Total 180 operations engineer job vacancies in Legal / Public / Security category in The Philippines

• MNC Company
• Basic $2500 - $2800 + Incentive + AWS + Variable Bonus
• Excellent Welfare and Benefits + Career progression
• Working location: West
• Working hours: 12 Hours Rotating Shift: 7.30am-7.30pm, 7.30pm-7.30am (16 Shifts a month)

Job Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems
• Attending to customer request on alarm and card access systems
• Conducting patrols at night
• Any others ad hoc duties as assigned

Job Requirements:

• Possess minimum Higher Nitec in Electrical Engineering, Electronic & Computer Engineering, Mechanical Engineering, and other related fields
• Possess at least 1- 2 years of relevant experience
• Possess Class 3 Driving License will be an advantage

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

LIONG ZHAO GUAN (R22107632)

EA Recruitment Pte Ltd

EA License No: 21C0492

Job Summary:

The Application Security Consultants is responsible for auditing and validating the security posture of applications and their supporting infrastructure. This role focuses on reviewing security activities performed by development teams, including static and dynamic code analysis, infrastructure scans, and hardening practices. The analyst ensures that applications meet internal security standards and comply with regulatory requirements.

Key Responsibilities:

·      Review and validate results from SAST (Static Application Security Testing) and DAST( Dynamic Application Security Testing) tools.

·      Audit OS, container, and database scans for vulnerabilities and misconfigurations looking at reports a

·      Assess the effectiveness of hardening measures across application components (e.g., webservers, APIs, containers, databases).

·      Collaborate with application development and DevSecOps teams to ensure remediation of identified issues.

·      Maintain audit documentation, including findings, remediation tracking, and compliance status.

·      Evaluate adherence to secure coding practices and application security policies.

·      Support internal security audits related to application & underlying infrastructure security.

·      Stay updated on emerging threats, vulnerabilities, and secure development trends.

Required Qualifications:

·      Bachelor’s degree in computer science, Cybersecurity, or related field.

·      4+ years of experience in application security, security auditing, or secure software development.

·      Hands-on experience on one or more tools like SonarQube, Fortify SAST/DAST, Burp Suite,OWASP ZAP etc.

·      Strong understanding of OWASP Top 10, secure coding principles, and CI/CD pipelines.

·      Familiarity with container technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).

Certifications:

·      CRESTCertified Pen Tester

·      CISSP or CCSP 

·      Preferred Certified AWS DevSecOps Professional or equivalent

Key Competencies:

·      Analytical mindset with attention to detail

·      Ability to interpret scan results and prioritize remediation

·      Strong communication and collaboration skills

·      Knowledge of regulatory frameworks (e.g., ISO 27001, PCI-DSS, GDPR)

·      Experience working in Agile and DevOps environments'

Interested applicants please send your resume in MS Wordsformat to pooja.yadav@ambition.com.sg andattention to Pooja (R1551322)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1551322

Data provided is for recruitment purposes only

Business Registration Number: 200611680D.

License Number: 10C5117

Employment Type: Contract (1 year renewable, with potential for conversion)

Working Hours: Monday toThursday (8.30am – 6.00pm), Friday (8.30am – 5.30pm) (Hybrid WorkingArrangement)

Location: One North

Salary: Up to SGD 5,300

We are looking for an experienced IT Systems Governance & Project Management professional who can oversee enterprise systems from both an operational and governance perspective. The ideal candidate should have strong experience in IT governance, risk management, audit compliance, and system lifecycle management, while also being capable of coordinating system enhancements, security assessments, and change initiatives across multiple stakeholders.

Responsibilities:

• Conduct system criticality and risk assessments for enterprise systems.
• Manage system governance, compliance, and audit readiness activities.
• Coordinate system changes, enhancements, and remediation efforts.
• Track and manage security risks, vulnerabilities, and remediation actions.
• Support disaster recovery and cyber incident recovery planning.
• Perform access reviews and ensure timely user deprovisioning.
• Manage certificates, API keys, and system integration credentials.
• Maintain accurate system documentation and governance records.
• Collaborate with system owners, vendors, and internal stakeholders to drive system improvements.
• Provide regular reporting on system risks, issues, changes, and compliance status.

