L2 Engineer - Network Security

ALTEN Group is a world leader in Engineering and Technology consulting services providing outsourced Engineering, R&D, and IT Services for different industries such as Transportation, Defence, Energy and Security with 55,000 engineers in nearly 35 countries. ANOTECH is the subsidiary of the Group delivering ALTEN's Engineering Services in Singapore.

As a Level 2 Engineer, you will support a command and control system. The ideal candidate will actively participate in advanced troubleshooting, in-depth analysis of problems, and implementing solutions that may involve more specialized knowledge for a mission-critical 24x7 system.

Responsibilities

· Preventive Maintenance for Network & Security Equipment

Ø Perform quarterly preventive maintenance (PM) for Network & Security Equipment

Ø Update and submit checklist after PM

· VAPT Support

Ø Conduct Vulnerability assessment using Nessus

Ø Validate scan completion and analyse findings

Ø Perform remediation planning and coordination

Ø Security Hardening and Configuration Review

Ø Remediation validation

Ø Reporting & Documentation for VAPT

· Quarterly Compliance Check

Ø Conduct vulnerability assessment on the systems across all sites using Nessus

Ø Perform remediation planning and coordination with Level 2 engineers

· IM8 Governance Compliance

Ø Ensure day-to-day operations comply with IM8 ICT Security Standards

Ø Support security assessments with Authority

Ø Maintain audit-ready documentation

Ø Support IM8 policy enforcement example patching SLAs

· Firewall Operations

Ø Manage policies, and troubleshoot traffic issues

Ø Support IPS/Threats modules

Ø Support logs extraction

Ø Perform firmware updates, patches, security fixes and vulnerability remediation

Ø Maintain up-to-date configurations

· Hardware Security Module

Ø Monitor HSM health and readiness

Ø Understand and able HSM to support cryptographic operations under strict governance and dual control

Ø Review and maintain HSM logs

Ø Manage HSM key management operation

Ø Perform firmware updates, patches, security fixes and vulnerability remediation

· SIEM Monitoring

Ø Configure SIEM to show high severity events as alerts on the dashboard

Ø Identify unusual patterns, anomalies, and suspicious events in the logs

Ø Ensure all critical systems send security logs to the SIEM

Ø Ensure antivirus definitions and engines are automatically updated

Ø Monitor update compliance across all endpoints/servers

Ø Investigate if not updating, outdated, failing scans and recover

Ø Tuning and optimization of SIEM rules

Ø Develop and maintain / optimize dashboard for real-time display of alerts

Ø Perform firmware updates, patches, security fixes and vulnerability remediation

· Aruba Clearpass Monitoring

Ø Manage and maintain ClearPass Access Control policies

Ø Integrate Aruba Clearpass with Network infrastructure

Ø Maintain up-to-date configurations

Ø Perform firmware updates, patches, security fixes and vulnerability remediation

· Samsung Knox MDM

Ø Onboard new devices into Samsung Knox

Ø Configure and maintain MDM policies

Ø Manage approved application via Knox

Ø Monitor device compliance dashboard

Ø Manage deployment of certificates and rotation of certificates on the mobile devices

Ø Maintain accurate record of mobile device lifecycle management

Ø Perform application patches, security fixes and vulnerability remediation

Ø Maintain up-to-date configurations

· Incident & Problem Management

Ø Resolve P1/P2 issues within SLA

Ø Perform resolution and communications

Ø Perform root cause analysis and recommend permanent fixes

Ø Escalate unresolved issues that required software coding to Level 3 or engineering teams

Ø Ensure proper closure of incident and problem

· Change Management

Ø Perform operational impact assessment

Ø Present change in Change Advisory Board

Ø Pre-Change Preparation such as review Change Request and Release P