Total 17 Senior Executive infrastructure engineer job vacancies in Legal / Public / Security category in The Philippines

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

• Hands-on ownership of Azure AD/Entra ID Security and O365 Conditional Access design and implementation.
• End-to-end ownership of cloud and infrastructure security as part of a holistic infrastructure operating model.
• Owned cloud and infrastructure security as a core component of the end-to-end infrastructure operating model to ensure seamless security integration.

about the company
We need a potential infrastructure leader who builds security into the very DNA of our systems.

We are looking for a Senior Infra Security Engineer who "owns" the environment. You aren't just managing tools; you are designing and implementing the secure foundation of our global infrastructure.

about the job

• Take full ownership of the infrastructure security lifecycle from initial architectural design and "shift-left" deployment to day-to-day operational excellence.
• This is not a "support" task. You will lead the design and hands-on implementation of our Azure AD / Entra ID ecosystem, including complex O365 Conditional Access policies and IAM frameworks.
• Build and secure scalable Azure and AWS environments, ensuring every VNET, Firewall, and PaaS service is hardened against modern threats while optimized for cost and performance.
• Drive the transition to a modern operating model by automating security controls using Terraform or similar tooling, ensuring compliance is "baked in" by default.
• Beyond prevention, you will own the technical execution of Disaster Recovery and Business Continuity plans, ensuring our global operations remain uninterrupted.

skills and experience required
At least 8+ years of experience, but more importantly, a track record of owning infrastructure. You can describe the "why" and "how" behind the systems you’ve built.

Hands-on expert in Microsoft Azure/AWS, with specific, demonstrable experience in securing Entra ID (Azure AD) and designing sophisticated Conditional Access workflows.

Understand how a firewall change affects the application layer and how an IAM policy impacts the developer workflow.

You can bridge the gap between high-level roadmaps and low-level configuration, communicating effectively with both the C-suite and the engineering team.

whats an offer
The permanent opportunity for a Senior Infrastructure Security Engineer, will pay a salary range of $ 8,500 - $ 9,800 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

Senior Legal Counsel | Renewable Energy / Infrastructure / Data Centres | Construction Disputes & Arbitration | 8+ PQE | Singapore / Malaysia CL-OC-22

Interested applicants: please email your CV to claire@2nats.com and quote CL-OC-22 (do not rely only on the job portal, TQ!)

About the company

Our client is an established regional platform with a growing portfolio of renewable energy, infrastructure and digital projects across APAC. They are looking for an experienced construction disputes lawyer to support contentious matters arising from complex live projects, with particular focus on claims strategy, dispute management and resolution.

The opportunity

This role is suited for a lawyer with strong experience in contentious construction matters, including claims assessment, dispute strategy, settlement negotiations and formal proceedings. You will work closely with internal project, commercial and management teams on live issues across major projects, and help shape the approach to both pre-dispute and active dispute matters.

Key responsibilities

• • Advise on contentious construction and project-related issues arising from renewable energy, infrastructure and digital projects across APAC
  • Assess and manage claims relating to delay, disruption, defects, variation, payment, termination, extension of time and liquidated damages
  • Develop dispute strategy and advise internal stakeholders on legal and commercial risk exposure
  • Support and lead settlement discussions with contractors, subcontractors, suppliers and other counterparties
  • Manage pre-dispute processes, including claims analysis, preservation of rights, notices, correspondence and strategic positioning
  • Work with external counsel on adjudication, arbitration, litigation and expert processes where required
  • Review evidence, project records and contractual documentation to support claim prosecution or defence
  • Advise senior management on contentious risk, likely outcomes and resolution options
  • Support the wider business on disputes avoidance, lessons learned and strengthening claims management practices

Requirements

• • Qualified lawyer in a common law jurisdiction
  • At least 8 years’ PQE, with strong disputes experience gained in a leading law firm and/or relevant in-house environment
  • Strong background in construction disputes, arbitration and claims management
  • Experience in infrastructure, energy, engineering, construction or major projects matters
  • Familiarity with EPC, O&M, procurement and other project-related agreements, including FIDIC-based and common law structures
  • Proven ability to handle complex, document-heavy and high-value disputes
  • Strong drafting, analytical and stakeholder management skills
  • Experience across APAC and cross-border matters will be advantageous
    
    
    Interested applicants do reach out via email to claire@2nats.com (do not only apply through this job portal, TQ!)

