Total 30 Legal / Public / Security job vacancies in Kentish Town Office (2021000049), nw5 1tn

COMPANY DESCRIPTION

CrimsonLogic, part of the PSA Group, is a global technology company that digitalises and simplifies global trade for businesses and governments around the world through intuitive and delightful solutions.

With over 35 years of experience advancing trade facilitation, compliance, port operations, government services and logistics, we push the boundaries of technology with insightful innovation and deep domain expertise of global trade driven by customer-centricity at our core.

Having pioneered the world's first single-window trade facilitation system, we continue to drive the digital transformation of global trade in over 40 countries with sustainable, impactful solutions for a more seamlessly connected world.

RESPONSIBILITIES

• Role Purpose(s)

  This individual will perform the role of level 2 security analyst in a 24x7 Security Operations Center responsible for monitoring the environment for potential security threats and incidents. This will include the identification, triaging, analysis, threat-hunting, lead incident investigation and support of remediation recommendations to mitigate the security threats and incidents.

  Key Accountabilities

  • Monitors, analyzes and responds to security events in timely manner

  Job Responsibilities & Duties

  • Using security tools, perform monitoring and analysis of security events of interest to detect security risks and threats.
  • Create incidents and support the investigation of such incidents to not only mitigate the current threat but also prevent future occurrence.
  • Document all actions taken as part of incident investigation.
  • Work closely with other teams to support the incident management process.
  • Provide tuning and filtering recommendations to engineering team.
  • Conduct investigation upon requests for data by the customer and/or other teams.
  • Assist with the identification, creation and refinement of the team's processes and procedures.
  • Stay abreast of current threats and vulnerabilities, particularly those that may directly impact the customer.
  • Conduct hunts (specialized searches) for evidence of compromise
  • Tracking suspicious network, application, and user behavior
  • Investigating breaches, gathering evidence, and analyzing data
  • Support and guide Junior analysts and engineers on investigation as required.

  Key Job Competencies

  • Good analytical Skills
  • Result oriented
  • Good communication skills
  • Teamwork

  Education Requirements

  • Bachelor's degree or equivalent experience in a related field with 3 working years experience
  • GCIA, GCIH or equivalent

  Working Experience Requirements

  • Bachelor's degree or equivalent experience in a related field with 3 working years experience

  Skills Required

  • Prior experience in an operations environment as a security analyst
  • Highly independent with robust analytical skills
  • Incident Response Experience with Remediation
  • Basic OS and SIEM administration experiences
  • Programming language : KQL, Regex

• Bachelor's degree or equivalent experience in a related field with 3 working years experience

Responsiblities:

• Responsible for ferrying of staff and dispatch works as assigned
• Ensure timely collections and deliveries of goods / items
• Ensure cleanliness and general upkeep of vehicles at all times
• Perform routine inspection of vehicle and notify of occurring deficiencies or needs for repairs
• To perform work according to health and safety regulations
• Ensure safety practices and housekeeping is to maintained to the highest standard
• To perform Ad-Hoc duties as per assigned

Requirements:

• Class 3 / 4 Driving License
• Familiar with Singapore route
• Min 2years of relevant experience

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span across industries such as financial services, TMT (Telecommunications, Media and Technology), Education, Healthcare, Retail, Government, Manufacturing and Professional services. Our focus is to engage in the dynamics of our customers’ vertical markets and apply the skills of our employees in modernising key digital pillars, Data centres and Cloud services, Security and Network Infrastructure, Workspace communications and collaboration, Data and information strategies, and IT operations modernisation.

Logicalis Group has an annualised revenue of over $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4 billion.

As we continue to grow as a business, our people are our key differentiator with our competitors, and developing and retaining our talent is a key priority for all of our businesses. We will recommend that you watch this short video with input from our employees around the world.

Job Summary:

We are currently looking for a Senior Security Project Engineer to join our Professional Services Team delivering Security Projects encompassing predominantly NAC, Firewall, PS and MFA solutions. Qualified candidate is expected to have hands-on experience in delivering such solutions. This role presents itself with considerable learning opportunities on the state-of-the art security technologies.

