System Security Engineer
Job details
Location: Singapore, Singapore Thales people architect solutions at the heart of the defence-security continuum. Interoperable and secure information and telecommunications systems for defence, security, and civil operators, are based upon innovative use of radiocommunications, networks, and cybersecurity. We are groundbreaking new digital technologies such as 4G mobile communications, cryptography, cloud computing and big data for use in physical protection systems, and critical information systems. Thales established its presence in Singapore in 1973 to support the expansion of aerospace-related activities in the Asia-Pacific region. Throughout the last four decades, the company grew from strength to strength and is today involved in the primary businesses of Aerospace (including Air Traffic Management), Defence & Security, Ground Transportation and Digital Identity & Security. Thales today employs over 2,100 people in Singapore across all its business areas. ROLE DESCRIPTION SUMMARY Thales is seeking suitable candidates for the position of Engineer (System Security). You will be looking after the governance of the infrastructure and systems for mission-critical Command and Control (C2) system that Thales Solutions Asia (TSA) has developed for government agencies. You will be part of a team to manage the security of the system, to ensure the system adheres to the security policies, and is well protected from any threats, risks, or exploits. KEY ACTIVITIES AND RESPONSIBILITIES As a System Security Engineer, you are accountable for: Provide security expertise and management services to support Authority in activities such as: Internal / external audits (IM8, Cybersecurity, etc) Policies compliance (IM8, Cybersecurity, etc), work with vendor on: Disaster Recovery (DR) and Business Continuity Planning (BCP) ICT/Threat Risk Assessments (TRA) Monthly reviews of privileged accounts and non-privileged accounts, disable inactive accounts Seek security waivers (IM8, Cybersecurity Act, Circulars etc) Circulate security notifications/alerts to vendors and ensure status updates to all stakeholders including cybersecurity centre Security monitoring/tracking:
- Monitor alerts from SOC
- Update stakeholders regarding SOC alerts
- Review compliance reports with vendors to ensure that the system is compliant
- Manage, track and update any security incidents/issues to all stakeholders
- Review Incident Report (if any)
- Ensure patches are tested and verified before seeking approval for patching downtime
- Communicate system downtime to all stakeholders
- Ensure system availability after patching is completed
Apply safely
To stay safe in your job search, information on common scams and to get free expert advice, we recommend that you visit SAFERjobs, a non-profit, joint industry and law enforcement organization working to combat job scams.