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

Key Responsibilities

• Lead the monitoring and analysis of security events across networks, applications, and systems.
• Oversee incident response activities, ensuring rapid containment, investigation, and remediation.
• Conduct advanced threat hunting and forensic analysis to identify sophisticated attacks.
• Develop and enforce security policies, standards, and procedures across the organization.
• Collaborate with IT, compliance, and business units to align security initiatives with organizational goals.
• Evaluate and recommend new security tools, technologies, and processes.
• Prepare and review reports on security posture, risks, and incident trends.
• Stay ahead of emerging threats, vulnerabilities, and regulatory requirements.
• Assist with security audits and assessments.

Qualifications

• Bachelor’s or Master’s degree in computer science, Cybersecurity, or related ffeld.
• 5–8 years of experience in cybersecurity.
• Strong expertise in SIEM platforms, intrusion detection/prevention, endpoint protection, and cloud security.
• In-depth knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and regulatory standards (MAS TRM, PDPA and Cyber Hygiene).
• Proven experience in incident response, digital forensics, and threat intelligence.
• Excellent leadership, communication, and stakeholder management skills.
• Excellent analytical, problem-solving, and communication skills.

Preferred Skills

• Advanced certifications such as CISSP, CISM, OSCP.
• Fluency in English and Chinese, to support our expanding base of Chinese-speaking customers
• Experience with cloud security (AWS, Azure)
• Experience with security automation and orchestration (SOAR).
• Familiarity with DevSecOps practices and secure software development lifecycle.
• Ability to translate complex technical risks into clear business impacts.

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Additional job description

The new Singapore-based team will be dedicated to scaling our operations and risk reduction efforts through advanced automation and remediation. Our mission is to safeguard billions of users by efficiently triaging external security reports and proactively eliminating vulnerabilities across Google's products and infrastructure. We aim to evolve into a self-sustaining, AI-driven operation that provides deep insights into vulnerability trends while fostering a community of security researchers.

Qualifications

Job responsibilities

• Review designs and look for vulnerabilities, both with one-time reviews and long-term engagements. Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Drive large-scale remediation efforts that eliminate entire vulnerabilities across Google’s products and infrastructure.
• Guide the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
  

Preferred qualifications

• 1 year of experience in leading technical risk analysis in an enterprise environment.
• Experience building or deploying automated tools (e.g., large language model based agents) for security workflows such as triage automation or bug fixing.
• Experience with cross-functional or cross-product teams.
• Experience consulting on security/security protocols.
• Excellent communication skills.

Location: Melbourne

Team: Business Systems & Security

Reporting to: Head of Business Systems & Security

The PaperCut Story

At PaperCut, we believe two things: great code can change the world, and a great flat white can change your morning.

Now, let's be honest, "print management" doesn't usually make people leap out of their chairs. But here at PaperCut, we’ve turned the most boring part of IT into one of the most exciting and impactful jobs in tech. How? Simply put, our code saves trees!

We’re a BCorp-certified company on a mission to make our customers' printing waste-free, easy, and secure. With a global footprint spanning 195 countries and 140 million end users, we are a true Australian success story moving forward into the cloud, SaaS, and beyond print.

What you’ll actually be doing

• Influencing without Hierarchy: You’ll work across our diverse tech stack  (Java, Go, React, TypeScript etc.), across the organisation, to ensure security is baked into the SDLC from day one.

• The Helpful Expert: You’ll be the person developers want to talk to. You’ll help them run threat models for new features and coach them on writing code that is secure by design.

• Modern Cloud Security: You’ll take ownership of securing our global SaaS offerings (along with the DevSecOps team), focusing primarily on Google Cloud Platform (GCP) with some exposure to AWS.

• Technical Compliance: You’ll work with our Legal team to ensure we meet ISO27001 and other standards, not by filling out spreadsheets, but by building the technical controls that make those standards a reality.

• Scaling the Practice: You’ll help us select and tune the right mix of SAST, DAST, and SCA tools to keep our pipelines fast and our code safe.

What you bring to the table

• Deep Technical Roots: You’ve spent time in the weeds of information security and are comfortable reading and reviewing code.

