Total 145 security job vacancies in Information Technology category

• Leadership role with team management exposure
• Permanent role with high job stability 

About the company

Our Client is a market leader within their industry. They have a well-established presence of more than 20 years. With rapid expansion plan, they are now looking for a new IT Manager to manage their Infrastructure and IT helpdesk team.

About the job

Your role involves:

• Managing the IT team. This includes hiring, assigning of work, performance review and etc
• Planning and designing infrastructure solutions for accurate service efficiency and effectiveness
• Leading infrastructure projects. This includes milestone planning and risk management across Asia
• Actively support vital cybersecurity initiatives, including phishing simulations, vulnerability assessments, and compliance checks.
• Creating Business continuity and disaster recovery plans
• Establishing service level management practices to ensure that the level of service from internal and external service providers are defined

Skills and experience required

As a successful applicant, you will have at least 10 years of experience in Infrastructure (Servers and networks). At least 4 years of team management experience in required for this role.

Exposure to security will be of added advantage. 

Whats on offer


This is an excellent opportunity to join a leading end user environment with team management responsibilities. You will get the opportunity to lead high value projects with exposure to latest technology.

To apply online please use the 'apply' function. Alternatively you may contact Hoon Teck TAN at 6510 3633. (EA: 94C3609/ R1219669)

Direct Responsibilities • Monitor and control tasks to ensure IT Governance on Network Security processes are executed correctly • Design, validate, implement and document end-to-end processes workflows on security implementations • Handle internal customer inquiries with firewall consultation and troubleshoot technical issues effectively. • Ensure to complete the deliverables for global projects within the scope of ProdSec – Network Security • Implement the network segmentation concepts to achieve Zero-trust network solutions and micro segmentation solutions • Implement firewall rules and troubleshoot when incidents occur. Participate in update/upgrade/migration of security tools used by the team • Manage Zero-Day web-security vulnerabilities and lead security-operations activities. • Analyze web-security policies and signature updates, assess risk to banking applications, and recommend mitigations. • Liaise with external vendors for technical support and new-project solutions. • Identify process improvement opportunities and automate or finetune workflows using existing or new tools. • Participate in update/upgrade/migration of security tools used by the team. • Maintain clear and functional documentations on process guides, technical instructions, etc. • Support additional tasks and initiatives within the Network-Security team as required.

Contributing Responsibilities • Participate in the Permanent Control framework, helping to embed policies and procedures (e.g., Control Plan) into daily operations. • Assist with Internal-Audit response activities. • Contribute to the enhancement of Production-Security tools used for tracking and managing security incidents.

Technical & Behavioral Competencies Technical • Bachelor’s degree in computer science or a related field • At least 5years of experience in the IT Security domain, experience in Network Security skills is most preferred • Proficient in Microsoft office products and ServiceNow. • Strong fundamental understanding of Network Security, Network and Micro-segmentation and its real-world applications • Must have knowledge on the Firewall Rule coding and Rule analysis on the FortiGate / FortiManager, Checkpoint R81.10 or R81.20 Smart console • Hands-on experience in firewall filtering mechanisms and must be good in understanding far-end coding and Zero-trust network principles • Experience in Illumio PCE Version 24.X and implementation of micro-segmentation with label-based policy implementation will be highly preferred • Handle the WAF operations – signature updates, enforcements and review the application security events and take appropriate actions in strengthening application security policies.
• Working experience on F5 ASM, Broadcom AVI Nextgen Load balancing/ WAF module is recommended • Proficiency in writing programming/scripting languages (Python, PowerBI, any other language) is a plus • Experience in handling production issues and collaborate with other operational teams and drive for the root cause analysis • Extend the support in the off-business hours to fix any production impacting security incidents

Behavioral • Organized and self-motivated, autonomous • Curious and highly implicated in IT Security • Service-oriented • Experience in Project management, must be able to work in dynamic, rapidly changing environments.

Specific Qualifications (if required) • Any Firewall/NAC Certification, WAF and Any relevant Security Certification.