Requirements:

• Degree/Diploma in IT, Computer Science, Information Systems, or related field.
• At least 5 years of experience in IT governance, systems support, project management, or security-related roles.
• Strong understanding of IT governance, risk management, compliance, and audit processes.
• Experience managing system changes, vendors, and stakeholder engagements.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Endpoint Security Engineer – Singapore (SingaporeansOnly)

We are hiring an experienced and hands-on Endpoint SecurityEngineer to manage, operate, and enhance enterprise endpoint protectioncapabilities across our organization. The ideal candidate will have strongexperience in endpoint security operations, incident management, and enterprisesecurity tools such as Symantec Endpoint Protection Manager (SEPM) and/orMicrosoft Defender.

This role requires close collaboration with IToperations, security teams, and end users to ensure enterprise endpoints remainsecure against evolving cyber threats.

Key Responsibilities

Endpoint Protection & Security Operations

• Administer, maintain, and support Symantec Endpoint Protection Manager (SEPM), Microsoft Defender, or equivalent endpoint security platforms
• Deploy, configure, and manage endpoint protection policies including:
• Anti-malware
• Intrusion Prevention Systems (IPS)
• Firewall policies
• Device control
• Monitor endpoint security alerts and investigate incidents
• Perform root cause analysis and remediation activities
• Generate regular security posture and compliance reports
• Manage the complete lifecycle of endpoint security agents
• Execute upgrades, patching, and rollout activities during maintenance windows

User Support & Incident Management

• Provide Level 2 / Level 3 support for endpoint security-related incidents and requests
• Troubleshoot endpoint protection issues across Windows and/or Linux environments
• Work closely with internal IT and security teams to resolve operational issues efficiently

IT Service Management

• Follow ITIL processes for Incident, Problem, and Change Management
• Maintain accurate ticket documentation and resolution records
• Ensure SLA compliance and timely issue resolution

Required Skills & Qualifications

• Singaporeans only
• Degree in Computer Science, Information Technology, Cyber Security, or related discipline
• 4–6 years of relevant experience in endpoint security operations
• Minimum 1 year of hands-on experience with SEPM and/or Microsoft Defender
• Experience with HIPS/HIDS technologies
• Strong knowledge of Windows and/or Linux (RedHat) administration
• Ability to manage multiple priorities in a fast-paced environment
• Strong communication and interpersonal skills

Preferred Skills

• Knowledge of Microsoft Defender ecosystem
• Experience with scripting and automation using:
• Powershell
• Python

We are hiring and the details of this position are:

Job title: Cyber Security Engineer (Perm role, CREST CRT certificate, VAPT experience, up to $9000)

Job Description:

Technical Delivery & Penetration Testing

• Perform penetration testing (VAPT) across web, mobile, cloud, and infrastructure environments, ensuring CREST standards are met.
• Generate detailed technical and executive-level reports with risk analysis and actionable remediation guidance.
• Collaborate with pen-testers and technical teams to deliver client engagements and integrate findings into tailored solutions.
• Apply knowledge of OWASP Top 10, MITRE ATT&CK, and secure coding practices to assess and improve client environments.

Automation Integration

• Integrate AI and RPA into cybersecurity operations to enable automated triage, evidence collection, and compliance reporting.
• Lead initiatives to embed hyper automation into cybersecurity workflows, combining PA, AI/ML, and orchestration tools.

Thought Leadership & Brand Building

• Provide thought leadership on emerging cybersecurity risks, automation trends, and regulatory developments.
• Represent the company at industry events, conferences, and networking sessions to build brand visibility and strategic relationships.

Requirement:

• CREST CRT and CPSA certificate preferred
• Penetration testing, vulnerability assessments, security audits
• Exposure to RPA tools (UiPath, Automation Anywhere, Power Automate); familiarity with AI-based security tools (XDR, SOAR, ML-based detection)
• Strong understanding of OWASP Top 10, MITRE ATT&CK, PDPA, MAS TRM, ISO 27001
• Exceptional communication, presentation, and negotiation skills; ability to work independently and collaboratively in a fast-paced, client-facing consulting environment

Interested applicants please send your resume to rita@recruitexpress.com.sg and look for:

Rita Shi Tianhe

Recruit Express Pte Ltd

EA License No: 99C4599

EA Personnel Number: R26162019

We regret that only shortlisted candidates will be contacted.

