Total 92 engineering job vacancies in Legal / Public / Security category in Australia

Our client, a global tech unicorn is looking for an ambitious Security Engineering Manager who will take a holistic approach to safeguard our engineering assets serving millions of users worldwide. They have built in-house products and systems from scratch which requires robust security measures to protect user data, intellectual property, and sensitive corporate information.

You would be working and managing across multiple teams including DevSecOps, Product Security, and Offensive Security. Success in this role requires strong analytical, problem-solving, and leadership abilities and the capacity to think from defensive, offensive, and engineering perspectives to craft tailored security solutions for our unique environment. The ideal candidate will not only be proficient in using readily available or off-the-shelf tools but would also have the expertise to assess when and how custom security tools need to be developed and maintained with a software engineering perspective to address specific challenges.

‎

Requirements

• Proven experience managing Security Engineering or Software Engineering teams, with at least 7 years of extensive expertise in cybersecurity.
• Strong background in leading cybersecurity or software development projects using agile methodologies.
• Experience securing applications in fast-paced environments with frequent changes.
• Proficient in general-purpose programming languages (e.g., Python) and Object-Oriented Programming (e.g., Java).
• Hands-on experience with cloud platforms like AWS and GCP, including platform-specific security features and common security tools.
• Familiarity with modern technologies such as containerization, managed container services, serverless functions, infrastructure as code, API gateways, BFF (Backend for Frontend), CI/CD, and microservices.
• Deep technical knowledge of web, mobile, OS, and network security
• Able to practically demonstrate various security tests and control implementation such as SAST, DAST, SCA, WAF, secure-by-design, and secure application framework.
• Excellent verbal and written communication skills.
• Strong self-initiative to bridge gaps between Software Engineering, Infrastructure Engineering, and Security Engineering, while providing a security framework for the entire technology team and management.
• Commitment to cybersecurity with a dedication to continuous learning and staying updated on new technologies.
• Experience in CTF, bug bounty programs, and presenting at security conferences, or publications is a plus.
• Experience with penetration testing, red teaming, or purple teaming is a plus.
• Web development experience or developing security tools is a plus.
• Relevant technical security certifications (e.g., Offensive Security, CREST, SANS GIAC) are a plus

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Chief Operating Officer (COO) Office
The COO Office supports our COO to streamline operations and align them with strategic goals. You will work with the COO, Heads of Departments, and stakeholders across GIC to achieve operational excellence.

Cyber Security, Information & Technology Risk Management
You will be a part of an independent risk management function to protect the firm’s information technology assets, including business data, from external threats and operational risks, and to facilitate the firm’s digitalisation journey in a secure manner.

What impact can you make in this role?
You will be empowered to be at the top of your game by providing strategic partnership, and innovative technology solutions that supports GIC’s vision of being a tech-driven, global, long-term investment firm.

What will you do as a AVP, Cyber Security Engineering, DevSecOps & Cloud Security?

• Identify and recommend improvement areas in existing enterprise security architecture to address evolving cybersecurity threats.
• Align and balance business requirements with cybersecurity, information, and technology requirements, based on the organization’s risk appetite.
• Evaluate, perform proof-of-value/proof-of-concept, design, build and implement enterprise-class cybersecurity systems.
• Develop integrated security operating models and documentations to ensure operational efficiency, scalability, and sustainability.
• Act as a domain expert and trusted partner in CSR; work closely with stakeholders in Technology Group and other business groups on cybersecurity engineering related matters.

What qualifications or skills should you possess in this role?

• Bachelor’s Degree in Information Technology, Computer Engineering or equivalent
• At least 10 years of relevant experience preferably in financial services or asset management industries, with minimum 7 years in Cyber Security or Information Security
• Professional qualification such as AWS and Azure security certifications
• Hands-on experience in in Secure Software Development Life Cycle (SSDLC), in Java, Python, C#, .NET, Kotlin
• Working knowledge of Waterfall, Agile, and DevOps development methodologies, and deployment to public cloud environments
• Strong understanding of DevSecOps tools, design, automation and and CI/CD tools, including IaC (Infrastructure as Code), GitLab/GitHub, Jenkins, application containers, as well as IAM (Identity and Access Management) in AWS and Azure
• Knowledge of Cloud Native Services, including AWS Well Architected Framework, and experience in implementing and operationalizing Cloud Security solutions (in Azure and/or AWS), such as Sentinel, Security Hub, Guard Duty, and Cloud Trail
• Familiarity with risk assessment and threat modelling techniques, static and dynamic code security analysis and testing, software composition analysis, and API security
• Ability to produce detailed documentation, including design diagrams and process flows
• Must be meticulous, versatile, and inquisitive, having strong attention to detail with an analytical mind and outstanding problem-solving skills
• Desire to learn, working in a diverse environment, interacting with multiple teams and functions to support strategic goals. Be a good team player and excellent communicator
• Professional qualification in information security, such as CISSP / CISM / CEH will be advantageous

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

Flexibility at GIC
At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer
As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.

