Total 6 Legal / Public / Security job vacancies in Surabaya, East Java

What you will be doing:

• Prepare a clear development brief in respect of the Project’s quality, cost and time requirements and limitations
• Advise on the procurement strategy and prepare project budget and tender documents (pre-contract & post contract administration and procedures)
• Prepare cost estimate and finalized cost and coordinate project meeting with clients
• Prepare tender documents, evaluate tenders received and recommendation to Clients for award of contracts
• Provide support on technical issues to Client
• Perform project management work inbuilding repairs and replacement, additional and alteration works, and new built.
• Coordinate closely with Contractors/ Sub-Contractors or site teams to ensure delivery of result
• Work with consultants, authorities, sub-contractors and suppliers to ensure project plans are implemented according to stipulated timeline
• Perform site inspections, attend site meetings, provide regular progress reports with photo and submit progressive project claims
• Prepare and submit reports to various representatives, government agencies, to handle site audits
• Facilitate in conducting of consensus gathering especially for upgrading and CIPC projects
• Handle feedbacks from the ground / residents pertaining to project
• Ensure safety measures are implemented on site
• Attendance at upgrading meetings, committee meetings, etc.
• Any ad-hoc duties as assigned whenever required

You are:

• Diploma or Bachelor's Degree in Civil & Structural Engineering or a related discipline.
• Must be a Registered Resident Technical Officer (RTO) with BCA or equivalent authority.
• Minimum [insert number] years of relevant experience in civil and structural site supervision.
• Proficient in interpreting construction drawings and ensuring compliance with safety and quality standards.
• Strong coordination skills with contractors, consultants, and project stakeholders.
• Able to work independently, maintain site documentation, and adapt to project schedules.

Why join Cushman & Wakefield?

As one of the leading global real estate services firms transforming the way people work, shop and live working at Cushman & Wakefield means you will benefit from;

• Being part of a growing global company;
• Career development and a promote from within culture;
• An organisation committed to Diversity and Inclusion

We're committed to providing work-life balance for our people in an inclusive, rewarding environment.

We achieve this by providing a flexible and agile work environment by focusing on technology and autonomy to help our people achieve their career ambitions. We focus on career progression and foster a promotion from within culture, leveraging global opportunities to ensure we retain our top talent. We encourage continuous learning and development opportunities to develop personal, professional and technical capabilities, and we reward with a comprehensive employee benefits program.

We have a vision of the future, where people simply belong.

That's why we support and celebrate inclusive causes, not just on days of recognition throughout the year, but every day. We embrace diversity across race, colour, religion, gender, national origin, sexual orientation, gender identity or persons with disabilities or protected veteran status.

We ensure DEI is part of our DNA as a global community - it means we go way beyond than just talking about it - we live it. If you want to live it too, join us.

Job Summary

We are looking for enthusiastic and passionate candidate to join the cyber security team as a Digital Forensics Incident Responder (DFIR).

Mandatory Skill-set

• Diploma or Degree in Computer Science, Engineering, Information Systems, Information Security;
• Must have 5 years of work experience in Information Security focusing on identifying remediating and investigation of Cyber Security Incidents or Digital Forensics;
• Experience in forensic tool kits such as Magnet AXIOM, Encase, X-Ways, FTK or Autopsy in imaging, collection, transformation, analysing, gathering, examination, investigation different kinds of digital evidences;
• Good understanding of Malware, Intrusion Detection Systems and SIEM platforms;
• Proactive and self-motivated team player with a strong sense of responsibility and accountability;
• Keen learner and strong passion in self-development and cyber security research;
• Strong problem solving and analytical skills with ability to work in fast paced environment;
• Good written and communication skills.

Desired Skill-set

• Certifications, including GIAC GCFA, GCFE, GCIH or related certifications;
• Experience working in a Security Operation Centre (SOC).

