Total 167 maintenance engineer service job vacancies in Legal / Public / Security category in Singapore

Summary

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other’s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It’s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you’ll do more than join something — you’ll add something. There is a lot that goes into building the most secure yet user-friendly devices in the world. We are a unique Software Development group with a charter to secure our platforms, which include iOS software, iOS Devices, and Mac. We build solutions that are used by our customers, engineering teams, and manufacturing environments. We are looking for a candidate who is passionate about both software and hardware security and enjoys highly technical, hands-on role in a dynamic and fast paced environment. This role will be responsible for testing and securing the Software Development Life Cycle, world-wide hardware manufacturing ecosystem and associated global IT infrastructure. As a member of our fast-paced group, you will have the unique and rewarding opportunity to shape and improve the software that allows our products to surprise and delight billions of Apple’s customers every day. If you’re excited by the idea of making a real impact, and joining a team where we pride ourselves in being one of the most diverse and inclusive companies in the world, a career with Apple will be your dream job.

Description

Our organisation provides security server-side solution to enable various Apple product security features. As part of security team in this organisation, we are looking for someone who can drive advancements in security practices, proactively identifying security vulnerabilities, fortifying our platforms against emerging threats and enabling continuous innovation. The existing scope of the work includes the following and will be expanded with emerging new technology and new business initiatives.

Responsibilities

• Perform penetration testing and vulnerability assessments on software applications, API services, and infrastructure
• Develop and execute new test plans, methodologies, and tools for assessing hardware and software security
• Conduct static code analysis to identify and triage application security issues
• Work closely with DevOps and engineering teams to remediate application
• security vulnerabilities and implement security best practices throughout the Software Development Life Cycle (SDLC)
• Assist in application and infrastructure security reviews to identify gaps in best practices, and collaborate with stake holder teams to improve security posture 
• Perform reverse engineering and forensic analysis to identify security vulnerabilities and its exploitability
• Rotate between red and blue functions and conduct simulated attacks & defence. Develop security strategies, frameworks, tools, and processes to assess and improve security posture of the organisation.
• Collaborate with hardware design teams to integrate security best practices during product development
• Document findings, prepare comprehensive reports, and provide detailed security recommendations for remediation
• Fulfill on-call responsibilities for handling security-related incidents
• Leverage LLM technologies to create security testing and investigation tools
• Continuous learning and conduct security research to stay updated on the latest threats, vulnerabilities, attack vectors, and mitigation techniques

Minimum Qualifications

• Understanding of fundamental IT domains including Networking, Operating Systems, Security Principles, Secure Coding Practices, Cryptography and System Administration
• Knowledge of infrastructure security and physical security best practices
• Understanding of software development and secure coding best practices
• Ability to analyse complex problems, explore the greenfield and devise creative solutions
• CS/EEE with solid foundation of computer engineering
• Demonstrated up to 6 years of relevant experience

Preferred Qualifications

• Respect diversity and inclusiveness in a global organisation with ability to collaborate and communicate effectively
• Strong team player with adaptability
• Knowledge in reverse engineering and exploit development, especially with hands-on 
• experience in security penetration testing, red team exercises, Capture The Flag (CTF) competitions or security related hackathons
• Understanding of cryptographic algorithms, secure boot, secure firmware update mechanisms is a plus

Apple is an equal opportunity employer that is committed to inclusion and diversity, and thus we treat all applicants fairly and equally. Apple is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.

Description

IAM Operations

• Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities.
• Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment.
• Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance.
• Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows.
• Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly.
• Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

• Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders.
• Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

• Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution.
• Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs.
• Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

Description

IAM Operations

• Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities.
• Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment.
• Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance.
• Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows.
• Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly.
• Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

• Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders.
• Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

• Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution.
• Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs.
• Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

JD for System Engineer

Manage the day-to-day operations of client systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities. Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment. Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance. Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows. Monitor client systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly. Maintain accurate documentation of system configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

Support periodic access reviews and audits, identifying and remediating access risks in line with internal policies and regulatory requirements. Assist in tracking system related risks and remediation action plans, providing updates to relevant stakeholders. Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

Serve as the first point of contact for system -related issues and queries from users and IT teams, providing clear and timely resolution. Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs. Maintain service quality and operational consistency as the team transitions project-focused members to new system initiatives.