Learn More about out COO Office here:
https://gic.careers/departments/chief-operating-officer-office/

To be considered for the role, please submit a formal application through the GIC Careers site at

https://careers.gic.com.sg/job-invite/16013/

Job Description

• Execution of the Public Outreach and engagement programme
• Assist in public relation management pertaining to the works
• Shall be responsible for the production of pamphlets and other materials related to the public relations effort.
• Shall be responsible for the compilation and submission of a monthly list of feedback / complaints with indication on the action taken.
• Initiate the public relations programme.
• Dissemination of information during the course or works.
• Draw up the public relation implementations schedule.

Job Requirements

• Min “0” levels or equivalent and good communication and strong interpersonal skills
• Min. 2 yrs work experience
• Possess class 3 driving license
• Have excellent communication skills

Job Description

• Execution of the Public Outreach and engagement programme
• Assist in public relation management pertaining to the works
• Shall be responsible for the production of pamphlets and other materials related to the public relations effort.
• Shall be responsible for the compilation and submission of a monthly list of feedback / complaints with indication on the action taken.
• Initiate the public relations programme.
• Dissemination of information during the course or works.
• Draw up the public relation implementations schedule.

Job Requirements

• Min “0” levels or equivalent and good communication and strong interpersonal skills
• Min. 2 yrs work experience
• Possess class 3 driving license
• Have excellent communication skills

Job Description:

• Report and assist Project Manager (PM) on public relation programme in relation to meet the project(s) goals;
• To deal and manage feedbacks and complaints from the public tactfully and render full support on all press and public relations matters related to the Contract;
• To give advance notice to the public through distributing pamphlets, letters and other publicity materials approved by the authority prior commencement of the work;
• To explain and brief the public, residents, occupiers in the vicinity and proximity of the works on the impact of the construction activities before each construction stage;
• To arrange and attend meetings on public relation matters with project team where necessary;
• To ensure that work schedules pertaining to road closure, traffic diversions, etc. are put up in advance to inform the public in order to minimize any inconvenience to them during the construction period;
• To provide periodic updates and disseminate information to the public in relation to the construction works;
• To prepare a monthly report to update on the feedbacks and complaints received and the respective actions taken against them;
• To promote and maintain a good relationship with the public before and during the full period of construction; and
• Be responsible for any other duties that may be assigned from time to time as your superior/management deem fit.

Requirements

• Diploma/Degree in any field with 5 years’ working experience as a Public Relations Officer in the construction industry

We are looking for a dedicated Security Engineer to join our Cybersecurity Department. This role is pivotal in enhancing our security architecture and engineering efforts, requiring an individual who can serve as a subject matter expert (SME) in various security systems and solutions, particularly in Application Security.

Key Responsibilities:

• Security System Expertise: Serve as the SME in architecture and engineering for security systems managed by the Information Security Team; this is NOT a security operations position
• Design and Implementation: Plan, assess, design, operationalize, and maintain a range of security software and hardware solutions tailored to our enterprise needs.
• Risk Management: Identify, evaluate, and mitigate cyber risks within our IT infrastructure while staying updated on emerging threats and vulnerabilities associated with new technologies.
• Vendor Collaboration: Prepare requests for quotations (RFQs) and establish evaluation criteria, conducting proof of concept (POC) assessments during product evaluations in collaboration with vendors.
• Consultancy and Guidance: Provide expert consultancy and technical guidance on security best practices, advising infrastructure teams on relevant security design principles.
• Continuous Improvement: Recommend and drive initiatives aimed at enhancing the organization’s cyber security posture through innovative solutions.
• Project Management: Manage individual project priorities, deadlines, and deliverables with minimal supervision while fulfilling any relevant ad-hoc duties.

