Total 116 security job vacancies

JD for System Engineer

Manage the day-to-day operations of client systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities. Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment. Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance. Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows. Monitor client systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly. Maintain accurate documentation of system configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

Support periodic access reviews and audits, identifying and remediating access risks in line with internal policies and regulatory requirements. Assist in tracking system related risks and remediation action plans, providing updates to relevant stakeholders. Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

Serve as the first point of contact for system -related issues and queries from users and IT teams, providing clear and timely resolution. Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs. Maintain service quality and operational consistency as the team transitions project-focused members to new system initiatives.

The IAM Operations Analyst is responsible for the day-to-day operation, administration, and support of the organization's Identity and Access Management (IAM) services. This role ensures that user and machine identities are managed securely and efficiently throughout their lifecycle while maintaining compliance with internal policies and regulatory requirements. The position works closely with IT, security, and business stakeholders to deliver reliable identity services, support access governance activities, and maintain a strong security posture across the enterprise.

Key Responsibilities

IAM Operations

• Manage the daily operation of IAM platforms, including user and machine identity provisioning, de-provisioning, modification, and lifecycle management.
• Administer and maintain Active Directory (AD) and LDAP directory services, ensuring the accuracy and integrity of identity data across the environment.
• Operate, support, and maintain One Identity solutions, including configuration, troubleshooting, issue resolution, and routine system maintenance.
• Process access requests in accordance with established policies, approval workflows, and service level expectations.
• Monitor IAM systems and services for operational issues, anomalies, policy violations, and potential security threats, escalating and resolving incidents as required.
• Maintain and update IAM documentation, including system configurations, operational procedures, access records, and support runbooks.
• Support system upgrades, patches, and ongoing improvements to IAM platforms and processes.

Access Governance & Compliance

• Support periodic access certification reviews and audit activities to ensure appropriate access rights are maintained across the organization.
• Identify, investigate, and remediate access-related risks and control gaps in alignment with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks, remediation activities, and action plans, providing regular updates to stakeholders.
• Generate and maintain reports on user access, identity lifecycle activities, policy compliance, and audit findings.
• Support evidence collection and documentation for internal and external audits.

Stakeholder Support & Service Delivery

• Act as the primary point of contact for IAM-related requests, incidents, and inquiries from users, application owners, and IT teams.
• Provide timely troubleshooting and resolution of IAM issues while maintaining a high level of customer service.
• Collaborate with IT infrastructure, cybersecurity, and application teams to ensure identity and access controls align with business and security requirements.
• Contribute to continuous service improvement initiatives, helping maintain operational stability while supporting ongoing IAM transformation projects.
• Ensure service quality, operational consistency, and knowledge transfer as resources transition between operational and project-based IAM initiatives.

Qualifications & Experience

Required

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Experience supporting Identity and Access Management operations in an enterprise environment.
• Hands-on experience with Active Directory, LDAP, and identity lifecycle management processes.
• Experience administering or supporting One Identity solutions or comparable IAM platforms.
• Understanding of access governance, role-based access control (RBAC), joiner-mover-leaver processes, and privileged access concepts.
• Knowledge of IT security principles, audit requirements, and compliance frameworks.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management abilities.

Preferred

• Experience with identity governance and administration (IGA) platforms.
• Familiarity with cloud identity services such as Microsoft Entra ID (Azure AD) or other cloud IAM technologies.
• Knowledge of ITIL service management practices.
• Relevant certifications such as Security+, ITIL Foundation, Microsoft Identity certifications, or IAM-related certifications.

This role focuses on building, integrating, and automating security systems to strengthen detection and response capabilities across on-premise, cloud, and network environments.

