementing standard operating procedures for security operation.

·      Collaborating with other departments and integrating security measures and ensuring consistent security practices.

·      Managing a team of security personnel, including security guards, security control room operators and security operations staff,

REQUIREMENTS

• Must hold a valid PRD grade of at least security supervisor rank.
• At least a Diploma-certified in relevant field
• Min. 3 years of relevant working experience
• Able to maintain confidentiality and exercise discretion
• Independent with strong sense of responsibility
• Equipped with computer skills (Microsoft Applications, etc)
• A good team player

About Akkodis

Akkodis is a global leader in engineering and R&D, leveraging connected data and deep technical expertise to accelerate innovation and digital transformation. With over 50,000 engineers and digital specialists across 30 countries in North America, EMEA, and APAC, Akkodis supports clients across the full innovation lifecycle—from concept and engineering to deployment and operations.

Its capabilities span mobility, software and technology services, robotics, testing and simulation, data security, AI, and analytics. Akkodis is part of the Adecco Group, bringing together the strengths of AKKA and Modis.

Job Summary

We are seeking a Cybersecurity SOC Engineer with strong hands-on experience in infrastructure and security operations within complex, multi-vendor enterprise environments. This role requires a proactive individual who can operate effectively in evolving and partially structured environments while maintaining high standards in security operations, troubleshooting, and system validation.

Experience Requirements

• 5–8 years of relevant experience in infrastructure, cybersecurity operations, or system integration
• Proven experience working in complex, multi-vendor enterprise environments
• Ability to work effectively in dynamic environments with evolving processes

Key Technical Skills

Core Infrastructure & Security

• Hands-on experience with:Firewalls (e.g., Check Point or equivalent)SIEM platforms (e.g., LogRhythm or similar)Endpoint security solutions (e.g., Symantec or equivalent)Network Access Control tools (e.g., Aruba ClearPass or similar)
• Strong understanding of:Networking fundamentals (TCP/IP, routing, switching, VPNs)Security operations and incident response workflows

Systems & Operations

• Experience in Linux/Unix environments
• Strong troubleshooting capabilities across system and network/security issues
• Familiarity with:Ticketing tools (e.g., JIRA, ServiceNow)Log monitoring and analysis tools

Key Functional Competencies

• Strong troubleshooting and root cause analysis (RCA) mindset
• Ability to quickly learn and adapt across multiple technologies
• Comfortable working in documentation-heavy environments (e.g., test reports, RCA, compliance documentation)
• Effective stakeholder management across multiple teams and approval layers
• High sense of ownership and accountability, especially in ambiguous situations

Ideal Candidate Profile

• Resilient and adaptable in fast-paced, high-demand environments
• Able to balance operational responsibilities, testing activities, and documentation requirements
• Works independently with minimal supervision while collaborating effectively with cross-functional teams
• Demonstrates a pragmatic, solution-oriented mindset with the ability to prioritise and execute under imperfect conditions.

Don't miss out on this chance to be a part of a dynamic and growing team. Take the Next Step in your career journey with us!

• To apply, please submit your updated resume along with your notice period. [ We are looking for someone to start ASAP]
• Click on the 'Apply here' button to drop your resume directly or email it to susmita.SAHU@akkodis.com
• Our team will review all applications and contact shortlisted candidates for further steps in the selection process.

* Strong hands-on experience performing compliance testing of mobile applications that meet certain Technology Security Standardsand regulatory/industries requirements, eg MAS TRM, OWASP MSTG
* In-depth knowledge of iOS/android architecture, including their underlying security mechanisms
* Experienced with performing secure code review of Swift / Kotlin/Objective-C and Java applications.
* Proficient with various reverse engineering tools such as IDA Pro, Ghidra, as well as Frida.re hooking framework or equivalent
* Knowledge of RM architectures (armeabi-v7a, arm64-v8a, etc) an advantage.
* Experience analyzing and bypassing various security mechanisms commonly present in mobile applications (SSL pinning,root/jailbreak detection, anti [tampering, in-app VPN, etc).
* Ability to develop BURP extensions to aid with mobile and web application tests.
* Solid experience conducting Web Application Penetration tests following industry standards methodologies.
* Ability to conduct comprehensive source code reviews across multiple languages (mobile, web, backend).
* Web & Infrastructure Security Testing

Qualifications & Skills

* Bachelor’s degree in Computer Science, Information Security, or related discipline.

* Minimum 2 years of hands-on penetration testing or relevant offensive security experience
* CREST CRT certification mandatory.
* Additional certifications such as OSCP, OSCE, OSEE, OSWE, Red Teaming, Cloud Security, Artificial Intelligence securitycredentials are advantageous.

