Network Security Engineer - 12 months contract

PERSOL TECH SERVICES PTE. LTD.; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

PERSOL TECH SERVICES PTE. LTD. is seeking an experienced cybersecurity professional in Singapore to conduct vulnerability assessments, analyze results, and drive remediation across network and firewall environments.

You will administer Palo Alto NGFW and Panorama, configure security policies, review logs, and support security audits. 5+ years of hands-on cyber security experience and relevant certifications are highly preferred.

Qualifications

• Hands-on cybersecurity experience with vulnerability assessment/remediation.
• Experience administering Palo Alto NGFW and Panorama in enterprise settings.
• Familiarity with CVE, CVSS and security hardening practices.
• Knowledge of security frameworks like NIST, CIS, ISO/IEC 27001.
• Relevant certifications are highly preferred.

Responsibilities

• Conduct vulnerability assessments of network and systems using standard tools.
• Analyse scan results, assess risk, and recommend remediation actions.
• Validate remediations with re-testing to ensure issues are resolved.
• Administer Palo Alto NGFW and Panorama, manage policies and updates.
• Review and optimize firewall rules and security profiles.
• Monitor logs for threats, incidents and vulnerabilities.
• Support audits and vulnerability reporting, maintain docs.

Skills

Vulnerability management

Network security

Security auditing

Incident response

Stakeholder management

Analytical skills

Troubleshooting

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Palo Alto NGFW

Panorama

Nessus

Qualys

InsightVM

Job description

Duration: 1 year

Working Hours: 8.30am - 6pm, Monday - Fridays. Standby and shift work may be required

Location: Central + Roam

Key Responsibilities

• Conduct vulnerability assessments of network infrastructure, operating systems and security devices using industry-standard vulnerability management tools (e.g. Tenable Nessus, Qualys, Rapid7 InsightVM).
• Analyse vulnerability scan results, assess risk using CVSS and recommend remediation measures based on organisational security requirements.
• Perform validation and re-testing of remediated vulnerabilities to ensure security issues have been effectively resolved.
• Administer and maintain Palo Alto Next-Generation Firewalls (NGFW) and Panorama, including centralised policy management, device groups, templates, software updates and configuration management.
• Configure, review and optimise firewall security policies, NAT rules, App-ID, User-ID, Security Profiles and URL Filtering to strengthen the organisation's security posture.
• Review firewall logs, threat logs and security alerts to identify vulnerabilities, suspicious activities and potential security incidents.
• Perform firewall security hardening and configuration reviews in accordance with organisational security standards and best practices.
• Research emerging vulnerabilities (CVEs), security advisories and threat intelligence to assess organisational impact and recommend mitigation strategies.
• Collaborate with infrastructure, application and system teams to implement remediation plans and validate security fixes.
• Support security compliance initiatives, audits and vulnerability management reporting.
• Maintain security documentation, vulnerability assessment reports and remediation tracking.
• Ensure all security activities comply with ITSM/ITIL processes, including Change, Incident and Problem Management.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security or a related discipline.
• Minimum 5 years of hands-on experience in cybersecurity, vulnerability management, network security or information security, with demonstrated experience in vulnerability assessment and remediation.
• Hands-on experience administering Palo Alto NGFW and Panorama in an enterprise environment.
• Experience with Palo Alto technologies including Panorama, App-ID, User-ID, GlobalProtect, Security Profiles, WildFire, Threat Prevention, URL Filtering and NAT.
• Experience using vulnerability management tools such as Tenable Nessus, Qualys, Rapid7 InsightVM or equivalent.
• Strong knowledge of TCP/IP, DNS, DHCP, routing, VLANs and network security principles.
• Knowledge of CVE, CVSS, vulnerability remediation methodologies and security hardening best practices.
• Familiarity with security frameworks and standards such as NIST Cybersecurity Framework, CIS Benchmarks and ISO/IEC 27001.
• Strong analytical, troubleshooting, communication and stakeholder management skills.
• Relevant certifications such as PCNSA, PCNSE, PCCET, CompTIA Security+, Tenable Certified Professional (TCP), CEH or equivalent are highly preferred.