Total 2,865 Others level Legal / Public / Security job vacancies

About the Role

We’re looking for a hands-on Security Engineer / Architect to help secure our systems, data, and funds across our infrastructure.

You’ll work closely with IT, Infra, R&D, Web3, Product, and business teams to design practical security controls, lead security projects end-to-end, run offensive security exercises, and support ongoing security initiatives. This is a role for someone who is comfortable going from high-level architecture to very concrete implementation details and automation.

Responsibilities

Core Security Engineering

• Design and implement security controls to protect sensitive data, financial assets, and critical systems, ensuring integrity, confidentiality, and availability.
• Evaluate, recommend, and lead the implementation of security solutions (tools, platforms, processes) in a hands-on manner.
• Own security projects from inception to rollout, working closely with IT, Infrastructure, R&D, Web3 and other business units to ensure secure and timely delivery.
• Proactively identify and assess risks and vulnerabilities, and define/enforce mitigation strategies (technical and process).

Offensive Security, Testing & Bug Bounty

• Plan and execute penetration tests and targeted assessments (applications, APIs, infrastructure) either directly or by coordinating external partners.
• Lead or support red teaming / adversarial simulations to test detection, response, and real-world resiliency of critical workflows and infrastructure.
• Work with engineering teams on purple teaming style exercises: jointly validating detections, hardening controls, and improving runbooks.
• Own the technical side of the bug bounty / responsible disclosure process:
• Triage and validate incoming reports
• Coordinate with engineering owners
• Track remediation and communicate outcomes internally (and externally where needed)

Automation & Security Engineering

• Build and maintain security automation: scripts, playbooks, and pipelines that reduce manual toil (e.g., auto-enrichment of alerts, automated checks in CI/CD, policy-as-code).
• Integrate and tune SAST/DAST/SCA, IaC scanning, image scanning, and secrets scanning into CI/CD to catch issues early with minimal noise.
• Implement detection-as-code (e.g., for SIEM / logging platforms) and continuously refine alerts based on real incidents and red team learnings.

Policy, Operations & Collaboration

• Develop, refine, and maintain security policies, standards, and procedures, with a strong focus on data, funds, and access security.
• Contribute to day-to-day security operations and monitoring, including reviewing alerts, supporting incident response, and improving detection & response capabilities.
• Collaborate with stakeholders (IT, HR, Infra, R&D, Product, Trading, and other teams) to align security initiatives with business goals and product roadmaps.

Background & Experience

• 5+ years of hands-on experience in cybersecurity, with a proven track record designing and implementing security solutions, frameworks, and policies.
• Experience with security architecture, risk assessments, and vulnerability management in complex, fast-paced environments.
• Demonstrated experience in at least one of:

----- Penetration testing / offensive security (infra, apps, APIs, or Web3), or

----- Running or working closely with red team / purple team engagements

• Experience triaging and managing security findings from scanners, pen tests, and bug bounty programs (HackerOne, Bugcrowd, self-hosted, etc.).
• Demonstrated ability to deploy and administer IAM platforms (e.g., Okta or similar) and define robust access models (RBAC, SSO, MFA).
• Competence in configuring and managing EDR and MDM solutions across a diverse device and user base.
• Hands-on experience with regulatory and compliance requirements relevant to financial institutions or crypto companies (e.g., SOC 2, ISO 27001:2022, DORA, NIST, CIS).
• Interest in Web3 / crypto (DeFi, trading platforms, digital asset custody/security, etc.) is highly advantageous
• Comfort with at least one scripting / programming language (Python, Go, TypeScript, etc.) to build automations, integrations, and internal tools.

Competencies & Personality

• Strong team player who enjoys working cross-functionally with IT, HR, Infra, R&D, Product, Trading, and business stakeholders.
• Genuinely passionate about cybersecurity, offensive and defensive — enjoys thinking like an attacker but building like an engineer.
• Experience embedding security best practices into day-to-day workflows (development, infrastructure, operations) and driving automation over manual checks.
• Ability to articulate complex security concepts in clear, practical terms to both technical and non-technical audiences.
• Values ownership, accountability, and clear communication, and is comfortable operating in a fast-changing environment with high autonomy.
  

