全职 IT Support 工作, 薪水, SEIKO WALL PTE. LTD. West Region (Singapore) 公司招聘中 - Ricebowl

Job Description

Overview

Responsible for designing, implementing, monitoring, and enhancing the security systems that company and project an organizations network, system, and data. Involves proactively identifying vulnerabilities, responding to security breaches, and ensuring that the organizations digital assets are secure against current and future threats.

Responsibilities

1. Develop, deploy, and maintain SIDD system security solutions, such as ensure Apache is configured securely, limiting unnecessary modules and disabling directory listing; Disable unnecessary services in XAMPP (e.g., FTP or WebDAV if not in use) to reduce the attack surface; enforce HTTPS by setting up SSL/TLS certificates using tools, ensuring secure communication between clients and the server; Configure strong security headers (e.g., Content-Security-Policy, X-Frame-Options, Strict-Transport-Security) in Apache to prevent web attacks like cross-site scripting (XSS) and clickjacking.

2. File and Directory Permissions. Secure the XAMPP root directories by ensuring appropriate file permission (i.e., no write permissions for files that dont need it) and securing configuration files (*************, *************)

Manage .htaccess files are used to prevent access to sensitive directories like /config/, /logs/, and /uploads/.

3. Secure the MySQL and PostgreSQL database by ensuring proper use roles and privileges, managing remote root access.

4. Ensure proper PHP input validation and output sanitization to prevent common vulnerabilities injection; Implement secure session handling in PHP by configuring session cookies; Set up logging for errors and security events.

5. Ensure all components (Apache, MySQL, PHPMyadmin, PostgreSQL, WinServer, Sophos, Fortinet firewall) are updated regularly to patch known vulnerabilities.

6. Work closely with software developer, debugging and develop necessary functions

Work Location: In person