Accountabilities:

• Develop low level design document for the project delivery detailing the scope with the sensible technology write up.
• Participate in Internal/Customer meetings to develop the LLD document.
• In-depth technical knowledge and good working experience in implementing and supporting Cisco ISE and HPE Aruba ClearPass NAC solutions.
• Prepare UAT document and perform UAT as per document.
• Understanding of Windows Active Directory and Integration with NAC Solutions
• Proficient with hands-on experience delivering Firewall migrations and fine-tuning Firewall/IPS policies.
• Ability to deliver MFA Solutions for specific use case requirements.
• Assist in reviewing Technical Design Specifications (TDS) document for security projects
• Proactively participate in maintaining internal knowledgebase sharing technical findings within the Team.

The Individual and their Experience:

• Network Access Control (dot1x) experience of Cisco ISE and HPE Aruba ClearPass (Mandatory).
• Firewall Migration expertise across multi-vendor platforms- Cisco ASA/FTD, Palo Alto, Fortigate, Checkpoint.
• Hands on experience Cisco FirePower NGIPS.
• Basic understanding of Networking – Routing and Switching Protocols.
• Ability to manage medium to large size project and ensure completion within the projected timeline.
• Build customer relationship to manage the projects in a congenial way.
• Team Player highly spirited, sharing project experience with peers.
• Able to learn and adopt new skills when projects warrant based on the relevant training provided.

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

Logicalis is an international multi-skilled solution provider providing digital enablement services to help customers harness digital technology and innovative services to deliver powerful business outcomes.

Our customers span industries and geographical regions; and our focus is to engage in the dynamics of our customers’ vertical markets; including financial services, TMT (telecommunications, media and technology), education, healthcare, retail, government, manufacturing and professional services, and apply the skills of our 6,500 employees in modernising key digital pillars; data centre and cloud services, security and network infrastructure, workspace communications and collaboration, data and information strategies, and IT operation modernisation.

We are the advocates for our customers for some of the world’s leading technology companies including Cisco, HPE, IBM, CA Technologies, NetApp, Microsoft, Oracle, VMware and ServiceNow.

The Logicalis Group has annualised revenues of $1.7 billion, from operations in Europe, North America, Latin America, Asia Pacific and Africa. It is a division of Datatec Limited, listed on the Johannesburg Stock Exchange, with revenues of over $4.3 billion.

Role Description:

• Lead customer project delivery engagements by providing design and solution consultancy for large scale solutions and complex issues, related to data centre networking & security
• Consult and work with customers to plan, design, install, configure, integrate and/or optimize the solution & services to accelerate business outcomes.
• Translate business requirements into data centre networking solution design. Drives customer technology transitions, influencing solution architectures and services.
• Participate in services presales activities which include helping create statement of work, scoping of efforts, propose right services & solutions, articulate the value and expertise of the Logicalis’ professional services as part of a comprehensive outcome-based solution.
• Conceptualize (Customer Requirements Document), plan (Implementation Strategy Plan), design (High & Low Level Design) and advise cross-functional teams across multiple technical, operational and enterprise architecture domains.
• Provides leadership capabilities and insight for creation and sharing of best practices to improve service quality and efficiency.
• Provides technical expertise and escalation support in resolving technical problems within the professional services team
• Mentor and develop junior network engineers
• Create and deliver training and/or mentorship programs for technical resources within the professional services organization.
• Partner with the presales team to improve the quality and accuracy of the Scope of Work and cost estimates

Requirements:

• Degree in Computing or Engineering discipline • CCIE (Routing & Switching) and/or CCIE (Data Centre) • At least 10 years’ experience in project deployment for complex network infrastructure for data centre/cloud and campus, including at least 3 years in a solution architect role
• Advanced knowledge of Software Delivered Data Centres in general and Software Delivered Networks in particular.
• Should have acumen for emerging technologies in the networking world.
• Advanced skills about data centre networks and protocols (Unicast, Multicast, Anycast).
• Advanced skills in network protocols: IP, TCP, UDP, and other common protocols.
• Advanced skills in network routing protocols: IGP and EGP like OSPF, IS-IS, BGP and others.
• Advanced skills in Ethernet fabric technologies: Fabric Path, Cisco ACI and EVPN VXLAN
• Advanced skills in software defined networks especially for Cisco ACI and/or VMware NSX-T/V
• Advanced skills on how to implement network protocols within a Cisco Nexus network.
• Advanced skills in analyze network problems via wireshark or any other tool set.
• Advanced skills in network services like IPAM, DNS, SMTP, NTP, Load Balancing and others.
• Advanced skills in how to integration various systems inside a data centre
• Advanced skills in designing, implementing & migrating data centre firewalls/IPS/IDS
• Intermediate skills in project management (waterfall & agile) and supplier management.
• Basic skills in physical cable management systems, optics, fibres and data centre facility.
• Basic skills in data centre facility architectures and setups
• Customer satisfaction is your focus and accordingly you have a strong service mentality
• Flexibility and willingness to learn new technologies, scale quickly and adapt situationally to different requirements
• Excellent analytical skills and problem solver mentality
• Creative thinking in designing and implementing service improvements
• Deep experience in customer handling and stakeholder management.
• Ability to handle escalations, be a trusted advisor for the customer and work closely with customers in defining solutions

