Total 188 process engineer job vacancies in Legal / Public / Security category in Singapore

Key Responsibilities

• Lead the monitoring and analysis of security events across networks, applications, and systems.

• Oversee incident response activities, ensuring rapid containment, investigation, and remediation.

• Conduct advanced threat hunting and forensic analysis to identify sophisticated attacks.

• Develop and enforce security policies, standards, and procedures across the organization.

• Collaborate with IT, compliance, and business units to align security initiatives with organizational goals.

• Evaluate and recommend new security tools, technologies, and processes.

• Prepare and review reports on security posture, risks, and incident trends.

• Stay ahead of emerging threats, vulnerabilities, and regulatory requirements.

• Assist with security audits and assessments.

Qualifications

• Bachelor’s or Master’s degree in computer science, Cybersecurity, or related field.

• 5–8 years of experience in cybersecurity.

• Strong expertise in SIEM platforms, intrusion detection/prevention, endpoint protection, and cloud security.

• In-depth knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and regulatory standards (MAS TRM, PDPA and Cyber Hygiene).

• Proven experience in incident response, digital forensics, and threat intelligence.

• Excellent leadership, communication, and stakeholder management skills.

• Excellent analytical, problem-solving, and communication skills.

Preferred Skills

• Advanced certifications such as CISSP, CISM, OSCP.

• Fluent in Chinese and English.

• Experience with cloud security (AWS, Azure)

• Experience with security automation and orchestration (SOAR).

• Familiarity with DevSecOps practices and secure software development lifecycle.

• Ability to translate complex technical risks into clear business impacts.

Position

Data Security Services team and will be responsible for owning the Vulnerability Management. The individual is supported by platform teams for remediation actions.

The position is pivotal for driving the process with various cross-functional (transverse) IT teams.

Person will be responsible for following (but not limited to) responsibilities in day-to-day work:

• Focal point of contact for Vulnerability Management and related topics- a go-to person for consultation regarding the vulnerabilities identified by the tool and guide & assist Infrastructure and Application teams to remediate the vulnerabilities identified under their application/infrastructure scope.
• Person will be responsible preparing the Vulnerability Management Plan and the executes plan through all the phases of Vulnerability Management Lifecycle.
• Ensures that the Vulnerability scans are scheduled, configured in tool and are executed as per the schedule. Any failure of scans is to be investigated and schedule to re-run;
• Conducts periodical discovery of IT Assets and ensures that identified assets are highlighted to CMDB owner for appropriate Asset tagging and also onboards the new asset in Vulnerability Management tool;
• Assess the identified vulnerabilities and study & understand the risk profile, impact as per environmental context;
• Lead the discussions with Infrastructure and Application teams and advise them the relevance of vulnerability and help them understand the impact;
• Understand the false positives reported and the technical limitations of the environment and facilitate the process of Risk Acceptance.

Person will be responsible to liaise with various stakeholders for proposing and maintaining the approvals for such cases;

• Collaborate with Infrastructure teams- Windows, Unix, Networks etc. for the remediation of the identified vulnerabilities.
• Maintain the Vulnerability Dashboard for the scope and submits reports both of Technical teams and Management Reporting;
• Organize work in order to achieve compliance to established KPIs for Vulnerability Management and proactively work towards achieving the same. Maintain periodical reporting on the progress;
• Escalate- discuss and consult- as required to next levels and Management in timely manner;
• Provide subject matter expertise for the Vulnerability Management service;
• Lead the Penetration testing remediation planning with cross functional teams;
• Conduct new threat exposure scanning across the asset scope and advise the applicability and lead remediation exercises with cross functional teams;
• Participate in meetings with various stake holders as per the schedules;
• Liaise with different teams in different geographical zones;
• Propose, plan and execute Service improvements initiatives;
• Adhere to different policies set out by the organization;
• Prepare and provide different reports (weekly/monthly/ad-hoc) to the Manager as necessary;
• Maintain appropriate knowledge required for successful and efficient delivery of the responsibilities;
• Keeping abreast of new threats and vulnerabilities and provide analysis as per applicability;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer.

