Total 85 it analyst job vacancies in Legal / Public / Security category in Hong Kong

Requirements:

• Bachelor’s degree in computer science/information security or equivalent
• Professional certifications, such as GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred
• Preferably 4 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (e.g. CVSS), and external-facing attack surface risks
• Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar)
• Proficiency in programming languages such as Python will be advantageous

Job Summary:

The Application Security Consultants is responsible for auditing and validating the security posture of applications and their supporting infrastructure. This role focuses on reviewing security activities performed by development teams, including static and dynamic code analysis, infrastructure scans, and hardening practices. The analyst ensures that applications meet internal security standards and comply with regulatory requirements.

Key Responsibilities:

·      Review and validate results from SAST (Static Application Security Testing) and DAST( Dynamic Application Security Testing) tools.

·      Audit OS, container, and database scans for vulnerabilities and misconfigurations looking at reports a

·      Assess the effectiveness of hardening measures across application components (e.g., webservers, APIs, containers, databases).

·      Collaborate with application development and DevSecOps teams to ensure remediation of identified issues.

·      Maintain audit documentation, including findings, remediation tracking, and compliance status.

·      Evaluate adherence to secure coding practices and application security policies.

·      Support internal security audits related to application & underlying infrastructure security.

·      Stay updated on emerging threats, vulnerabilities, and secure development trends.

Required Qualifications:

·      Bachelor’s degree in computer science, Cybersecurity, or related field.

·      4+ years of experience in application security, security auditing, or secure software development.

·      Hands-on experience on one or more tools like SonarQube, Fortify SAST/DAST, Burp Suite,OWASP ZAP etc.

·      Strong understanding of OWASP Top 10, secure coding principles, and CI/CD pipelines.

·      Familiarity with container technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).

Certifications:

·      CRESTCertified Pen Tester

·      CISSP or CCSP 

·      Preferred Certified AWS DevSecOps Professional or equivalent

Key Competencies:

·      Analytical mindset with attention to detail

·      Ability to interpret scan results and prioritize remediation

·      Strong communication and collaboration skills

·      Knowledge of regulatory frameworks (e.g., ISO 27001, PCI-DSS, GDPR)

·      Experience working in Agile and DevOps environments'

Interested applicants please send your resume in MS Wordsformat to pooja.yadav@ambition.com.sg andattention to Pooja (R1551322)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1551322

Data provided is for recruitment purposes only

Business Registration Number: 200611680D.

License Number: 10C5117

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

Employment Type: Contract (1 year renewable, with potential for conversion)

Working Hours: Monday toThursday (8.30am – 6.00pm), Friday (8.30am – 5.30pm) (Hybrid WorkingArrangement)

Location: One North

Salary: Up to SGD 5,300

We are looking for an experienced IT Systems Governance & Project Management professional who can oversee enterprise systems from both an operational and governance perspective. The ideal candidate should have strong experience in IT governance, risk management, audit compliance, and system lifecycle management, while also being capable of coordinating system enhancements, security assessments, and change initiatives across multiple stakeholders.

Responsibilities:

• Conduct system criticality and risk assessments for enterprise systems.
• Manage system governance, compliance, and audit readiness activities.
• Coordinate system changes, enhancements, and remediation efforts.
• Track and manage security risks, vulnerabilities, and remediation actions.
• Support disaster recovery and cyber incident recovery planning.
• Perform access reviews and ensure timely user deprovisioning.
• Manage certificates, API keys, and system integration credentials.
• Maintain accurate system documentation and governance records.
• Collaborate with system owners, vendors, and internal stakeholders to drive system improvements.
• Provide regular reporting on system risks, issues, changes, and compliance status.

Requirements:

• Degree/Diploma in IT, Computer Science, Information Systems, or related field.
• At least 5 years of experience in IT governance, systems support, project management, or security-related roles.
• Strong understanding of IT governance, risk management, compliance, and audit processes.
• Experience managing system changes, vendors, and stakeholder engagements.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Key Responsibilities:

1. Investment Research & Analysis:

• Conduct detailed industry and market research to identify emerging investment opportunities.
• Analyze financial statements, build financial models, and assess the financial health of potential investment targets.
• Assist in due diligence efforts, including financial, operational, and strategic evaluations of prospective investments.
• Prepare investment presentations, and reports for internal and external stakeholders.
• Monitor portfolio investments, track key performance metrics, and assess risk management strategies.

