Total 18 Senior Executive operations engineer job vacancies in Legal / Public / Security category in Singapore

• Perform security assessments, identify risks and gaps, and recommend improvement plans.
• Support the design, evaluation, and deployment of cybersecurity solutions including EDR, SASE, Zero Trust, and endpoint/network security controls.
• Participate in proof-of-concept activities, vendor evaluations, technical workshops, and customer engagements.
• Prepare assessment reports, technical documentation, project deliverables, and presentations.
• Collaborate with customers, vendors, and internal teams to ensure successful project delivery.
• Keep up to date with cybersecurity trends, threats, and industry best practices.

Qualifications:

• Degree in Information Technology, Cybersecurity, Computer Science, Computer Engineering, or a related discipline.
• At least 5 years of experience in cybersecurity, security engineering, security assessments, solution implementation, consulting, or related areas.
• Hands-on experience in security assessments, gap analysis, risk identification, and remediation planning.
• Experience engaging customers or stakeholders in advisory, consulting, or project delivery environments.
• Practical knowledge in one or more areas: EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
• Ability to assess cybersecurity risks and provide practical, business-focused recommendations.
• Strong communication skills to present technical concepts effectively to both technical and non-technical audiences.
• Experience with Cato Cloud or comparable SASE platforms.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, ISO/IEC 27001, or similar standards.
• Understanding of firewalls, VPNs, routing, Active Directory, Microsoft 365 security, and cloud connectivity.
• Relevant certifications such as CISSP, CISM, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, Azure Security, or equivalent.

To apply, please visit www.gmprecruit.com and search for Job Reference: 3W36XV68

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Bautista Gia Grace De Guzman | Registration No: R23111973

Our client, a well-known company is looking for candidates for the position of Senior Security Engineer.

Responsibilities

• Conduct security assessments, identify risks and gaps, and propose practical, actionable improvement and remediation plans.
• Support the design, evaluation, and implementation of cybersecurity solutions such as EDR, SASE, Zero Trust, and endpoint and network security controls.
• Engage in proof-of-concept activities, vendor evaluations, technical workshops, and customer discussions.
• Prepare assessment reports, technical documentation, project deliverables, and presentation materials.
• Coordinate with customers, internal teams, and vendors to deliver cybersecurity projects on time and within scope.
• Stay updated on emerging cybersecurity technologies, threats, and best practices to continuously improve service quality.

Key Requirements and Experience

• Degree in Information Technology, Cybersecurity, Computer Engineering, Computer Science, or a related field.
• Minimum 5 years of experience in cybersecurity, security engineering, security assessment, solution implementation, or cybersecurity consulting.
• Hands-on experience in security assessment, gap analysis, risk identification, and remediation planning.
• Experience working with customers or stakeholders in consulting, project delivery, or advisory roles.

Required Technical Skills

• Knowledge and practical experience in one or more areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
• Ability to understand cybersecurity risks and translate technical findings into practical recommendations.
• Ability to explain cybersecurity risks, solutions, and priorities clearly to both technical and non-technical audiences.

Preferred Qualifications

• Experience with Cato Cloud or similar SASE platforms.
• Knowledge of security frameworks such as NIST Cybersecurity Framework, CIS Controls, or ISO/IEC 27001.
• Familiarity with network and infrastructure fundamentals such as firewalls, VPN, routing, Active Directory, Microsoft 365 security, or cloud connectivity.
• Relevant cybersecurity certifications such as CISSP, CISM, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, Azure Security, or vendor certifications.

EA License No.: 01C4394 (PERSOL SINGAPORE PTE LTD)

Registration No.: R23112488 (Julian Nerchan)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Responsibilities

• Conduct security assessments, identify risks and gaps, and propose practical improvement plans.
• Support design, evaluation, and implementation of cybersecurity solutions such as EDR, SASE, Zero Trust, and endpoint/network security controls.
• Support proof-of-concept activities, vendor evaluations, technical workshops, and customer discussions.
• Prepare assessment reports, technical documentation, project deliverables, and presentation materials.
• Coordinate with customers, internal teams, and vendors to deliver cybersecurity projects on time and within scope.
• Stay updated on cybersecurity technologies, threats, and best practices to improve service quality.