Requirements:

• Educational Background: A degree in Computer Science or a related field, complemented by at least 5 years of experience in information security, particularly in application security – as architect / engineer (NOT security operations).
• Certifications: Professional certifications such as CISSP, CSSLP, or CEH are preferred.
• Technical Proficiency: Demonstrated experience with security products and security technologies including EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, and network security tools; ability to review firewall requests is essential.
• Knowledge Base: Strong understanding of common web/mobile application vulnerabilities along with experience in vulnerability management is advantageous. Familiarity with cyber threats and exploit methods is also required.
• Communication Skills: Excellent verbal and written communication skills are crucial for articulating complex concepts clearly.
• Proactive Attitude: A positive mindset with a strong sense of urgency in addressing high-priority issues is essential. The ability to work both independently and collaboratively within a team environment is highly valued.

If you are interested in the above cybersecurity job or other security engineering opportunities, please apply with your updated CV or send to Shannagh Wu at Shannagh.Wu@ethosbc.com

Reg No. R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Job Description:

• Engagement of stakeholders near worksite to support Construction team
• Engagement of relevant Authorites like MOE, School, SLA in relation with work
• To assist LTA CPN and Project Team in public relations management
• To work closely with all relevant parties such as Clients, Contractors, Project Manager, Consultants, Residents, Authorities, etc and take proactive measures in mitigating all complaints arising from the construction activities
• To liaise and coordinate with these parties in regards to the project.
• To plan and launch public relations programs/talks with regards to the project/works progression
• To formulate and implement public relations matters pertaining to the project.
• To report/update the management on public relations matters at site

Job Requirements:

• Min Diploma with at least 5 years working experience
• Resourceful with positive attitude and able to work independently
• A team player with good interpersonal and communication skills and the ability to interact well with people at all levels
• Ability to work with MS word and Excel
• Must be bilingual in English and Mandarin as need to liaise with Chinese client.

If you are not invited for an interview within 4 weeks, we regret that your application was not suited to this vacancy.

For more company information, please feel free to visit: http://www.stecs.com.sg/

Personal data collected will be used for recruitment related purposes only and will be destroyed after 12 months.

Responsibilities

• To handle complaints or feedback and take remedial actions
• To work closely with all relevant parties such as Contractors, Project Manager, Consultants, Residents, Authorities, etc and take proactive measures in mitigating all complaints arising from the construction activities
• To liaise and coordinate with these parties in regards to the project
• To plan and launch public relations programs/talks with regards to the project/works progression
• To formulate and implement public relations matters pertaining to the project.
• To report/update the management on public relations matters at site.
• To update and maintain all records.

Requirements

• At least 5 Year(s) of working experience in the related field is required for this position.
• Required Skill(s): LTA experience, Public Relationship Officer
• Preferably Junior Executive specialized in Public Relations/Communications or equivalent.

If you are not invited for an interview within 4 weeks, we regret that your application was not suited to this vacancy.

For more company information, please feel free to visit: http://www.stecs.com.sg/

Personal data collected will be used for recruitment related purposes only and will be destroyed after 12 months.

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Chief Operating Officer (COO) Office
The COO Office supports our COO to streamline operations and align them with strategic goals. You will work with the COO, Heads of Departments, and stakeholders across GIC to achieve operational excellence.

Cyber Security, Information & Technology Risk Management
You will be a part of an independent risk management function to protect the firm’s information technology assets, including business data, from external threats and operational risks, and to facilitate the firm’s digitalisation journey in a secure manner.

What impact can you make in this role?
You will be empowered to be at the top of your game by providing strategic partnership, and innovative technology solutions that supports GIC’s vision of being a tech-driven, global, long-term investment firm.

What will you do as a VP, Cyber Security Engineering, Cloud Security & Data Protection Specialist?

• Identify and recommend improvement areas in existing enterprise security architecture to address evolving cybersecurity threats
• Align and balance business requirements with cybersecurity, information, and technology requirements, based on the organization’s risk appetite
• Evaluate, perform proof-of-value/proof-of-concept, design, build and implement enterprise-class cybersecurity systems
• Develop integrated security operating models and documentations to ensure operational efficiency, scalability, and sustainability
• Act as a domain expert and trusted partner in Cyber Security & Resilience; work closely with stakeholders in Technology Group and other business groups on cybersecurity engineering related matters.

What qualifications or skills should you possess in this role?