2. Strategic Management:

• Coordinate cross-functional teams and support ongoing projects to support growth and operational objectives within portfolio companies.
• Build and maintain strong relationships with key stakeholders, including portfolio company management teams, and other third parties.
• Liaise with external partners, advisors, and service providers to support investment activities and portfolio management.

Who We’re Looking For:

• Passionate about investing in a concentrated manner via deep conviction.
• A Bachelor’s degree in Finance, Business Administration, Economics, or related field (Master’s/MBA is a plus).
• 1-2 prior experiences preferably in investment management or operational roles.
• Strong financial modeling skills and proficiency with Microsoft Excel and financial analysis software.
• Excellent written and verbal communication skills.
• Strong understanding of financial markets, investment principles, and best practices in business management.
• Independent, highly analytical, detail-oriented, and proactive problem solver.
• Demonstrated ability to work collaboratively within a team and independently.

Preferred Skills:

• Knowledge of private equity/venture capital, mergers and acquisitions (M&A), or asset management.

Duration:

• Full-time, on-site

How to apply:

• Please submit your resume, unofficial transcript and any relevant supporting documents to hr.ad@hobeemedia.com

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

*Seeking for a talent who has minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/Governance risk including 3 years of hands-on IT technical security/security operations*

THE COMPANY
With their reputable brand and commitment to their clients, this company is increasing their operations in the region. They seek an IT Risk/Cyber Security/Information Security Manager to be part of their team.

JOB RESPONSIBILITIES

• Perform Level 2 IT risk/Cyber security/Information Security or governance risk
• Handle IT regulatory compliance (MAS TRM and information security)/security risk framework
• Handle Incident Oversight and root cause analysis & Control Validation
• Prepare Risk Register, Reporting & Adversarial Attack Simulation Exercises to assess the effectiveness of security controls and detection capabilities
• Provide IT security advisory
• Work closely with other business stakeholders etc.
• Any other adhoc duties

JOB REQUIREMENTS

• Degree in IT/Information Technology/Information Security/Computer Science or any other relevant IT education
• Has a recognised information security certification such as CRISC, CISSP, or equivalent
• Minimum 6 years of experience handling Banking/Financial services’ IT Risk/Cyber security/Information security/governance risk including 3 years of hands-on IT technical security/security operations
• Solutions-oriented, friendly, helpful, resourceful and able to multi-task

If you would like to explore this opportunity, please email your resume in Microsoft Word format to marie@resolutehunter.com

We thank you for your interest and will contact shortlisted candidates for more detailed discussion.

For more job opportunities, please visit our website https://resolutehunter.com

EA Licence 18C9105 
EA Reg R1105305

YOUR NEW JOB

As a Security Implementation Engineer, you will work alongside senior consultants and project teams to deliver successful implementations of Google SecOps and/or SentinelOne platforms, ensuring customers are onboarded effectively and solutions are configured according to project requirements.
You will support the deployment, configuration, and implementation of modern cybersecurity solutions across enterprise customer environments.
This is a 12-month renewable contract role based with one of the region's leading technology & systems integrators.

WHAT YOU’LL BE DOING

• Support the implementation and deployment of Google SecOps and/or SentinelOne solutions for enterprise customers
• Assist with solution configuration, onboarding, and integration activities
• Participate in customer workshops, requirement gathering, and technical discussions
• Perform testing, validation, and troubleshooting during implementation projects
• Document implementation procedures, technical configurations, and deployment activities
• Work closely with project managers, senior engineers, and customer stakeholders to ensure successful project delivery
• Provide post-implementation support and issue resolution where required
• Stay updated on product features, cybersecurity trends, and vendor best practices