Requirements

• Minimum 5 years of experience in cybersecurity, security engineering, security assessment, solution implementation, or cybersecurity consulting.
• Experience in security assessment, gap analysis, risk identification, and remediation planning.
• Experience working with customers or stakeholders in consulting, project delivery, or advisory roles.
• ⁠Knowledge and practical experience in one or more areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance
• Ability to understand cybersecurity risks and translate technical findings into practical recommendations.
• Ability to explain cybersecurity risks, solutions, and priorities clearly to technical and non-technical audiences.

GMP Recruitment Services (S) Pte Ltd | EA Licence: 09C3051 | VO UYEN AI LINH | Registration No: R22109232 

Job Description

Corporate Intelligence & Security Management (CISM) is looking for committed and professional Senior Security Officers to support operations within a Corporate Security Operations Centre (SOC) environment.

The successful candidate will play a key role in maintaining site security through access control, screening operations, incident management and customer service excellence.

Key Responsibilities

• Perform access control duties for staff, visitors and contractors.

• Manage visitor registration and contractor access processes.

• Support Security Operations Centre (SOC) activities and monitoring functions.

• Carry out security escorts when required.

• Respond appropriately to incidents, emergencies and security concerns.

• Prepare accurate incident reports and daily occurrence documentation.

• Enforce site security policies, procedures and safety requirements.

• Provide professional customer service to clients, visitors and stakeholders.

• Support operational requirements as assigned by supervisors and management.

Requirements

• Possess a valid PLRD Security Officer License.

• Hold a valid CSSPB certification (Security Screening of Person & Bag Check).

• Relevant security experience will be advantageous.

• Good communication and interpersonal skills.

• Good computer literacy and report writing skills.

• Able to work independently and as part of a team.

• Positive work attitude with a strong sense of responsibility.

• Professional appearance and conduct.

• Able to perform rotating 12-hour shifts, including weekends and public holidays when rostered.
  

  Why Join Us

  • Above PWM salary package.
  • Performance bonus of up to 1.5 months' basic salary.
  • 5-day work week.
  • Corporate Security Operations Centre environment.
  • Structured training and development opportunities.
  • Career progression opportunities.
  • Professional and supportive management team.
  • Stable employment with a growing security organisation.

The Company

Our client is seeking a Senior Security Engineer (APAC) to strengthen application and engineering security across the region. This is a hands-on role focused on Secure SDLC, Application Security, DevSecOps, secure deployments, and advisory support aligned to ISO and NIST frameworks.

The Role

• Drive and enhance Secure Software Development Lifecycle (SSDLC) practices across engineering teams
• Embed security controls and best practices into all stages of the application development lifecycle
• Conduct application security assessments, threat modelling, secure design reviews, and vulnerability assessments
• Identify, assess, and support remediation of application security risks and vulnerabilities
• Integrate security tooling and controls into CI/CD pipelines to support secure software delivery
• Drive automation of security testing including code scanning, dependency checks, secrets detection, and container security
• Work closely with DevOps, cloud, and engineering teams to ensure secure deployments across environments
• Act as a trusted security advisor to technology and business stakeholders across APAC
• Support governance initiatives and align security controls with ISO and NIST frameworks
• Partner with risk, compliance, infrastructure, and engineering teams on remediation and audit-related activities

Your Profile

• At least 7 years of experience in information security, application security, DevSecOps, or a related cybersecurity role
• Strong hands-on experience in Secure SDLC and Application Security
• Proven experience integrating security into DevSecOps and secure software deployment processes
• Solid understanding of secure coding principles, common application vulnerabilities, and remediation approaches
• Experience with SAST, DAST, SCA, container scanning, or similar security technologies
• Familiarity with cloud and modern application environments
• Good understanding of ISO and NIST security standards and frameworks
• Strong communication and stakeholder management skills, with the ability to work effectively across regional teams
• Relevant certifications such as OSCP, GWAPT, CSSLP, CISSP, or cloud security certifications will be an advantage
• Experience in regulated environments and exposure to enterprise-scale application environments will be preferred

Apply Today

Please send your resume, in WORD format only and quote reference number Ref No DC13460646, by clicking the apply button. Please note that only short-listed candidates will be contacted.

Robert Half International Pte Ltd. Co. Registration no.: 200612189E | EA Licence no.: 07C5595 | Dmitriy Chervinskyi EA Registration no.: R22108655

By clicking ‘apply’, you give your express consent that Robert Half may use your personal information to process your job application and to contact you from time to time for future employment opportunities. For further information on how Robert Half processes your personal information and how to access and correct your information, please read the Robert Half privacy notice: https://www.roberthalf.com.sg/privacy-statement. Please do not submit any sensitive personal data to us in your resume (such as government ID numbers, ethnicity, gender, religion, marital status or trade union membership) as we do not collect your sensitive personal data at this time.