The IAM Operations Analyst is responsible for the day-to-day operation, administration, and support of the organization's Identity and Access Management (IAM) services. This role ensures that user and machine identities are managed securely and efficiently throughout their lifecycle while maintaining compliance with internal policies and regulatory requirements. The position works closely with IT, security, and business stakeholders to deliver reliable identity services, support access governance activities, and maintain a strong security posture across the enterprise.

Key Responsibilities

IAM Operations

• Manage the daily operation of IAM platforms, including user and machine identity provisioning, de-provisioning, modification, and lifecycle management.
• Administer and maintain Active Directory (AD) and LDAP directory services, ensuring the accuracy and integrity of identity data across the environment.
• Operate, support, and maintain One Identity solutions, including configuration, troubleshooting, issue resolution, and routine system maintenance.
• Process access requests in accordance with established policies, approval workflows, and service level expectations.
• Monitor IAM systems and services for operational issues, anomalies, policy violations, and potential security threats, escalating and resolving incidents as required.
• Maintain and update IAM documentation, including system configurations, operational procedures, access records, and support runbooks.
• Support system upgrades, patches, and ongoing improvements to IAM platforms and processes.

Access Governance & Compliance

• Support periodic access certification reviews and audit activities to ensure appropriate access rights are maintained across the organization.
• Identify, investigate, and remediate access-related risks and control gaps in alignment with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks, remediation activities, and action plans, providing regular updates to stakeholders.
• Generate and maintain reports on user access, identity lifecycle activities, policy compliance, and audit findings.
• Support evidence collection and documentation for internal and external audits.

Stakeholder Support & Service Delivery

• Act as the primary point of contact for IAM-related requests, incidents, and inquiries from users, application owners, and IT teams.
• Provide timely troubleshooting and resolution of IAM issues while maintaining a high level of customer service.
• Collaborate with IT infrastructure, cybersecurity, and application teams to ensure identity and access controls align with business and security requirements.
• Contribute to continuous service improvement initiatives, helping maintain operational stability while supporting ongoing IAM transformation projects.
• Ensure service quality, operational consistency, and knowledge transfer as resources transition between operational and project-based IAM initiatives.

Qualifications & Experience

Required

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Experience supporting Identity and Access Management operations in an enterprise environment.
• Hands-on experience with Active Directory, LDAP, and identity lifecycle management processes.
• Experience administering or supporting One Identity solutions or comparable IAM platforms.
• Understanding of access governance, role-based access control (RBAC), joiner-mover-leaver processes, and privileged access concepts.
• Knowledge of IT security principles, audit requirements, and compliance frameworks.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management abilities.

Preferred

• Experience with identity governance and administration (IGA) platforms.
• Familiarity with cloud identity services such as Microsoft Entra ID (Azure AD) or other cloud IAM technologies.
• Knowledge of ITIL service management practices.
• Relevant certifications such as Security+, ITIL Foundation, Microsoft Identity certifications, or IAM-related certifications.

The IAM Operations Analyst is responsible for the day-to-day operation, administration, and support of the organization's Identity and Access Management (IAM) services. This role ensures that user and machine identities are managed securely and efficiently throughout their lifecycle while maintaining compliance with internal policies and regulatory requirements. The position works closely with IT, security, and business stakeholders to deliver reliable identity services, support access governance activities, and maintain a strong security posture across the enterprise.

Key Responsibilities

IAM Operations

• Manage the daily operation of IAM platforms, including user and machine identity provisioning, de-provisioning, modification, and lifecycle management.
• Administer and maintain Active Directory (AD) and LDAP directory services, ensuring the accuracy and integrity of identity data across the environment.
• Operate, support, and maintain One Identity solutions, including configuration, troubleshooting, issue resolution, and routine system maintenance.
• Process access requests in accordance with established policies, approval workflows, and service level expectations.
• Monitor IAM systems and services for operational issues, anomalies, policy violations, and potential security threats, escalating and resolving incidents as required.
• Maintain and update IAM documentation, including system configurations, operational procedures, access records, and support runbooks.
• Support system upgrades, patches, and ongoing improvements to IAM platforms and processes.