Qualifications and Profile

• 10 -12 years of IT experience with 6-8 years of IT Security experience and 5+ years of experience in managing Vulnerability Management process for an enterprise.
• Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Professional Certifications (highly preferred) - Certified Information Systems Security Professional (CISSP)/ GIAC Enterprise Vulnerability Assessor (GEVA), or any other Vulnerability Management Certification/ CREST certification
• Working & hands-on experience in managing Vulnerability Management process;
• Strong technical understanding and experience assessing vulnerabilities and identifying weaknesses in multiple operating system platforms, networks, database, and application servers.
• Ability to assess vulnerabilities and prioritize remediation planning;
• Experience in working collaboratively with cross-functional/transverse IT teams in Production setup (Operations) mode;
• Ability to apply Risk based approach while working on assigned responsibilities;
• Must have working experience in administrating and operating Tenable (Nessus) Security Center vulnerability management tool for a Large enterprise level environment;
• Good understanding of Reporting needs at various levels of organization and ability to design, create and present the same;
• Hands-on experience of creating reports using various tools such as Excel, PowerPoint, Word in graphical formats, trending;
• Proficiency in Powershell or SQL query
• Experience in working with any BI tools like Power BI etc. to prepare the dashboard;
• Knowledge of different domains of Information Security;
• Excellent in analytical, communication and documentation skills;
• Ability to organize work and be able to priories work as per the Operation’s needs;
• Must have strong understanding of ITIL processes and comfortable working in process-oriented environment;
• Ability to work independently and as well as a part of team and is able to work under minimal supervision;
• Should have time management skills and able to manage work in fast moving environment;

Interested applicants please send your resume in MS Words format and attention it to Tan Joanna (R1104661)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1104661

Data provided is for recruitment purposes only

Business Registration Number: 200611680D. License Number: 10C5117

• We are looking for IT Security Engineer to handle the following responsibilities
• Develop and maintain IT security policies and action plans, reviewing them at least annually or as required by the Customer.
• Evaluate and recommend IT security products and solutions for implementation within the Customer's IT infrastructure.
• Implement and manage risk assessment methodologies, ensuring compliance with relevant service management requirements and industry standards.
• Develop and implement security management frameworks and governance structures as specified by the Customer.
• Establish and manage IT Security Incident Management processes, including detection, response, and handling of security incidents according to Customer guidelines
• Collaborate with external partners and suppliers to resolve IT security incidents effectively.
• Participate in and contribute to industry-wide IT security incident response simulations and technical assessment exercises.
• Conduct forensic investigations when required, including secure disk 'mage acquisition and analysis within specified timeframes.
• Monitor, analyse, and report on emerging security threats, vulnerabilities, and solutions relevant to the Customer's IT infrastructure.
• Conduct regular meetings with key stakeholders to highlight security issues and propose improvements to the Customer's IT infrastructure.
• Liaise and coordinate with external suppliers, security organisations, and the Government on IT security matters related to the Customer's infrastructure.
• Perform additional activities as necessary to secure the Customer's IT infrastructure.
• Review and follow up on security reports generated from central security tools, providing timely updates to the Customer.
• Manage the inventory of T assets to be monitored by central security tools, ensuring compliance and proper onboarding Of servers, networks, and databases.

Job requirements :

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

• Proven experience in IT security, with a focus on infrastructure security
• Strong understanding of information security principles, best practices, and relevant regulations
• Experience with a range of security tools and technologies
• Familiarity with forensic investigation techniques and tools

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• GIAC Certified Incident Handler (GCIH)

We are seeking a talented and motivated Security Platform Engineer with expertise in Fortinet SIEM onboarding, patching, use case creation, and SentinelOne operations - including agent patching. The ideal candidate will also demonstrate proficiency with FortiSOAR, Orca Security platforms, and Palo Alto platform management. This role is critical for maintaining the integrity and effectiveness of our security infrastructure, supporting both proactive and reactive cybersecurity initiatives.

Key Responsibilities:

• Lead the onboarding and integration of Fortinet SIEM solutions, ensuring seamless data ingestion, correlation, and alerting.
• Manage and execute patching processes for Fortinet SIEM platforms and related infrastructure to maintain compliance and optimal performance.
• Develop, test, and implement use cases within Fortinet SIEM to enhance detection capabilities and address emerging threats.
• Oversee SentinelOne operations, including the deployment, configuration, and patching of endpoint agents across the organization.
• Utilize FortiSOAR to orchestrate, automate, and respond to security incidents, improving incident response efficiency.
• Employ Orca Security for cloud security posture management, vulnerability assessment, and compliance monitoring.
• Own Palo Alto Networks platform engineering for Cortex XSIAM/XDR (and related security services), including tenant administration, upgrades/patching, health monitoring, troubleshooting, and lifecycle management.
• Engineer data onboarding into XSIAM: integrate log sources and telemetry (endpoint, network, cloud, identity), validate parsing/normalization, manage data models/mappings, and ensure high-fidelity ingestion for analytics.
• Develop and tune XSIAM detection content (correlation rules, analytics, and alert logic): reduce false positives, build threat-focused use cases, and maintain content through testing, release, and continuous improvement.
• Build and maintain XSIAM automations and integrations (playbooks, case management workflows, enrichment, ticketing/ITSM hooks), and establish operational runbooks, KPIs, and on-call procedures for reliable platform operations.
• Collaborate with cross-functional teams to support security monitoring, incident response, and continuous improvement initiatives.
• Document processes, procedures, and configurations for knowledge sharing and compliance purposes.

