Total 1,083 security job vacancies in Australia

We are seeking a Java Developer to design, build, and maintain high-performing, scalable, and enterprise-grade Java applications. You will be a key part of our engineering team, collaborating with cross-functional teams to translate business requirements into functional, high-quality software.

• Application Development: Translate software requirements and use cases into clean, efficient, and functional Java applications.
• Code Quality: Design, build, and maintain highly reusable, reliable, and testable Java code.
• Testing & Debugging: Conduct unit and integration testing to ensure reliability, and proactively identify and resolve bottlenecks and bugs

Interested applicants please send your resume to venessagoh@recruitexpress.com.sg

Venessa Goh Wee Ni

R24124686

Recruit Express Pte Ltd

EA License No: 99C4599

We regret that only shortlisted candidates will be contacted.

Product area

Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.

Job description

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

Qualifications

Job responsibilities

• Write and review backend infrastructure code.
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact on hardware, network, or service operations and quality.
• Perform technical security assessments, code audits and design reviews.
• Develop technical solutions to help mitigate security vulnerabilities.
• Advocate security and secure practices throughout Google Payments.

Minimum qualifications

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with software development in one or more programming languages (e.g., Go, Python, C, C++, Java, JavaScript), or 1 year of experience with an advanced degree.
• 1 year of experience with security in attacks and mitigation methods.

Preferred qualifications

• Master's degree or PhD in Computer Science, or a related technical field.
• Experience in application and service security, including design reviews, and source code assessments.
• Knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.

ST Engineering is a global technology, defence andengineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers inmore than 100 countries. The Group uses technology and innovation to solvereal-world problems and improve lives through its diverse portfolio ofbusinesses across the aerospace, smart city, defence and public securitysegments. Headquartered in Singapore, ST Engineering ranks amongthe largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industryleader in cybersecurity with over two decades of experience, we deliver aholistic suite of trusted cybersecurity solutions to empower cyber resiliencefor government and ministries, critical infrastructure, and commercialenterprises. Backed by our indigenous capabilities and deep domain expertise,we offer robust cyber-secure products and services in cryptography,cybersecurity engineering, digital authentication, SCADA protection, audit andcompliance. We specialise in the design and build of security operationscentres for cybersecurity professionals and provide managed security servicesto strengthen the cybersecurity posture of our government and enterprisecustomers.

Job Overview:

As a Senior SoftwareEngineer, you will lead the architecture, design, and development of highlysecure enterprise-grade applications and Outlook plugins with advancedcryptographic functionalities. You will serve as a technical authority, guidingengineering teams and influencing strategic decisions to ensure robust,scalable, and secure solutions. This role requires deep technical expertise,leadership skills, and the ability to drive innovation across complex systems.

Key Responsibilities:

• Define and own the software architecture for mission-critical applications and plugins, ensuring security, scalability, and maintainability.
• Lead the design and implementation of advanced cryptographic solutions (AES, RSA, ECC, PKCS#11) and enforce compliance with industry standards.
• Mentor and coach engineering teams, fostering best practices in secure coding, performance optimization, and software quality.
• Collaborate with product managers, security experts, and stakeholders to translate business requirements into technical strategies.
• Conduct architecture reviews, code audits, and risk assessments to maintain high security and reliability standards.
• Drive innovation by evaluating emerging technologies and integrating them into the product roadmap.
• Oversee source control strategies, CI/CD pipelines, and ensure robust versioning and backup processes.
• Represent the engineering team in customer and executive-level discussions, providing technical insights and recommendations.
• Prepare and maintain comprehensive technical documentation for architecture and design decisions.

Required Qualifications:

• Minimum 10 years of professional experience in C++ and C# development, with at least 5 years in a technical leadership or architecture role.
• Proven track record in designing and delivering secure Windows-based applications and Outlook plugins.
• Expertise in cryptographic algorithms, protocols, and secure software design principles.
• Strong proficiency with development tools (Visual Studio, Git), CI/CD systems, and debugging techniques.
• Exceptional problem-solving skills and ability to make high-impact technical decisions.
• Excellent communication and leadership skills, capable of influencing cross-functional teams and stakeholders.