Access Governance & Compliance

• Support periodic access certification reviews and audit activities to ensure appropriate access rights are maintained across the organization.
• Identify, investigate, and remediate access-related risks and control gaps in alignment with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks, remediation activities, and action plans, providing regular updates to stakeholders.
• Generate and maintain reports on user access, identity lifecycle activities, policy compliance, and audit findings.
• Support evidence collection and documentation for internal and external audits.

Stakeholder Support & Service Delivery

• Act as the primary point of contact for IAM-related requests, incidents, and inquiries from users, application owners, and IT teams.
• Provide timely troubleshooting and resolution of IAM issues while maintaining a high level of customer service.
• Collaborate with IT infrastructure, cybersecurity, and application teams to ensure identity and access controls align with business and security requirements.
• Contribute to continuous service improvement initiatives, helping maintain operational stability while supporting ongoing IAM transformation projects.
• Ensure service quality, operational consistency, and knowledge transfer as resources transition between operational and project-based IAM initiatives.

Qualifications & Experience

Required

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Experience supporting Identity and Access Management operations in an enterprise environment.
• Hands-on experience with Active Directory, LDAP, and identity lifecycle management processes.
• Experience administering or supporting One Identity solutions or comparable IAM platforms.
• Understanding of access governance, role-based access control (RBAC), joiner-mover-leaver processes, and privileged access concepts.
• Knowledge of IT security principles, audit requirements, and compliance frameworks.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management abilities.

Preferred

• Experience with identity governance and administration (IGA) platforms.
• Familiarity with cloud identity services such as Microsoft Entra ID (Azure AD) or other cloud IAM technologies.
• Knowledge of ITIL service management practices.
• Relevant certifications such as Security+, ITIL Foundation, Microsoft Identity certifications, or IAM-related certifications.

This role focuses on building, integrating, and automating security systems to strengthen detection and response capabilities across on-premise, cloud, and network environments.

Core Responsibilities

1. Design, implement, and integrate security tools across enterprise environments

2. Build and maintain telemetry pipelines into SIEM and detection platforms

3. Support onboarding of systems into security monitoring

4. Implement and manage vulnerability scanning and remediation workflows

5. Work with SOC teams to translate operational gaps into engineering improvements

6. Support incident response and post-incident remediation

Core Requirements

1. Degree in Cybersecurity, IT, Computer Engineering or related field

2. At least 5 years of experience in Security Engineering, DevOps, or platform engineering

3. Experience with enterprise security technologies (e.g. SIEM, SOAR, EDR, cloud security)

4. Proficiency in scripting or automation (e.g. Python, PowerShell)

5. Strong understanding of networking and security telemetry

6. Experience implementing or integrating security platforms (e.g. SIEM, telemetry, cloud security tools)

7. Experience working in multinational or large enterprise environments

8. Ability to deliver engineering outcomes independently

This position is being recruited to support regional information security operations and strengthen cybersecurity capabilities across overseas regions.

Responsibilities:

·      Support the implementation and operation of information security controls and solutions across overseas regions, covering areas such as infrastructure, network, endpoint, application, data, and identity security.

·      Participate in security projects and initiatives, including planning, coordination, deployment, and ongoing improvement activities.

·      Assist in the implementation of governance, risk, compliance, privacy, and data protection initiatives.

·      Support the development and maintenance of security standards, procedures, and technical baselines.

·      Collaborate with regional and global teams to improve overall cybersecurity capabilities.

·      Provide ad-hoc support for regional and global cybersecurity initiatives as required.

Requirements:

·      Bachelor’s degree in information security, Cyber Security, Computer Science, Information Technology, or a related field.

·      At least 2 years of working experience in information security, cybersecurity, network security, IT infrastructure, system administration, or related areas.

·      Familiar with common information security technologies and concepts, such as network security, endpoint security, IAM, data protection, vulnerability management, SOC/SIEM, or cloud security.

·      Familiar with information security and privacy frameworks, such as ISO 27001/27701, ITIL, or related standards and best practices.