Required Qualifications:

• Proven experience with Fortinet SIEM solutions, including onboarding, patching, and use case development.
• Hands-on expertise in SentinelOne endpoint protection, with a focus on agent management and patching.
• Familiarity with FortiSOAR for security orchestration, automation, and response.
• Experience working with Orca Security or similar cloud security posture management tools.
• Demonstrated experience engineering Palo Alto Networks platforms—especially Cortex XSIAM/XDR (and ideally XSOAR)-including integrations, data onboarding, content/detection tuning, upgrades/patching, and troubleshooting.
• Strong understanding of cybersecurity principles, threat detection, and incident response processes.
• Ability to troubleshoot complex security platform issues and propose effective solutions.
• Excellent documentation, communication, and collaboration skills.

Preferred Qualifications:

• Industry certifications such as Fortinet NSE, SentinelOne Certified, Palo Alto Networks certifications, or other relevant security certifications.
• Experience with scripting or automation tools to streamline security operations.
• Familiarity with regulatory compliance frameworks and audit requirements.
• Bachelor’s degree in Computer Science, Information Security, or a related field.

To apply,simply click the "Apply" button or send your updated profile to recruit@percept-solutions.com 

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.

Role Specific Technical Skills Production experience across the following technologies:
• Working knowledge of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics. (Mandatory)
• In-depth experience with Kafka
• Good working knowledge of Linux (RedHat/Ubuntu)
• Programming skills is MUST (Python or Bash) is appreciated.
• Experienced production support engineer
• Platform integration skills are a plus - Experience in installation, configuration, documentation and administration of multiple pre-production and production platforms in both virtual and physical environments.
• Experience & skills in automation tools (e.g. Ansible) & DevOps pipelines are appreciated.
Specific Qualifications RequiredCandidate must have a overall 7 or more years of experience with minimum 4-5 years on relevant scopeie. Expertise in handling ELK stack for large platform or architecture.
Direct Responsibilities
• Install and administrate the servers of the SIEM Infrastructure
• Develop automation on the different tasks and self-service tool
• Participate to the integration of new technologies logs
• Support logs parsing using custom parser/GROK development
• Project management
• Be a full time member of the Production CSIRT / SIEM Engg team and participate to the various activities of the team
Contributing Responsibilities
• Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System

Key Responsibilities:

• Lead the monitoring and analysis of security events across networks, applications, and systems.
• Oversee incident response activities, ensuring rapid containment, investigation, and remediation.
• Conduct advanced threat hunting and forensic analysis to identify sophisticated attacks.
• Develop and enforce security policies, standards, and procedures across the organization.
• Collaborate with IT, compliance, and business units to align security initiatives with organizational goals.
• Evaluate and recommend new security tools, technologies, and processes.
• Prepare and review reports on security posture, risks, and incident trends.
• Stay ahead of emerging threats, vulnerabilities, and regulatory requirements.
• Assist with security audits and assessments.

Qualifications:

• Bachelor’s or Master’s degree in computer science, Cybersecurity, or related field.
• 5-8 years of experience in cybersecurity.
• Strong expertise in SIEM platforms, intrusion detection/prevention, endpoint protection, and cloud security.
• In-depth knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and regulatory standards (MAS TRM, PDPA and Cyber Hygiene).
• Proven experience in incident response, digital forensics, and threat intelligence.
• Excellent leadership, communication, and stakeholder management skills.
• Excellent analytical, problem-solving, and communication skills

To apply,simply click the "Apply" button or send your updated profile to recruit@percept-solutions.com 

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.

About the Role:

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities:

Firewall Operations (Fortinet & Palo Alto)

• Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.

• Monitor traffic, identify anomalies, and remediate security events.

• Maintain HA configurations, routing and logging integrations.

• Support audits and evidence collection for regulatory/compliance requirements.

Tripwire

• Administer policies, baselines, agents, alerts, and remediation workflows.

• Investigate integrity violations; tune rules to reduce false positives.

Imperva (DB Security/DAM)

• Configure security policies, signatures, profiles, and exceptions.

• Monitor application-layer attacks; tune rules to balance protection and usability.