Certifications

Must-have

• OSCP – we expect a deep, hands-on understanding of offensive techniques, not just theory.

Nice to have

• CISSP, CISM, or equivalent broad security leadership/architecture certifications.
• Relevant GIAC certs (e.g., GWAPT, GCPN, GSEC, GCLD, GCIA, GIAC Cloud / Web / Exploit tracks).
• Cloud security certifications (e.g., AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer).
• Kubernetes / container security or general K8s certifications (CKS, CKA, etc.).

Responsibilities

• Design, implement, operate, and maintain the organization’s Security Management System (SMS) in alignment with ISO 27001 and other applicable security frameworks.
• Manage and administer security infrastructure, including next-generation firewalls, IDS/IPS, NAC, VPN solutions, and security management platforms.
• Develop, implement, and enforce information security policies, standards, procedures, and guidelines.
• Monitor security events, logs, and alerts using SIEM and security monitoring tools to detect, analyze, and respond to threats.
• Investigate security incidents, perform root-cause analysis, and lead incident response and remediation activities.
• Ensure system hardening, secure configurations, and compliance with security baselines across network and infrastructure components.
• Coordinate vulnerability assessments, penetration testing activities, and remediation tracking.
• Support firewall policy management, security rule reviews, log analysis, and continuous security tuning.
• Oversee access control mechanisms, authentication systems, and NAC solutions to ensure secure network access.
• Collaborate with network, infrastructure, presales, and project teams on secure design and implementation of new systems and services.
• Support Data Center and Disaster Recovery (DR) security implementations, audits, and compliance reviews.
• Maintain security documentation, including risk assessments, asset registers, SOPs, incident reports, and audit evidence.
• Manage vendor coordination related to security tools, licensing, renewals, RMA cases, and security product evaluations.
• Support internal and external audits, regulatory requirements, and compliance initiatives.

Requirements

• Bachelor's degree in information security, Computer Science, Engineering, Information Technology, or a related field.
• Minimum of 4 years of hands-on experience in information security, security operations, or security management systems.
• Strong understanding of Security Management Systems (SMS) and information security frameworks such as ISO 27001, ISO 27002, NIST, or similar.
• Proven experience in network and infrastructure security across LAN, WAN, Data Center, and DR environments.
• Hands-on experience with next-generation firewalls (Palo Alto, FortiGate, Cisco FTD, Juniper SRX).
• Solid knowledge of routing, switching, and secure network design concepts.
• Practical experience with VPN technologies (IPsec, SSL VPN, GRE, DMVPN).
• Experience with SIEM platforms, log management, and security monitoring tools.
• Familiarity with vulnerability management tools such as Nessus or equivalent.
• Experience with NAC solutions such as Cisco ISE or FortiNAC.
• Understanding of risk assessment, threat modeling, and security controls implementation.
• Experience performing OS upgrades, firmware updates, configuration backups, and security maintenance activities.
• Strong documentation skills with experience in policy writing, procedures, and audit reporting.
• Experience in banking, telecommunications, cloud, or enterprise environments is preferred.
• Ability to manage multiple tasks and respond effectively in a fast-paced environment.
• Willingness to work 24/7 shifts, including nights, weekends, and public holidays, if required.
• CCNA/CCNP Certificate is must.
• Preferred who is certified in PCNSE and Fortinet NSE
• CISSP, CISM, or equivalent security certifications (added advantage)

LiangSyeh Wei (Shevy) - R:R22108807

Our client is a leading player in construction industry. Due to ongoing expansion, they are looking for a Legal Counsel to support their growing legal and project teams. They are located in the (North) – easily accessible.

