Total 3 communications engineer job vacancies in Legal / Public / Security category in D05 Clementi New Town, Hong Leong Garden, Pasir Panjang

JOB OBJECTIVE

CDS Asia provides a range of cybersecurity services and solutions to our regional clients with a strong focus on Operational Technology. Our ambition is to scale up our existing business and increase our footprint in the region with a refreshed strategy and mandate to leverage our global capability and win new business in our core markets.

We are actively seeking a Senior Cybersecurity Engineer to take a leading role in design, development and implementation of IT/OT cybersecurity solutions within our existing install base.

The role will require someone that this is a problem solver, determined and enthusiastic. They will bring experience of implementing a wide variety of cybersecurity products and solutions within large complex system development. They will have the ability to apply cybersecurity and principles to organizational requirements and be able to identify and remediate critical infrastructure systems that were designed without system security considerations.

The successful Candidate will enjoy a rewarding role full of new challenges and be part of a company that provides highly complex solutions in the most critical operational environments where robust safety and resilience standards are applied.

ROLES & RESPONSIBILITIES

• Define overall security solution strategies based on customer requirements.
• Work with Thales engineering teams to integrate cybersecurity solutions into existing and new platforms.
• Act as the single point of contact for customer security queries.
• Contribute to the management of the risks and/or opportunities during the project implementation phase, including managing subcontractors and partners
• Analyse design constraints, analyse trade-offs and detailed system and security design, and consider life cycle support.
• Build, test, and modify product prototypes using working models or theoretical models.
• Design and develop cybersecurity or cybersecurity-enabled solutions.
• Design or integrate appropriate cybersecurity capabilities into overall system designs.
• Develop and execute system testing and validation procedures and documentation.
• Develop architectures or system components consistent with technical specifications.
• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems.
• Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure that recommended products are in compliance with evaluation and validation requirements.
• Perform risk analysis whenever an application or system undergoes a major change.
• Provide guidelines for implementing developed systems to customers or installation teams.
• Store, retrieve, and manipulate data for analysis of system capabilities and requirements.
• Utilize models and simulations to analyse or predict system performance under different operating conditions.
• Implement and integrate various system development life cycle methodologies into development environment.
• Conduct a market analysis to identify, assess, and recommend commercial, off-the-shelf, and open source products for use within a system and ensure recommended products are in compliance with evaluation and validation requirements.
• Design and develop system administration and management functionality for privileged access users.
• Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.
• Ensure that design and development activities are properly documented and updated as necessary.
• Design to security requirements to ensure requirements are met for all systems and/or applications.
• Develop detailed design documentation for component and interface specifications to support system design and development.
• Implement designs for new or existing system(s).
• Perform security reviews and identify security gaps in architecture.
• Provide input to implementation plans, standard operating procedures, maintenance documentation, and maintenance training materials
• Provide support to test and evaluation activities.
• Trace system requirements to design components and perform gap analysis.
• Analyse user needs and requirements to plan and conduct system development.
• Develop designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations.
• Collaborate on cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).

WORK EXPERIENCE REQUIREMENTS

• Minimum of 8 years’ experience of security engineering
• Strong critical thinking and problem-solving skills and a passion for information security
• Experience of working with internal experts/external vendors to resolve technical issues independently
• Fluent communicator in both written and spoken English;
• Previous consulting or professional services experience
• Knowledge of Aviation, Government, Defence and Transportation sectors
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of regional laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of OT security architecture.
• Knowledge of industrial evaluation and validation requirements.
• Knowledge of installation, integration, and optimization of system components.
• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of information security systems engineering principles.
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
• Knowledge of various operating systems.
• Knowledge of secure configuration management techniques.
• Knowledge of software development and engineering models (e.g., Agile, Lean, Waterfall Model, Spiral Model).
• Knowledge of system software and organizational design standards, policies, and authorized approaches (e.g., International Organization for Standardization [ISO] guidelines) relating to system design.
• Knowledge of system life cycle management principles, including software security and usability.
• Knowledge of Supply Chain Risk Management Practices
• Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defence-in-depth).
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of countermeasure design for identified security risks.

QUALIFICATION, CERTIFICATION & EDUCATIONAL REQUIREMENTS

• Degree in Information Security (preferred) or Information Technology or Computer Science
• Certified Information Systems Security Professional (CISSP), or
• Certified Information Security Manager (CISM)

Background

Thales people architect solutions that are relied upon to deliver operational advantage at every decisive moment throughout the mission. Defence and armed forces customers rely on us to deliver the full range of defensive systems for land, sea, and air. From early warning, to threat neutralisation, our platforms cover all levels from very short-range systems, to extended protection across the entire battle-space including Airspace Mobility Solutions, Vehicles and Tactical Systems and Missile Defence, Optronics, and Radar.