Preferred Qualifications:

• Experience with enterprise security frameworks and compliance standards (e.g., FIPS, GDPR).
• Familiarity with Agile/Scrum methodologies and DevSecOps practices.
• Contributions to open-source projects or published technical papers in security or software architecture.

Work location: Jurong East

Find out more:  https://www.stengg.com/cybersecurity

STEngineering believes in fostering a culture where team members are encouragedto overcome challenges, explore new ideas, and work together to succeed. Wevalue individuals who are determined to push beyond the boundaries, and have athirst for knowledge, continuous learning, and self-improvement.

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives through its diverse portfolio of businesses across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructure, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance. We specialise in the design and build of security operations centres for cybersecurity professionals and provide managed security services to strengthen the cybersecurity posture of our government and enterprise customers.

Responsibilities

•Design and implement CDS components enforcing strict data flow control and security policies across classified/unclassified domains.

• Develop secure communication features across OSI Layers 2–7, including packet filtering, protocol validation, and deep content inspection.

•Architect and maintain secure messaging systems with emphasis on integrity, confidentiality, and controlled data release.

•Deploy and harden CDS services using Docker and Kubernetes/Docker Swarm, with RBAC and secure container lifecycle management.

•Achieve low-latency, high-throughput data transfer while maintaining compliance with security frameworks (e.g., Common Criteria, NIST).

•Implement secure coding practices, encryption (TLS/mTLS), and audit mechanisms aligned with cybersecurity standards.

•Lead technical discussions and drive architectural decisions in collaboration with security architects, compliance teams, and government stakeholders to meet accreditation requirements.

Requirements

•8+ years in software engineering, with 2–3+ years in secure networked systems or CDS environments.

•A self-driven engineer who is comfortable taking ownership and providing technical guidance to the team.

•Proficiency in C/C++, Go, or Rust for performance-critical components.

•Proficiency in one or more of: Java (Spring/Spring Boot), C#/.NET, Node.js (TypeScript), or Python for application-layer work.

•Experience in Linux systems programming and network/socket programming.

•Security-first mindset with attention to detail and ability to operate in regulated, compliance-driven environments.

Good to Have

•Hands-on experience with Kubernetes and Docker in high-availability, security-hardened deployments.

•Familiarity with message-oriented middleware (e.g., RabbitMQ, Kafka, Redis) including encryption, authentication, and sanitization for cross-domain compliance.

•Working knowledge of OSI Layers 2–7, TLS/mTLS, IPsec, DPI, VLANs, firewall rules, and zero-trust network principles.

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement

Reachfield Security (Grade “A” agency) specializes in supplyingsecurity manpower to Schools, Factories, Shopping Centres, Museums, libraries,etc

Security Officer
with Class 3 licence
with at least 1 yr security experience

Salary : up to $3130 gross a month (5666days work arrangement) + Buggy allowances

////////////////////////////////////

1. Works in Commercial (Factory / Warehouse / Condo / Mall /Polytechnic) environment.

2. Good customer service skills; able to communicate with peopleof all levels

3. 12hrs-shift (Fixed shift)

4. PC literate

5. Job duties include issue visitors/ contractor passes, clocking,patrolling, protecting clients’ premise and access control, etc.

6. Possess valid security license, completed 4 mandatory WSQmodule for PWM-SO

Reachfield Security & Safety Management Pte Ltd

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

For more information, please call office at 6324 2925 (Andrew)

To lead and ensure that security management practices across the region are implemented and

maintained to ensure the security of people, assets and operations of DP World within the region.

• To ensure security compliance of the BUs in the region to their respective applicable mandatory,

voluntary and client specific security compliance requirements. These requirements must be identified

and the list to be maintained.