WHAT IS NEEDED FROM YOU

• At least 1 year of hands-on experience with Google SecOps and/or SentinelOne solutions
• 1–3 years of IT infrastructure, cybersecurity, or systems implementation experience
• Basic understanding of SIEM, endpoint security, threat detection, and security operations concepts
• Experience supporting technical deployments, implementations, or system integrations
• Familiarity with Windows, Linux, networking, and cloud environments
• Strong troubleshooting and problem-solving skills
• Diploma or degree in Information Technology, Computer Science, Cybersecurity, or related field
• Good communication skills and ability to work directly with customers and internal teams

WHAT WILL MAKE YOU STAND OUT

• Relevant certifications from Google, SentinelOne, Microsoft, or other cybersecurity vendors
• Exposure to cybersecurity projects within enterprise environments
• Experience working for a systems integrator, managed services provider, or IT services organisation
• Familiarity with scripting or automation tools such as Python, PowerShell, or APIs
• Experience supporting SOC, SIEM, EDR, or threat monitoring environments

Responsibilities:
Network & System Security

• Review and support the design and implementation of secure network architecture (LAN/WAN, VPN, cloud, hybrid)
• Assist in configuring firewalls, network segmentation, and access controls
• Support secure setup of new systems, sites, and integrations
• Apply secure configuration standards to infrastructure and systems
• Implement zero trust principles where applicable

Firewall & Network Security Policy Ownership

• Implement firewall rules based on approved standards and requests
• Perform initial review of firewall rule changes and escalate where needed
• Support enforcement of least-privilege access across network zones
• Assist in managing secure remote access (VPN, admin, third-party)

MDR Integration &Security Visibility

• Ensure systems and network devices are properly onboarded to MDR/SIEM
• Monitor security alerts and escalate incidents based on defined procedures
• Work with MDR provider to investigate and respond to security events
• Support basic tuning of monitoring rules and logging requirements

Security Operations& Risk Support

• Perform vulnerability scans and support remediation tracking
• Assist in risk assessments and identification of security gaps
• Support incident response activities and documentation
• Assist with security audits and testing activities

Change & ProjectSecurity Support

• Participate in security review of infrastructure and system changes
• Highlight potential risks (e.g., access exposure, misconfigurations, lateral movement exposure))
• Provide recommendations to improve security posture

Security Governance & Standards

• Establish and maintain network security baseline standards

• Develop and enforce security policies, standards, and procedures

• Define security requirements for new infrastructure, sites, and systems
• Support audits and security assessments
• Assist in aligning implementations with internal standards and frameworks (e.g., NIST,ISO27001)

Collaboration &Awareness

• Work closely with infrastructure and IT teams on secure implementations
• Provide basic security guidance to technical teams when required
• Promote security awareness and good practices

Awareness & Training

• Provide security guidance to IT and business teams
• Promote best practices and awareness

Requirements:

Education

• Bachelor’s degree in IT, Cybersecurity, or related field

Experience

• 2–5years in cyber security, network security, and infrastructure security
• Hands-on experience with: -Firewalls (e.g., SonicWall, Fortinet, Palo Alto Networks) -VPN, endpoint security, or basic IDS/IPS -Network design or system architecture
• Exposure to enterprise network environments (multi-site preferred)
• Experience supporting projects
• Experience with OT/industrial networks
• Knowledge of compliance/regulations (GDPR, PDPA, etc.)

Technical Skills

• Good understanding of:
• TCP/IP, networking fundamentals
• VLANs, segmentation, and access control concepts
• Firewall rules and basic network security principles
• VPN and remote access security -Familiarity with:
• SIEM/MDR concepts
• Vulnerability scanning tools
• Basic cloud security concepts

• Strong hands on technical skills
• Regional role
• People centric environment and value talents

about the company
My client is looking for a Senior Executive, IT Security & Compliance who will play a key role within the team to helpshape their cybersecurity operations.

about the job

• Serve as the Global ISMS Management Representative, owning the ISO/IEC 27001 lifecycle and evolving our governance framework.
• Provide hands-on technical and operational oversight for SIEM, EDR, and DLP stacks to pre-emptively neutralize risks.
• Act as the primary security lead for enterprise clients, ensuring PDPA compliance and managing high-stakes security questionnaires.
• Lead Proof-of-Concept (PoC) activities to validate new security technologies from a risk perspective.
• Coordinate security incident response activities, including tabletop exercises, classification, escalation, and post-incident reviews.
• Monitor emerging threats to ensure detection capabilities evolve. Identify gaps and evaluate new security technologies (e.g., SSE, PAM, Vulnerability Management) from a risk perspective.
• Coordinate periodic vulnerability scans and penetration testing, ensuring successful remediation and retesting.

skills and experience required
Minimum 5 years of experience and a proven track record in managing information security, specifically covering both governance and operational security.