Responsibilities:

• Prepare, review and negotiate various commercial agreements including vendor and service-related contracts.
• Conduct legal due diligence and assess contractual obligations, exposures and liabilities.
• Provide advisory support to project teams on contract interpretation, claims, variations and delay-related matters across project phases.
• Manage disputes arising from business and project contracts, including arbitration and litigation processes.
• Assess legal exposure associated with contractual arrangements and recommend mitigation measures.
• Coordinate with external counsel and relevant authorities on legal matters and proceedings.
• Track regulatory updates and assess implications on business activities.
• Advise on corporate governance frameworks, statutory compliance and regulatory requirements.
• Support implementation and maintenance of internal compliance policies and frameworks.

Requirements:

• Degree in Law from a recognised institution with admission to the Singapore Bar.
• At least 5 years of relevant experience in corporate or commercial legal practice.
• Experience handling contract management within project-based or construction environments.
• Experience in dispute management, arbitration or litigation matters.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/CV.
We regret that only shortlisted candidates will be notified.

Email Address: jobs@recruitpedia.sg
EA License No: 19C9682
EA Personnel No: R22104769
EA Personnel Name: Ong Boon Kiet (Travys)

Job Summary

You will manage the company’s social media accounts and digital marketing efforts, research market trends, handle customer feedback, and support business development communications to enhance the company’s public relations and media presence.

Responsibilities

• Manage and create engaging content for company SNS accounts (Facebook, TikTok, Instagram) including posts, reels, and short videos to increase audience engagement
• Develop and execute digital marketing strategies to promote brand awareness and business growth
• Research and analyse market trends to inform marketing and PR strategies
• Monitor and respond promptly to customer reviews and complaints to maintain positive brand reputation
• Plan and implement proactive PR and media strategies to enhance company visibility
• Respond to business development emails and inquiries professionally to support client relations
• Collaborate effectively with team members and work independently to meet project goals
• Perform ad-hoc tasks as required to support overall business objectives

Preferred competencies and qualifications

• Proficiency in Japanese language (JLPT N1 or native level) to facilitate communication with the company’s Japan office
• Understanding of Japanese culture to support cross-cultural collaboration
• 1-2 years of experience (preferred but not MUST) in the service industry demonstrating hospitality mindset and strong communication skills

Job Description

We are looking for an experienced Legal Officer to provide comprehensive legal support and advisory services to the organisation. The successful candidate will play a key role in managing legal documentation, reviewing and negotiating contracts, ensuring regulatory compliance, and mitigating legal risks.

This role requires a proactive legal professional who can work closely with internal stakeholders and external legal advisors to support the company’s business operations and strategic objectives.

Key Responsibilities

• Provide legal advice to management and internal stakeholders on corporate, commercial, and regulatory matters
• Draft, review, and negotiate commercial agreements, contracts, and legal documentation
• Ensure compliance with applicable laws, regulations, and internal policies
• Identify legal risks and recommend appropriate mitigation strategies
• Support corporate governance matters, including preparation of board resolutions and corporate documentation
• Liaise with external counsel, regulators, and relevant authorities when required
• Assist in managing legal disputes, claims, and litigation matters
• Monitor legislative and regulatory developments and advise management on potential impact

Requirements

• Bachelor’s Degree in Law (LLB) or equivalent legal qualification
• Minimum 6–7 years of relevant legal experience in corporate, commercial, or regulatory law
• Strong experience in contract drafting, legal advisory, and compliance matters
• Good understanding of corporate governance and regulatory requirements
• Strong analytical, negotiation, and communication skills
• Ability to work independently and manage multiple legal matters effectively

Preferred Qualifications

• Admission to the Singapore Bar is an advantage
• Experience in an in-house legal department or corporate environment preferred

Key Skills

• Corporate & Commercial Law
• Contract Drafting and Negotiation
• Legal Advisory
• Regulatory Compliance
• Corporate Governance
• Risk Management

Roles and Responsibilities

· Plan, manage, and deliver Cybersecurity related projects such as VAPT, Asset Discovery, Risk Assessment, GRC etc from initiation to closure.