1. Network certifications:
3. CCNA (required)
4. CCNP (added advantage)
5. Security certifications (added advantage):
7. PCNSE / CCSA / NSE 4
8. Minimum 5 years of strong, hands-on experience with:

9. Next Generation Firewalls (Cisco, Palo Alto, Check Point, Fortinet, etc.)

10. IDS/IPS
11. NAC (ClearPass / ISE)
12. VPN technologies

Firewall auditing tools (Algosec, Tufin, FireMon, etc.)

13. Knowledge of network compliance (added advantage).
14. Strong written and verbal communication skills in English.
15. Excellent problem-solving skills in a fast-paced, multi-tasking, and complex environment.
16. Positive attitude, team player, resourceful, and able to work independently.
17. At least 4 years of experience supporting an enterprise network security infrastructure.

• Location: Office at Outram Road | Site will be Islandwide
• Working Hours: Mon to Fri [830am – 6pm] Willing to commit to rotational standby duties for activations outside working hours
• Salary: Basic up to $3500 + Transport $750 (car) or $400 (motorbike) or by reimbursement basis + HP by reimbursement basis

Responsibilities:

• Execution of service and maintenance workflow.
• Liaise closely with client representatives on all service/maintenance related issues.
• Mentor a team of service team members.
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results.
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises.
• Familiarise yourself and deliver customer satisfaction base on each client's business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act.
• Perform any other technical tasks as and when required.

Requirements:

• Min Nitec in Electrical/Electronic Engineering with at least 2 years working experience.
• Knowledge and hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must.

The Supreme HR Advisory Pte. Ltd || 14C7279

Chua Jie Ying (Cai Jie Ying), Evelynn || EA Personnel License R24120580

Role Summary:

Should focus on day-2-day operations, incident, change management, and user centric troubleshooting.

Operate and continuously improve the organization’s Secure Access Service Edge (SASE)services using Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA),ensuring secure, reliable user connectivity and strong policy governance.

Certification

Zscaler certifications

Key Responsibilities (Operational / BAU)

• Runday-to-day operations for ZIA (web gateway, SSL inspection, URL filtering,cloud app control, sandbox, DLP , DNS security).

• Runday-to-day operations for ZPA (App Segments, Access Policies, Connector management, posture requirements, policy troubleshooting).

• Monitorservice health and user experience; proactively identify trends and recurring issues.

• HandleL2/L3 incident troubleshooting: authentication issues (SSO/SAML),PAC/forwarding issues, tunnel/connector issues, policy blocks, certificate/SSL inspection issues.

• Perform policy administration: create/update rules, exceptions, and change deployments following CAB/ITSM change controls.

• Maintain forwarding architecture: Zscaler Client Connector, GRE/IPsec tunnels, PAC files, forwarding profiles, location configuration, traffic steering.

• Manage integrations: IdP (Azure AD/Entra ID, Okta, ADFS), SIEM (Splunk/QRadar),ticketing (ServiceNow), endpoint tools (Intune/Jamf), MFA.

• Execute routine operational tasks: connector upgrades, certificate updates, location updates, application onboarding to ZPA, user/group updates.

• Work with vendors/TAC; drive cases to closure and implement corrective actions.

• Maintain documentation: runbooks, SOPs, troubleshooting guides, policy standards,onboarding checklists.

• Support audits and compliance: policy reviews, recertification evidence,logging/retention checks. Menlo Web Isolation Maintain allow-list/whitelist for approved URLs/domains based on business justification and security requirements.

• Manage exception lifecycle: approvals, expiry dates, periodic review/cleanup, and recertification evidence.

• Ensure isolation policies align with ZIA policies and do not create conflicting user experience (e.g., bypass vs isolate logic) Site not loading in isolation,rendering issues, broken web apps, file download/upload restrictions,clipboard/printing controls (as applicable)

Core skills:

• Strong working knowledge of ZIA (SSL inspection, URL filtering, CASB/app control,sandbox, forwarding methods).

• Strong working knowledge of ZPA (connectors, app segments, access policies, posture,authentication flows).