• Bachelor’s Degree in Information Technology, Computer Engineering or equivalent.
• At least 10 years of relevant experience preferably in financial services or asset management industries, with minimum 7 years in Cyber Security or Information Security.
• Professional qualification such as AWS and Azure certifications.
• Hands-on experience in implementing and operationalizing cloud security solutions (IaaS, PaaS, and SaaS) and data protection solutions (data classification, labelling, encryption, key management, HSM, KMS, data access controls, DLP, post-quantum computing).
• Experience must include provisioning with Infrastructure as Code (AWS CloudFormation and/or Azure Resource Manager), cloud IAM implementation, and data protection in cloud environments
• Scripting and coding skills, with proficiency in Java, Python, C#, or similar programming languages, and good understanding of REST API’s and JSON.
• Knowledge of DevSecOps tools, design, automation and and CI/CD tools, including IaC (Infrastructure as Code), GitLab/GitHub, Jenkins, application containers, as well as IAM (Identity and Access Management) in AWS and Azure.
• Working experience with other cybersecurity products such as SIEM, threat intelligence, security incident response and forensic investigation, network and endpoint protection, and others, would be advantageous.
• Must be meticulous, versatile, and inquisitive, having strong attention to detail with an analytical mind and outstanding problem-solving skills.
• Desire to learn, working in a diverse environment, interacting with multiple teams and functions to support strategic goals. Be a good team player and excellent communicator.
• Professional qualification in information security, such as CISSP / CISM / CEH will be advantageous.
• 
  

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

Flexibility at GIC
At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer
As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.

Learn More about out COO Office here:
https://gic.careers/departments/chief-operating-officer-office/

To be considered for the role, please submit a formal application through the GIC Careers site at

https://careers.gic.com.sg/job-invite/15964/

If you are a cheerful, initiative and strong integrity person who likes to meet new people and are able to contribute by fulfilling clients’ needs, join us.

Job Description:

· To manage and ensure that the systems, servers and infrastructure is installed in accordance to the prescribed design document and/or requirements

. Understanding the scope of works and the needs of the clients and implement the appropriate output to the best of your ability or to the requirements

. To design the network architecture and configure in accordance to the requirements

· Configure, Test and Hand over the required systems and provide Training to client

· Ensure the highest standard of system and infrastructure availability

· To liaise with various parties such as system manufacturers or cybersecurity vendors to resolve issues and problems

· Attend new product trainings

Requirements:

. Applicants need to be able to work overtime/Night Shift.

· Required Skill(s): Communication skills, Analytical skills, Decision making, Organizational skills, Attention to details, Patience and Knowledge of Systems engineering software tools

.Min 3 years of relevant hands-on experiences

. Familiar with Security Systems such as ISMS, CCTV, ACS and VA systems will be advantageous

. Familiar with Networking systems (eg. Routing, VLAN, VPN, Wireless AP) will be advantageous

. Familiar with IT Security (eg. firewall, IPSEC, SSL, hardening) will be advantageous

. Able to work independently with minimum guidance, monitoring and a good team player

. Valid Class 3 driving license has an added advantage

Other Information:

· Location: Kaki Bukit or as needed

· Working hours: 44 hours per week (Follow Company’s Arrangement)

· Salary (commensurate with experience): Basic salary + OT allowances + Variable Bonus

Resumes please INCLUDE:

· Personal particulars

· Education background

· Work experiences in point forms

· All reasons for leaving

· Current and expected salary

· Date of availability / Notice Period

Interested applicants are invited to send your updated resume in MS Word format via Apply Now.

We regret that only shortlisted applicants will be notified.

About ST Engineering

ST Engineering is a global technology, defence, and engineering group with offices across Asia, Europe, the Middle East, and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence, and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Our history spans more than 50 years, and our strategy is underpinned by our core values – Integrity, Value Creation, Courage, Commitment and Compassion. These 5 core values guide every aspect of our business and are embedded in our ST Engineering culture – from the people we hire, to working with each other, to our partners and customers.

About our Line of Business – Mission Software & Services

Our Mission Software & Services business provides leading-edge mission critical command, control, and communications (C3) systems with secured IT infrastructure and managed services. We support our client’s innovation journey through design thinking, analytics, and AI-enabled decision support with our full suite of cloud computing solutions. We provide intelligent, actionable insights and sustainable solutions to our valued partners in diverse industries including defence, government, and commercial sectors.