• Support database activity monitoring policies and reporting where applicable.

• Security Monitoring & Incident Response

• Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications:

Hands-on expertise with:

• Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).

• Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).

• Tripwire (Hice to Have).

• Imperva (Hice to Have).

• Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).

• Experience in incident response, change management, and documentation.

• Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.

• Structured problem-solving and risk-based decision-making.

• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.

• Successful completion of firmware upgrades and config backups with rollback plans.

• Updated Tickets, network diagrams, and change records.

• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer

• Palo Alto NGFW / Panorama

• Tripwire Enter

Working hours :

8:30am to 6pm (Monday to Friday) onsite, no hybrid option.

Project Engineer (Security Systems)

• Working location: Office at Outram Road

• Working days & hours: Mon-Fri, 8.30am to 6pm (Willing to commit weekend/night job due to project timeline)

• Salary range: Junior - $3500 to $4400, Senior - $4200 to $5200

• Minimum Diploma in Electronics & Communication Engineering or related field

• Preferably with 2 years’ relevant work experience, or entry level candidates in relevant field of study

• Basic technical knowledge on ELV, Automation, Networking and Security Systems (CCTV, Card Access, Alarm System) will be an advantage

Interested applicants can also send your resume to (Liwenpoh741#gmail.com) and allow our consultant to match you with our clients. No Charges will be incurred by Candidates for any service rendered.

WA ME 9735 4019 for more Project Engineer(Security System) role

Overall Objective:

• The Project Engineers will be responsible for leading and managing projects for security equipment installation, testing, commissioning and system programming in accordance with required standards.

Key Roles and Responsibilities:

• Lead and direct projects and ensure they are directed towards a common objective

• Engage and communicate with stakeholders to deliver project milestones and comply with strict deadlines

• Ensure client satisfaction and manage escalations, acting point of contact to the client

• Ensure that the project delivers as-sold solution, remains within the baseline budget and is delivered on time whilst maintaining quality criteria and client satisfaction

• Coordinate activities of the project teams through task delegation, resource assignment and programme management

• Ensure proper documentation is in order

• Any other duties as assigned

POH LI WEN REG NO: R25136683

THE SUPREMEHR ADVISORY PTE LTD EA NO: 14C7279

• MNC Company
• Basic $2500 - $2800 + Incentive + AWS + Variable Bonus
• Excellent Welfare and Benefits + Career progression
• Working location: West
• Working hours: 12 Hours Rotating Shift: 7.30am-7.30pm, 7.30pm-7.30am (16 Shifts a month)

Job Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems
• Attending to customer request on alarm and card access systems
• Conducting patrols at night
• Any others ad hoc duties as assigned

Job Requirements:

• Possess minimum Higher Nitec in Electrical Engineering, Electronic & Computer Engineering, Mechanical Engineering, and other related fields
• Possess at least 1- 2 years of relevant experience
• Possess Class 3 Driving License will be an advantage

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

LIONG ZHAO GUAN (R22107632)

EA Recruitment Pte Ltd

EA License No: 21C0492

Cloud Security Engineer

Responsibilities:

• Conduct vulnerability tests on Client's Cloud infrastructure and services for potential threats, misconfigurations and weaknesses.
• Strong in Vulnerability management tools like Tenable.
• Implement best practices in Cloud security, Develop and maintain automated scripts for vulnerability scanning and reporting.
• Stay current with the latest security trends, tools, and AWS features to enhance our security posture.
• Address all findings promptly and effectively and document findings for reporting to management.

Requirements:

• Strong in Tenable AWS services such as EC2, S3, RDS, and Lambda.
• Proficient with security vulnerability tools and platforms
• Deep understanding of security principles, practices, and risk management.
• Certifications in AWS or RHEL are advantageous.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : kelvin@starcareerconsulting.com

Kelvin Lee (Reg. No. R1872625)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Role Summary
Drive automation and integrate security tooling to scale hardening operations.

Key Responsibilities

• Develop scripts (PowerShell, Python) for remediation
• Integrate SIEM, EDR, and vulnerability tools
• Automate reporting and workflows
• Improve detection logic and tool efficiency

Requirements

• 5–8 years in security engineering / DevSecOps
• Strong scripting skills (Python, PowerShell)
• Experience with cloud and security tools

Duration - 3year Contract

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

You will be responsible for end‑to‑end validation of Security and Functional Safety (FuSa) features for Renesas R‑Car automotive SoCs. The role focuses on validating secure boot, cryptographic services, safety mechanisms, and system‑level robustness across Linux, QNX, Android and RTOS environments on heterogeneous multi‑core SoCs.
You will work closely with BSP, firmware, hardware, and safety/security architecture teams to ensure production‑ready, audit‑compliant platforms for next‑generation IVI, ADAS, and fusion products.