•Troubleshooting across endpoint + network + identity (DNS, TLS cert chains,proxy behavior, SAML/SSO, routing).

•ITSM/change management discipline (ServiceNow/JIRA), documentation habits.Strong knowledge about Zero Trust concepts

•Nice-to-have: SIEM integration, DLP, basic scripting (PowerShell/Python) forops automation.

• Exposure to latest technologies such as cloud security 
• High-impact role with autonomy to make key decision for security roadmap and strategy

About the company

Our client is one of the fastest growing company in this industry. They are looking for a leadership-caliber professional to spearhead their cybersecurity division and protect their digital infrastructure.

About the job

Strategic Leadership: Define and execute the long-term information security roadmap and governance frameworks based on international standards.

Operational Oversight: Manage the dedicated security team, focusing on real-time monitoring, threat detection, and rapid incident response.

Risk & Compliance: Lead comprehensive risk assessments and ensure all systems adhere to global data protection regulations and client-specific requirements.

Technical Validation: Coordinate regular security audits, including vulnerability scans and penetration testing, to ensure robust system defense.

Cross-Functional Integration: Partner with Engineering and IT departments to embed security protocols directly into the product development lifecycle.

Stakeholder Reporting: Act as the primary advisor to executive leadership regarding the organization’s security posture and emerging risk landscapes.

Skills and experience required

As a successful applicant, you will have at least 10 years of experience in Cyber Security. Proven track record in managing overall security team for 4 years is required for this role. Exposure to information security framework such as  ISO 27001 and NIST is required for this role. 

Experience in cloud security such as Azure or AWS will be highly preferred. 

Whats on offer
This is an excellent opportunity to grow together with one of the fastest growing company, 

To apply online please use the 'apply' function, alternatively you can reach me at https://www.linkedin.com/in/hoonteck-nologyrecruitment. (EA: 94C3609/ R1219669)

Role Summary:

Should focus on day-2-day operations, incident, change management, and user centric troubleshooting.

Operate and continuously improve the organization’s Secure Access Service Edge (SASE)services using Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA),ensuring secure, reliable user connectivity and strong policy governance.

Certification

Zscaler certifications

Key Responsibilities (Operational / BAU)

• Runday-to-day operations for ZIA (web gateway, SSL inspection, URL filtering,cloud app control, sandbox, DLP , DNS security).

• Runday-to-day operations for ZPA (App Segments, Access Policies, Connector management, posture requirements, policy troubleshooting).

• Monitorservice health and user experience; proactively identify trends and recurring issues.

• HandleL2/L3 incident troubleshooting: authentication issues (SSO/SAML),PAC/forwarding issues, tunnel/connector issues, policy blocks, certificate/SSL inspection issues.

• Perform policy administration: create/update rules, exceptions, and change deployments following CAB/ITSM change controls.

• Maintain forwarding architecture: Zscaler Client Connector, GRE/IPsec tunnels, PAC files, forwarding profiles, location configuration, traffic steering.

• Manage integrations: IdP (Azure AD/Entra ID, Okta, ADFS), SIEM (Splunk/QRadar),ticketing (ServiceNow), endpoint tools (Intune/Jamf), MFA.

• Execute routine operational tasks: connector upgrades, certificate updates, location updates, application onboarding to ZPA, user/group updates.

• Work with vendors/TAC; drive cases to closure and implement corrective actions.

• Maintain documentation: runbooks, SOPs, troubleshooting guides, policy standards,onboarding checklists.

• Support audits and compliance: policy reviews, recertification evidence,logging/retention checks. Menlo Web Isolation Maintain allow-list/whitelist for approved URLs/domains based on business justification and security requirements.

• Manage exception lifecycle: approvals, expiry dates, periodic review/cleanup, and recertification evidence.

• Ensure isolation policies align with ZIA policies and do not create conflicting user experience (e.g., bypass vs isolate logic) Site not loading in isolation,rendering issues, broken web apps, file download/upload restrictions,clipboard/printing controls (as applicable)

Core skills:

• Strong working knowledge of ZIA (SSL inspection, URL filtering, CASB/app control,sandbox, forwarding methods).