Core Responsibilities

1. Design, implement, and integrate security tools across enterprise environments

2. Build and maintain telemetry pipelines into SIEM and detection platforms

3. Support onboarding of systems into security monitoring

4. Implement and manage vulnerability scanning and remediation workflows

5. Work with SOC teams to translate operational gaps into engineering improvements

6. Support incident response and post-incident remediation

Core Requirements

1. Degree in Cybersecurity, IT, Computer Engineering or related field

2. At least 5 years of experience in Security Engineering, DevOps, or platform engineering

3. Experience with enterprise security technologies (e.g. SIEM, SOAR, EDR, cloud security)

4. Proficiency in scripting or automation (e.g. Python, PowerShell)

5. Strong understanding of networking and security telemetry

6. Experience implementing or integrating security platforms (e.g. SIEM, telemetry, cloud security tools)

7. Experience working in multinational or large enterprise environments

8. Ability to deliver engineering outcomes independently

Description

IAM Operations

• Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities.
• Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment.
• Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance.
• Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows.
• Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly.
• Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

• Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders.
• Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

• Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution.
• Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs.
• Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

ARSLAN SRS Singapore (formerly Security & Risk Solutions)

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

The IAM Operations Analyst is responsible for the day-to-day operation, administration, and support of the organization's Identity and Access Management (IAM) services. This role ensures that user and machine identities are managed securely and efficiently throughout their lifecycle while maintaining compliance with internal policies and regulatory requirements. The position works closely with IT, security, and business stakeholders to deliver reliable identity services, support access governance activities, and maintain a strong security posture across the enterprise.

Key Responsibilities

IAM Operations

• Manage the daily operation of IAM platforms, including user and machine identity provisioning, de-provisioning, modification, and lifecycle management.
• Administer and maintain Active Directory (AD) and LDAP directory services, ensuring the accuracy and integrity of identity data across the environment.
• Operate, support, and maintain One Identity solutions, including configuration, troubleshooting, issue resolution, and routine system maintenance.
• Process access requests in accordance with established policies, approval workflows, and service level expectations.
• Monitor IAM systems and services for operational issues, anomalies, policy violations, and potential security threats, escalating and resolving incidents as required.
• Maintain and update IAM documentation, including system configurations, operational procedures, access records, and support runbooks.
• Support system upgrades, patches, and ongoing improvements to IAM platforms and processes.

Access Governance & Compliance

• Support periodic access certification reviews and audit activities to ensure appropriate access rights are maintained across the organization.
• Identify, investigate, and remediate access-related risks and control gaps in alignment with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks, remediation activities, and action plans, providing regular updates to stakeholders.
• Generate and maintain reports on user access, identity lifecycle activities, policy compliance, and audit findings.
• Support evidence collection and documentation for internal and external audits.

Stakeholder Support & Service Delivery

• Act as the primary point of contact for IAM-related requests, incidents, and inquiries from users, application owners, and IT teams.
• Provide timely troubleshooting and resolution of IAM issues while maintaining a high level of customer service.
• Collaborate with IT infrastructure, cybersecurity, and application teams to ensure identity and access controls align with business and security requirements.
• Contribute to continuous service improvement initiatives, helping maintain operational stability while supporting ongoing IAM transformation projects.
• Ensure service quality, operational consistency, and knowledge transfer as resources transition between operational and project-based IAM initiatives.

Qualifications & Experience

Required

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Experience supporting Identity and Access Management operations in an enterprise environment.
• Hands-on experience with Active Directory, LDAP, and identity lifecycle management processes.
• Experience administering or supporting One Identity solutions or comparable IAM platforms.
• Understanding of access governance, role-based access control (RBAC), joiner-mover-leaver processes, and privileged access concepts.
• Knowledge of IT security principles, audit requirements, and compliance frameworks.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management abilities.

Preferred

• Experience with identity governance and administration (IGA) platforms.
• Familiarity with cloud identity services such as Microsoft Entra ID (Azure AD) or other cloud IAM technologies.
• Knowledge of ITIL service management practices.
• Relevant certifications such as Security+, ITIL Foundation, Microsoft Identity certifications, or IAM-related certifications.

Job Description

• Secure construction site office premises and personnel by patrolling property; monitoring surveillance equipment; inspecting buildings, equipment and access points; permitting entry
• Prevent unauthorised entry, intrusion and acts of vandalism.
• Prevent abuse of facilities provided by occupiers (including visitors).
• Conduct crowd and vehicle traffic control.
• Control and direct traffic movements during morning and evening peak hours.
• Ensure that all personnel register at the designated security counters and issue visitor pass.
• Conduct audit check on security passes to ensure only authorised vehicle and personnel can access.
• Enforcement of SMM and health monitoring of all entrants.