Together, We Can Make A Significant Impact

The Security Engineer will participate in the development and implementation of secure system architectures. He/ She understands security principles in carrying out the assigned tasks to mitigate the risks posed by new technologies and business practices. He/ She contributes to the development of artefacts, spanning design, development and implementation, into enterprise systems that describe security principles and how they relate to the overall enterprise system architecture. He/ She performs routine activities related to the periodic review and audit activities of infrastructure security systems and maintains documentation of security standards and procedures.

Be Part of Our Success

• Collaborate in the design of security controls and systems in alignment with security guidelines
• Assist in the testing and evaluation of new security technologies and controls
• Document the design, operation, use, and expected outputs of new systems
• Participate in the Implementation of new enterprise security architecture, technologies and enhancements
• Resolve issues that arise in implementation of new security systems
• Monitor security systems for strengths and weaknesses and propose improvements to address weaknesses
• Involve in the maintenance of security systems, platforms and associated software
• Collaborate in the development and implementation of custom disaster recovery drills and simulation tests on existing systems
• Assist in the resolution of identified problems and incidents

Qualities We Value

• Familiar with modern security architectures and cloud architecture design best practices
• Knowledge of Python is an advantage
• A good team player who can contribute and work effectively in a collaborative team environment.
• Candidates with critical thinking, analytical and creative problem-solving skills is highly desired.
• Attention to detail and quality is a desired attribute.

Our Commitment That Goes Beyond the Norm

• An environment where you will be working on cutting-edge technologies and architectures.
• Safe space where diverse perspectives are valued, and everyone’s unique contributions are celebrated.
• Meaningful work and projects that make a difference in people’s lives.
• A fun, passionate and collaborative workplace.
• Competitive remuneration and comprehensive benefits.

Job Overview

We are seeking a proactive and dynamic Public Relations Executive to join our team in the automotive aftermarket parts industry. The ideal candidate will be responsible for managing and enhancing our company’s image, communications, and reputation in the industry. They will work closely with media outlets, industry influencers, and internal stakeholders to promote our products and services, drive brand awareness, and establish strong industry relationships.

Key Responsibilities

• Media Relations: Build and maintain strong relationships with industry media, journalists, and bloggers to secure coverage for the company’s products, services, and news.
• Content Development: Write and edit press releases, media pitches, blog posts, newsletters, and other content to promote the company and its products.
• Brand Management: Develop and execute PR strategies to enhance the brand’s visibility in the automotive aftermarket industry.
• Crisis Communication: Manage potential issues and crises, ensuring that the company’s reputation is maintained in times of challenges or recalls.
• Event Management: Organize and manage press conferences, product launches, trade shows, and other promotional events to ensure media coverage and stakeholder engagement.
• Influencer Outreach: Develop and maintain relationships with industry influencers and thought leaders to expand the company’s reach.
• Social Media Management: Coordinate with the social media team to ensure alignment of PR strategies with online engagement and promotion.
• Market Research: Stay updated on industry trends, competitor activities, and consumer behavior to help refine PR strategies.
• Internal Communications: Support internal communication initiatives, keeping staff informed of key updates and achievements.

Qualifications

• Bachelor’s degree in Public Relations, Communications, Journalism, or a related field.
• 2-5 years of experience in public relations, preferably within the automotive or related industries.
• Proven experience in media relations, content creation, and PR strategy development.
• Strong writing and editing skills with an attention to detail.
• Familiarity with the automotive aftermarket industry is a plus.
• Excellent communication, interpersonal, and presentation skills.
• Ability to manage multiple projects and meet deadlines in a fast-paced environment.
• Experience with social media platforms and content management systems.
• Crisis management experience is desirable.

Key Skills

• Media Relations & Networking
• Strong Writing & Editing
• Event Planning & Execution
• Brand & Reputation Management
• Strategic Communication
• Crisis Communication
• Social Media Strategy
• Automotive Industry Knowledge

We offer competitive compensation and benefits, including ongoing training and development opportunities in the automotive car care industry. If you are a dedicated professional with the required qualifications and skills, we invite you to apply for this position.