• Strong working knowledge of ZPA (connectors, app segments, access policies, posture,authentication flows).

•Troubleshooting across endpoint + network + identity (DNS, TLS cert chains,proxy behavior, SAML/SSO, routing).

•ITSM/change management discipline (ServiceNow/JIRA), documentation habits.Strong knowledge about Zero Trust concepts

•Nice-to-have: SIEM integration, DLP, basic scripting (PowerShell/Python) forops automation.

Job Description

We are looking for a skilled Network Engineer to design, implement, maintain, and support our growing network infrastructure. The ideal candidate will be responsible for ensuring the stability, integrity, and efficient operation of in-house and cloud-based network services.

Key Responsibilities:

• Design and deploy functional networks (LAN, WAN, WLAN)
• Configure and install network hardware such as routers, switches, firewalls, and access points
• Monitor network performance and troubleshoot issues
• Ensure network security through proper configurations and updates
• Perform network maintenance and system upgrades
• Collaborate with IT teams and vendors for network-related projects
• Maintain documentation of network architecture and processes
• Provide technical support and resolve network-related incidents

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or related field
• Proven experience as a Network Engineer or similar role
• Strong knowledge of networking protocols (TCP/IP, DNS, DHCP, VPN)
• Hands-on experience with routers, switches, and firewalls
• Familiarity with network monitoring tools
• Understanding of network security practices
• Good problem-solving and communication skills

EA Reg Number: R21103035 

EA License Number: 07C3924 | Company Registration No:200609504D 

Network security Engineer (L2/L3)

RoleSummary:

Shouldfocus on day-2-day operations, incident, change management, and user centrictroubleshooting.

Operate andcontinuously improve the organization’s Secure Access Service Edge (SASE)services using Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA),ensuring secure, reliable user connectivity and strong policy governance.

Keyresponsibilities (Operational / BAU)

• Runday-to-day operations for ZIA (web gateway, SSL inspection, URL filtering,cloud app control, sandbox, DLP , DNS security).

• Runday-to-day operations for ZPA (App Segments, Access Policies, Connectormanagement, posture requirements, policy troubleshooting).

• Monitorservice health and user experience; proactively identify trends and recurringissues.

• HandleL2/L3 incident troubleshooting: authentication issues (SSO/SAML),PAC/forwarding issues, tunnel/connector issues, policy blocks, certificate/SSLinspection issues.

• Performpolicy administration: create/update rules, exceptions, and change deploymentsfollowing CAB/ITSM change controls.

• Maintainforwarding architecture: Zscaler Client Connector, GRE/IPsec tunnels, PACfiles, forwarding profiles, location configuration, traffic steering.

• Manageintegrations: IdP (Azure AD/Entra ID, Okta, ADFS), SIEM (Splunk/QRadar),ticketing (ServiceNow), endpoint tools (Intune/Jamf), MFA.

• Executeroutine operational tasks: connector upgrades, certificate updates, locationupdates, application onboarding to ZPA, user/group updates.

• Work withvendors/TAC; drive cases to closure and implement corrective actions.

• Maintaindocumentation: runbooks, SOPs, troubleshooting guides, policy standards,onboarding checklists.

• Supportaudits and compliance: policy reviews, recertification evidence,logging/retention checks. Menlo Web Isolation Maintain allow-list/whitelist forapproved URLs/domains based on business justification and securityrequirements.

• Manageexception lifecycle: approvals, expiry dates, periodic review/cleanup, andrecertification evidence.

• Ensureisolation policies align with ZIA policies and do not create conflicting userexperience (e.g., bypass vs isolate logic) Site not loading in isolation,rendering issues, broken web apps, file download/upload restrictions,clipboard/printing controls (as applicable)

Coreskills:

• Strongworking knowledge of ZIA (SSL inspection, URL filtering, CASB/app control,sandbox, forwarding methods).

• Strongworking knowledge of ZPA (connectors, app segments, access policies, posture,authentication flows).