Job Requirements:

• Minimum Secondary education
• Candidates must possess a valid PLRD Security License.
• At least 1 year of working experience in the related field is required for this position.
• Commence work with short notice.
• Candidate must be able to performing 2 rotating shift

Summary

The Security Executive supports the Assistant Security Manager and the Head of Safety, Security, and

Compliance in day-to-day operations.

Reporting to the Assistant Security Manager, he/she will work closely with all departments in the

company, including outsourced security vendors. He/she will assist the Assistant Security Manager in

ensuring that aviation security measures are met.

Duties and Responsibilities

• Assist in ensuring dnata adheres to APD Security Directives.

• Manage access control systems and processes.

• Conduct investigations into security breaches and incidents.

• Assist in reviewing and updating Standard Operating Procedures (SOPs) to meet regulatory requirements.

• Assist in conducting security risk assessments to identify and address key risk areas.

• Enforce a security culture through engagement with business units.

• Identify and escalate breaches or concerns related to security, procedures, or systems.

• Issue staff passes and access rights for employees and contractors; ensure timely revocation and retrieval of passes upon resignation, and manage the secure disposal of access credentials.

• Support security incident response in the absence of the Assistant Security Manager.

• Oversee dnata Security Systems, including CCTV, EM Locks, drop arm barriers, and intrusion alarm systems.

• Issue parking decals for dnata staff and contractors; ensure accurate data submission to the finance department on a monthly basis for billing purposes.

• Assist in preparing and presenting security reports as needed.

• Conduct regular security checks and audits.

• Ensure 24/7 shift security deployment coverage across Catering, Cargo, and the

Maintenance Base.

• Oversee 24/7 shift security coverage for all dnata contracted flights, including standard and non-standard services.

• Assist with airline/regulatory security audits of dnata operations.

• Address security findings from audits by ensuring timely closure of issues and integrating resolutions into operational processes and policies to enhance overall security effectiveness.

• Assist in developing and reviewing dnata’s Business Continuity Management Manual.

• Participate in emergency exercises organized by external stakeholders.

• Assist in developing and maintaining a training framework for staff on emergency response and business continuity.

• Assist in executing business continuity and resilience awareness initiatives.

• Assist in reviewing and updating corporate crisis plans and policies.

• Execute incident management plans for coordinated crisis response.

• Assist with additional duties as required.

Requirements

• Minimally attained Diploma/NITEC from a recognized tertiary institution

• Preferably with minimum 2 years’ experience with security policy work.

• Crisis Management & Business Continuity Management experience is appreciated

• Proficient in Microsoft Office Applications; Excel, Word, PowerPoint

• Preferably with Aviation background

• Preferably possess Class 3 driving license and be able to attain Airfield Driving Permit (ADP

Job Purpose:

Responsible for protecting assigned premises, assets and personnel and expected to detect and deter potential threats. Provide concierge security services, detect security threats and manage incidents. He/ She handles medical incidents and compiles incident reports. The Security Officer may need to liaise with and provide information requested by other departments. The Security Officer manages the security team, monitors their performance, and provides coaching and advice.

Job Responsibilities:

1) Conduct regular patrols of premises, including building perimeters, car parks, and common areas.

2) Monitor and operate CCTV surveillance systems and report any suspicious activity.

3) Control and manage access to the facility, verifying credentials of visitors, contractors, and staff.

4) Respond to alarms, emergencies, and incidents; coordinate with emergency services as required.

5) Enforce company security policies and procedures at all times.

6) Prepare and submit accurate incident reports, daily logs, and security briefings.

7) Assist in the investigation of security breaches, theft, or misconduct.

8) Provide a visible security presence to deter unauthorized access and criminal activity.

9) Perform any other duties as assigned by the Security Supervisor or Management.

10) Attend to enquiries from members / guests related to the building or surrounding areas

11) Regulate traffic and crowd around assigned premises

12) Others

• Follow the workplace safety and health system, safe work procedures or safety rules implemented at the workplace.

• Not engage in any unsafe or negligent act that may endanger yourself or others working around you.

• Use personal protective equipment provided to you to ensure your safety while working. You must not tamper with or misuse the equipment.