Responsibilities

• To resolve all public relation related issues arises from project
• Manage and attending to public or resident’s complaints, enquiries, requests, feedback and etc.
• Liaise with various government bodies and stakeholders e.g. LTA, HDB, Town Council, residents, consultants, contractors etc.
• Arranging for water test, conditional surveys and defect works within the residents units
• Issuing of notices or service cards to residents regarding upcoming works schedule, work progress, power interruption, closure of car parks / roads and etc.
• Attend weekly / monthly progress meetings and walkabouts
• Preparation and submission of weekly updates and monthly PR reports
• Assist client in running of PR programmes especially during festive session

Requirements

• Minimum Diploma in Mass Communication, Civil or Environmental Engineering or equivalent
• At least 3-5 years of experience in handling public project. Experience with MOHH will be an added advantage.
• Possessed matured personality with good understanding of construction activities

In today’s world, any organisation or individual are constantly threatened by cyber attack. This is proven through a yearly rise in security incidents and data breaches.
We at Freshworks are committed to preventing such incidents and providing a secure environment for our customers to run their businesses.
Freshworks is looking for a passionate and self-driven application security engineer who can work independently and collaboratively to enable development teams to build secure products. You will be pivotal in integrating and advancing security by working with Developers, Product Owners, Program Managers, and Security Engineers.
As part of the security engineering team, you will advocate secure coding and design principles, build frameworks to automate security testing and conduct security assessments to unearth critical vulnerabilities. We also expect you to deliver pieces of training to development and QA teams.

Security Assessments:

• Examine the products in detail to discover vulnerabilities and collaborate with the other security engineers to practically demonstrate the exploitability and risk factors.
• Be on the forefront of emerging vulnerabilities/threats which could affect Freshworks products through independent research and study. Engage with the developers in developing workarounds/mitigation plans and ensure they are implemented per policy.
• Drive thematic security assessments to discover and exploit unique vulnerabilities having a severe business impact.

Threat Modelling:

• Engage with the development teams to conduct secure design reviews/threat modelling exercises to enumerate threats and mitigation strategies.
• Enable the developers with knowledge of threat modelling by conducting focused workshops.

Secure Coding:

• Manage integration and automation of SAST in the DevOps pipeline.
• Build secure coding principles and propagate them across the development community.
• Be the go-to person for developers in solving critical issues relating to secure product development.

Training:

• Deliver training programs at various levels in the organisations.
• Conduct workshops/security tech talks to disseminate security knowledge and awareness.

Lead Responsibilities

• Be a role model for the team and provide a healthy platform for the team to learn and grow.
• Collaborate and engage with the cyber security leadership team and provide inputs for decision support.
• Have previous experience successfully leading technical projects and complex incidents requiring collaboration with multiple people
• Demonstrate tactical leadership of teams to accomplish technical tasks and projects
• Demonstrate the ability to produce written reports including detailed analysis and recommendations
• Demonstrate the ability to convey complex technical concepts to both technical and non-technical stakeholders

Responsibilities:

• Experience in leading and delivering multiple security projects and solutions across one or more IT Security domains (Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Cyber Analytics). This experience should include both advisory, implementation and operation experiences.
• Design and develop a customized security architecture, evaluate and select the best security system in one or more of the above security domains.
• Provide high-level input and security consultation in a project-based environment and ensure adequate security controls in all Business IT solutions.
• Responsible for project planning, execution and managing scope due to any new information and/or changes to initial assumptions, including implications for project time, cost, quality and risk
• Ensure the security enhancements / new security project delivery is done in line with stakeholder’s requirements, timeline and cost.
• Develop and maintain a detailed security project plan which deliver to the cost, quality and time for enhancements
• The position will be heavily involved in IT security operations, including:Security solution delivery
  Security monitoring
  Administration for security systems (e.g. firewall, anti-malware system, IDS/IPS)
  Incident Response
  Level 2 support for IT Security operations.
  

Requirements:

• Min. Bachelor's degree in Computer Science
• Min. 6-8 years’ experience working in a large-scale IT environment; Including five (5) years of information security and risk experience within the past six (6) years; including risk analysis, endpoint, server, network and web application security
• Possess Security Industry Certifications such as CISSP, CISM, SANS, GSEC and PMP, ITIL, Microsoft, CISCO
• Having good understanding of TCP/IP protocol and OSI Seven Layer Model.
• Strong technical security skills in assessment, design, implementation architecture, and program / project delivery and work across various delivery models, (Waterfall, Agile, DevOps)
• Analyzes & prepares recommendations relating to security for existing IT infrastructures / Applications.
• Expert understanding of firewall technologies.
• Ability to plan, organize and prioritize tasks to complete within established time frames.
• Highly result oriented and can work independently.
• Ability to build relationships and interact effectively with internal and external parties.
• Strong analytical, technical, and communication (both oral and written) skills.