Air Mobility Solutions provides leading edge airspace control and security solutions for the commercial and defence sectors.

Thales's advanced LORADS air traffic management system ensures the safety of operators and passengers at a time when soaring growth in air traffic poses a range of complex technical challenges.

Technologies supplied by the Air Mobility Solutions global centre of excellence, based in Singapore, are currently deployed in Singapore and across Asia and the Pacific region.

Thales Australia's air traffic control systems are in use in over 50 countries including Australia, Mexico, South Africa, China, Singapore and Thailand.

Purpose:

The Cyber Security Engineering position is within Airspace Mobility Solutions in Singapore to contribute, but not limited to the LORADS and Topsky-ATC HE projects managed and supported from Singapore.

The position includes the following main responsibilities:

• To undertake security engineering and architecture activities as per budget and aligned with contract and strategy set by the System Cyber Security Engineering Lead.
• To define security solution and associated estimates for specific work packages and bids activities, for example in relation to Contract Change Proposal and Engineering Change Requests/Proposals.
• To provide technical leadership on security solution for the LORADS System and the impact on suppliers’ sub-systems and security components (e.g. other business lines).
• To define security solutions cooperatively with supplier solution teams, engineers and the cyber security design authority.
• To develop security engineering artefacts such as the statement of applicability to the targeted version of the applicable security standards, and other applicable CDRLs as directed by the lead cyber security engineer.
• To lead the vulnerability management service activities to Asian customers.
• To lead security audit and cyber health check service activities to Asian customers.
• To interface with other business lines (e.g. CDS) for the delivery of other cyber security services to Asian customers.
• Contribute to the security risk management by identifying and characterising security risk to the customer context.
• To contribute to customer meetings in relation to the cyber security tasks that you are implementing.
• To contribute to other security tasks from the AMS Business Line like for instance incident response and crisis exercises.
• To support other project or service initiatives when required.

KEY ACTIVITIES AND RESPONSIBILITIES

As the Cyber Security Engineer, you are accountable for:

• Lead, tailor, and support the Security strategy as per Engineering Plans.
• Plan, execute and manage the delivery and the Customer approval of Security deliverables;
• Plan, execute and manage the delivery of the security component with appropriate artefacts.
• Manage the technical risks relevant to Security activities to contribute to program risk management.
• Lead Security Architecture Design as per project needs.
• Lead the vulnerability management service activities to Asian customers.
• Lead security audit and cyber health check service activities to Asian customers.
• Contribute to the response of cyber incident and crisis events.
• Select, specify, and deploy methodologies (including metrics), tools/platforms necessary for Security Engineering activities in line with company policies.
• Manage and prioritize defects correction and evolutions in accordance with the project sprint strategy.
• Support Bids and Engineering Change Proposal evaluation;
• Providing collaborative support to the other members of the Project team.
• Support and contribute to the definition of the Security solution and Policies for the Products (Topsky-HE, Topsky-One, LORADS ATC).

Interactions:

• Works closely with the head Cyber Engineering Manager and the Cyber System team in country and Australia, the cyber sub-system team and solution engineering teams from the various sub-systems, including the legacy LORADS ATC and the future Topsky-One.
• Works closely with Cyber Head of Discipline, Security Authority and Solution Architects.
• Works with Subcontractors and suppliers to ensure they are aligned with the Security Program and comply with the defined security baseline.
• To establish trusted relationship with the Customers and Subcontractors (including CDS).
• Strong internal and external stakeholder management skills.

Challenges:

• Complex stakeholder community with different requirements and cultural approaches to the Delivery Process.
• High level of Customer and Senior Thales Management scrutiny and audit.
• Re-establishing a robust and rigorous discipline of weekly/monthly reporting and tracking of Project issues (cost/risk/schedule etc).
• Working in a multicultural and multisite environment.
• This position requires the capacity to understand and handle resistance to change, to engage cross functional, diverse stakeholders.

KEY KNOWLEDGE AND EXPERIENCE

To be successful in your role, you will have demonstrated and/or acquired the following knowledge and experience:

• Experience in the life cycle of software/system development including processes and responsibilities at each stage of the cycle.
• Delivery of engineering/management services to tight timelines.
• Understanding of Security System Engineering processes and FBL/ABL/PBL management
• Working with a multi-skilled team of engineers: 2+ years
• Knowledge of Security Standards (NIST, ISO27001, Singapore security standards)
• Understanding of System accreditation and impact on project streams (sub-systems).
• Proven problem identification and analysis skills and system requirements analysis skills.
• Selecting, specifying and deploying methodologies including metrics, tools/platforms (e.g. DOORS).
• Producing appropriate artefacts leading to Customer acceptance and final accreditation.
• Contributing to Cost Models.
• Contributor to Risks & Opportunity management.
• Contribution to the management of subcontractors.
• Providing coaching/mentoring of less experienced staff.
• Challenge status-quo by being creative and innovative.
• Capability to delegate and supervise work performance.
• Excellent written and oral communications skills.
• Ability to manage Work Packages.