YOUR NEW JOB

As a Security Implementation Engineer, you will work alongside senior consultants and project teams to deliver successful implementations of Google SecOps and/or SentinelOne platforms, ensuring customers are onboarded effectively and solutions are configured according to project requirements.
You will support the deployment, configuration, and implementation of modern cybersecurity solutions across enterprise customer environments.
This is a 12-month renewable contract role based with one of the region's leading technology & systems integrators.

WHAT YOU’LL BE DOING

• Support the implementation and deployment of Google SecOps and/or SentinelOne solutions for enterprise customers
• Assist with solution configuration, onboarding, and integration activities
• Participate in customer workshops, requirement gathering, and technical discussions
• Perform testing, validation, and troubleshooting during implementation projects
• Document implementation procedures, technical configurations, and deployment activities
• Work closely with project managers, senior engineers, and customer stakeholders to ensure successful project delivery
• Provide post-implementation support and issue resolution where required
• Stay updated on product features, cybersecurity trends, and vendor best practices

WHAT IS NEEDED FROM YOU

• At least 1 year of hands-on experience with Google SecOps and/or SentinelOne solutions
• 1–3 years of IT infrastructure, cybersecurity, or systems implementation experience
• Basic understanding of SIEM, endpoint security, threat detection, and security operations concepts
• Experience supporting technical deployments, implementations, or system integrations
• Familiarity with Windows, Linux, networking, and cloud environments
• Strong troubleshooting and problem-solving skills
• Diploma or degree in Information Technology, Computer Science, Cybersecurity, or related field
• Good communication skills and ability to work directly with customers and internal teams

WHAT WILL MAKE YOU STAND OUT

• Relevant certifications from Google, SentinelOne, Microsoft, or other cybersecurity vendors
• Exposure to cybersecurity projects within enterprise environments
• Experience working for a systems integrator, managed services provider, or IT services organisation
• Familiarity with scripting or automation tools such as Python, PowerShell, or APIs
• Experience supporting SOC, SIEM, EDR, or threat monitoring environments

Feeling stuck in your career? It’s time for a change.

SICD’s 12-month Place-and-Train program equips you with the skills and confidence to launch a successful career as a Cyber Security Engineer.

Benefit from personalized 1:1 mentorship, a guaranteed SGD 3,000 monthly salary, and industry-recognized certifications — all designed to position you for long-term success.

Visit sicd.sg for more information, and join our upcoming webinar to learn more and ask questions about our career development program.

About the Role:

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities:

Firewall Operations (Fortinet & Palo Alto)

• Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.

• Monitor traffic, identify anomalies, and remediate security events.

• Maintain HA configurations, routing and logging integrations.

• Support audits and evidence collection for regulatory/compliance requirements.

Tripwire

• Administer policies, baselines, agents, alerts, and remediation workflows.

• Investigate integrity violations; tune rules to reduce false positives.

Imperva (DB Security/DAM)

• Configure security policies, signatures, profiles, and exceptions.

• Monitor application-layer attacks; tune rules to balance protection and usability.

• Support database activity monitoring policies and reporting where applicable.

• Security Monitoring & Incident Response

• Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications:

Hands-on expertise with:

• Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).

• Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).

• Tripwire (Hice to Have).

• Imperva (Hice to Have).

• Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).

• Experience in incident response, change management, and documentation.

• Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.

• Structured problem-solving and risk-based decision-making.

• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.

• Successful completion of firmware upgrades and config backups with rollback plans.

• Updated Tickets, network diagrams, and change records.

• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer

• Palo Alto NGFW / Panorama

• Tripwire Enter

Working hours :

8:30am to 6pm (Monday to Friday) onsite, no hybrid option.

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

As a Security Operations Analyst within the Security function, you will play a key role in protecting the organisation through proactive threat monitoring, vulnerability management, incident response, and operational resilience coordination across local, regional, and platform environments.