• Troubleshootingacross endpoint + network + identity (DNS, TLS cert chains, proxy behavior,SAML/SSO, routing).

•ITSM/change management discipline (ServiceNow/JIRA), documentation habits.Strong knowledge about Zero Trust concepts

•Nice-to-have: SIEM integration, DLP, basic scripting (PowerShell/Python) forops automation.

• Exposure to latest technologies such as cloud security 
• High-impact role with autonomy to make key decision for security roadmap and strategy

About the company

Our client is one of the fastest growing company in this industry. They are looking for a leadership-caliber professional to spearhead their cybersecurity division and protect their digital infrastructure.

About the job

Strategic Leadership: Define and execute the long-term information security roadmap and governance frameworks based on international standards.

Operational Oversight: Manage the dedicated security team, focusing on real-time monitoring, threat detection, and rapid incident response.

Risk & Compliance: Lead comprehensive risk assessments and ensure all systems adhere to global data protection regulations and client-specific requirements.

Technical Validation: Coordinate regular security audits, including vulnerability scans and penetration testing, to ensure robust system defense.

Cross-Functional Integration: Partner with Engineering and IT departments to embed security protocols directly into the product development lifecycle.

Stakeholder Reporting: Act as the primary advisor to executive leadership regarding the organization’s security posture and emerging risk landscapes.

Skills and experience required

As a successful applicant, you will have at least 10 years of experience in Cyber Security. Proven track record in managing overall security team for 4 years is required for this role. Exposure to information security framework such as  ISO 27001 and NIST is required for this role. 

Experience in cloud security such as Azure or AWS will be highly preferred. 

Whats on offer
This is an excellent opportunity to grow together with one of the fastest growing company, 

To apply online please use the 'apply' function, alternatively you can reach me at https://www.linkedin.com/in/hoonteck-nologyrecruitment. (EA: 94C3609/ R1219669)

About Air Liquide Industrial Services Private Limited

As a world leader in gases, technologies and services for Industry and Health, Air Liquide is present in 59 countries with approximately 65,000 employees and serves more than 4.3 million customers and patients. Oxygen, nitrogen and hydrogen have been at the core of the company's activities since its creation in 1902. Air Liquide's ambition is to be the leader in its industry, delivering long-term performance and acting responsibly.

Missions:

• Spearhead the East Asia Pacific regional network of information protection, security and crisis correspondents, ensuring the localized implementation of corporate roadmaps across all fields.
• Lead the regional network of information protection, security, and crisis correspondents across the East Asia Pacific. This includes Singapore, Japan, Taiwan, Korea, Australia, New Zealand, Malaysia, Indonesia, Philippines, Thailand, Vietnam, and Brunei. The role ensures the localized, consistent implementation of corporate roadmaps in all relevant fields throughout the region.
• Act as the strategic bridge between Paris Headquarters and local entities to increase crisis management preparedness and guarantee compliance with Group standards. 
• Serve as the strategic link between Paris Headquarters and local entities/key management. Ensure compliance with Group standards and enhance crisis management preparedness across the organization.
• Manage cybersecurity awareness through targeted, region-wide communication campaigns and training programs.
• Strategize, design, and deploy new corporate policies on Crisis Management, Information Protection, Security. 
• Govern the implementation of measures and procedures across all relevant sections. This role involves ensuring the proper application of these measures and maintaining constant dialogue with local and regional management.
• Ensure the completion of global, regional and national program maturity assessments.
• Staying informed about the geopolitical, security situation, regulatory framework evolutions across the region to propose proactive accompanying measures. 
  

Responsibilities:

• Design overarching strategies, corporate programs, and training tools to increase cybersecurity awareness, security and crisis management compliance at both regional and local levels.
• Organize cross-border crisis simulation training and build comprehensive communication plans to share lessons learned and ensure capitalization. Coordinate crisis response during cyber and non-cyber incidents, managing communications with all key global and regional stakeholders.
• Drive adherence to the relevant Group Policies explicitly adapting corporate frameworks to account for complex cultural and country-specific differences across the APAC region.  
• Facilitate data privacy risk assessments for new digital and business solutions. Conduct continuous evaluations of physical, travel, and operational vulnerabilities, translating these assessments into actionable mitigation projects for local business leaders.
  

