Total 30 computer security job vacancies in Information Technology category

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

Job Description & Requirements

Position Summary

We are seeking a highly skilled Network Security Engineer with Subject Matter Expert (SME)–level expertise in AlgoSec Security Management solutions. The ideal candidate will have expert-level hands-on experience with AlgoSec firewall automation and integration with multiple firewall platforms including Palo Alto, Check Point, Cisco FTD, and FortiGate. This role also requires strong hands-on expertise with enterprise firewalls and will be responsible for firewall rule migrations, automation, and Day 2 operations support in the Network Security domain.

Key Responsibilities

- Serve as SME for AlgoSec, including design, implementation, customization, and ongoing optimization.
- Perform end-to-end firewall rule automation and policy management using AlgoSec.
- Integrate AlgoSec with multiple firewall platforms such as Palo Alto, Check Point, Cisco FTD, and FortiGate.
- Lead and execute firewall rule migrations between different firewall vendors.
- Provide Day 2 operational support for network security infrastructure with a primary focus on firewalls.
- Troubleshoot complex firewall and policy-related issues across heterogeneous environments.
- Collaborate with network, cloud, and application teams to support secure connectivity requirements.
- Ensure compliance with security policies, audit requirements, and industry best practices.
- Create and maintain technical documentation, SOPs, and operational runbooks.

Required Technical Skills

- Expert-level hands-on experience with AlgoSec Firewall Analyzer, Fire Flow, and AppViz (or equivalent modules).
- Strong hands-on expertise with Palo Alto and/or Check Point firewalls (SMElevel preferred).
- Experience working with Cisco FTD and FortiGate firewalls.
- Proven experience in firewall policy design, optimization, and cleanup.
- Strong understanding of network security concepts including ACLs, NAT, VPNs, and routing.
- Experience with firewall rule migration projects across multiple vendors.
- Familiarity with automation, APIs, and integration with ITSM tools is a plus.

Preferred Qualifications

- Industry certifications such as PCNSE,PCCSE, CCNP Security, Fortinet NSE, or AlgoSec certification.
- Experience supporting large enterprise or service provider environments.
- Exposure to cloud security platforms and hybrid network environments.
- Strong analytical, troubleshooting, and problem-solving skills.

Soft Skills

- Strong communication and stakeholder management skills.
- Ability to work independently and lead technical initiatives.
- Detail-oriented with a strong focus on operational excellence and security compliance.

Responsibilities

·      Define and drive the vision, roadmap, and maturity model for application security across the enterprise.

·      Align application security initiatives with business objectives, compliance requirements, and risk management frameworks.

·      Act as the primary liaison between development teams, security functions, and executive stakeholders.

·      Secure Development Lifecycle (SDLC) Integration

·      Embed security practices into the SDLC, including threat modeling, secure design reviews, and code analysis.

·      Champion DevSecOps principles, ensuring security automation and continuous integration pipelines are robust and scalable.

·      Provide guidance on secure coding standards, frameworks, and best practices.

·      Establish policies, standards, and metrics to measure application security effectiveness.

·      Conduct regular risk assessments and oversee remediation of vulnerabilities.

·      Lead and mentor a team of application security engineers and specialists.

·      Partner with product owners, architects, and developers to balance innovation with security requirements.

·      Build strong relationships with executive leadership to communicate risks, progress, and strategic priorities.

·      Evaluate emerging technologies, tools, and methodologies to enhance application security capabilities.

Qualifications

·      Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

·      8+ years of experience in application security, software development, or cybersecurity, with at least 3 years in a leadership role.

·      Strong knowledge of secure coding practices, OWASP Top 10, and modern application architectures (cloud-native, microservices, APIs).

·      Hands-on experience with application security tools (SAST, DAST, IAST,RASP, container security).

·      Proven ability to lead cross-functional teams and influence executive stakeholders.

·      Excellent communication, leadership, and problem-solving skills.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to debbie@peopleprofilers.com

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

 Tel: 69509748

http://www.peopleprofilers.com

debbie@peopleprofilers.com

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

Location: Outram Road (Tan Boon Liat Building) – Client sites islandwide

Salary & Benefits

• Basic Salary: Up to $7,000
• Transport Allowance: Car: $750/month, Motorcycle: $400/month
• Mobile Phone reimbursement
• AWS & Performance Bonus
• 18 Days Annual Leave
• Birthday Leave
• Comprehensive Medical Insurance

Working Hours

• Monday to Friday, 8:30 AM – 6:00 PM
• Night and weekend work may be required depending on operational needs