Job Description

We are seeking a committed and responsible Operations Executive to support and coordinate security operations across multiple sites. The successful candidate will assist with manpower deployment, site supervision and daily operational matters while ensuring that company and regulatory requirements are met.

Key Responsibilities

Operations Coordination

• Coordinate the daily deployment of security officers across assigned sites
• Prepare and manage duty rosters and manpower arrangements
• Monitor attendance and ensure that sufficient manpower is deployed
• Conduct regular site visits and assist with daily operational matters
• Arrange relief officers or replacements when required

Compliance and Site Management

• Ensure that security operations comply with company policies and regulatory requirements
• Monitor officers’ PLRD licensing and deployment requirements
• Conduct site inspections and report any operational issues
• Ensure that security equipment and systems are operational and properly maintained
• Assist with incident reporting and follow-up actions

Staff Coordination

• Provide guidance and operational support to security personnel
• Conduct on-site briefings and monitor officers’ performance
• Address attendance, deployment and manpower issues promptly
• Escalate serious operational matters to management when necessary

Client and Management Coordination

• Liaise with clients regarding site operations and service delivery
• Provide operational updates, incident reports and manpower status reports to management
• Act as a point of contact for site-related operational matters
• Perform other related duties as assigned

REQUIREMENTS

• Minimum 2 years of experience in security operations, manpower deployment or a supervisory role is preferred
• Possess a valid PLRD licence where applicable
• Basic knowledge of security regulations and operational procedures
• Able to prepare duty rosters and coordinate manpower deployment
• Good communication and interpersonal skills
• Responsible, organised and able to handle operational issues promptly
• Able to travel between multiple sites in Singapore
• Preferably possess own transport to travel between sites efficiently
• Able to work on a rostered schedule, including weekends and Public Holidays when required

SKILLS

• Security Operations
• Manpower Deployment
• Duty Rostering
• Licensing
• Access Control
• Compliance
• Risk Management
• Incident Reporting
• Site Inspections
• Security Surveillance Management
• Monitoring CCTV
• Communication Skills
• Management Skills
• Problem Solving
• Team Player

HOW TO APPLY

Interested candidates may submit their CV via:

Email: hr@suitssecurity.com
WhatsApp: 8036 2434

Position Overview:

Squarepoint is seeking a subject matter expert to join our Information Security team as a Senior Information Security Engineer. This senior position plays a pivotal role in strengthening our security posture by providing expert guidance, and driving improvements across key areas such as network, cloud, data, and system security. The successful candidate will act as an escalation point to the Security Operations, ensuring complex security problems are effectively analysed and resolved. This role includes overseeing security in critical IT projects, leading threat modelling for complex systems, auditing key systems for security gaps, and building automated capabilities to continuously validate controls’ effectiveness and system resilience. This position offers an opportunity to lead security initiatives and shape the security roadmap. A high degree of self-motivation and proactivity is mandatory for success in this role.

• Strengthen security across core areas, including network and system security, email security, cloud security, and data protection.
• Serve as a security advisor for IT projects, ensuring security requirements are met and risks are mitigated.
• Manage and optimize security tools, ensuring they are effectively deployed and maintained.
• Lead the design and development of security solutions and architectures to protect critical assets.
• Provide second-line support to Security Operations.
• Conduct threat modelling and risk assessments to identify vulnerabilities and drive proactive mitigation strategies.
• Oversee relationships with the Managed Detection and Response (MDR) provider, ensuring service effectiveness and continuous improvement.
• Execute security roadmap’s initiatives, aligning with business objectives and emerging threats.
• Collaborate with cross-functional teams to enhance security awareness and integrate security into business processes.

Required Qualifications:

• Minimum 5 years of hands-on experience in an information security role, such as security engineering, security architecture, security operations, or application security.
• Thorough understanding of security best-practices, principles, and system hardening techniques.
• Hands-on experience with threat modelling, security testing, including penetration testing, and automated security validation.
• Solid knowledge of cloud, network, and systems security concepts.
• Experience with scripting with one or more languages – Python and PowerShell experience is a plus.
• Familiarity with security tools such as EDR software, DLP solutions, vulnerability scanners, firewalls and email gateways.
• Strong analytical skills and problem-solving skills, with the ability to investigate complex problems and design pragmatic solutions.
• Effective communication skills to work with technical and non-technical teams.
• Degree in Engineering, Computer Science, or STEM related field.