* Excellent oral and written communication skills, including the ability to present technical findings.

* Strong organizational and time management skills; able to manage multiple engagements and meet tight deadlines.

* Self-motivated, proactive and able to work independently or as part of a team

Cloud Security Engineer

Responsibilities:

• Conduct vulnerability tests on Client's Cloud infrastructure and services for potential threats, misconfigurations and weaknesses.
• Strong in Vulnerability management tools like Tenable.
• Implement best practices in Cloud security, Develop and maintain automated scripts for vulnerability scanning and reporting.
• Stay current with the latest security trends, tools, and AWS features to enhance our security posture.
• Address all findings promptly and effectively and document findings for reporting to management.

Requirements:

• Strong in Tenable AWS services such as EC2, S3, RDS, and Lambda.
• Proficient with security vulnerability tools and platforms
• Deep understanding of security principles, practices, and risk management.
• Certifications in AWS or RHEL are advantageous.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : kelvin@starcareerconsulting.com

Kelvin Lee (Reg. No. R1872625)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

Description

Who we are

Employment Hero is on a mission to make employment easier and more valuable for everyone. Our Employment Operating System brings hiring, HR, payroll and benefits into an all-in-one solution. 

Since our inception in 2014, we’ve scaled to a $2 billion valuation and gained a presence in 6 countries globally – Australia, New Zealand, Singapore, Malaysia, the UK and Canada. We now service over 300,000 businesses and more than 2 million employees. 

The EH Way

At Employment Hero, we’re proud of our unique DNA, which we call The EH Way.  

1. We are Mission First – everything we do (from what we work on, to how we allocate capital and where we focus) is driven by our Mission
2. We are Remote First – we champion a remote environment with a preference for asynchronous communication and a high degree of autonomy 
3. We are AI First – we are committed to using AI to accelerate our mission; AI is not just a tool, it’s a fundamental part of how we operate, innovate, and scale
4. We are Apolitical – we do not take a position on political or social topics, unless it relates to our Mission
5. We Live by Our Values – we role model our values 100% of the time
6. We Expect High Performance – we set a high standard and we’re not satisfied with being average

This role 

The Cloud Security Engineer is responsible for securing our AWS environment, with a strong focus on automation, AI-assisted workflows, and scalable security controls.

This role is not just about fixing issues, but about building intelligent systems that continuously detect, prioritise, and remediate cloud risks with minimal manual effort.

As a Cloud Security Engineer, you will be responsible for:

Cloud Security Engineering

• Remediate cloud risks across IAM, network exposure, encryption, and workloads
• Design and implement secure-by-default patterns across AWS (IAM guardrails, network segmentation, least privilege)
• Partner with SRE and Engineering to embed security into infrastructure and deployments

AI-Driven Detection & Response

• Leverage AI tools to triage, prioritise, and investigate cloud security findings
• Build workflows that correlate signals from cloud logs, EDR, and third-party tools into actionable insights
• Continuously improve detection coverage using AI-assisted analysis

DevSecOps & Automation

• Build automated security checks into CI/CD (IaC scanning, dependency risk, secrets detection)
• Use AI to accelerate vulnerability triage and remediation workflows
• Reduce manual security effort through scripting, automation, and intelligent tooling

Security Data & Intelligence

• Integrate and analyse data from sources such as SBOMs, vulnerability feeds, and threat intelligence
• Use AI to identify patterns, emerging risks, and prioritisation signals across large datasets
• Contribute to internal “security data platform” initiatives

Who You Are 

Required

• Strong experience securing AWS environments
• Solid understanding of IAM, networking, logging, and cloud-native architectures
• Experience with infrastructure-as-code (e.g. Terraform) and CI/CD pipelines
• Ability to script and automate (Python, Bash, or similar)
• Familiarity with SBOM, supply chain security, and dependency risk management
• Experience using or integrating AI tools in engineering or security workflows

Preferred

• Experience with tools like AWS Security Hub, GuardDuty, Wiz, or Datadog
• Experience building internal tools or automation platforms

What we can offer

At Employment Hero, we don’t just talk about a better way to work – we live it. Joining Employment Hero means

• You will work remotely, with the flexibility to own your time and impact
• You will access cutting-edge tools to amplify your work, knowledge and outputs 
• You’ll surround yourself with ambitious, outcome-driven colleagues who challenge you to do the best work of your life
• You’ll own ESOP (employee share options) in one of the world’s fastest-growing tech companies 
• You’ll also have access to a wide range of benefits that includes – a very generous parental leave policy, subsidised egg freezing (so you can make the choice that’s right for you, on your terms), a WFH office expense budget, and outstanding learning & development opportunities 

We’re AI-first, so you may meet some of our AI tools early in the process. They help us cut the noise, surface great talent fast and make sure every candidate gets a fair, consistent experience.