Job Summary

The Lead Technical Manager will be responsible for managing a group of Technical Officer for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Job Responsibilities:

• Oversee the end-to-end service and maintenance operations for security systems.
• Serve as the primary point of contact for clients on service and maintenance matters.
• Lead and supervise a team of Technical Officers and service personnel.
• Plan and manage service schedules, resource allocation, milestones, and project deliverables.
• Ensure timely completion of maintenance commitments and service requests.
• Manage client relationships, address concerns, and enhance customer satisfaction.
• Coordinate day-to-day operations and support the team in resolving technical and operational issues.
• Maintain and improve documentation of infrastructure, systems, and operational processes.
• Identify opportunities for process improvements, training, and service enhancement.
• Build and maintain strong technical relationships with existing and prospective customers.
• Set team targets, provide guidance, and support staff development and performance management.
• Communicate effectively with stakeholders to evaluate technical solutions and project requirements.
• Handle customer feedback and complaints professionally.
• Perform other duties as assigned by management.

Job Requirements:

• Minimum 6 years related experience with demonstrable record of success
• Good communicator with excellent coordination skills
• Ability to work with multiple discipline projects
• Committed individual with great initiative and strong problem-solving skills
• Diploma or Degree in Electrical / Mechanical Engineering/Computer Science or its equivalents
• Experience in the Security and CCTV industry and exposure to products and operations will be an added advantage

Please submit your updated resume in MS Words format by using the APPLY NOW BUTTON.

**We regret to inform that only shortlisted candidates would be notified.

By submitting your personal data and/or resume, you give consent to collection, use and disclosure of your personal data and/or resume by the company (or its agent) for the purpose of the processing and administration by company relating to this job application.

https://www.mci.com.sg/wp-content/uploads/2025/09/MCI-Job-Applicant-Data-Protection-Notice.pdf

Kenneth Isaac Peter
Registration Number: R25127720
MCI Consulting Pte Ltd (EA Licence: 13C6730)

As a Networking Managed Services Engineer (L2) at NTT DATA, you'll take on a developing engineering role where your main goal is to ensure our clients' IT infrastructure and systems remain operational. You'll achieve this by proactively monitoring, identifying, investigating, and resolving technical incidents and problems. You'll work closely with our clients and internal teams to ensure that services are restored swiftly, in line with our service level agreements (SLAs).

Your day will revolve around reviewing client requests and tickets, applying your technical expertise to resolve them efficiently and effectively. You'll be the go-to person for second-line support, handling incidents and requests of medium complexity. In addition to your daily tasks, you'll have opportunities to contribute to exciting project work from time to time.

You'll proactively monitor work queues, execute operational tasks, and update tickets with the actions you've taken. Identifying, analysing, and logging issues before they escalate will be a key part of your role. You'll communicate with other teams and clients to provide support and ensure that changes are executed with clear risk identification and mitigation plans.

As part of the shift handover process, you'll highlight key tickets and upcoming critical tasks for the next shift. When needed, you'll escalate tickets to ensure the right focus from our Centres of Excellence (CoE) and other teams. Collaborating with our automation teams, you'll work on optimizing efforts and automating routine tasks, all while coaching our Service desk and L1 teams in both technical and behavioural skills.

You'll also establish monitoring for client infrastructure, leading and managing initial client escalations for operational issues. Contributing to the change management process, you'll log change requests, execute approved maintenance activities, and audit incident and request tickets for quality. Your insights will drive trend analysis reports, identifying tasks suitable for automation to reduce tickets and optimize efforts. You might also support disaster recovery functions and other related tasks as needed.

To thrive in this role, you need to have:

• Proficiency in technologies such as Pulse Secure SSL VPN, Palo Alto, Fortinet, Cisco Nexus switches/routers/firewalls, and more familiarity with ticketing tools.

• At least one technical certification in the above-mentioned technologies.

• Strong planning skills, with the ability to anticipate and adapt to changing circumstances.

• Adaptability and resilience in a dynamic work environment.

• Ability to communicate and work effectively across different cultures and social groups.

• Proficiency in active listening and client-centric communication.

• A positive outlook and the ability to work well under pressure.

• A client-first attitude, always seeking to create positive client experiences.

• A bachelor's degree or equivalent qualification in IT/Computing, or equivalent work experience.

Role: ITSO - Application Security

JD:
Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred.

Role: ITSO Application Security Consultant

JD:
Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred.

·  At least 4 years combined work experience in software development, application security, and cloud computing (e.g., AWS)

· Familiar with mobile and web application programming interfaces (API) architecture (e.g., REST, SOAP, SSL/TLS)

· Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks

· Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard

· Familiar with Agile development processes, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CD pipelines

·  Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc.