Nice to have:

• Strong knowledge of risk assessment methodologies.
• Familiarity with security best practices, configurations, and threat management in Azure, AWS, and GCP.
• Ability to analyse software for security risks, including reviewing source code, performing static and dynamic analysis, and identifying vulnerabilities in application design and implementation.
• Familiarity with regulatory frameworks and security standards (e.g., SEC Cybersecurity rules, MAS TRM Guidelines, NFA Cybersecurity Guidance, GDPR etc.)
• Relevant security certifications.

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Qualifications

Job responsibilities

• Identify challenges in customer cyber defense centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
• Conduct real-time analysis using SIEM, endpoint, and network based technologies with a focus on identifying security events and false positives.
• Advise on CDC, CSIRT, and SOC management activities.
• Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operation Center (SOC) incident detection and response capabilities.
• Guide customers on their journey from manual to semi-autonomous to agentic-autonomous SOC.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience with SoC analysis, detection engineering, threat management, or a related role, and working with Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR) or Endpoint Detection and Response (EDR) technologies.
• Experience in leading incident response and Table Top Exercise (TTX).
• Ability to travel up to 20% of the time as required.

Preferred qualifications

• Certification in one or more of the following: CompTIA (e.g., Security+, CySA+) ISC2 (e.g., CSSP, CISSP); SANS-GIAC certification (e.g., GSEC, GMON, GSOC, GCIA, GCTI, GCIH, GCED, GCDA); CISCO (e.g., CCNA); EC-Council (e.g., CEH, CSA, CTIA).
• Experience with SIEM or SOAR technologies like SecOps, Splunk, QRadar, XSOAR, Phantom, etc.
• Experience in SoC architecture, SoC maturity assessment, and SoC transformations.
• Knowledge of security controls for common platforms and devices, including Linux and network equipment.
• Ability to collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.
• Excellent communication skills.

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

• Hands-on ownership of Azure AD/Entra ID Security and O365 Conditional Access design and implementation.
• End-to-end ownership of cloud and infrastructure security as part of a holistic infrastructure operating model.
• Owned cloud and infrastructure security as a core component of the end-to-end infrastructure operating model to ensure seamless security integration.

about the company
We need a potential infrastructure leader who builds security into the very DNA of our systems.

We are looking for a Senior Infra Security Engineer who "owns" the environment. You aren't just managing tools; you are designing and implementing the secure foundation of our global infrastructure.

about the job

• Take full ownership of the infrastructure security lifecycle from initial architectural design and "shift-left" deployment to day-to-day operational excellence.
• This is not a "support" task. You will lead the design and hands-on implementation of our Azure AD / Entra ID ecosystem, including complex O365 Conditional Access policies and IAM frameworks.
• Build and secure scalable Azure and AWS environments, ensuring every VNET, Firewall, and PaaS service is hardened against modern threats while optimized for cost and performance.
• Drive the transition to a modern operating model by automating security controls using Terraform or similar tooling, ensuring compliance is "baked in" by default.
• Beyond prevention, you will own the technical execution of Disaster Recovery and Business Continuity plans, ensuring our global operations remain uninterrupted.

skills and experience required
At least 8+ years of experience, but more importantly, a track record of owning infrastructure. You can describe the "why" and "how" behind the systems you’ve built.

Hands-on expert in Microsoft Azure/AWS, with specific, demonstrable experience in securing Entra ID (Azure AD) and designing sophisticated Conditional Access workflows.

Understand how a firewall change affects the application layer and how an IAM policy impacts the developer workflow.

You can bridge the gap between high-level roadmaps and low-level configuration, communicating effectively with both the C-suite and the engineering team.

whats an offer
The permanent opportunity for a Senior Infrastructure Security Engineer, will pay a salary range of $ 8,500 - $ 9,800 plus benefits. This opportunity offers hybrid working arrangement.