By submitting your application, you would have deemed to have given consent and have read through the DP notice for Job Applicants here: https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf

We are representing a global client in the gaming industry in search for a Global Head of Public Relations

Job Responsibilities:

• Manage Organisation global PR team, ensuring stable operations across all regions and helping the team grow continuously.
• Maintain and enhance Organisation media relationships in Southeast Asia, Latin America, Europe, and other regions, establishing deep trust and mutually beneficial relationships with media partners.
• Formulate the B2B and B2C strategies for Organisation Esports, uncover the compelling esports stories and enhance brand visibility and recognition for Organisation Esports.
• Responsible for content promotion, press releases and other efforts for multiple game products at various project stages, contributing to the success of game publishing initiatives.Responsible for or participate in Organisation CSR and GR initiatives in multiple regions, fostering long-term partnerships with relevant stakeholders.

Job Requirements:

• BS/BA in Public Relations, Communications, or a similar field.
• Over 5 years of work experience in PR-related fields, over 3 years of team management experience, and with proven experience in managing multinational teams.
• Well-versed in various types of games and possess a deep understanding of the esports landscape.
  

Regret to inform that only shortlisted candidates will be notified.

www.dadaconsultants.com

EA Registration Number: R1878287

Business Registration Number: 201735941W.

Licence Number: 18S9037

The successful candidate will focus on developing and articulating solutions for our clients, working with multi-functional teams, and driving conversations at the most senior levels of our client’s organizations in the public sector.

Key Responsibilities: -

•  Generate sales opportunity to achieve short and long term revenue and profit growth
•  Execute direct sales programs and initiatives to drive sales
•  Develop and execute sales strategy for the accounts assigned
•  Develop and maintain a high level understanding of end-to-end IT offerings including IT infrastructure, security technologies, IT application, managed services & digital transformation in local competitive environment
•  Manage overall sales process from pre to post-sales
•  Take active lead to engage partners in customer engagement and solutioning
•  Responsible for proposal creation and delivery
•  Engage customers at all level to develop long term business relationship
•  Engage internal stakeholders in sales approval process

Job Requirements: -

•  Minimum 5 years of working experience in IT solutions sales, with the ability to demonstrate a high level of understanding of the latest technologies, preferably from SI environment
•  Diploma/Degree in Computer Science/Information Technology or equivalent
•  Demonstrate experience in managing sales pipeline
•  Experience in selling with partners and enterprise customers
•  Experience in public sector (Government / Education / Healthcare) sales will be added advantage

Job Description

• Undertake detailed design in one or more of the following field of expertise: Civil (drainage, sewage), Bridge/Tunnel, Underground Excavation and Tunnelling works
• Execution of projects and liaison with the Client, Client’s Consultants, Contractor, and authorities to provide technical support for design
• Checker to obtain approval of design and drawings
• Analysis on structural components using various engineering software

Requirements

• Degree in Civil and Structural Engineering or its equivalent
• Prefer degree recognized by the Professional Engineers Board of Singapore for Associate level
• Minimum 5 years relevant experience
• Good exposure in the analysis and design of geotechnical works, concrete structures, steel structures, civil works, or soil-structure interactions
• Good knowledge of the various engineering design software and analytical tools
• Applicant who has lesser experience will consider for Engineer role

Product area

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Job description

Google's infrastructure needs go far beyond server computers. As Google's products and services scale the globe, the Strategic Negotiation team works behind the scenes to secure infrastructure for Google's future -- everything from underwater cables to physical data center space. As a Strategic Negotiator, you combine your deep market knowledge of a given sector with tech industry savvy to negotiate cost-effective solutions to support Google's infrastructure growth. You'll work with specific project teams on negotiating deals, managing vendor and partner relationships and presenting deal recommendations to our Tech leadership. Your successful negotiations have the potential to save Google millions of dollars in operating costs and impact every part of the business.