• The "Uplift" Mindset: You measure your success not by how many tickets you open, but by how much more secure the engineering teams become because of your guidance.

• Cloud Fluency: You have a strong understanding of GCP or AWS and how to secure containerised workloads at scale.

• Ambition to Lead: You aren't looking for a "Lead" role just yet—you want to stay hands-on while developing the skills to lead a practice and mentor other engineers.

Why Join PaperCut?

• Values-Driven: We’re guided by our values: Caring, Honest, Intelligent, and Nimble (CHIN). They aren't just posters; they’re how we build products and treat each other.

• Melbourne Born & Bred: We are a true Australian success story, still owned and run by our founder right here in Melbourne.

• Share the Success: We offer all permanent employees a Share the Success bonus, ensuring that when the company thrives, our people do too.

• Real Impact: PaperCutters are involved in strategic decisions through collaborative leadership groups. We respect expertise and give you the autonomy to build.

• Generous Leave: Including up to 18 weeks of parental leave and a genuine commitment to Diversity, Equity, Inclusion, and Belonging.

The PaperCut Pledge

Ghosting is for Halloween, we commit to responding to every single applicant. Our hiring process is designed to be enjoyable, thorough, and fair, allowing you to show the best version of yourself.

Ready to trade your old code for code that saves trees? Apply now—the first coffee is on us!

About the Role

We’re looking for a hands-on Security Engineer / Architect to help secure our systems, data, and funds across our infrastructure.

You’ll work closely with IT, Infra, R&D, Web3, Product, and business teams to design practical security controls, lead security projects end-to-end, run offensive security exercises, and support ongoing security initiatives. This is a role for someone who is comfortable going from high-level architecture to very concrete implementation details and automation.

Responsibilities

Core Security Engineering

• Design and implement security controls to protect sensitive data, financial assets, and critical systems, ensuring integrity, confidentiality, and availability.
• Evaluate, recommend, and lead the implementation of security solutions (tools, platforms, processes) in a hands-on manner.
• Own security projects from inception to rollout, working closely with IT, Infrastructure, R&D, Web3 and other business units to ensure secure and timely delivery.
• Proactively identify and assess risks and vulnerabilities, and define/enforce mitigation strategies (technical and process).

Offensive Security, Testing & Bug Bounty

• Plan and execute penetration tests and targeted assessments (applications, APIs, infrastructure) either directly or by coordinating external partners.
• Lead or support red teaming / adversarial simulations to test detection, response, and real-world resiliency of critical workflows and infrastructure.
• Work with engineering teams on purple teaming style exercises: jointly validating detections, hardening controls, and improving runbooks.
• Own the technical side of the bug bounty / responsible disclosure process:
• Triage and validate incoming reports
• Coordinate with engineering owners
• Track remediation and communicate outcomes internally (and externally where needed)

Automation & Security Engineering

• Build and maintain security automation: scripts, playbooks, and pipelines that reduce manual toil (e.g., auto-enrichment of alerts, automated checks in CI/CD, policy-as-code).
• Integrate and tune SAST/DAST/SCA, IaC scanning, image scanning, and secrets scanning into CI/CD to catch issues early with minimal noise.
• Implement detection-as-code (e.g., for SIEM / logging platforms) and continuously refine alerts based on real incidents and red team learnings.

Policy, Operations & Collaboration

• Develop, refine, and maintain security policies, standards, and procedures, with a strong focus on data, funds, and access security.
• Contribute to day-to-day security operations and monitoring, including reviewing alerts, supporting incident response, and improving detection & response capabilities.
• Collaborate with stakeholders (IT, HR, Infra, R&D, Product, Trading, and other teams) to align security initiatives with business goals and product roadmaps.