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

Key Responsibilities

• Lead the monitoring and analysis of security events across networks, applications, and systems.
• Oversee incident response activities, ensuring rapid containment, investigation, and remediation.
• Conduct advanced threat hunting and forensic analysis to identify sophisticated attacks.
• Develop and enforce security policies, standards, and procedures across the organization.
• Collaborate with IT, compliance, and business units to align security initiatives with organizational goals.
• Evaluate and recommend new security tools, technologies, and processes.
• Prepare and review reports on security posture, risks, and incident trends.
• Stay ahead of emerging threats, vulnerabilities, and regulatory requirements.
• Assist with security audits and assessments.

Qualifications

• Bachelor’s or Master’s degree in computer science, Cybersecurity, or related ffeld.
• 5–8 years of experience in cybersecurity.
• Strong expertise in SIEM platforms, intrusion detection/prevention, endpoint protection, and cloud security.
• In-depth knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and regulatory standards (MAS TRM, PDPA and Cyber Hygiene).
• Proven experience in incident response, digital forensics, and threat intelligence.
• Excellent leadership, communication, and stakeholder management skills.
• Excellent analytical, problem-solving, and communication skills.

Preferred Skills

• Advanced certifications such as CISSP, CISM, OSCP.
• Fluency in English and Chinese, to support our expanding base of Chinese-speaking customers
• Experience with cloud security (AWS, Azure)
• Experience with security automation and orchestration (SOAR).
• Familiarity with DevSecOps practices and secure software development lifecycle.
• Ability to translate complex technical risks into clear business impacts.

Main Responsibilities

Support the Security & Building Services (SBS) operations of One Raffles Place to surpass Grade A office building standards.

Job Description

• Assist to ensure compliance with building and statutory requirements/regulations.
• Assist to ensure safety and health procedures are in place according to WSH Act and other prevailing laws/regulations.
• Assist to liaise with government authorities and consultants on regulatory requirements.
• Coordinate capital replacement works, asset enhancement initiatives and maintenance repair/replacement whenever assigned.
• Contribute to the review of contracts' specifications to ensure cost effectiveness and competitiveness.
• Implement and propose improvements for Standard Operating Procedures (SOPs) and department Business Continuity Plans (BCP) to enhance operational resilience and efficiency.
• Implement and propose policies to improve operational efficiency and productivity.
• Implement plans and manage daily operations for One Raffles Place to ensure excellent standards are achieved and requirements are met according to agreed service levels.
• Lead in effective communication within the team and with internal/external stakeholders to achieve their assigned KPIs.
• Manage a team of service providers.

OPEX/CAPEX

• Assist to conduct tender exercises for OPEX/CAPEX works such as replacement, upgrading or redevelopment works and manage such works according to timelines.
• Assist to prepare budgets for OPEX/CAPEX works.
• Draft approval papers for OPEX/CAPEX requests.

Facilities Management

Management of services and monitoring of service providers:

• Administer all contractual obligations and timely renewal of maintenance contracts.
• Supervise the work quality of service providers to ensure a high standard of maintenance, operational efficiency and cleanliness of the buildings are achieved at the agreed service levels.
• Supervise service providers and their processes that support the core business of the organization.

Preventive maintenance and improvement work:

• Assist to identify defects or irregularities and follows up on rectification works thereafter.
• Coordinate and assist to organise preventive maintenance for all facilities related works.
• Conduct building inspections.
• Implement and propose facilities related emergency plans.
• Implement and recommend building improvement strategies, propose rectification & preventive works/programmes for the building and champion ad-hoc projects whenever required.

Safety Management

• Assist to identify equipment, process, and procedural changes to minimise fire and workplace hazards.
• Carry out duties of a Site Incident Controller during emergencies, ensuring prompt response and effective crisis management.
• Contribute to the review of internal stakeholders’ workplace activities and risk assessment to ensure compliance with internal policies and external legal requirements, including MOM WSH regulations and standards or any other relevant sectorial guidelines.
• Implement and propose initiatives and programmes to eliminate fire occurrences and workplace incidents and enhance standards.
• Train and improve the effectiveness of the Company’s Emergency Response Team.

Requirements

• Degree in Building Management, Facilities Management or its equivalent.
• 3 years of experience in estate/property management. Experience in large commercial or retail buildings will be advantageous.
• Experienced in contract, vendor, security and carpark management.
• Familiarity with fire safety management will be an added advantage.
• Ability to take on the role of CERT SIC will be an added advantage.
• Ability to take on the role of Environmental Control Officer (Specified Premises) [ECO(SP)] will be an added advantage.
• Ability to read and understand technical/structural drawings, e.g. as-built drawing will be an added advantage.
• Good interpersonal and communications skills.
• Independent, resourceful, self-motivated, result-oriented and a team player who is able to work well under pressure in a fast-paced environment.
• Versatile and quick in analyzing and resolving problems within given deadlines.
• Familiar with statutory requirements on building services, facility operations, maintenance and safety.