Additional job description

The Public Affairs team focuses on telling our story to decision-makers, opinion formers, and data center communities. We are focused on creating inclusive, strategic, and scalable solutions that have authentic and universal impact.

As the Public Affairs Manager for APAC, you will advise on how to shape our data center initiatives in a way that is aligned to state and local government priorities. You will lead the maximization of partner opportunities to partner with state and local institutions and tell the story of our data center commitment.

Qualifications

Job responsibilities

• Provide public policy through leadership, assist in building our workforce development pipeline, and build relationships within Google and externally by networking.
• Manage our economic, sustainability, and social contributions to create connections between technology and modern life.
• Provide region specific business advisory support for economic development agreements, including commercial review of terms, tax implications and infrastructure funding.
• Assist with various economic development and market advocacy team projects including data analytics and data hygiene.
• Collaborate with cross-functional partners including, but not limited to, tax, finance, legal, policy, and communications on a variety of economic development matters.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years of experience working with public policy teams and cross-functional stakeholders.
• Experience with economic development issues such as direct or indirect taxes, tax policy, or infrastructure development.

Preferred qualifications

• Experience in indirect taxes, economic development policy, infrastructure development, agreement drafting, and presentation development. Experience with data center real estate markets.
• Experience developing and executing strategies to deliver exceptional solutions.
• Excellent attention to detail and political/communication skills.
• Ability to identify opportunities and areas for improvement, and operate in a fast-paced environment.
• Ability to think outside the box and propose commercially and technically creative solutions.
• Ability to comfortably work in ambiguous, collaborative, and fast-paced environments.

WEJOY Pte. Ltd. is a private limited company located in Singapore. The core product WePlay is an app that focuses on the global "social + gaming" market. In November 2022, WePlay topped the free list of South Korea's AppStore and ranked second on GooglePlay. WePlay will continue to bring more happiness to users around the world, and we look forward to more outstanding students joining us to make WePlay the world's leading online entertainment platform!

The legal department at WEJOY is responsible for handling legal documents related to company projects and ensuring that company processes are lawful and compliant.

Job Responsibilities:

1. Responsible for legal support in the overseas operations of a social gaming app, drafting compliance documents, and ensuring compliance in major global markets.
2. Monitor legal regulations and enforcement trends in overseas locations, provide assessments of compliance risks, offer recommendations, and drive implementation.
3. Clearly understand the needs of business departments, providing legal training and advocacy.
4. Establish and improve compliance systems related to company operations in regulatory domains and execute various compliance tasks.
5. Handle litigation, disputes involving overseas entities (Singapore entity), complaints, investigations, and dispute resolutions involving overseas law enforcement agencies.
6. Ensure daily operations of overseas entities comply with local laws and regulations.
7. Participate in legal affairs related to overseas business, such as business negotiations, drafting, revising, reviewing overseas business contracts and commercial agreements, intellectual property layout, and maintenance.

Requirements:

1. Master's degree or above in a legal-related field.
2. Preferably in the internet industry with experience in international operations of apps or well-known law firms' overseas business.
3. Good communication, understanding of overseas legal systems, able to handle legal documents.
4. Integrity, diligence, responsibility, principled with a strong sense of confidentiality, resilience to pressure, excellent communication, and teamwork skills.
5. Meticulous, proactive, possessing strong logical thinking, observation, analytical skills, and a learning attitude.

About the Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role (Lead Security Engineer):

• We are seeking a lead security engineer who can drive security strategy and initiatives from 0 to 1. This could be across a wide range of domains covering identity, application security, cloud, DevSecOps, or detection engineering. We are open to security engineers with deep skills in one or more of these domains.
• You will have excellent stakeholder management skills, and are able to operate and influence across the business.
• You should be excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source and build tools that automate our security posture.

The day-to-day activities:

• Work with the wider security engineering team to take security requirements and build scalable applications and solutions that automate security and reduce the risk of the bank.
• Own the strategy for assigned security domains, consisting of tactical initiatives and strategic multi-year decisions.
• Partner with teams across the bank including SRE, Data Engineering, GenAI and Product to identify areas of security posture improvement, create the plan and execute.
• Maintain standards and procedures inline with regulatory and internal policy requirements.
• Lead engagements with internal and external audits that are applicable to first line technology.
• Mentor junior engineers to uplift their ability across security domains, increasing the teams knowledge and standard operating procedures.