· Track and address security vulnerabilities with timely remediation and patching processes.

· Conduct security awareness training sessions

·Good verbal/written communication, collaboration skills and experience interactingwith various stakeholders

· Strong analytical, problem-solving, and troubleshooting skills; ability to workindependently

· Relevant certifications preferred (e.g., CISSP, OSCP, AWS security, AWS DevOps Engineer, or equivalent, etc.)

· Experience in working with Government Commercial Cloud (GCC) preferred.

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

[Job ID: 1600983]

Responsibilities

• Deliver professional services, including deployment, implementation, and upgrades of cybersecurity products distributed by Netpoleon. This may occasionally involve customer coordination and project timeline management.
• Provide practical and effective technical solutions or alternatives based on customer requirements.
• Conduct product training for customers, partners, and internal teams.
• Perform installation, configuration, and basic troubleshooting independently using product documentation.
• Continuously upskill and obtain relevant technical certifications for assigned technologies.
• Develop into a subject matter expert over time and support knowledge transfer to internal teams for enhanced customer support.
• Provide technical support to sales and support teams, including product clarification, solution design input, tender compliance, and ad-hoc technical assistance.
• Perform any other duties as assigned.

Requirements

• 2 years of experience in IT, Information Security, or Cybersecurity preferred
• Strong knowledge of cybersecurity and IT infrastructure, including:
  Firewalls, VPN, DLP, IDS/IPS, Web Proxy, DNS, Email Security, SIEM, log management, virtualization, containers, cloud platforms (AWS, Azure, Google Cloud), DevOps/DevSecOps, IAM, PAM, endpoint security, CyberArk Conjur.
• Solid troubleshooting skills in networking and systems, including:
  TCP/IP, routing, NAT, VLAN, multicast, OSPF, BGP, Active Directory, LDAP, RADIUS, SNMP, Syslog, SMTP, TLS, SSH.
• Strong interest in cybersecurity trends and attack techniques.
• Relevant certifications are an advantage:
  Cisco CCNA/CCNP, Check Point CCSE/CCSM, CyberArk CDE, CISSP, CREST, OSCP, and other security-related certifications.

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Software Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Responsibilities

• Design, train, and deploy perception systems for object detection, segmentation, depth estimation, and 3D scene reconstruction
• Build multi-modal pipelines fusing RGB, depth, and inertial data into robust real-time representations
• Develop vision models that transfer reliably from simulation to physical hardware
• Optimize inference pipelines for embedded compute constraints
• Partner with navigation and manipulation teams to ensure perception outputs meet downstream needs
• Drive systematic evaluation on hardware and iterate on failure modes

Requirements

• Strong foundations in computer vision, 3D geometry, and deep learning
• Hands-on experience building perception systems for physical robots or real-time embedded platforms, gained through industry or research work
• Proficient in Python and C++, with strong PyTorch or JAX experience
• Experience taking perception models from prototype to deployed inference
• Familiarity with sensor fusion across camera, depth, and inertial modalities
• Candidates with limited industry experience are welcome to apply, provided this is supported by strong relevant academic or research work, such as a thesis, publications, or hands-on robotics projects

Tyson Jay Management Pte Ltd | EA License No.: 24C2479 

Ivan Lim | EA Personnel No.: R1109856

Product area

Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.

Job description

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

Qualifications

Job responsibilities

• Write and review backend infrastructure code.
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact on hardware, network, or service operations and quality.
• Perform technical security assessments, code audits and design reviews.
• Develop technical solutions to help mitigate security vulnerabilities.
• Advocate security and secure practices throughout Google Payments.

Minimum qualifications

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with software development in one or more programming languages (e.g., Go, Python, C, C++, Java, JavaScript), or 1 year of experience with an advanced degree.
• 1 year of experience with security in attacks and mitigation methods.

Preferred qualifications

• Master's degree or PhD in Computer Science, or a related technical field.
• Experience in application and service security, including design reviews, and source code assessments.
• Knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.

We are seeking a Security Architect with a strong development and solution architecture background to lead our architecture consulting team and design security solutions that enable business outcomes while maintaining robust security postures. This role reports to CISO.