·      Basic knowledge of networking and operating systems (Windows/Linux).

·      Good analytical, problem-solving, and communication skills.

·      Able to work effectively with teams across different regions and cultures.

·      Security certifications (e.g. CISSP, CISA, CCSP, Security+, CCNA/CCNP) are an advantage.

·      Candidates with a Diploma and strong relevant working experience will also be considered.

·      Excellent communication and interpersonal skills in both English and Chinese (to liaise with Mandarin speaking stakeholders).

We are seeking a skilled Cybersecurity Engineer to safeguard our organization's digital assets through effective security measures and proactive risk management. This role emphasizes leadership in incident response, vulnerability assessments, and the establishment of comprehensive security practices.

Responsibilities:

• Lead the execution of security awareness training initiatives, including sessions, phishing simulations, and assessments to foster a culture of security compliance.

• Conduct thorough IT security risk assessments to identify vulnerabilities and drive remediation efforts across the organization.

• Oversee vulnerability assessments, penetration testing, and security audits, coordinating with internal teams and external vendors for effective tracking of findings.

• Develop and maintain security frameworks, policies, and guidelines in line with regulatory and governance requirements.

• Monitor security systems to detect unauthorized access and respond appropriately to threats.

• Direct incident response efforts, including investigation, root-cause analysis, and documentation for audit readiness.

• Research emerging security threats and propose effective mitigation strategies.

• Provide technical security advice to teams involved in infrastructure, applications, and business processes.

• Support governance and compliance assessments through meticulous maintenance of security documentation and risk metrics.

• Manage IT security audit processes, ensuring timely handling of documentation and addressing auditors' queries.

Requirements:

• A recognized degree in Cybersecurity, Computer Science, IT, or a related field.

• A minimum of 3 years of experience in an IT security role.

• Strong understanding of security frameworks (e.g. ISO/IEC 27001, NIST Cybersecurity Framework), risk management methodologies, and awareness of the top 10 OWASP vulnerabilities.

• Preferred certifications: CRISC, CISM, and/or CISSP.

• Comprehensive hands-on experience with cybersecurity technologies including EDR and NDR solutions, firewalls, vulnerability scanning tools (e.g. Nessus), email security, DLP, Microsoft Purview, IPS, web security controls, and secure network protocols.

• Excellent collaboration skills, enabling effective teamwork across technical teams and stakeholders.

Interested candidate who wish to apply for the advertised position, please click “Apply”. We regret that only shortlisted candidates will be notified 

EA License No.: 01C4394 (PERSOL Singapore Pte Ltd) 

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy. 

[Order Number: 1093349]

Responsibilities:

• Manage post-sales activities for cybersecurity or network performance monitoring products.
• Implement large-scale projects locally and regionally.
• Provide on-site implementation services, including testing, deployment, and documentation.
• Offer technical support to ensure customer satisfaction.
• Analyze and clarify customer queries through troubleshooting and researching existing knowledgebase articles/known issues.
• Be on routine standby to support 24×7 maintenance support calls.
• Communicate issues clearly and concisely.
• Demonstrate excellent written and verbal communication skills.
• Perform any other ad-hoc tasks as assigned.

Requirements:

• 1 year of relevant experience in the IT industry providing network support and administration.
• Knowledge and experience in networking, such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Willingness to work hard and eagerness to learn about new technologies.

To Apply, please kindly email your updated resume to

cv_gary@goodjobcreations.com.sg

Please kindly refer to the Privacy Policy of Good Job Creations for your reference:

https://goodjobcreations.com.sg/en/privacy-policy/

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

EA Personnel Name: Gary Ho Cheng Xuan

EA Personnel Reg. No.: R1549767

EA License No.: 07C5771

A Security Engineer I is professional responsible for designing, implementing, and maintaining technical security measures, focusing on vulnerability management, threat detection, and infrastructure protection. They secure cloud/on-prem environments using automation (Python, Terraform) and tools like SIEM or EDR, often collaborating with DevOps to remediate security risks and strengthen security posture.

