ST Engineering is a global technology, defence and engineering group with a diverse portfolio of businesses across the aerospace, smart city, defence and public security segments. The Group harnesses technology and innovation to solve real-world problems, enabling a more secure and sustainable world. Headquartered in Singapore, we employ about 25,000 people across our network of subsidiaries and associated companies in Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. We rank among the largest companies listed on the Singapore Exchange and are a component stock of the FTSE Straits Times Index, Dow Jones Sustainability Asia Pacific Index, iEdge SG ESG Transparency Index and iEdge SG ESG Leaders Index.
Introduction to URS Business Area
We prepare cities for a smarter future, creating connected, resilient and sustainable cities. We have helped to make cities around the world a better place to live in, delivering urban efficiencies while keeping them safe and secure.
Our technologies address the connectivity, mobility, security, infrastructure and environmental needs of cities and provide IoT solutions for lighting, water and waste management.
Backed by a track record of 700 smart city projects in over 130 cities worldwide, we are well-equipped to help global cities address challenges from road congestion to physical and cybersecurity threats, as well as energy inefficiency and utility wastage.
Find out more: https://www.stengg.com/urban-solutions
Job Description Summary
As a Cyber Security Architect, you are responsible to architect, design, review and implement cyber security resilient in our product and projects. You are familiar to cloud security architectures and solutions, making sure the companies can operate in a safe, secure environment. You govern and initiate the security implementation and design in product. You monitor, research, and analyze security risks to mitigate threats and security attacks that may occur to or within the cloud and network. You will implement customized application security assessments for client-based asset risk, corporate policy compliance as well as conduct vulnerability assessment. You should have an advanced understanding of cloud, networking, data traffic flow, system administration, cloud architecture, OSI model, anti-malware, anti-virus, defense-in-depth and common security elements.
Your focus is not only limited to assessing whether vulnerabilities exist but also how those risks could be mitigated but also engage any security noncompliance from initial design stage in solution and cloud architecture level.
Key Job Accountabilities
- Develop and build cloud security architectures and solutions
- Product security governance in architecture, database, key management, certification management, cryptography, account management, etc.
- Solution design for product to help reduce attacks on cloud service data storage, create preventative features, and implement corrective controls when breaches do occur
- Monitor, research, and analyze security risks to mitigate threats and security attacks
- Security check and scanning on DevOps of product development
- Regular security and risk assessment for system solutions
- Support on audit trial for security related implementations
- Consultancy on software and tools for security vulnerabilities and risks
- Plan VAPT, execution, result analysis and provide fix recommendation on product development and release procedure.
- Provide guideline such as coding, key management, hardening, patch management, backup management, incident management, etc.
- Familiar to IM8 requirements and CIS, NIST security benchmark.
- Familiar to cyber security tools to perform preliminary scanning.
- Familiar to public cloud infrastructure such as Azure, AWS, GCP and Huawei.
Required Qualifications & Experience
- Strong IT skills and knowledge including cloud, network, hardware, and software
- DevOps procedure and process
- A forensic approach to challenges
- Good coordinator and team worker
- A degree in cyber security will be added advantage.
- A deep understanding of how hackers work and ability to keep up with the fast pace of change in the criminal cyber-underworld
- Ability to seek out vulnerabilities in IT infrastructures
- Meticulous attention to detail
Reporting Relationship
- The incumbent reports to AVP/Head, Product & Solutions
Work Location
- ST Engineering Electronics Hub