IT Security Engineer (Freelance/Contract)

TESCOM (SINGAPORE) SOFTWARE SYSTEMS TESTING PTE LTD.; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Tescom (Singapore) Software Systems Testing Pte Ltd. is seeking a security operations professional to manage urgent security requests, monitor the SEM health, and support audit activities.

You will coordinate annual audits, handle vulnerability assessments, and contribute to MFA deployments such as YubiKey integration, working with stakeholders.

Responsibilities

• Respond to urgent security emails, incidents, and stakeholder inquiries promptly.
• Review and process security advisories and maintain tracking registers.
• Perform daily health checks of the SEM platform and verify log ingestion status.
• Coordinate bi-weekly Symantec endpoint updates and verify deployment.
• Generate monthly ABLR reports in Excel with event analysis and justifications for exceptions.
• Prepare evidence for the Annual Source Code Review Audit.
• Support the Annual Vulnerability Assessment audit readiness and evidence gathering.
• Support the Annual Risk Assessment audit documentation and stakeholder engagement.
• Assist with internal audits and system compliance checks.
• Troubleshoot SEM log ingestion and log flow issues.

Job description

Responsibilities

• Respond to and manage urgent email requests, incidents, and stakeholder inquiries in a timely manner.
• Review, assess, and process security-related email advisories, and maintain/update the corresponding tracking registers.
• Perform daily health checks of the SolarWinds Security Event Manager (SEM) platform to verify system availability,log collection status, and log ingestion integrity.
• Conduct bi-weekly Symantec endpoint client updates, including deployment verification, status monitoring, and issue resolution as required.
• Generate and submit the monthly ABLR report in Microsoft Excel format, including log review, event analysis, anomaly investigation, and supporting justifications for identified exceptions.
• Coordinate, prepare, and provide support for the Annual Source Code Review Audit, including the compilation of required evidence and documentation.
• Coordinate, prepare, and provide support for the Annual Vulnerability Assessment (VA) Audit, including audit readiness activities and evidence gathering.
• Coordinate, prepare, and provide support for the Annual Risk Assessment Audit, including documentation review and stakeholder engagement.
• Support, fulfil, audit and compliance documentation, including but not limited to Internal Audits, IM8 Audits, System Compliance Checks, and CSA Audits.

• Provide troubleshooting, incident investigation, and remediation support for security platforms and tools, including SEM log ingestion and log flow issues;
• Log retention and storage management issues, including unexpected log purges;
• ABLR reporting enhancements and fine-tuning in collaboration with vendors.

• Plan, implement, and deploy Multi-Factor Authentication (MFA) solutions, including YubiKey integration and user onboarding activities.
• Manage LISA onboarding activities in accordance with LTA requirements, standards, and procedures.