Requirements:

• Minimum 5 to 8 years of proven experience in Communications, Change Management, or Regional Project Management within a highly multinational organization. Strong coordination capabilities are a must.
• Extensive experience navigating the complex global matrix of a major industrial or manufacturing multinational is a definite advantage.
• Exceptional capacity to conceptualize and deploy strategies across various fields, with a demonstrated ability to adapt to a multi-country, intercultural scope.
• Strong ability to translate complex digital security concepts into effective corporate training and awareness campaigns.
• A keen interest in and appreciation for complex geopolitical and security issues. 

**We thank you for your interest in Air Liquide. Interested applicants are encouraged to send in a detailed resume, including reasons for leaving for past employment. Please be informed that only shortlisted candidates would be notified.**

Company:

Sopra Steria is a listed European tech leader specializing in Consulting, Digital Services, and Software. With 60,000 employees worldwide across Europe, North America and Asia, Singapore serves as the HQ for our APAC operations. We focus on delivering Infrastructure, Cloud and Cybersecurity services across the region.

Responsibilities:

• Project technical lead for ICT security related projects.
• Support in daily operations on incident management, problem(s) / issue(s) remediation and service(s) restoration.
• Fulfilling of service request(s) related to firewall and / or other network security devices following the Change Management procedure.
• Create and maintain documentations of network configuration, network diagram, mapping, processes, and service records.
• Manage, track and assessment all of principal advisories on patches on vulnerability and firmware upgrades
• Planning and applying of devices security patches and firmware upgrades.
• Any other tasks assigned by the Institute.

• Relevant Diploma or Bachelor’s Degree in Computer Engineering (or equivalent).
• Network certifications such as CCNA is required; CCNP is an added advantage.
• Security certification such as PCNSE/CCSA/NSE 4 is an added advantage.
• At least 5 years of strong experience with in-depth hands-on in Next Generation Firewall (such as Cisco, Palo Alto, Check Point, Fortinet, etc.), IDS/IPS, NAC (Clearpass / ISE), VPN and Firewall Auditing tools (such as Algosec, Tufin, Firemon, etc).
• Knowledge on network compliance is an added advantage.
• Strong communications and written skills in English.
• Excellent problem-solving skills in a multi-tasking, fast-paced and complex work environment.
• Good communication skill, positive attitude, team player, resourceful and resolve problems independently.
• At least 3 years supporting an enterprise network security infrastructure.
• At least 3 years of relevant working experience in Singapore.
• Prior experience performing similar role in a government organization.

• Regular team buildings
• 18 leave days / year
• Insurance: GP, Hospitalisation, Dental and Optical
• Annual Performance bonus
• Working hours: from 9am to 6pm, Monday to Friday
• Training and certifications paths

Key Responsibilities

• Deliver technical solutions to clients and take responsibility for the standards of work, project sign-off, and client satisfaction.

• Provide client support, assisting with troubleshooting, design, configuration, and escalated problem management.

• Act as key project team members charged with the analysis of client and technical requirements, specifications development, solution design and development, and in some environments may consult on testing and deployment processes.

• Expected to be technology leads for specific technologies and to use their deep knowledge of these technologies to propose enhancements.

Education

• Degree in Computer Engineering, Computer Science, Information Technology, or related field.

• CCIE, CCSM, PCNSC, or other relevant certifications.

Requirements

• At least 7–10 years of professional technical experience related to software development, systems design and deployment, or networking and infrastructure within a large-scale (preferably multinational) technology services environment.

• Experience in designing and building complex LAN and large WAN environments.

• Expertise in routing and switching technologies, including BGP, OSPF, EVPN, etc.

• Expertise in designing and building complex data center networks with Software Defined Networking (SDN) solutions such as Cisco ACI, VMware NSX, or OpenFlow protocols.

• Experience in designing and building complex WAN with Software Defined WAN (SD-WAN) solutions such as Viptela, SilverPeak, and Riverbed.

