ITSO

ENGGSOL PTE. LTD.; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

A cybersecurity solutions company in Singapore is seeking an IT Security Officer to manage cybersecurity incidents and conduct security assessments. The ideal candidate will have extensive experience with security tools like Tenable, Splunk, and Nessus. Key responsibilities include ensuring compliance with cybersecurity policies and conducting information security awareness training. This position is vital for maintaining the organization's IT security posture.

Qualifications

• Extensive experience with various security products and tools.
• Experience in managing and monitoring cybersecurity incidents.
• Ability to conduct security assessments and ensure policy compliance.

Responsibilities

• Track and manage cybersecurity incidents and key security threat events.
• Conduct security assessments of customer ICT systems.
• Implement and maintain security policies and procedures.

Skills

Tenable

Splunk

Nessus

Cybersecurity Management

Information Security Awareness Training

Job description

IT Security Officer (ITSO) – In this role, you will have extensive experience working with various security products and tools, including Tenable, Splunk, Nessus, and related technologies. The ITSO L2 Engineer will be responsible for managing and monitoring cybersecurity incidents, conducting security assessments, and ensuring compliance with cybersecurity policies and procedures in Command Center

You Will:

Cybersecurity Management:

• Track and manage cybersecurity incidents and key security threat events. Report findings to the Agency as required.
• Track and disseminate security advisories, including threat reports, security directives, and patch recommendations to the Agency.
• Conduct information security awareness training for staff.
• Assist in or conduct tabletop exercises and security risk management activities.

Security Product Management:

• Use Tenable and Nessus for vulnerability scanning and security assessments of applications, including client/server software and mobile apps, to be deployed in corporate networks.
• Utilize Splunk for security event monitoring and log analysis.
• Perform onboarding and vulnerability scanning of computing devices to ensure cyber hygiene before connecting to corporate networks.

Compliance and Reviews:

• Ensure adherence to the customer’s ICT and cybersecurity incident response plan through ongoing security reviews and audits.
• Conduct security assessments of customer ICT systems, including log analysis.

Network and Security Integration:

• Manage and configure security tools and platforms to ensure they are effectively integrated with the network infrastructure.
• Implement and maintain security policies and procedures to protect the organization’s IT assets.

Documentation and Reporting:

• Maintain detailed and accurate documentation of security incidents, assessments, and policies.
• Prepare and deliver reports on security performance, incidents, and compliance.

Collaboration:

• Work closely with other IT teams and external vendors to support and implement security solutions.
• Collaborate with the Agency to ensure alignment with cybersecurity objectives and requirements.