• Any other duties as assigned by the General Manager/ Management

Requirements:

• Minimum ‘O’level / Professional Certificate or equivalent certification with at least 3 - 4 years of security experience
• Holds a valid Police Licensing and Regulatory Department (PLRD) Licence.
• Current or completed basic security training certification preferred.
• Good teamplayer and with effective communication skills.
• High level of integrity, reliability, and professionalism.
• Upholds a professional image when interacting with various stakeholders.
• Physically fit and able to perform patrolling duties on foot.
• Willingness to work on rotating rostered shift including weekends/PH.
• Outdoor and indoor patrol duties required.
• Uniform and personal protective equipment (PPE) provided.
• 6 days work week.

Description

IAM Operations

• Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities.
• Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment.
• Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance.
• Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows.
• Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly.
• Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

• Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders.
• Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

• Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution.
• Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs.
• Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

Job Description:

Monitor and control access at the main gate, lobby, and loading bay, ensuring only authorized personnel, vehicles, and visitors enter the premises.

Conduct regular patrols of the building exterior, car park, and common facilities .

Operate and monitor CCTV systems, alarm panels, and access control equipment.

Maintain accurate visitor, delivery, and contractor logs.

Attend to car park matters, including assisting drivers and reporting any gantry or ticketing system issues to the supervisor or maintenance personnel.

Identify and report any safety or security hazards and respond promptly to suspicious activities or incidents.

Assist in emergency situations such as fire alarms or evacuations in accordance with site protocols.

Prepare and submit daily occurrence reports and incident records to the Security Supervisor or Property Management.

Provide assistance and directions to tenants, staff, and visitors when required.

Overview

We are seeking an experienced Application Security Consultant to drive secure application development practices, perform security assessments, and support cloud security initiatives. The ideal candidate will have strong expertise in application security, secure SDLC, DevSecOps, threat modelling, and cloud technologies.

Responsibilities

• Perform application security assessments and reviews for web, mobile, and cloud-based applications.
• Conduct threat modelling exercises to identify, assess, and mitigate application security risks.
• Establish threat profiles and recommend security controls for application projects.
• Track, manage, and remediate security vulnerabilities through timely patching and remediation processes.
• Integrate security best practices and automated security testing into CI/CD pipelines.
• Conduct security awareness training and promote secure coding practices across development teams.
• Collaborate with developers, engineers, and stakeholders to strengthen application security posture.
• Support security governance, risk management, and compliance initiatives. 

Requirements

• Minimum 4 years of combined experience in software development, application security, and cloud computing (AWS preferred).
• Strong understanding of web and mobile application architectures and APIs, including REST, SOAP, SSL/TLS.
• Experience in threat modelling and application security risk assessment.
• Strong knowledge of application security standards and frameworks, including:OWASP Top 10OWASP Application Security Verification Standard (ASVS)
• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.
• Experience integrating security testing into development workflows.
• Hands-on experience with SAST (Static Application Security Testing) tools such as:Fortify on DemandSonarQubeSimilar security scanning platforms
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Professional certifications such as:CISSPOSCPAWS Security SpecialtyAWS DevOps EngineerEquivalent cybersecurity certifications
• Experience working with Government Commercial Cloud (GCC) environments.

Key Skills

Application Security | DevSecOps | Threat Modelling | OWASP Top 10 | OWASP ASVS | AWS Security | CI/CD | SAST | Fortify | SonarQube | REST API | SOAP | SSL/TLS | GitLab | GitHub | Ansible | Cloud Security | Vulnerability Management | Secure SDLC | Security Awareness Training | GCC Cloud Environment

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

This is a 12 months fixed term contract role.

What will you do?

• Develop and maintain IT security policies and action plans, reviewing them at least annually or as required by the Customer.
• Evaluate and recommend IT security products and solutions for implementation within the Customer's IT infrastructure.
• Implement and manage risk assessment methodologies, ensuring compliance with relevant service management requirements and industry standards.
• Develop and implement security management frameworks and governance structures as specified by the Customer.
• Establish and manage IT Security Incident Management processes, including detection, response, and handling of security incidents according to Customer guidelines.
• Collaborate with external partners and suppliers to resolve IT security incidents effectively.
• Participate in and contribute to industry-wide IT security incident response simulations and technical assessment exercises.
• Conduct forensic investigations when required, including secure disk image acquisition and analysis within specified timeframes.
• Monitor, analyze, and report on emerging security threats, vulnerabilities, and solutions relevant to the Customer's IT infrastructure.
• Conduct regular meetings with key stakeholders to highlight security issues and propose improvements to the Customer's IT infrastructure.
• Liaise and coordinate with external suppliers, security organizations, and the Government on IT security matters related to the Customer's infrastructure.
• Perform additional activities as necessary to secure the Customer's IT infrastructure.
• Review and follow up on security reports generated from central security tools, providing timely updates to the Customer.
• Manage the inventory of IT assets to be monitored by central security tools, ensuring compliance and proper onboarding of servers, networks, and databases.