Essential Functions:

• Develop and maintain security policies, guidelines, and lead implementation in all systems, including AWS and in particular CloudTrail, EKS, AWS Inspector, EC2, EMR, S3, AWS Identity Center, RDS, Security Hub, Guard Duty.

• Architect, design, implement, support, and evaluate security-focused tools and controls to meet security and compliance needs.

•  Integrate security checks into the CI/CD pipelines to ensure continuous compliance and shift left security practice.

• Utilize tools like Terraform or Cloud Formation to build, deploy and enforce compliance and secure cloud infrastructure.

• Utilize networking (VPC, Firewall, Transit Gateways), container security and encryption.

• Builds scripts (phyton, bash) and serverless functions (AWS Lambda) for alerting on anomalies, misconfigurations and threats include automations to auto respond to such threat actors/findings.

• Oversee threat management and security incident handling, including the coordination of investigations and reporting of security incidents to management, in alignment with business.

•  Work with the team and QSA on PCI (level 1 & level 2 service provider) & SOC initiatives for the company.

• Ensure that security is factored into the evaluation, selection, and configuration of hardware, applications and software.

• Ensure audit trails, systems logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements. Provide support and guidance for legal and regulatory compliance efforts, including audit support.

• Promote information security awareness throughout the company. Stay current with security technologies and threats by monitoring vendor and industry publications and attending training.

• Secure sensitive data, manage user credentials through principal of least privileges, track user activity.

• Proactively identify security risks and implement practices that meet standards for information security, by analyzing current systems, and working with IT and the business. Partner with development and infrastructure teams to identify and remediate vulnerabilities Develop mitigation plans.

Qualifications:

• Bachelor Degree in Computer Science or related technical field

• 3 to 5 years in cybersecurity experience within a professional environment

• Certified Information Systems Security Professional certification is a plus

Knowledge, Skills and Abilities:

• Experience with IDS/IPS, file integrity, internal/ external penetration & vulnerability tests, FIM, SEIM, Log aggregation tools required

• Development and scripting experience to build automation: Lambda, Terraform, Cloud Formation, API Integrations

• Understanding of the software development life cycle and CI/CD pipelines

• Ability to execute process and standards around code quality and the deployment lifecycle including SAST and DAST

• Experience in SIEM, MDR, EDR, DLP Identity Management, WAF, WAS, Incident Response, attack surface management

• Proactively find weaknesses in applications and network through audits, penetration tests and security assessments

• Prepare reports on security metrics, attempted attacks, document findings and actions taken

• Proven record of learning new languages, skills and technologies quickly, with minimal guidance

• Takes initiative, stays focused, always accountable

• Thrives in a fast-paced environment with the ability to focus on achieving the target whole minding longer term goals along the way

• Excellent communication skills

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/ or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Key Responsibilities

• Lead SIEM configuration, rule tuning, and onboarding of logs from servers, applications, and network infrastructure.

• Perform daily security alert monitoring and analysis, including alert triage, classification, investigation, escalation, and case closure.

• Prepare weekly security monitoring and alert trend reports, including event summaries, detection metrics, and operational observations.

• Deploy and manage log collection agents across Linux, Windows, and network infrastructure, ensuring stable log coverage and platform reliability.

• Maintain and enhance AI-assisted detection and behavioral analysis workflows, including alert flow stability and detection optimization.

• Define and refine detection logic, including rules, correlation patterns, and behavioral indicators.

• Support integration of OS and application logs for monitoring, correlation, and activity analysis.

• Manage dashboards, alert metrics, and reporting to provide visibility into security posture and monitoring operations.

• Support incident investigation and coordinate with infrastructure and application teams where required.

• Ensure platform health, log retention, monitoring coverage, and overall reliability of the SIEM environment.

Preferred Skills & Qualifications

• Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, or related field.

• Minimum 5 years of experience in SIEM administration, security monitoring, or detection engineering.

• Hands-on experience with SIEM, log management, or security monitoring platforms.

• Strong knowledge of Linux and Windows systems administration and security log analysis.

• Experience with Python, Shell scripting, or automation tools for log processing and workflow optimization.

• Familiarity with security event correlation, behavioral analysis, and detection engineering concepts.

• Exposure to API integration, middleware, or AI-assisted analysis solutions is an advantage.

