Total 2 job vacancies by Infinite Computer Solutions Pte Ltd

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Responsibilities:

Endpoint Protection

·      Administer, operate, and maintain Symantec Endpoint Protection Manager or Defender or any other end point security solution.

·      Deploy, configure, and manage endpoint protection policies, including anti-malware, IPS, firewall, and device control

·      Generate security posture reports regularly to identify gaps in protection and manage the end-to-end lifecycle of the Symantec agent.

·      Perform upgrades and roll outs during weekend maintenance window

User Support & Operations

·      Provide Level 2 / Level 3support for incidents and service requests

·      Monitor endpoint security alerts, investigate incidents, and perform root cause analysis

IT Service Management

·      Understands ITIL processes for Incident, Problem, Change Management

·      Create and update tickets with detailed documentation and resolution steps

·      Maintain SLAs and ensure timely ticket resolution

Documentation & Knowledge Management

·      Create and maintain technical documentation, knowledge articles, and standard operating procedures (SOPs)

·      Maintain runbooks for common operational tasks

Required skills and qualifications:

·      Singaporeans By Birth Only(Public Sector Client)

·      A degree in Computer Science, Information Technology, IT Security or a related field with at least 2-4 yearsof work experience

·      At least 1 year of experience with SEPM / Defender

·      Experience with Host Intrusion Prevention & Detection (HIPS / HIDS)

·      Experience with Windows and/or Linux (RedHat) system administration

·      Able to prioritize multiple tasks in a dynamic working environment, with strong communication and interpersonal skills

Preferred skills and qualifications:

·      Knowledge of Microsoft Defender is a bonus

·      Experience with scripting programming languages (e.g. PowerShell, Python) for automation.