Requirements

• At least 4 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (e.g. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred

Benefits

What do we offer in return?

• Fun working environment
• Employee Wellness Program
• To work in Singapore Government Agencies projects
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at careers@activate.sg

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description

Summary:

As a Product Security Leader (PSL) for the Product Automation (PA), you are the central authority for the Business Unit for the products assigned to this individual. You will be responsible for coordinating PA product security efforts across Rockwell Automation and within PA. This includes awareness of the state-of-the-art, industry standards, and security best practices. This further includes establishing standards, processes, and guidelines within PA to establish world-class security in our products and institutionalizing them within our practices. You will report to Director, Logix Architecture. You will be working with the team spread across multiple geographies. You will work Hybrid at Singapore.

Your Responsibilities:

• Be a security thought leader within Rockwell Automation through educating internal personnel and influencing proper security development techniques and tools.
• Provide guidance to senior levels of management regarding product security risk and exposure.
• Drive the process for managing vulnerabilities and their resolution. Provide periodic metrics demonstrating our vulnerability posture.
• Drive the proper application of security principles and techniques with product groups.
• Research current security trends in Industrial Control Systems, software, embedded systems, hardware design, cloud-to-edge, and application security and collaborate with security experts to ensure proper security requirements are put in place.
• Participate and provide critical analysis in security exception reviews and then advocate/review those exceptions with senior management.
• Interact with Digital Trust on security initiatives that the product groups need to participate in.
• Represents the business unit for customer presentations and meetings with regards to security.
• Position requires an understanding of security in the IT and automation markets, competitive offerings, and customer needs to provide direction and implementation in Rockwell Automation control system products and services.
• Demonstrated leadership capabilities, creativity and strategic development, and a proven ability to drive results.
• Strong communication skills and an ability to work within a global remote team environment also critical to achieve the business objectives.
• Security roadmap with portfolio managers.

The Essentials - You Will Have:

• Bachelor's degree in Computer Science, IT Engineering, Electrical Engineering, or equivalent.
• 9 or more years of experience.
• Typically requires 8+ years of related experience.

• Legal authorization to work in the Singapore is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening.
• 2+ years of experience in demonstrating Security Development Lifecycle concepts (i.e., secure code reviews, threat modeling, and penetration testing).

The Preferred - You Might Also Have:

• 5+ years of application and/or software/firmware development experience in a professional setting
• 2+ years of experience in demonstrating Security Development Lifecycle concepts (i.e., secure code reviews, threat modeling, and penetration testing)
• Written and verbal skills in English
• Basic knowledge of industrial control systems
• Demonstrated knowledge in the application of both software/embedded software engineering and security principles, theories, concepts, and techniques.
• Demonstrated knowledge in the application of both cloud-based software security principles.
• Demonstrated knowledge of hardware engineering security principles, theories, concepts, and techniques.
• Understanding and experience implementing security standards such as the NIST Cybersecurity Framework and/or IEC 62443
• Security certification(s) such as CISSP, CEH, Applicable GIAC Certifications, OSCP, CySec Specialist (TÜV Rheinland), or an advanced degree in cybersecurity.
• Knowledge of communication protocols Ethernet and/or Common Industrial Protocol (CIP), and modern microprocessor architectures.
• Advanced coursework and/or training related to secure software engineering, application security, cloud security, embedded systems, and/or securing operating systems.

What We Offer:

Our benefits package includes …

• Comprehensive mindfulness programs with a premium membership to Calm
• Volunteer Paid Time off available after 6 months of employment for eligible employees.
• Company volunteer and donation matching program – Your volunteer hours or personal cash donations to an eligible charity can be matched with a charitable donation.
• Employee Assistance Program
• Personalized wellbeing programs through our OnTrack program
• On-demand digital course library for professional development

... and other local benefits!

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

#LI-Hybrid

#LI-DB2

Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.