Responsibilities

• Part of the Cyber Forensic team to provide forensic support to manage Digital Forensic and Incident Reponses and ensure smooth operations of daily operations;
• Responsible to monitor, triage cyber threat information from news, incoming feeds and logs;
• Assist and support Digital Forensics Incident Responder Analyst to investigate any malware out-rage, security incidents or root-cause analysis;
• Investigate cybersecurity incidents that may involve digital forensic analysis, malware analysis and log analysis;
• Perform cybersecurity threats and vulnerabilities assessment;
• Provide strong technical guidance on investigation and threat assessments;
• Track and manage incidents and handle end-to-end resolution starting from detection (opening) to closure;
• Adhere to the Standard Operation Procedures (SOP) within the security operations; regularly review them to improve the efficiency;
• Maintain situational awareness and keep current with cyber security news and threat actor Tactics, Techniques and Procedures (TTPs);
• Prepare and review incident reports to update stakeholders and report potential findings from both technical and business perspective.

Should you be interested in this career opportunity, please send in your updated resume to apply@sciente.com at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website

(https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639

A Security Engineer I is professional responsible for designing, implementing, and maintaining technical security measures, focusing on vulnerability management, threat detection, and infrastructure protection. They secure cloud/on-prem environments using automation (Python, Terraform) and tools like SIEM or EDR, often collaborating with DevOps to remediate security risks and strengthen security posture.

Essential Functions:

• Develop and maintain security policies, guidelines, and lead implementation in all systems, including AWS and in particular CloudTrail, EKS, AWS Inspector, EC2, EMR, S3, AWS Identity Center, RDS, Security Hub, Guard Duty.

• Architect, design, implement, support, and evaluate security-focused tools and controls to meet security and compliance needs.

•  Integrate security checks into the CI/CD pipelines to ensure continuous compliance and shift left security practice.

• Utilize tools like Terraform or Cloud Formation to build, deploy and enforce compliance and secure cloud infrastructure.

• Utilize networking (VPC, Firewall, Transit Gateways), container security and encryption.

• Builds scripts (phyton, bash) and serverless functions (AWS Lambda) for alerting on anomalies, misconfigurations and threats include automations to auto respond to such threat actors/findings.

• Oversee threat management and security incident handling, including the coordination of investigations and reporting of security incidents to management, in alignment with business.

•  Work with the team and QSA on PCI (level 1 & level 2 service provider) & SOC initiatives for the company.

• Ensure that security is factored into the evaluation, selection, and configuration of hardware, applications and software.

• Ensure audit trails, systems logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements. Provide support and guidance for legal and regulatory compliance efforts, including audit support.

• Promote information security awareness throughout the company. Stay current with security technologies and threats by monitoring vendor and industry publications and attending training.

• Secure sensitive data, manage user credentials through principal of least privileges, track user activity.

• Proactively identify security risks and implement practices that meet standards for information security, by analyzing current systems, and working with IT and the business. Partner with development and infrastructure teams to identify and remediate vulnerabilities Develop mitigation plans.

Qualifications:

• Bachelor Degree in Computer Science or related technical field

• 3 to 5 years in cybersecurity experience within a professional environment

• Certified Information Systems Security Professional certification is a plus

Knowledge, Skills and Abilities:

• Experience with IDS/IPS, file integrity, internal/ external penetration & vulnerability tests, FIM, SEIM, Log aggregation tools required

• Development and scripting experience to build automation: Lambda, Terraform, Cloud Formation, API Integrations

• Understanding of the software development life cycle and CI/CD pipelines

• Ability to execute process and standards around code quality and the deployment lifecycle including SAST and DAST

• Experience in SIEM, MDR, EDR, DLP Identity Management, WAF, WAS, Incident Response, attack surface management

• Proactively find weaknesses in applications and network through audits, penetration tests and security assessments

• Prepare reports on security metrics, attempted attacks, document findings and actions taken

• Proven record of learning new languages, skills and technologies quickly, with minimal guidance

• Takes initiative, stays focused, always accountable

• Thrives in a fast-paced environment with the ability to focus on achieving the target whole minding longer term goals along the way

• Excellent communication skills

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/ or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Description

IAM Operations

• Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities.
• Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment.
• Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance.
• Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows.
• Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly.
• Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

• Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders.
• Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

• Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution.
• Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs.
• Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

Job summary

We are seeking a Legal Executive to provide commercial legal support, with a primary focus on contract drafting, review, and internal legal advisory.

Job Responsibilities

1. Contract Review & Commercial Legal Support

• Draft, review, and negotiate commercial contracts, including procurement agreements, service contracts, supply agreements, NDAs, and partnership agreements.

• Maintain and update standard contract templates and clause libraries to ensure alignment with Singapore laws and internal policies.

