IT Corporate
Cybersecurity Specialists/ Senior Cybersecurity Specialists (Evergreen)JR-100000002434 Contract
The Client aims to transform the delivery of Government digital services by taking an "outside-in" view, putting citizens and businesses at the heart of everything we do. We also develop the Smart Nation infrastructure and applications, and facilitate collaboration with citizens and businesses to co-develop technologies.
Join us as we support Singapore’s vision of building a Smart Nation – a nation of possibilities empowered through info-communications technology and related engineering.
As part of the Government Digital Services (GDS) Team, the Agile Consulting and Engineering (ACE) tribe aims to design and develop software applications that help government agencies better serve the needs of Singaporeans. We adopt an Agile development approach and work towards tech best practices and cutting edge tools.
As a UX Content Strategist (T-Shaped) who is strong in copywriting/ux writing and with broad strokes strengths across at least 2 other UX areas to support in the delivery of GoBusiness, you will work with a multidisciplinary team of UX designers, developers and stakeholders to create solutions that exist in both digital and physical realms.
As we launch new products, your role will be to ensure that the future of public service is not just functional, but delightful to use. Rather than work on commercial ventures commonly found in the startup scene, we're here to improve how we live as a society through what we can offer as a government. If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated peers, we welcome you to join Government Digital Services (GDS).
What to expect:
- You enjoy crafting content strategy and possess the ability to tailor user-friendly, clear and concise messaging for the right audience.
- You are able to play a supporting role in at least 2 other areas of your strengths (user research, content writing, visual design, interaction design, workshop facilitation) for project delivery.
- Craft and manage the content guidelines (style, voice and tone etc.) in our design system
- Someone who can think & communicate big picture, but also able to zoom into the details, when necessary.
How to succeed:
- At least 3-4 years of professional experience in a design consultancy or similar fields
- Deep expertise in user-centred copywriting, in-depth knowledge and experience within a relevant design discipline (Content Strategy, Interaction Design, Product Design)
- A team player who is able to work within a self-directed culture and navigate ambiguity
- Have an eye for detail – You should have a portfolio that showcases your writing skills as well as other end-to-end UX skills.
- Passionate about user-centered design – We look for experience with user research processes and ability to drive research activities such as usability testing, A/B testing, stakeholder interviews, surveys, and translate research findings into actionable recommendations
Preferred (Additional Requirements)
- Experience in Agile and UX development environment
- Experience in writing
Some GoBusiness project links:
IT Corporate
Cybersecurity Specialists/ Senior Cybersecurity Specialists (Evergreen)JR-100000002434 Permanent
AppSec Team Lead
Visa: (SG/ SPR)
No of roles – 1
New Info:
+I am open to AppSec people from the risk/compliance domain as well.
+it all depends whether they can
pass a 40 min online tech assessment (20++ questions, MCQ) modelled after the
CIS hardening benchmarks and a zoom interview that touches on technical topics.
+for the 40 min online tech assessment, expect the following topics to be
tested: cloud security, cryptography management, keys management, secrets
management etc.
AppSec Consultant
Visa: (SG/ SPR)
No of roles – 2
New Info:
+I now have 2 headcounts for this
role. 1 role can take SG Citizen only (borned in SG), the other role can take
SPR.
+I am able to take Pen Tester
profiles, but the best profile is those who have prior software development
background, exposed to AGILE software development methodology. Meaning he/she
will know CI/CD best practices and know how to secure CI/CD
General guide: if you find any
software engineer background but done security or went into security, just send
me and I’ll help you take a look. Vice Versa, if you find any Pen Testers with
software development experience, also send me. I can consider candidates who are
expecting salaries from junior to 13.5k.
Client aims to transform the delivery of
Government digital services by taking an "outside-in" view, putting
citizens and businesses at the heart of everything we do. We also develop the
Smart Nation infrastructure and applications, and facilitate collaboration with
citizens and businesses to co-develop technologies.
Join us as we support Singapore’s vision of
building a Smart Nation – a nation of possibilities empowered through
info-communications technology and related engineering.
Government digital services by taking an "outside-in" view, putting
citizens and businesses at the heart of everything we do. We also develop the
Smart Nation infrastructure and applications, and facilitate collaboration with
citizens and businesses to co-develop technologies.
Join us as we support Singapore’s vision of
building a Smart Nation – a nation of possibilities empowered through
info-communications technology and related engineering.
Client Government Digital Services (GDS) aims to spearhead the digital transformation of the Government. As part of this progressive group, you will join a multi-disciplinary team to modernize the way digital applications and services are developed, deployed and maintained across the Whole-of-Government. Our objective is to augment engineering teams with platforms and services that shortens time-to-market and improves operational agility. We employ DevOps principles and ‘shift-left’ technologies in creating solutions in areas like continuous integration/deployment, data sharing as well as applications observability, testing and security.
If you are looking for opportunities to collaborate with industry experts and work with highly motivated peers, we welcome you to join GDS Engineering Productivity (ENP).
This is an exciting position with many opportunities for groundbreaking contributions. You will be a consultant in the team who knows what needs to be in place to enable the platform to work, while managing security risks.
As a Senior Cybersecurity Consultant in the security team,
What you’ll be doing
- Work with stakeholders such as developers, infrastructure and platform engineers, etc. to achieve security objectives in an Agile setting
- Lead and hold discussions to coordinate and plan for timely security assessments
- Conduct security risk assessments at various levels – application, infrastructure, network, etc.
- Set up and use security assessment tools, if required
- Work with engineers and developers to remediate security risks from assessments
- Consolidate and report metrics for security risk assessments
- Review and manage change requests from a security risk perspective in an Agile setting
- Enhance visibility and track security assessments by integrating with ticketing tools
- Explore, use and deploy new security assessment tools to meet necessary security objectives
What we’re looking for:
- Minimum of 7 years’ experience with cybersecurity consultancy or related scope of work
- Passion in driving for DevSecOps (and/or DevOps) transformation
- Passion for automation and security best practices
- Experience with Source Code Review in an enterprise setting
- Experience with Penetration Testing in an enterprise setting
- Experience with Application Development in an enterprise setting
- Experience with DevOps toolset like JIRA, BitBucket, Confluence
- Experience with designing and architecting systems in an enterprise setting
- Experience with Agile – Software Development Lifecycle
- Experience with cloud providers like AWS, GCP, Azure
Added advantage if you possess the following:
- Experience with these security tools in the enterprise setting:
- Hashicorp Vault, Splunk Enterprise, Tenable, HP Fortify, Sonatype Nexus IQ
- Experience with security assessments pertaining to government projects
- Security certifications or qualifications
- Experience with continuous integration and continuous delivery /deployment methodology
- Worked for an organization which succeeded DevSecOps transformation