The must-haves:

• Should have relevant experience of 8+ years within information security
• Experience with scripting/programming security automation.
• Knowledge of cloud platforms (AWS, Serverless, managed services, containers, etc)
• Excellent soft skills - able to handle pressure in a fast-paced environment. Open-minded, creative and innovative.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• In-depth knowledge of security frameworks, standards, and best practices.
• Proficiency in security technologies (e.g., SIEM, IDS/IPS, firewalls, endpoint protection).
• Strong understanding of network protocols, operating systems, and application security.
• Excellent problem-solving, analytical, and decision-making skills.
• Strong leadership, communication, and collaboration abilities.
• Ability to manage multiple projects and priorities in a fast-paced environment.

Responsibilities:

• To review, conduct incident / accident investigation and provide recommendations for countermeasures and to prevent recurrence of accident
• To coordinate of daily toolbox meeting and upkeep the records
• To conduct daily safety inspection and other type of safety inspection as required at work site
• To coordinate the immediate rectification of unsafe conditions and correct any safety malpractices on site
• Monitor and oversee the enforcement of In-house Rule and Regulation and ensure safe work practices on site
• Coordinate and conduct the safety induction course to all site staffs
• Submission of Quarterly EHS performance & 6-monthly review of Risk Assessment
• Ensure and to carry out duties in accordance to WSH Act & Integrated Management System
• Assist WSHO to establish, update, maintain, and implement the Safety and Health Management System
• To assist WSHO for all safety promotional activities, safety audits, safety meetings and execution of safety programmes

Requirements:

• Advanced Certificate in Workplace Safety and Health or equivalent
• Minimum 2 years of relevant working experience

eqponsibilities :

• Maintenance of invoices i.e. scanning, updating and posting of invoices in system
• Processing of payments to vendors and perform bank reconciliation
• Liaison with vendors for missing invoices/payment status
• Attach daily bank advice in accounting system
• To perform ad-hoc duties as per assigned

Requirements

• O Levels/ LCCI / Certificate / Diploma in Accountancy or equivalent
• Computer skills and Microsoft Office
• Minimum 1 year of related experience

• To conduct / plan safety inspection to verify safety provision and provide recommendations for improvements conforming to worksite rules and regulations to comply with statutory requirements
• To investigate any accident, dangerous occurrence or occupational disease that occurred within the workplace and provide recommendations for countermeasures to prevent recurrence
• Implementation and revision of Risk Management
• Liaise with Ministry of Manpower on safety issues and safety statutory requirements
• Establish, update, maintain, and implement the Safety & Health Management System
• To conduct relevant safety training needs e.g. Safety induction, Permit to Work, Safe Work Procedures etc.
• Identify training needs for safety personnel and recommend the required training to ensure competency of the workforce.
• To conduct Safety Committee Meeting to address safety issues and ensure a safe working environment for all personnel
• Ensure in-house rules and regulations are implemented and enforced diligently at the worksite.
• Coordinate safety promotional activities to develop and maintain safety awareness among all personnel
• Evaluate, select and control sub-contractors to ensure awareness of their safety obligations on site
• Review, assess and maintain the Safety Data Sheets
• Ensure storage, movement, use, and disposal of hazardous substances and chemicals are well managed
• Ensure the register of hazardous substances is up to date
• Continuously review the emergency procedure and update.
• Manage and control situations arising during an emergency
• Plan and implement occupational health programs to protect workers from health hazards such as noise, dust, toxic gases, vapors and radiation
• Coordinate safety audit and ensure the closure of all findings
• Coordinate the preparation and submission of all required safety reports e.g. Integrated Management System (IMS) Quarterly report, Risk Assessment review
• Updates on codes of practice & safety literature and circulates information to each level of employees
• Monitor the Safety Performance of the project as set by the company policy and objectives e.g. Accident Frequency Rate (AFR), Accident Severity Rate (ASR) etc
• Person in charge of the workplace on environmental regulations pertaining to the Environmental Public Health (Registration of Environmental Control Officers) Regulations 1999
• Person in charge of the workplace implementation and revision of Environmental Management in the worksite
• Act as an Earth Control Measures Officer (ECMO)Ensure safety practices and housekeeping is to maintained to the highest standard

Requirements:-

• Must possess registered MOM WSH Officer license
• Min 3 years’ WSH Officer experience in Building projects

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 4 to 5 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 1 to 4 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).