Background & Experience

• 5+ years of hands-on experience in cybersecurity, with a proven track record designing and implementing security solutions, frameworks, and policies.
• Experience with security architecture, risk assessments, and vulnerability management in complex, fast-paced environments.
• Demonstrated experience in at least one of:

----- Penetration testing / offensive security (infra, apps, APIs, or Web3), or

----- Running or working closely with red team / purple team engagements

• Experience triaging and managing security findings from scanners, pen tests, and bug bounty programs (HackerOne, Bugcrowd, self-hosted, etc.).
• Demonstrated ability to deploy and administer IAM platforms (e.g., Okta or similar) and define robust access models (RBAC, SSO, MFA).
• Competence in configuring and managing EDR and MDM solutions across a diverse device and user base.
• Hands-on experience with regulatory and compliance requirements relevant to financial institutions or crypto companies (e.g., SOC 2, ISO 27001:2022, DORA, NIST, CIS).
• Interest in Web3 / crypto (DeFi, trading platforms, digital asset custody/security, etc.) is highly advantageous
• Comfort with at least one scripting / programming language (Python, Go, TypeScript, etc.) to build automations, integrations, and internal tools.

Competencies & Personality

• Strong team player who enjoys working cross-functionally with IT, HR, Infra, R&D, Product, Trading, and business stakeholders.
• Genuinely passionate about cybersecurity, offensive and defensive — enjoys thinking like an attacker but building like an engineer.
• Experience embedding security best practices into day-to-day workflows (development, infrastructure, operations) and driving automation over manual checks.
• Ability to articulate complex security concepts in clear, practical terms to both technical and non-technical audiences.
• Values ownership, accountability, and clear communication, and is comfortable operating in a fast-changing environment with high autonomy.
  

Certifications

Must-have

• OSCP – we expect a deep, hands-on understanding of offensive techniques, not just theory.

Nice to have

• CISSP, CISM, or equivalent broad security leadership/architecture certifications.
• Relevant GIAC certs (e.g., GWAPT, GCPN, GSEC, GCLD, GCIA, GIAC Cloud / Web / Exploit tracks).
• Cloud security certifications (e.g., AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer).
• Kubernetes / container security or general K8s certifications (CKS, CKA, etc.).

Senior Legal Counsel | Renewable Energy & Digital Infrastructure | 8+ PQE | Singapore / Malaysia

Interested applicants: please email your CV to claire@2nats.com and quote CL-OC-21 (do not rely only on the job portal, TQ!)

About the company

We are working on an exciting in-house opportunity for a senior construction lawyer to support a growing portfolio of renewable energy and digital infrastructure projects across APAC. This is a regional role suited for a commercially minded legal professional who is strong on EPC and project contracts, and comfortable partnering closely with business, project execution teams, lenders and external counsel.

The opportunity

You will provide legal support across the project lifecycle, with a focus on construction, operation and maintenance matters for onshore and offshore wind, solar, battery storage, hydrogen and data centre projects. The role sits close to the business and will involve advising on complex project documentation, supporting lender diligence processes and helping manage legal and contractual risk across multiple jurisdictions.

Key responsibilities

• • Drafting, reviewing and negotiating EPC, procurement, O&M and other construction-related agreements
  • Supporting projects across development, construction, operations and maintenance phases
  • Advising on bankability issues and ensuring these are appropriately reflected in project documentation
  • Supporting lender due diligence processes, including Q&A management and diligence meetings
  • Advising on contract management, claims, pre-disputes and dispute strategy
  • Working closely with senior management, project teams and external counsel across the region
  • Identifying legal risk and helping ensure compliance with local laws and market practice across APAC

Requirements

• • Qualified lawyer in a common law jurisdiction
  • At least 8 years’ PQE, with a strong portion of training gained in a reputable law firm
  • Strong experience in construction and infrastructure projects, ideally within renewables, energy or related sectors
  • Proven capability handling sophisticated EPC structures, including turnkey, split and multi-contract models
  • Familiarity with common law governed construction contracts, including FIDIC-based forms and contracts under English, Singapore, Australian or US law
  • Strong drafting, negotiation and stakeholder management skills
  • Comfortable working independently in a fast-paced, regional environment

Why this role?

This is a strong opportunity for a senior projects lawyer who enjoys being embedded in the business and working on complex, high-value infrastructure matters across the region. You will gain exposure to a broad mix of renewable energy and digital infrastructure projects, while partnering with a sophisticated commercial team on strategic and execution-driven work.

Warm regards,

Claire Lin Xiuxin EA Licence No.: R1103711

2Nats (Nat & Nat Search Pte Ltd EA: 26C3281)

Whatsapp Messaging: +65 8892 1316 | Email: claire@2nats.com  Website: https://2nats.com/ 

Linkedin: linkedin.com/in/clairelinxx/

Interested applicants do reach out via email to claire@2nats.com (do not only apply through this job portal, TQ!)