• Experience in designing and building complex campus networks with Software Defined Access (SDA) solutions from Cisco or other SDA vendors.

• Experience in network automation via scripting (e.g., Python, Ruby) or tools (e.g., Ansible, Algosec, Chef).

• Experience in designing and building network security solutions (Checkpoint, Palo Alto, Fortigate, Cisco Firewall, IDS/IPS, VPN, SSL), and content networking (cache, load balancer, F5, ISE, etc.).

• Experience in project management methodologies.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

We’re hiring a Sr. Operational Technology Security Engineer (OT) to manage Sandisk’s OT visibility and resilience program across high‑technology manufacturing sites. You’ll stand up and mature our OT monitoring solution, integrate telemetry into our SIEM, and partner with factory operations to ensure security without disrupting production.

This role owns engineering, delivery, and ongoing operations of OT security—bridging engineering, manufacturing, and the SOC—so that Sandisk maintains continuous production with zero downtime due to internal cybersecurity incidents.

• Program Partnership: Assist in defining and executing the OT security roadmap, aligning with corporate cybersecurity strategy and manufacturing uptime objectives.
• OT Monitoring Deployment: Manage installation and configuration of OT monitoring platforms such as Nozomi Networks, Claroty, Dragos, Armis, ensuring proper sensor placement for maximum visibility.
• Traffic Analysis & Protocol Coverage: Implement tools for deep packet inspection and protocol analysis (e.g., Wireshark, Zeek, Suricata) to monitor Modbus, Profinet, DNP3, OPC-UA, and other industrial protocols.
• SIEM Integration: Collaborate with SOC and architecture teams to stream OT telemetry into SIEM/SOAR platforms, develop detection logic, and optimize alerting to reduce false positives.
• Asset & Risk Management: Establish and maintain a comprehensive OT asset inventory, vulnerability management process, and configuration baselines for critical systems.
• Network Segmentation & Access Control: Participate in segmentation projects, firewall rule reviews, and identity separation between IT and OT environments; implement secure remote vendor access protocols.
• Incident Response & Resilience: Participate in creating OT-specific incident response playbooks, conduct tabletop exercises, and ensure disaster recovery plans meet manufacturing continuity requirements.
• Compliance & Standards: Ensure adherence to NIST CSF, IEC 62443, and corporate security policies; prepare for internal and external audits.
• Cross-Functional Collaboration: Work closely with onsite IT teams and Manufacturing leadership to schedule changes, minimize production impact, and jointly achieve zero-downtime objectives.
• Metrics & Reporting: Manage KPIs (e.g., telemetry coverage, MTTR, segmentation compliance) and deliver executive-level reporting on OT security posture.

Job Description:

Network Administration

• Perform network administration in a heterogeneous environment (production, DR, test) comprising of network and security equipment, telecommunication links
• Perform hardening, upgrade and enhancement on IT infrastructure components
• Monitor, assess, schedule and implement network, and product-specific security vulnerability patches
• Monitor obsolescence of IT infrastructure components (network systems)
• Monitor expiry and perform renewal of network system password and certificates
• Implement network backups operations to ensure data recoverability and business continuity
• Execute disaster recovery plans for IT infrastructure (network systems) and conduct regular disaster recovery (DR) testing and component switchover exercises to ensure usability of standby and DR equipment
• 24 x 7 support is required (Need to work in 5 x shifts)

Job Requirements:

• Bachelor’s degree in Information Technology, Information Systems, Computer Science, or a related field.
• Minimum of 5 years of hands-on experience in managing network and security equipment such as Routers, Switches, Firewalls, VPN, Load Balancer, DNS, NAC in financial institutions or mission-critical environment (Network Administration/Project Management and Support/Incident and Problem Management/Change and Release Management)

Interested applicants please send your resume in MS Words format to joanna.tan@ambition.com.sg and attention to Tan Joanna (R1104661)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1104661

Data provided is for recruitment purposes only

Business Registration Number: 200611680D. License Number: 10C5117