The Security Function operates as a 1.5 line of defense within the organisation, supporting security governance, engineering, and operational security capabilities across the business.

You will work closely with Security Engineering, Infrastructure, Engineering, Product, Platform, and GRC teams to strengthen operational security, resilience readiness, and security response capabilities across modern cloud-native and AI-driven environments.

The primary focus areas of this role include:

• Threat & Vulnerability Management
• Security Monitoring & Operations
• Incident Response
• Operational Resilience Planning & Coordination

This role is ideal for a hands-on security professional who enjoys operational security, incident investigation, threat analysis, operational coordination, and continuous improvement of security operations processes and capabilities.

ABOUT US

As Southeast Asia’s #1 integrated logistics provider, Teleport is all about making logistics fast, affordable and reliable. 

Our mission? To move things across Southeast Asia better than anyone else. We’re focused on making next-day delivery a reality for all.

#TeamTeleport is guided by our values: Move with urgency — because time is crucial; Aim to pioneer — constantly innovating to stay ahead; Do it with intent — delivering with purpose and precision; and Keep it real — maintaining authenticity and transparency in all we do.

Learn more about Teleport here: https://www.teleport.it/ 

A DAY IN A LIFE

At Teleport, we’re building toward IPO — and that means doing the boring things well. Execution, discipline, and follow-through matter as much as big ideas.

Your day will be varied, often crossing functions, but most of your time will focus on delivering results, owning your scope end-to-end, making fast, data-informed decisions, and following through on fundamentals like reporting, documentation, and processes.

How we work matters as much as what we achieve. Doing the basics right, every time, sets us up for success.

Most of your time will be spent driving impact through:

• Securing Our Foundations: Supporting Senior Security Architects to design resilient architectures across our applications and cloud environments (AWS, Azure, or GCP), while conducting threat modeling and vulnerability assessments to identify and mitigate risks before they disrupt us.
• Integrating Security & Compliance: Partnering cross-functionally with IT, DevOps, and Engineering to bake security into our SDLC and operations via DevSecOps practices, while meticulously developing and maintaining security standards that keep us compliant with ISO 27001, NIST, and GDPR.
• Defense & Automation: Keeping a pulse on emerging threats to proactively strengthen our posture, evaluating new security tools, leveraging basic scripting (Python, Bash) for automation, and providing reliable support to investigate, contain, and document security incidents.

These are minimum-requirement skills and a ‘must-have’ for the role:

• Educational Foundation & Passion: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, paired with a strong desire to learn and a genuine passion for cybersecurity. Relevant industry certifications (e.g., CompTIA Security+, (ISC)² SSCP, GIAC GSEC) are a plus.
• Hands-on Experience & Tooling: 1–3 years of experience in a cybersecurity or IT role, with practical familiarity using common security technologies such as firewalls, IDS/IPS, and SIEM solutions.
• Cloud & DevSecOps Knowledge: Direct experience with cloud platforms (AWS, Azure, or GCP) and their native security services, alongside a strong familiarity with DevSecOps practices, tools, and basic scripting skills (e.g., Python, Bash) for security automation.
• Core Technical Knowledge: A fundamental understanding of networking concepts (TCP/IP, DNS, routing) alongside core security principles like the CIA triad and the principle of least privilege.
• Analytical & Communication Skills: Strong analytical and problem-solving skills, combined with excellent written and verbal communication to effectively articulate complex technical concepts to both technical and non-technical audiences.

At Teleport, we’re all about creating a diverse and inclusive team where everyone feels valued. We believe that different perspectives make us stronger and help us do logistics better across Southeast Asia. We welcome people from all walks of life and celebrate what makes each of us unique. If you’re passionate about making a difference, we’d love to hear from you!

Work-Life at #TeamTeleport

Unlimited training -You will have access to a wide range of learning resources including Notion!

Ditch the Suit & Tie - Be comfortable as you are, express your inner Fashionista… as long as it's not a birthday suit!

Vacation and time away - Sometimes you need to recharge and come back energized! That’s why you will get 90% off flights to destinations within AirAsia's network, 10%-15% discounts on selected eateries at KLIA2.