• Strong analytical, troubleshooting, and problem-solving skills with attention to detail.

• Ability to communicate effectively in English

• Fluency in spoken and written Chinese is essential, as the role requires frequent liaison with Chinese-speaking counterparts and stakeholders, and the preparation, review and handling of Chinese-language work materials.


主要職責

資安監控與事件分析

• 執行日常資安警示監控與分析，包括警示分流、分類、調查、升級處理及案件結案
• 支援資安事件調查，並在需要時與基礎架構及應用程式團隊協作
• 準備每週資安監控與警示趨勢報告，包括事件摘要、偵測指標及營運觀察

SIEM 管理與偵測工程

• 主導 SIEM 設定、日誌導入、規則調校及偵測優化，涵蓋伺服器、應用程式及網路基礎架構
• 定義並優化偵測邏輯，包括關聯規則、行為指標及監控使用情境
• 維護並改善 AI 輔助偵測及行為分析工作流程

日誌管理與平台營運

• 在 Linux、Windows 及網路設備上部署並管理日誌收集代理程式，確保穩定且完整的日誌覆蓋範圍
• 支援作業系統與應用程式日誌整合，用於監控、關聯分析及活動分析
• 確保 SIEM 環境的平台健康狀態、日誌保存、監控覆蓋率及整體可靠性

儀表板與報告

• 管理儀表板、警示指標及報告，提升組織資安狀態的可視性
• 支援營運報告及資安監控績效檢討

流程改善與自動化

• 透過腳本與系統整合，推動資安監控自動化及工作流程改善
• 參與資安平台強化與營運優化專案

理想條件

• 資訊安全、網路安全、電腦科學或相關領域學士學位
• 至少 5 年 SIEM 管理、資安監控或偵測工程相關經驗
• 具備 SIEM 或日誌平台實務經驗，例如 ELK、Wazuh、Splunk、Graylog、QRadar 或相關技術
• 熟悉 Linux 與 Windows 系統管理及資安日誌分析
• 具備 Python、Shell Scripting 或自動化工具經驗，可應用於日誌處理與工作流程優化
• 熟悉資安事件關聯分析、行為分析及偵測工程相關概念
• 具備 API 整合、中介軟體或 AI 輔助分析解決方案經驗者佳
• 具備良好的分析、故障排除與問題解決能力，並注重細節
• 能以英文進行有效溝通；具普通話能力者佳，有助於與區域利害關係人協作
• 須具備流利的中文聽說讀寫能力，因本職位需經常與中文溝通之合作方及持份者聯繫，並需撰寫、審閱及處理中文工作文件

核心能力

• 資安監控與事件分析
• SIEM 管理
• 偵測工程
• 日誌管理與關聯分析
• 自動化與腳本撰寫
• 分析思維
• 問題解決能力
• 跨部門溝通與協作能力

對資安偵測、SIEM 平台管理及資安監控營運有豐富經驗，並希望參與區域型資安平台優化與威脅偵測工作的專業人士，歡迎與我們聯繫了解更多。

Lumina Advisory & Global Search Pte Ltd | 25C3262

Joyce Yeo | R1218489

Security Operations Engineer

Location: Singapore, CBD
Employment Type: 12 months (renewable Contract)

Key Responsibilities:

• Administer and support security platforms, with a strong focus on CyberArk and Tenable.
• Perform day-to-day BAU activities including troubleshooting, patching, monitoring, and incident resolution.
• Manage privileged access management (PAM) solutions and ensure platform stability and security.
• Support security operations processes, ticket management, and vendor engagements.

Requirements:

• Hands-on experience as a CyberArk Administrator (not just an end user).
• Strong experience supporting CyberArk environments, including troubleshooting and maintenance.
• Experience with vulnerability management tools such as Tenable.
• CyberArk CDE (Certified Delivery Engineer) certification is mandatory.
• Good understanding of security operations, privileged access management, and cybersecurity best practices.

Preferred Skills:

• CyberArk plugin development and automation experience.
• Policy review and optimization expertise.
• Experience in CyberArk migration or upgrade projects.
• Scripting and process automation skills.