Overall responsibility will be to assist the offensive security team and particularly the active defense, network security assessment, application security assessment and threat intelligence teams.

Responsibilities:
Active Defense Team -

• Identify all possible C2 (Command and Control Infrastructure) ways
• Write scripts to setup in few seconds an adversary simulation infrastructure (on Digital Ocean, AWS, AliCloud or others)
• Parse attack surface monitoring results and automatically classify with ML to identify true/false positive and determine if they belong to the Company (IP, ports, email, public cloud repo, vulnerabilities, etc.)

Network Security Assessment Team -
Analyze and improve existing plugins to reduce false positive for vulnerability

• Validate vulnerabilities based on other sources or potentially manually
• Perform root cause analysis after incidents

Application Security Assessment Team -

• Analyze penetration test results to classify them automatically and derive root cause and preventative requirements that would have avoided the vulnerabilities
• Validate manually proper implementation of fixes

Threat Intelligence Team -

• Correlate results from internal tools (attack surface monitoring, network vulnerability scanners, risk-based vulnerability management, etc.) and "connect the dots" to identify real risks (as opposed to theorical risks)

Requirements:

• Bachelors Degree in Information Technology/Cybersecurity or any equivalent course.
• At least 2 years of experience in assisting the offensive security team
• Knowledge in Command and Control Infrastructure
• Good communication skills; ability to coordinate with multiple stakeholders
• Ability to operate in a fast-paced work environment and deliver under pressure
• Comfortable with working in a large corporate environment
• If you are technically savvy and have experience with computer programming languages such as Python to automate repetitive task would be a plus

Interested candidates may send in their resume and cover letter directly to:
Lalog Charmane Castillo | EA License No. 02C3423 | Personnel Registration No. R1767650

We respect your privacy and all communication will be treated with confidentiality. If you wish to know more about this position or explore other roles, please prepare your updated profile and get in touch with Charm at charmane.lalog@manpower.com.sg
Please note that your response to this advertisement and communications with us pursuant to this advertisement will constitute informed consent to the collection, use and/or disclosure of personal data by ManpowerGroup Singapore for the purpose of carrying out its business, in compliance with the relevant provisions of the Personal Data Protection Act 2012. To learn more about ManpowerGroup's Global Privacy Policy, please visit
https://www.manpower.com.sg/privacy-policy

Charmane Castillo Lalog License No. 02C3423 Personnel Registration No. R1767650

Please note that your response to this advertisement and communications with us pursuant to this advertisement will constitute informed consent to the collection, use and/or disclosure of personal data by ManpowerGroup Singapore for the purpose of carrying out its business, in compliance with the relevant provisions of the Personal Data Protection Act 2012. To learn more about ManpowerGroup's Global Privacy Policy, please visit https://www.manpower.com.sg/privacy-policy