•  Relevant working experience

• Strong system‑level understanding of secure boot and firmware architecture, QM vs safety domain partitioning, and multi‑core heterogeneous SoC behaviour
• Hands‑on experience in Security and Functional Safety (FuSa) validation for automotive SoCs
• Strong understanding of secure boot, cryptography, and ISO 26262 safety concepts
• Validation of X5H secure boot chain (BootROM → IPL → TF‑A → OP‑TEE → OS)
  Validation of RSIP‑M / RSIP‑E (HSM) including key provisioning, lifecycle states, and hardware crypto
• Validation of OP‑TEE and Trusted Applications, including secure storage (RPMB on UFS/eMMC)
• Execution of negative, robustness, and tamper testing (authentication failures, corrupted images)
• Validation of secure firmware loading across A‑core, R‑core, SCP, and Safety Island
• Validation of ISO 26262 safety mechanisms targeting ASIL‑B / ASIL‑D
  Validation of startup tests (LBIST, memory tests, watchdogs), ECC, and E2E protection
• Safety Island boot and runtime validation
• Fault injection and failure‑mode testing with analysis of fault detection and reaction paths
• System‑level validation on Linux (Yocto BSP), QNX Hypervisor, and RTOS / SafeRTOS / FreeRTOS
• System integration validation across heterogeneous multi‑core SoCs, ensuring correct partitioning between QM and safety domains
• Debugging and analysis of boot failures, safety events, and security violations using logs and low‑level traces
• Development and execution of system‑level validation plans, test cases, automation, and reports
• Contribution to security and safety validation evidence for internal reviews and customer audits
• Hands‑on experience with Git/Gerrit, Yocto build systems, JTAG and system‑level debugging tools, and security and functional safety validation tooling such as fault injection and negative testing

We’re partnering with a well-funded, fast-growing tech company to hire a Cyber Security Engineer to join their team.

• Protects endpoints through deployment and maintenance of security controls
• Ensures endpoint configurations meet security policies and compliance standards
• Manages endpoint security tools including protection and detection platforms
• Supports incident response, investigation, and reporting activities
• Experience in managed services or system integration environments with security frameworks exposure
• Performs threat monitoring, vulnerability checks, and recommends fixes

Reach out to Ayla at ayla@nodeflair.com for a confidential discussion.

EA License No: 19S9830

Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.

As a Lead Security Engineer at JPMorgan Chase within the Cybersecurity and Technology Controls , you are an integral part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

Job responsibilities

• Facilitates security requirements clarification for multiple networks to enable multi-level security to satisfy organizational needs

• Works with stakeholders and business leaders to understand security needs and recommend business modifications during periods of vulnerability

• Be responsible for triaging based on risk assessments of various threats and managing resources to cover impact of disruptive events

• Executes creative security solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions and break down technical problems

• Develops secure and high-quality production code and reviews and debugs code written by others

• Minimizes security vulnerabilities by following industry insights and governmental regulations to continuously evolve security protocols, including creating processes to determine the effectiveness of current controls

• Conducts discovery, vulnerability, penetration testing, and threat scenarios on multiple organizational assets to identify and assess if vulnerabilities are present, and executes threat modeling for multiple applications including external applications interacting with the internal JPMorganChase network

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or related disciplines

• Formal training or certification on software engineering concepts and 5+ years applied experience.

• Experience planning, designing, building and implementing enterprise level security engineering products and solutions in a public cloud environment (i.e. AWS, GCP, Azure)

• Advanced in one or more programming languages/scripts (i.e. C/C#, Python, PowerShell)

• Advanced knowledge of secure software application development and technical processes with considerable in-depth knowledge in one or more technical disciplines (e.g., cloud, artificial intelligence, machine learning, mobile, etc.)

• Experience with continuous integration and continuous deployment (CI/CD) tools (Jenkins), version control tools (BitBucket, Git), managing and tracking work using management tools like Jira

• Experience building security engineering products and solutions

• Experience working with vendors to assess the sufficiency of their security practices and controls meet industry standards.

• Experience with threat modelling of applications or architectures using models such as STRIDE.

• Ability to tackle design and functionality problems independently with little to no oversight

Preferred qualifications, capabilities, and skills

• Experience within Cyber Security is preferred

• Excellent communication and presentation skills

• Prior experience in finance industry is a huge plus

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=72b783b6d59078da2ea09ba60a9f1f70