Network Security Engineer

ITConnectHK Limited; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

ITConnectHK Limited in Singapore seeks a Cyber-Security Engineer (Level-2) to provide operational cybersecurity support and maintain our network security infrastructure. You will handle incidents, firewall flow, proxy management, remote access, IP/VPN support, and vulnerabilities remediation, while supporting LANs, WANs and VPNs to ensure optimal security posture.

The role requires hands-on experience with Cisco, Fortinet, Checkpoint, F5, Infoblox and related security technologies, plus strong

Qualifications

• Minimum 6 years of experience managing IT systems with ~2 years in financial institutes.
• 2+ years as Cybersecurity support Engineer or 3+ years in similar role.
• Good understanding of LAN/WAN/VPN topology and security concepts (encryption, certificates, Kerberos).
• Proven ability to work under pressure and deliver results; strong communication and team collaboration.

Responsibilities

• Provide Production Level 2 support for network and security infrastructure.
• Handle incidents, requests and change management.
• Remediate vulnerabilities and update security documentation.
• Maintain security SOPs and procedures.
• Support network security project implementations.
• Manage network security IT assets / CMDB (routers, firewalls, LANs, WANs, VPNs).
• Install firewalls, VPN, routers, servers, and IDS scanning technologies.
• Guide Level 1 security teams and lead security awareness programs.
• Respond to security incidents (data breaches, viruses, phishing) and upgrade systems as needed.
• DNS/DHCP management.

Skills

Network topology

Network Security

Emerging tech

Communication

Team player

Under pressure

Tools

Wireshark

Tshark

Netflow

Python

Bash

Ansible

Cisco NX-OS

Fortinet

Arista EOS

Infoblox DNS/DHCP

Skyhigh Proxy

Ivanti Remote Access

Trendmicro IPS/IDS

Job description

Summary of the position:

The cyber-Security Engineer is a Level-2 position responsible cybersecurity operational support and maintaining our organization's network security infrastructure. He/She supports day-to-day cybersecurity operational activities including Incident handling, Firewall flow management, proxy management, Remote access support, IP/VPN support, vulnerabilities remediation etc. He/She also support on LANs, WANs, and VPNs. He also determines the efficacy and efficiency of routers, firewalls, IPS, proxies, load balancers to ensure its optimal functionality.

Main responsibilities:

• Production Level 2 support for Network and Security infrastructure.
• Handling Incident, Request and change management.
• Vulnerability remediation.
• Knowledge management
• Hardening of network security infrastructure.
• Maintains documentation of security SOP and procedures.
• Gaining a total understanding of the organization's technology and information systems
• Support for Network security project implementations.
• Network Security IT assets / CMDB management, including routers, firewalls, local area networks (LANs), wide-area networks (WANs), virtual private networks (VPNs), and any other related network devices
• Prepare and Installation of all firewalls, VPN, routers, servers, and IDS scanning technologies
• Providing technical guidance and supervision for Level 1 security teams
• Taking charge of any security awareness programs and educational efforts to better prepare non-IT personnel
• Responding immediately to any security-related incidents (e.g., data breaches, viruses, phishing scams)
• Updating and upgrading the organization's security systems as needed
• DNS/DHCP management

Legal and Regulatory Responsibilities:

1. Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
2. Maintain appropriate knowledge to ensure to be fully qualified to undertake the role.
3. Complete all mandatory training as required to attain and maintain competence.

Job Specific Environment and/or Organization:

• Working hours will be in rotating shifts and primarily to cover Europe business hours
• On-call support will be expected on a rotational basis on both weekdays and weekends

Requirements

Mandatory track record

• Minimum 06 years of experience in managing IT systems environment with about 02 years of experience in financial institutes.
• Or minimum 3 years of work experience as a Cybersecurity support Engineer.
• Good understanding of Network topology (LAN/WAN/MAN/VPN)
• Good understanding of Network Security ( Encryption, Certificate, Kerberos etc )
• Knowledge and/or hands on working experience with emerging technologies.
• Excellent communication, interpersonal and logical skills.
• Customer service oriented and a strong team player.
• Ability to work under pressure and a commitment to solving issues.

Technology / Product Experience:

Cisco - ACI, Nexus, Catalyst, DNAC, ISE , iOS, NXOS

Arista - Switches, EOS

Fortinet - Firewall, IPS

Checkpoint - Firewall, MDS

F5 - LTM, ASM, APM , TMOS

Infoblox - DNS, DHCP

Skyhigh - Proxy

Ivanti - Remote access

Trendmicro - IPS/IDS

Tools/ Product Experience:

Programmingin Python/Bash/Ansible

Tools : Wireshark/Tshark/Netflow