• Identify and highlight legal risks relating to key contractual terms such as indemnity, limitation of liability, intellectual property, confidentiality, payment terms, and service deliverables.

• Support contract approval processes, execution, stamping, and proper record-keeping in accordance with internal governance requirements.

2. Legal Advisory & Business Support

• Provide day-to-day legal support to internal stakeholders on commercial and operational matters.

• Assist business units in understanding legal considerations for new initiatives, proposals, and operational arrangements.

• Coordinate with external law firms on specialized or complex legal matters where required.

3. Dispute Support & External Counsel Coordination (Non-litigation Role)

• Support the coordination of contract-related issues, disputes, or complaints by liaising with external counsel.

• Assist in information gathering, document preparation, and internal reporting.

4. Compliance & Internal Governance Support

• Support internal compliance reviews and regulatory checks, including PDPA-related matters and licensing requirements.

• Assist in implementing group compliance policies locally in accordance with Singapore regulations.

• Support basic internal briefings on contract management and legal risk awareness.

5. Cross-functional & HQ Coordination

• Liaise with internal stakeholders and HQ legal or compliance teams to provide required documentation and updates.

• Support alignment between local legal practices and group-level frameworks.

Job Requirements

Education

• Bachelor’s Degree in Law (LLB or equivalent) – mandatory

Experience

• At least 3 years of relevant experience in commercial or business law, either in-house or in a law firm

• Experience in drafting, reviewing, and negotiating commercial contracts

• Familiarity with Singapore commercial and contract law

• Experience coordinating with external counsel is an advantage

Skills & Competencies

• Detail-oriented, organized, and able to manage multiple tasks concurrently

• Able to work independently while collaborating

working collaboratively with internal stakeholders

Additional Information

• Admission to practice is an advantage but not mandatory

• The role focuses on commercial legal support and does not require litigation or court experience

We are seeking a Security Architect with a strong development and solution architecture background to lead our architecture consulting team and design security solutions that enable business outcomes while maintaining robust security postures. This role reports to CISO.

Key Responsibilities:

Architecture Security Reviews and Threat Modelling 

·       Lead a team of security architecture consultants, providing threat-driven architecture security reviews and threat modelling

·       Drive development of AI enabled security reviews, threat modelling and security enhancements of CI/CD pipeline

Build Security In / Shift Left 

·       Drive strategic security architecture decisions across business units and technology domains

·       Develop secure reference architectures and design patterns for modern application stacks and BSI

·       Build security-by-design with development workflows

·       Enhance CI/CD security tooling and automation and drive adoption and metrics reporting 

·       Reignite Security Champions initiative to improve shift left approach

Enterprise and Identity security architecture 

·       Design identity governance solutions for hybrid and multi-cloud environments

·       Assess and implement advanced IAM patterns including fine-grained authorization, privilege escalation controls, and just-in-time access

·       Develop identity integration strategies for AI systems and automated decisioning

·       Engage with platform and DevOps engineering teams to build secure infrastructure and technology foundations

·       Propose initiatives to address security gaps or enhance the overall security posture

·       Build positive flywheel effect among stakeholders to enable security adoption and cultural transformation

Gen AI Security

·       Design and integrate security frameworks for Gen AI deployment, monitoring, and governance within AI risk framework

·       Maintain security blueprints for(Gen) AI deployments, including MCP and AI guardrails

·       Lead agentic AI security initiative with focus on authentication and authorization of AI agents

Requirements:

·       Bachelor’s degree in computer science, engineering, or related fields

·       Strong software engineering background with more than 5years of experience as a software engineer / developer.

·       3+ years of team or lateral leadership experience in technology architecture or security consulting teams

·       Proven leadership of security architecture/threat modelling.

·       Track record leading complex, multi-stakeholder security initiatives.

·       Ability to ship secure reference architectures and drive developer adoption at scale.

·       Experience with AI/ML security challenges and solutions including Large Language Model (LLM), Model Context Protocols (MCP), Agentic AI and AI governance frameworks

·       Comprehensive knowledge of application security principles(OWASP, SANS, etc.)

·       Experience with modern security tooling: SAST, DAST, SCA, container scanning, secrets management

·       Relevant certifications (eg. SANS, AWS, Azure)