• To plan and support implementation of compliance standards like ISPS Code, ISO 28000, TAPA etc. that

are required or planned as improvement by the BUs within the region.

• To ensure that security awareness becomes a culture within the region, using security campaigns,

training, outreach, and awareness sessions, either in person to locally based colleagues or remotely

through delegated security managers regionally

• To ensure all travellers in the region are apprised of security risk factors and implement measures and

mitigation techniques appropriate to the specific location

• To maintain close contact with regional peers within DP World and to build effective relationships with

regional and local agencies who can assist the collection of security information and the response to an

incident

• Undertake Risk Assessments and provide advice on security matters and compliance for new projects.

• Undertake security reviews and/or audits within the region as per frequency agreed with Group Security

and Regional Head.

• Lead, support and project manage on all aspects of security for new businesses and acquisitions.

• Support and where assigned lead security systems projects within the region.

• Support the integration of new businesses to the global security management system requirements.

• Prepare and submit security reports for the region to Group Security and Regional Head in the agreed

template(s) and frequency.

OTHER

• Applicable if role has direct or indirect reports - responsible for the management and leadership of an

engaged team, promoting collaboration and ensuring that each is developed and evaluated against goals

and objectives which are aligned, specific, measurable, attainable yet challenging, realistic and time

bound.

• Act as an ambassador for DP World at all times when working; promoting and demonstrating positive

behaviours in harmony with DP World's Principles, values and culture; ensuring the highest level of safety

is applied in all activities; understanding and following DP World's Code of Conduct and Ethics policies.

• Perform other related duties as assigned

Position Overview:

Squarepoint is seeking a subject matter expert to join our Information Security team as a Senior Information Security Engineer. This senior position plays a pivotal role in strengthening our security posture by providing expert guidance, and driving improvements across key areas such as network, cloud, data, and system security. The successful candidate will act as an escalation point to the Security Operations, ensuring complex security problems are effectively analysed and resolved. This role includes overseeing security in critical IT projects, leading threat modelling for complex systems, auditing key systems for security gaps, and building automated capabilities to continuously validate controls’ effectiveness and system resilience. This position offers an opportunity to lead security initiatives and shape the security roadmap. A high degree of self-motivation and proactivity is mandatory for success in this role.

• Strengthen security across core areas, including network and system security, email security, cloud security, and data protection.
• Serve as a security advisor for IT projects, ensuring security requirements are met and risks are mitigated.
• Manage and optimize security tools, ensuring they are effectively deployed and maintained.
• Lead the design and development of security solutions and architectures to protect critical assets.
• Provide second-line support to Security Operations.
• Conduct threat modelling and risk assessments to identify vulnerabilities and drive proactive mitigation strategies.
• Oversee relationships with the Managed Detection and Response (MDR) provider, ensuring service effectiveness and continuous improvement.
• Execute security roadmap’s initiatives, aligning with business objectives and emerging threats.
• Collaborate with cross-functional teams to enhance security awareness and integrate security into business processes.

Required Qualifications:

• Minimum 5 years of hands-on experience in an information security role, such as security engineering, security architecture, security operations, or application security.
• Thorough understanding of security best-practices, principles, and system hardening techniques.
• Hands-on experience with threat modelling, security testing, including penetration testing, and automated security validation.
• Solid knowledge of cloud, network, and systems security concepts.
• Experience with scripting with one or more languages – Python and PowerShell experience is a plus.
• Familiarity with security tools such as EDR software, DLP solutions, vulnerability scanners, firewalls and email gateways.
• Strong analytical skills and problem-solving skills, with the ability to investigate complex problems and design pragmatic solutions.
• Effective communication skills to work with technical and non-technical teams.
• Degree in Engineering, Computer Science, or STEM related field.

Nice to have:

• Strong knowledge of risk assessment methodologies.
• Familiarity with security best practices, configurations, and threat management in Azure, AWS, and GCP.
• Ability to analyse software for security risks, including reviewing source code, performing static and dynamic analysis, and identifying vulnerabilities in application design and implementation.
• Familiarity with regulatory frameworks and security standards (e.g., SEC Cybersecurity rules, MAS TRM Guidelines, NFA Cybersecurity Guidance, GDPR etc.)
• Relevant security certifications.