Key Responsibilities:

Architecture Security Reviews and Threat Modelling 

·       Lead a team of security architecture consultants, providing threat-driven architecture security reviews and threat modelling

·       Drive development of AI enabled security reviews, threat modelling and security enhancements of CI/CD pipeline

Build Security In / Shift Left 

·       Drive strategic security architecture decisions across business units and technology domains

·       Develop secure reference architectures and design patterns for modern application stacks and BSI

·       Build security-by-design with development workflows

·       Enhance CI/CD security tooling and automation and drive adoption and metrics reporting 

·       Reignite Security Champions initiative to improve shift left approach

Enterprise and Identity security architecture 

·       Design identity governance solutions for hybrid and multi-cloud environments

·       Assess and implement advanced IAM patterns including fine-grained authorization, privilege escalation controls, and just-in-time access

·       Develop identity integration strategies for AI systems and automated decisioning

·       Engage with platform and DevOps engineering teams to build secure infrastructure and technology foundations

·       Propose initiatives to address security gaps or enhance the overall security posture

·       Build positive flywheel effect among stakeholders to enable security adoption and cultural transformation

Gen AI Security

·       Design and integrate security frameworks for Gen AI deployment, monitoring, and governance within AI risk framework

·       Maintain security blueprints for(Gen) AI deployments, including MCP and AI guardrails

·       Lead agentic AI security initiative with focus on authentication and authorization of AI agents

Requirements:

·       Bachelor’s degree in computer science, engineering, or related fields

·       Strong software engineering background with more than 5years of experience as a software engineer / developer.

·       3+ years of team or lateral leadership experience in technology architecture or security consulting teams

·       Proven leadership of security architecture/threat modelling.

·       Track record leading complex, multi-stakeholder security initiatives.

·       Ability to ship secure reference architectures and drive developer adoption at scale.

·       Experience with AI/ML security challenges and solutions including Large Language Model (LLM), Model Context Protocols (MCP), Agentic AI and AI governance frameworks

·       Comprehensive knowledge of application security principles(OWASP, SANS, etc.)

·       Experience with modern security tooling: SAST, DAST, SCA, container scanning, secrets management

·       Relevant certifications (eg. SANS, AWS, Azure)

Should focus on day-2-day operations, incident, change management, and user centric trouble shooting.

Operate andcontinuously improve the organization’s Secure Access Service Edge (SASE)services using Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA),ensuring secure, reliable user connectivity and strong policy governance.

Keyresponsibilities (Operational / BAU)

• Runday-to-day operations for ZIA (web gateway, SSL inspection, URL filtering,cloud app control, sandbox, DLP , DNS security).

• Runday-to-day operations for ZPA (App Segments, Access Policies, Connectormanagement, posture requirements, policy troubleshooting).

• Monitorservice health and user experience; proactively identify trends and recurringissues.

• HandleL2/L3 incident troubleshooting: authentication issues (SSO/SAML),PAC/forwarding issues, tunnel/connector issues, policy blocks, certificate/SSLinspection issues.

• Performpolicy administration: create/update rules, exceptions, and change deploymentsfollowing CAB/ITSM change controls.

• Maintainforwarding architecture: Zscaler Client Connector, GRE/IPsec tunnels, PACfiles, forwarding profiles, location configuration, traffic steering.

• Manageintegrations: IdP (Azure AD/Entra ID, Okta, ADFS), SIEM (Splunk/QRadar),ticketing (ServiceNow), endpoint tools (Intune/Jamf), MFA.

• Executeroutine operational tasks: connector upgrades, certificate updates, locationupdates, application onboarding to ZPA, user/group updates.

• Work withvendors/TAC; drive cases to closure and implement corrective actions.

• Maintaindocumentation: runbooks, SOPs, troubleshooting guides, policy standards,onboarding checklists.

• Supportaudits and compliance: policy reviews, recertification evidence,logging/retention checks. Menlo Web Isolation Maintain allow-list/whitelist forapproved URLs/domains based on business justification and securityrequirements.

• Manageexception lifecycle: approvals, expiry dates, periodic review/cleanup, andrecertification evidence.

• Ensureisolation policies align with ZIA policies and do not create conflicting userexperience (e.g., bypass vs isolate logic) Site not loading in isolation,rendering issues, broken web apps, file download/upload restrictions,clipboard/printing controls (as applicable)

Coreskills:

• Strongworking knowledge of ZIA (SSL inspection, URL filtering, CASB/app control,sandbox, forwarding methods).

• Strongworking knowledge of ZPA (connectors, app segments, access policies, posture,authentication flows).

• Troubleshootingacross endpoint + network + identity (DNS, TLS cert chains, proxy behavior,SAML/SSO, routing).

•ITSM/change management discipline (ServiceNow/JIRA), documentation habits.Strong knowledge about Zero Trust concepts

•Nice-to-have: SIEM integration, DLP, basic scripting (PowerShell/Python) forops automation.