We verify candidate identity and location as part of our hiring process.

At Employment Hero, we are committed to safeguarding the privacy of your application data. To understand how we do so, you can read our Applicant Privacy Policy here employmenthero.com/legals/applicant-policy/

Employment Hero celebrates diverse perspectives and experiences, we invite people of all backgrounds and identities to apply for this position.

Overview

We are looking for a Cyber Security Researcher to focus on vulnerability research for mobile platforms (Android/iOS). This role involves identifying and analysing security flaws using offensive techniques for defensive purposes, working closely with cyber threat experts to strengthen system security.

Responsibilities

• Conduct reverse engineering on mobile applications and systems (Android/iOS)
• Perform fuzzing, vulnerability research, and code auditing to identify security flaws
• Analyse and exploit vulnerabilities (e.g. memory corruption, logic flaws)
• Develop proof-of-concept (PoC) exploits to validate findings
• Investigate vulnerabilities and propose remediation strategies
• Collaborate with internal teams to enhance overall system security

Requirements

• Diploma/Degree in Computer Science, Computer Engineering, or related field
• 3–5 years of experience in cybersecurity / vulnerability research
• Strong experience in:Reverse engineering, Vulnerability discovery and analysis, Code auditing
• Proficient in: C, Python, ARM / AArch64 assembly (preferred)
• Good understanding of: Common vulnerability classes (e.g. buffer overflow, memory issues)
• Experience with tools like IDA Pro, Ghidra, or similar

Responsibilities:
Network & System Security

• Review and support the design and implementation of secure network architecture (LAN/WAN, VPN, cloud, hybrid)
• Assist in configuring firewalls, network segmentation, and access controls
• Support secure setup of new systems, sites, and integrations
• Apply secure configuration standards to infrastructure and systems
• Implement zero trust principles where applicable

Firewall & Network Security Policy Ownership

• Implement firewall rules based on approved standards and requests
• Perform initial review of firewall rule changes and escalate where needed
• Support enforcement of least-privilege access across network zones
• Assist in managing secure remote access (VPN, admin, third-party)

MDR Integration &Security Visibility

• Ensure systems and network devices are properly onboarded to MDR/SIEM
• Monitor security alerts and escalate incidents based on defined procedures
• Work with MDR provider to investigate and respond to security events
• Support basic tuning of monitoring rules and logging requirements

Security Operations& Risk Support

• Perform vulnerability scans and support remediation tracking
• Assist in risk assessments and identification of security gaps
• Support incident response activities and documentation
• Assist with security audits and testing activities

Change & ProjectSecurity Support

• Participate in security review of infrastructure and system changes
• Highlight potential risks (e.g., access exposure, misconfigurations, lateral movement exposure))
• Provide recommendations to improve security posture

Security Governance & Standards

• Establish and maintain network security baseline standards

• Develop and enforce security policies, standards, and procedures

• Define security requirements for new infrastructure, sites, and systems
• Support audits and security assessments
• Assist in aligning implementations with internal standards and frameworks (e.g., NIST,ISO27001)

Collaboration &Awareness

• Work closely with infrastructure and IT teams on secure implementations
• Provide basic security guidance to technical teams when required
• Promote security awareness and good practices

Awareness & Training

• Provide security guidance to IT and business teams
• Promote best practices and awareness

Requirements:

Education

• Bachelor’s degree in IT, Cybersecurity, or related field

Experience

• 2–5years in cyber security, network security, and infrastructure security
• Hands-on experience with: -Firewalls (e.g., SonicWall, Fortinet, Palo Alto Networks) -VPN, endpoint security, or basic IDS/IPS -Network design or system architecture
• Exposure to enterprise network environments (multi-site preferred)
• Experience supporting projects
• Experience with OT/industrial networks
• Knowledge of compliance/regulations (GDPR, PDPA, etc.)

Technical Skills

• Good understanding of:
• TCP/IP, networking fundamentals
• VLANs, segmentation, and access control concepts
• Firewall rules and basic network security principles
• VPN and remote access security -Familiarity with:
• SIEM/MDR concepts
• Vulnerability scanning tools
• Basic cloud security concepts

ARSLAN SRS Pte Ltd