Product area

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Job description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Additional job description

The new Singapore-based team will be dedicated to scaling our operations and risk reduction efforts through advanced automation and remediation. Our mission is to safeguard billions of users by efficiently triaging external security reports and proactively eliminating vulnerabilities across Google's products and infrastructure. We aim to evolve into a self-sustaining, AI-driven operation that provides deep insights into vulnerability trends while fostering a community of security researchers.

Qualifications

Job responsibilities

• Review designs and look for vulnerabilities, both with one-time reviews and long-term engagements. Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Drive large-scale remediation efforts that eliminate entire vulnerabilities across Google’s products and infrastructure.
• Guide the strategic development of agents and infrastructure to automate vulnerability handling, triage, and conduct variant analysis to reduce manual workloads.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
  

Preferred qualifications

• 1 year of experience in leading technical risk analysis in an enterprise environment.
• Experience building or deploying automated tools (e.g., large language model based agents) for security workflows such as triage automation or bug fixing.
• Experience with cross-functional or cross-product teams.
• Experience consulting on security/security protocols.
• Excellent communication skills.

Location: Melbourne

Team: Business Systems & Security

Reporting to: Head of Business Systems & Security

The PaperCut Story

At PaperCut, we believe two things: great code can change the world, and a great flat white can change your morning.

Now, let's be honest, "print management" doesn't usually make people leap out of their chairs. But here at PaperCut, we’ve turned the most boring part of IT into one of the most exciting and impactful jobs in tech. How? Simply put, our code saves trees!

We’re a BCorp-certified company on a mission to make our customers' printing waste-free, easy, and secure. With a global footprint spanning 195 countries and 140 million end users, we are a true Australian success story moving forward into the cloud, SaaS, and beyond print.

What you’ll actually be doing

• Influencing without Hierarchy: You’ll work across our diverse tech stack  (Java, Go, React, TypeScript etc.), across the organisation, to ensure security is baked into the SDLC from day one.

• The Helpful Expert: You’ll be the person developers want to talk to. You’ll help them run threat models for new features and coach them on writing code that is secure by design.

• Modern Cloud Security: You’ll take ownership of securing our global SaaS offerings (along with the DevSecOps team), focusing primarily on Google Cloud Platform (GCP) with some exposure to AWS.

• Technical Compliance: You’ll work with our Legal team to ensure we meet ISO27001 and other standards, not by filling out spreadsheets, but by building the technical controls that make those standards a reality.

• Scaling the Practice: You’ll help us select and tune the right mix of SAST, DAST, and SCA tools to keep our pipelines fast and our code safe.

What you bring to the table

• Deep Technical Roots: You’ve spent time in the weeds of information security and are comfortable reading and reviewing code.

• The "Uplift" Mindset: You measure your success not by how many tickets you open, but by how much more secure the engineering teams become because of your guidance.

• Cloud Fluency: You have a strong understanding of GCP or AWS and how to secure containerised workloads at scale.

• Ambition to Lead: You aren't looking for a "Lead" role just yet—you want to stay hands-on while developing the skills to lead a practice and mentor other engineers.

Why Join PaperCut?

• Values-Driven: We’re guided by our values: Caring, Honest, Intelligent, and Nimble (CHIN). They aren't just posters; they’re how we build products and treat each other.

• Melbourne Born & Bred: We are a true Australian success story, still owned and run by our founder right here in Melbourne.

• Share the Success: We offer all permanent employees a Share the Success bonus, ensuring that when the company thrives, our people do too.

• Real Impact: PaperCutters are involved in strategic decisions through collaborative leadership groups. We respect expertise and give you the autonomy to build.

• Generous Leave: Including up to 18 weeks of parental leave and a genuine commitment to Diversity, Equity, Inclusion, and Belonging.

The PaperCut Pledge

Ghosting is for Halloween, we commit to responding to every single applicant. Our hiring process is designed to be enjoyable, thorough, and fair, allowing you to show the best version of yourself.

Ready to trade your old code for code that saves trees? Apply now—the first coffee is on us!