· Develop project plans, timelines, milestones, and resource plans to ensure on-time and within-scope delivery.

· Track project progress, risks, issues, and dependencies, anticipate and escalating them early where necessary.

· Prepare and present project status updates, reports, and dashboards to stakeholders and management.

· Manage and participate in IT risk assessment projects, including risk identification, impact and likelihood analysis, and risk treatment planning.

· Work closely with IT, security, and business teams to assess controls and identify gaps.

· Ensure effective communication across all project stakeholders.

Job Requirements

· Diploma or Degree from Computer Science / Cybersecurity related discipline of study.

· Minimum 3 years of working experience in project management involving IT risk, governance, or compliance.

· Good understanding of IT risk assessment methodologies and risk treatment processes.

Interested and suitable candidate kindly click quick apply. Resume will be forwarded to Stepfan Soon Yit

We regret that only suitable candidate will be notified.

GEMS Recruit/EA License : 23C1459

EA Personnel No : R24120893 (Stepfan Soon Yit)

Public Relations Officer/Customer Relations Executive

Email : CV@ourrecruiters.com

Job Scope:

Arrangement for Works to be carried out within the flats, dealing with requests and resolving feedback by manning the Hotline and/or the video conferencing platform.

The CRE shall manage and update information such as survey, repair, painting appointment etc., as well as providing quotation on private items etc.

The CRE shall have effective communication skills, telecommunication skills, good interpersonal skills and a passion for service delivery.

They shall also be meticulous and independent, numerate and proficient in using computer software such as Microsoft Office, e.g. Excel, Word, PowerPoint, etc. as well as video conferencing.

The CRE shall have a minimum qualification of GCE ‘O’ level Certificate or equivalent. Otherwise, the CRE should have at least one (1) year of customer relations work experience.

Requirements:

Min. 2 years experience in HIP project an advantage

Proficient in MS office

Job Requirements:

• Minimum 4 years of engineering experience with a degree in Civil Engineering recognized by the PE Board or a recognized degree in the relevant field, subject to the acceptance of the engineer.
• Review and study tender document in order to verify the availability of sufficient information
• Review BOQ, tender drawings and specification
• Coordinate in preparing initial design drawings
• Prepare method statements for the execution of BOQ items
• Proven track record in the construction of:

o  Sand Compaction Pile method.

o  Rubble stone mound and concrete caisson installation.

o  Steel plate cell revetment work.

o  Seawall construction.

o  Completed 1 full cycle of a project as a Site Engineer.

Skills & Knowledge:

• Leadership and project management skills
• Excellent team player, good interpersonal skills, and a “can-do” attitude
• Persistence and determination
• Superior management and delegation capabilities
• High level of financial responsibilities
• Ability to multi-task in a fast-paced and dynamic environment
• Excellent verbal communication skills
• Excellent resource, planning, and time management skills

Role Overview

Currently seeking a highly qualified, skilled and motivated Security Engineer to join our Information Security Operations, Cyber Threat Management Team. This role is critical in defending the organization against Cyber threats through proactive threat detection, intelligence gathering, vulnerability and risk management. The ideal candidate will bring deep technical expertise, strategic thinking, and leadership to drive continuous improvement in our security posture, with a strong understanding of the supply chain and logistics industry.

Key Responsibilities

As a seasoned professional your key responsibilities will entail leading and/or overseeing vital security intelligence and threat management initiatives, driving vulnerability and external attack surface management and remediation, mentor junior analysts.

Security Intelligence & Threat Management

• Lead and/or overseeing the development and execution of security intelligence programs to identify emerging threats and attack vectors.
• Oversee threat management activities including threat hunting and analysis of advanced persistent threats (APTs).
• Collaborate with internal and external stakeholders to enrich threat intelligence feeds and apply contextual analysis.