Job Requirements

• Candidate must possess at least a Diploma in Computer Science/Information Security, Engineering (Computer/Telecommunication) or equivalent.
• Required skill(s): Python.
• Expertise in other programming languages are advantageous.
• Only Singaporeans or PR are eligible.
• Candidates who possess OSCP and CREST Registered Tester certification.will be preferred.

Job Description

• Participate in security review and assessment for our clients' systems.
• Participate in forensics and incident response engagements.
• Participate in security consultancy and advisory engagements.
• Learn how to work independently and in a team.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Cloud Security & DevSecOps Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Responsibilities

·      Define and drive the vision, roadmap, and maturity model for application security across the enterprise.

·      Align application security initiatives with business objectives, compliance requirements, and risk management frameworks.

·      Act as the primary liaison between development teams, security functions, and executive stakeholders.

·      Secure Development Lifecycle (SDLC) Integration

·      Embed security practices into the SDLC, including threat modeling, secure design reviews, and code analysis.

·      Champion DevSecOps principles, ensuring security automation and continuous integration pipelines are robust and scalable.

·      Provide guidance on secure coding standards, frameworks, and best practices.

·      Establish policies, standards, and metrics to measure application security effectiveness.

·      Conduct regular risk assessments and oversee remediation of vulnerabilities.

·      Lead and mentor a team of application security engineers and specialists.

·      Partner with product owners, architects, and developers to balance innovation with security requirements.

·      Build strong relationships with executive leadership to communicate risks, progress, and strategic priorities.

·      Evaluate emerging technologies, tools, and methodologies to enhance application security capabilities.

Qualifications

·      Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

·      8+ years of experience in application security, software development, or cybersecurity, with at least 3 years in a leadership role.

·      Strong knowledge of secure coding practices, OWASP Top 10, and modern application architectures (cloud-native, microservices, APIs).

·      Hands-on experience with application security tools (SAST, DAST, IAST,RASP, container security).

·      Proven ability to lead cross-functional teams and influence executive stakeholders.

·      Excellent communication, leadership, and problem-solving skills.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to debbie@peopleprofilers.com

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

 Tel: 69509748

http://www.peopleprofilers.com

debbie@peopleprofilers.com

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

The Cyber Security Specialist will architect, design, review, and implement cybersecurity solutions for large-scale projects and critical infrastructure. The role involves ensuring compliance with cybersecurity standards, monitoring and mitigating security risks, and developing cloud security architectures.

The specialist will also conduct vulnerability assessments, security audits, and provide consultancy on security vulnerabilities and risks.

Requirements:

• Lead and support cybersecurity implementation for large-scale projects and critical infrastructure systems.
• Ensure compliance with critical infrastructure cybersecurity standards (e.g., KINS/CII).
• Develop and implement cloud security architectures and solutions.
• Monitor, research, and analyse security risks to mitigate threats and attacks.
• Conduct vulnerability assessments, penetration testing (VAPT), and provide remediation recommendations.
• Perform system hardening, patch management, and secure configuration practices.
• Prepare and maintain security documentation (e.g., design documents, risk assessments, compliance reports).
• Provide guidelines for coding, key management, hardening, patch management, backup management, and incident management.
• Familiarity with public cloud infrastructures (Azure, AWS, GCP, Huawei).

Qualifications:

• Proven experience in large-scale projects, preferably in government or critical infrastructure environments.
• Strong familiarity with cybersecurity frameworks and standards (e.g., IM8, CIS, NIST).
• Hands-on experience in security architecture, system hardening, vulnerability assessment, and network/system security controls.
• Experience with network security, firewalls, VPNs, and identity and access control.
• Experience in system integration or project delivery environments.
• Strong documentation, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell

Timing: 630-630

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Software Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781