Growth opportunities - We embrace and take on opportunities to learn and grow at Teleport as we reimagine the way we do things. Yes, we meet the challenge head on as a team, and we celebrate together with you when you succeed and reap the rewards when the hard work pays off!

Responsibilities:

·      Monitor security alerts and perform initial analysis

·      Investigate security events using SIEM and related tools

·      Perform log analysis to identify suspicious activities

·      Support incident investigation and response

·      Help improve detection rules and monitoring coverage

·      Work with teams in different regions on security operations tasks

·      Contribute to administrative and routine security-related tasks as needed

·      Provide ad-hoc support to group-wide security projects and initiatives

Requirements:

·      Bachelor’s degree in information security, Computer Science, or related field

·      1–3years of experience in security operations, SOC, or related work

·      Familiar with basic SOC processes (alert handling, incident response)

·      Experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk)

·      Basic log analysis capability (Windows, Linux, network logs)

·      Able to work with teams across regions

·      Experience working with overseas or cross-regional teams is a plus

Responsibility

1. Responsible for drafting and reviewing contracts, including formulating and revising the company's standard contract templates, as well as reviewing various business contracts, correspondence, and related documentation.

2. Participate in handling the company's legal disputes and litigation globally, involving but not limited to commercial disputes and intellectual property disputes, effectively protecting the company's interests.

3. Provide comprehensive legal and compliance support to ensure that the company's operations comply with relevant legal requirements, including but not limited to export control, taxation, intellectual property, and data compliance.

4. Opportunities for rotation in finance, legal, human resources, administration, supply chain, customer service, and after-sales departments.

Requirement

1. Bachelor’s degree or higher, with a background in law; must hold a legal professional qualification certificate.

2. Excellent written communication skills, comprehensive legal risk analysis abilities, and strong communication and negotiation skills.

3. Strong sense of responsibility, adherence to principles, meticulous work ethic, and resilience under pressure.

4. Fluency in English, able to work in English-speaking environment.

Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Qualifications

Job responsibilities

• Identify challenges in customer cyber defense centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
• Conduct real-time analysis using SIEM, endpoint, and network based technologies with a focus on identifying security events and false positives.
• Advise on CDC, CSIRT, and SOC management activities.
• Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operation Center (SOC) incident detection and response capabilities.
• Guide customers on their journey from manual to semi-autonomous to agentic-autonomous SOC.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience with SoC analysis, detection engineering, threat management, or a related role, and working with Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR) or Endpoint Detection and Response (EDR) technologies.
• Experience in leading incident response and Table Top Exercise (TTX).
• Ability to travel up to 20% of the time as required.

Preferred qualifications

• Certification in one or more of the following: CompTIA (e.g., Security+, CySA+) ISC2 (e.g., CSSP, CISSP); SANS-GIAC certification (e.g., GSEC, GMON, GSOC, GCIA, GCTI, GCIH, GCED, GCDA); CISCO (e.g., CCNA); EC-Council (e.g., CEH, CSA, CTIA).
• Experience with SIEM or SOAR technologies like SecOps, Splunk, QRadar, XSOAR, Phantom, etc.
• Experience in SoC architecture, SoC maturity assessment, and SoC transformations.
• Knowledge of security controls for common platforms and devices, including Linux and network equipment.
• Ability to collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.
• Excellent communication skills.

Cloud Security Engineer

Responsibilities:

• Conduct vulnerability tests on Client's Cloud infrastructure and services for potential threats, misconfigurations and weaknesses.
• Strong in Vulnerability management tools like Tenable.
• Implement best practices in Cloud security, Develop and maintain automated scripts for vulnerability scanning and reporting.
• Stay current with the latest security trends, tools, and AWS features to enhance our security posture.
• Address all findings promptly and effectively and document findings for reporting to management.

Requirements:

• Strong in Tenable AWS services such as EC2, S3, RDS, and Lambda.
• Proficient with security vulnerability tools and platforms
• Deep understanding of security principles, practices, and risk management.
• Certifications in AWS or RHEL are advantageous.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : kelvin@starcareerconsulting.com

Kelvin Lee (Reg. No. R1872625)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)