Vulnerability Management

• Manage the end-to-end vulnerability and risk management lifecycle, including identification, assessment, prioritization, remediation, and reporting.
• Maintain and enhance vulnerability scanning tools and processes.

External Attack Surface Management

• Monitor and assess the organization’s external digital footprint to identify exposed assets and potential attack vectors.
• Assess security implications of common ports (e.g., 443 (HTTPS), 22 (SSH), 3389 (RDP), 53 (DNS), 445 (SMB)) and automate network security controls.
• Work on firewall rule reviews, segmentation strategies, and security policy enforcement.
• Implement tools and processes to continuously discover, classify, and secure internet-facing assets.
• Coordinate incident response and containment efforts to minimize impact and ensure timely recovery.

Operational Leadership

• Lead and mentor a team of security analysts, fostering a culture of excellence and continuous learning.
• Develop and maintain standard operating procedures (SOPs) for threat hunting, vulnerability remediation, IOC investigation and incident response.
• Drive automation and integration of security tools, Incident & Change Mgmt Workflows, adoption of Artificial Intelligence technologies to improve operational efficiency.

Reporting & Metrics

• Develop tools to generate real-time compliance reports, track remediation progress, and reduce audit preparation time.
• Stay ahead of emerging threats, regulatory changes, and vulnerability trends, continuously refining security automation strategies.
• Enhance Configuration Compliance monitoring by automating the processing of audit findings and risk exceptions.
• Ensure that security data is accurate, actionable, and seamlessly integrated with ITSM and GRC platforms.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Information Technology, or related field.
• 7+ years of experience in Information Technology, with at least 5+ years in Information Security Operations and vulnerability management.
• Expert-level understanding of network security protocols and common port numbers.
• Proven ability to lead security automation initiatives and mentor junior analysts.
• Strong knowledge of threat intelligence platforms including Mimecast, SentinelOne, Tenable, SIEM, EASM tools, and vulnerability management solutions.
• Experience with MITRE ATT&CK framework, threat modeling, and incident response.
• Thorough understanding of Industry Standards & Best practices in Networking, IAM, Endpoint, IOT, Infra & App Security, Email & Brand Protection, Asset & Data Protection
• Relevant certifications (e.g., CISSP, CISM, GIAC, CEH, OSCP) preferred.

Preferred Skills

• Excellent communication, Customer Service & stakeholder management skills.
• Ability to work under pressure and manage multiple priorities.
• Strong analytical, troubleshooting, and problem-solving skills.
• Expertise in developing User Awareness, Training, Experience with Table-top Exercises & Simulations
• Understanding of Information Security challenges specific to the supply chain and logistics industry.
• Experience with ISO & NIST Frameworks

About the Role:

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities:

Firewall Operations (Fortinet & Palo Alto)

• Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.

• Monitor traffic, identify anomalies, and remediate security events.

• Maintain HA configurations, routing and logging integrations.

• Support audits and evidence collection for regulatory/compliance requirements.

Tripwire

• Administer policies, baselines, agents, alerts, and remediation workflows.

• Investigate integrity violations; tune rules to reduce false positives.

Imperva (DB Security/DAM)

• Configure security policies, signatures, profiles, and exceptions.

• Monitor application-layer attacks; tune rules to balance protection and usability.

• Support database activity monitoring policies and reporting where applicable.

• Security Monitoring & Incident Response

• Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications:

Hands-on expertise with:

• Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).

• Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).

• Tripwire (Hice to Have).

• Imperva (Hice to Have).

• Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).

• Experience in incident response, change management, and documentation.

• Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.

• Structured problem-solving and risk-based decision-making.

• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.

• Successful completion of firmware upgrades and config backups with rollback plans.

• Updated Tickets, network diagrams, and change records.

• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer

• Palo Alto NGFW / Panorama

• Tripwire Enter

Working hours :

8:30am to 6pm (Monday to Friday) onsite, no hybrid option.