JOB OBJECTIVE

CDS Asia provides a range of cybersecurity services and solutions to our regional clients with a strong focus on Operational Technology. Our ambition is to scale up our existing business and increase our footprint in the region with a refreshed strategy and mandate to leverage our global capability and win new business in our core markets.

We are actively seeking a Senior Cybersecurity Engineer to take a leading role in design, development and implementation of IT/OT cybersecurity solutions within our existing install base.

The role will require someone that this is a problem solver, determined and enthusiastic. They will bring experience of implementing a wide variety of cybersecurity products and solutions within large complex system development. They will have the ability to apply cybersecurity and principles to organizational requirements and be able to identify and remediate critical infrastructure systems that were designed without system security considerations.

The successful Candidate will enjoy a rewarding role full of new challenges and be part of a company that provides highly complex solutions in the most critical operational environments where robust safety and resilience standards are applied.

ROLES & RESPONSIBILITIES

• Define overall security solution strategies based on customer requirements.
• Work with Thales engineering teams to integrate cybersecurity solutions into existing and new platforms.
• Act as the single point of contact for customer security queries.
• Contribute to the management of the risks and/or opportunities during the project implementation phase, including managing subcontractors and partners
• Analyse design constraints, analyse trade-offs and detailed system and security design, and consider life cycle support.
• Build, test, and modify product prototypes using working models or theoretical models.
• Design and develop cybersecurity or cybersecurity-enabled solutions.
• Design or integrate appropriate cybersecurity capabilities into overall system designs.
• Develop and execute system testing and validation procedures and documentation.
• Develop architectures or system components consistent with technical specifications.
• Identify and direct the remediation of technical problems encountered during testing and implementation of new systems.
• Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure that recommended products are in compliance with evaluation and validation requirements.
• Perform risk analysis whenever an application or system undergoes a major change.
• Provide guidelines for implementing developed systems to customers or installation teams.
• Store, retrieve, and manipulate data for analysis of system capabilities and requirements.
• Utilize models and simulations to analyse or predict system performance under different operating conditions.
• Implement and integrate various system development life cycle methodologies into development environment.
• Conduct a market analysis to identify, assess, and recommend commercial, off-the-shelf, and open source products for use within a system and ensure recommended products are in compliance with evaluation and validation requirements.
• Design and develop system administration and management functionality for privileged access users.
• Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.
• Ensure that design and development activities are properly documented and updated as necessary.
• Design to security requirements to ensure requirements are met for all systems and/or applications.
• Develop detailed design documentation for component and interface specifications to support system design and development.
• Implement designs for new or existing system(s).
• Perform security reviews and identify security gaps in architecture.
• Provide input to implementation plans, standard operating procedures, maintenance documentation, and maintenance training materials
• Provide support to test and evaluation activities.
• Trace system requirements to design components and perform gap analysis.
• Analyse user needs and requirements to plan and conduct system development.
• Develop designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations.
• Collaborate on cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information).

WORK EXPERIENCE REQUIREMENTS

• Minimum of 8 years’ experience of security engineering
• Strong critical thinking and problem-solving skills and a passion for information security
• Experience of working with internal experts/external vendors to resolve technical issues independently
• Fluent communicator in both written and spoken English;
• Previous consulting or professional services experience
• Knowledge of Aviation, Government, Defence and Transportation sectors
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of regional laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of OT security architecture.
• Knowledge of industrial evaluation and validation requirements.
• Knowledge of installation, integration, and optimization of system components.
• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of information security systems engineering principles.
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
• Knowledge of various operating systems.
• Knowledge of secure configuration management techniques.
• Knowledge of software development and engineering models (e.g., Agile, Lean, Waterfall Model, Spiral Model).
• Knowledge of system software and organizational design standards, policies, and authorized approaches (e.g., International Organization for Standardization [ISO] guidelines) relating to system design.
• Knowledge of system life cycle management principles, including software security and usability.
• Knowledge of Supply Chain Risk Management Practices
• Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defence-in-depth).
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of countermeasure design for identified security risks.

QUALIFICATION, CERTIFICATION & EDUCATIONAL REQUIREMENTS

• Degree in Information Security (preferred) or Information Technology or Computer Science
• Certified Information Systems Security Professional (CISSP), or
• Certified Information Security Manager (CISM)

Preferred

• Information Security Masters degree from either:U.S. National Centres of Academic Excellence in Cyber Defence; or, those certified by U.K. National Cyber Security Centre
  
• CREST Registered Technical Security Architect (CRTSA); or
• Information Systems Security Architecture Professional (CISSP-ISSAP).