Senior Legal Counsel | Renewable Energy / Infrastructure / Data Centres | Construction Disputes & Arbitration | 8+ PQE | Singapore / Malaysia CL-OC-22

Interested applicants: please email your CV to claire@2nats.com and quote CL-OC-22 (do not rely only on the job portal, TQ!)

About the company

Our client is an established regional platform with a growing portfolio of renewable energy, infrastructure and digital projects across APAC. They are looking for an experienced construction disputes lawyer to support contentious matters arising from complex live projects, with particular focus on claims strategy, dispute management and resolution.

The opportunity

This role is suited for a lawyer with strong experience in contentious construction matters, including claims assessment, dispute strategy, settlement negotiations and formal proceedings. You will work closely with internal project, commercial and management teams on live issues across major projects, and help shape the approach to both pre-dispute and active dispute matters.

Key responsibilities

• • Advise on contentious construction and project-related issues arising from renewable energy, infrastructure and digital projects across APAC
  • Assess and manage claims relating to delay, disruption, defects, variation, payment, termination, extension of time and liquidated damages
  • Develop dispute strategy and advise internal stakeholders on legal and commercial risk exposure
  • Support and lead settlement discussions with contractors, subcontractors, suppliers and other counterparties
  • Manage pre-dispute processes, including claims analysis, preservation of rights, notices, correspondence and strategic positioning
  • Work with external counsel on adjudication, arbitration, litigation and expert processes where required
  • Review evidence, project records and contractual documentation to support claim prosecution or defence
  • Advise senior management on contentious risk, likely outcomes and resolution options
  • Support the wider business on disputes avoidance, lessons learned and strengthening claims management practices

Requirements

• • Qualified lawyer in a common law jurisdiction
  • At least 8 years’ PQE, with strong disputes experience gained in a leading law firm and/or relevant in-house environment
  • Strong background in construction disputes, arbitration and claims management
  • Experience in infrastructure, energy, engineering, construction or major projects matters
  • Familiarity with EPC, O&M, procurement and other project-related agreements, including FIDIC-based and common law structures
  • Proven ability to handle complex, document-heavy and high-value disputes
  • Strong drafting, analytical and stakeholder management skills
  • Experience across APAC and cross-border matters will be advantageous
    
    
    Interested applicants do reach out via email to claire@2nats.com (do not only apply through this job portal, TQ!)

We are seeking an experienced and proactive Senior Cyber Security Engineer to join our Global Cyber Security Operations team. This role requires an experienced security professional responsible for executing and supporting cybersecurity operations globally but with a focus on our manufacturing facility. This role has a primary focus on global insider risk management and data loss prevention (DLP), while also providing hands‑on operational support for local manufacturing risks. You will work closely with our Security Operations Center (SOC), incident response teams, and other IT stakeholders to stay ahead of emerging threats and ensure we’re able to build great products securely.

ESSENTIAL DUTIES AND RESPONSIBILITIES: 

Insider Risk Management & Data Protection

• Assist in the management and configuration of Sandisk governance controls related to data security
• Execute day‑to‑day operations of insider risk management and data security controls using Microsoft Purview, MIP, IRM, and DLP technologies.
• Monitor, triage, and investigate insider risk alerts and data loss events using Microsoft Purview, Microsoft Defender, and SIEM tooling, following defined procedures and escalation paths.
• Conduct detailed analysis and documentation of insider risk and data protection incidents, including evidence handling and recommended follow‑up actions.
• Support tuning and refinement of DLP and insider risk policies to improve signal quality and reduce false positives, in coordination with platform owners and senior analysts.

Endpoint Detection, Response & Manufacturing Security

• Perform hands‑on monitoring, investigation, and response activities using Microsoft Defender for Endpoint and CrowdStrike Falcon in an enterprise environment.
• Investigate endpoint‑based alerts affecting manufacturing office systems, engineering workstations, and privileged users, correlating activity across EDR, identity, and data signals.
• Support incident response efforts impacting the manufacturing site, including containment actions, evidence collection, and post‑incident documentation.
• Maintain awareness of manufacturing‑specific risks, including engineering workflows, shared systems, and IP‑sensitive environments.

