Location: Singapore, Singapore
Thales people architect solutions at the heart of the defence-security continuum. Interoperable and secure information and telecommunications systems for defence, security, and civil operators, are based upon innovative use of radiocommunications, networks, and cybersecurity. We are ground breaking new digital technologies such as 4G mobile communications, cryptography, cloud computing and big data for use in physical protection systems, and critical information systems.
Thales established its presence in Singapore in 1973 to support the expansion of aerospace-related activities in the Asia-Pacific region. Throughout the last four decades, the company grew from strength to strength and is today involved in the primary businesses of Aerospace (including Air Traffic Management), Defence & Security, Ground Transportation and Digital Identity & Security. Thales today employs over 2,100 people in Singapore across all its business areas.

SUMMARY:

CDS Asia provides a range of cybersecurity services and solutions to our regional clients with a strong focus on Operational Technology.
Our ambition is to scale up our existing business and increase our footprint in the region with a refreshed strategy and mandate to leverage our global capability and win new business in our core markets.
We are actively seeking an IT Security Engineer to take up this role in design, development and implementation of IT and OT cybersecurity solutions within our existing install base.

REQUIREMENTS:

• Minimum of 5 years of experience in security engineering
• Must have either Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
• Previous consulting or professional services experience will be an advantage
• Experience of working with internal experts/external vendors to resolve technical issues independently
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk)
• Knowledge of regional laws, regulations, policies, and ethics as theyrelate to cybersecurity and privacy.
• Knowledge of installation, integration, and optimisation of system components
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
• Knowledge of software development and engineering models (e.g., Agile, Lean, Waterfall Model, Spiral Model)

• Define overall security solution strategies based on customer requirements.
• Act as the single point of contact for customer security queries.
• Analyse design constraints, analyse trade-offs and detailed system and security design, and consider life cycle support.
• Design and develop cybersecurity or cybersecurity-enabled solutions.
• Design or integrate appropriate cybersecurity capabilities into overall system designs.
• Develop and execute system testing and validation procedures and documentation.
• Develop designs to meet specific operational needs and environmentalfactors (e.g., access controls, automated applications, networkedoperations)
• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems.
• Provide guidelines for implementing developed systems to customers or installation teams.
• Design and develop system administration and managementfunctionality for privileged access users.
• Ensure that design and development activities are properly documented and updated as necessary
• Perform security reviews and identify security gaps in architecture
• Provide input to implementation plans, standard operating procedures,maintenance documentation, and maintenance training materials