Automation, Scripting & Analysis

• Use scripting and basic programming to support investigations, data analysis, and operational efficiency.
• Develop and maintain simple scripts or queries (e.g., PowerShell, Python, KQL) to assist with alert triage, log analysis, data validation, and reporting.
• Leverage scripting to reduce repetitive manual tasks while operating within established security tooling and change controls.

Work Style & Attributes

• Self‑motivated and dependable, with a strong work ethic in an on‑site, semi‑isolated environment.
• Comfortable operating as an individual contributor with defined scope and responsibilities.
• Collaborative and approachable, with a service‑oriented mindset toward local manufacturing and IT teams.
• Detail‑oriented and risk‑aware, with an appreciation for balancing security controls against manufacturing uptime and business impact.
• Strong analytical and critical-thinking skills with high attention to detail.
• Clear and concise written and verbal communication, including to non-technical stakeholders.
• Ability to remain composed and effective under pressure during active security incidents.
• Team-oriented and collaborative with a proactive, security-first mindset.
• Ability to approach security challenges with genuine curiosity and a questioning attitude, consistently digging deeper to understand the "why" behind alerts, behaviors, and anomalies rather than accepting surface-level conclusions.

We are seeking a highly experienced Cloud-Native Security Engineer to design, implement, and manage enterprise-level security solutions across cloud environments. The role involves security governance, risk management, and secure platform development, ensuring robust protection for cloud and containerized systems.

Key Responsibilities

• Design and implement Cloud Security Posture Management (CSPM) frameworks
• Develop automated security monitoring, detection, and remediation pipelines
• Establish and enforce security governance and control mechanisms
• Perform security assessments, penetration testing, and vulnerability management
• Integrate security practices into SDLC / DevSecOps pipelines
• Enhance container and Kubernetes security, including policy enforcement and runtime protection
• Develop and maintain security platforms such as WAF, IDS/IPS, and SIEM systems
• Lead incident response, threat analysis, and risk mitigation activities
• Collaborate with cross-functional teams to strengthen overall security posture

Job Requirements

• Strong hands-on experience with AWS, GCP, or Azure
• Expertise in Kubernetes and container security
• Experience in CSPM tools and cloud governance frameworks
• Knowledge of DevSecOps and CI/CD security integration
• Experience in penetration testing and vulnerability management
• Familiarity with enterprise security architecture and compliance standards

Preferred Qualifications

• CISSP certification
• AWS Solutions Architect – Professional certification
• Kubernetes certifications (CKA / CKAD / CKS / KCNA)
• Experience in AI-driven security solutions is an advantage

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Additional job description

Enterprise Data Protection (EDP) is an overarching cybersecurity program that delivers holistic security controls across Google's systems and enables the enforcement of consistent security policies on all platforms housing Google’s IP.

EDP develops and delivers native security controls while influencing, integrating, and driving security standards across other teams. We focus on proactive, preventive measures designed to mitigate threats before they occur.

In EDP, you will engineer the next generation of data protection by building infrastructure that safeguards Google’s intellectual property and user data. We deliver reliable, high-scale systems and seamless Data Loss Prevention (DLP) solutions that balance security with developer usability, ensuring every Googler can work securely and resiliently across the globe.

Qualifications

Job responsibilities

• Design, build, and implement security solutions to identify, measure, and remediate security gaps in Alphabet's infrastructure using public clouds (e.g., Google Cloud Platform) and on-premise physical networks.
  
• Review designs for cloud architecture and already deployed infrastructure to perform technical security assessments, develop threat models, provide design feedback, report security findings and provide remediation recommendation.
  
• Design solutions and develop documentation that ensure Alphabet's infrastructure using public clouds (e.g., Google Cloud Platform), on-premise physical networks, and other third-party hosted software and systems to the security standards.
  
• Build security tools and processes using Python or Go for critical infrastructure protection, monitoring, and remediation.
• Conduct security reviews of core corporate and production infrastructure.

Minimum qualifications

• Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
  
• 5 years of experience with security in attacks and mitigation methods.
  
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Preferred qualifications

• Experience developing threat models and performing technical security assessments of systems.
• Understanding of networking concepts (e.g., protocols, topologies, encryption).
  
• Ability to design and develop new security control implementations.