Proven experience serving as an ISO 27001 ISMS representative and coordinating SOC 1/SOC 2 audits.

Strong understanding of cloud security (AWS/Alibaba Cloud preferred), encryption, IAM, network security, and endpoint protection.

Ability to interpret SIEM alerts, EDR findings, cloud security logs, and vulnerability results. 

Preferred certifications include CISSP, CISM, CCSP, or ISO 27001 Lead Implementer/Auditor.

Whats and offer
The permanent opportunity for an Senior Executive, IT Security & Compliance, will pay a salary range of $ 7,000 - $ 9,000 plus benefits. 

To apply online please use the 'apply' function, alternatively you can reach me at
https://www.linkedin.com/in/Oliviatoh-032330132/. (EA: 94C3609 / R22109942)

- At least 5 years experience with configuration and security analysis module

- Define security policy and validate configuration items of managed SAP landscape

- Familiar with alerting capablitiies for proactive security manage-ment

- Knowledge of integration with Guided Procedure to automate secu-rity check and assess effectiveness of security measures - Knowledge of Simple Diagnotiss Agent (SDA) and CCDB availa-ble in Focused Run

- Knowledge of XML programming languages used in Focused Run policies

About The Company

We have partnered with one of the leading retail groups in Singapore with a strong presence across multiple store formats islandwide. With a portfolio of well-established brands, the business continues to grow and adapt, serving diverse customer segments though its network of over 50 outlets.

Job Summary

The successful candidate will be responsible for implementing, maintaining, and enhancing our organisation’s information security posture. This role requires strong technical expertise and the ability to collaborate closely with cross-functional teams, including End User Support, Network, IT Infrastructure and Application, to ensure security is embedded across all systems and processes.

This role is based in Tampines North.

Key Responsibilities

• Analyse security threats, develop and optimise security policies.
• Proactively detect, investigate, and respond to cyber threats within the M365 ecosystem, which includes email, Teams, SharePoint and OneDrive.
• Collaborate with IT Infrastructure and Network teams to ensure secure configuration of servers, networks and cloud environments.
• Partner with End User Support team to improve endpoint security, user awareness and access controls.
• Monitor, investigate and respond to security incidents, escalating where necessary.
• Perform regular vulnerability assessments, recommending and following up on remediation actions.
• Develop and maintain security documentation, including standards, procedures and technical guidelines.
• Assist in compliance with security frameworks, regulations and industry best practices (e.g., ISO 27001, NIST).
• Continuously evaluate emerging threats and recommend new tools, technologies and processes to mitigate risks.
• Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules.

Qualifications

• 3–5 years of hands-on experience in IT security operations.
• Certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity, or GIAC
• Additional certifications like CISM or CSSP are considered a plus
• Good analytical and problem-solving skills to investigate and resolve security vulnerabilities effectively.
• Excellent written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders.
• Knowledge of cybersecurity threats, vulnerabilities, and exploit methods.
• Familiarity with cloud computing platforms and related security considerations (GCP, Azure, AWS).
• Experience in security configurations, patch management, certification management, firmware updates, firewall rule management, and endpoint security agent administration.
• Ability to work collaboratively in a fast-paced environment while maintaining the confidentiality, integrity, and availability of information assets.
• Hands-on experience with security tools such as SIEM, EDR, XDR, UEBA, and SOAR.
• Knowledge of the MITRE ATT&CK framework will be added advantage.
• Familiarity with ISO27001 standards will be added advantage.
• Understanding of Zero Trust architecture will be added advantage.

• Permanent role with MNC with high job stability
• Exposure to wide range of latest technology 

About the company

Our client is an established MNC with over 30 years of experience who is a market leader within their industry. As part of their plan to invest in technology, they are now hiring an experienced IT Infrastructure Security Engineer to join their team.

About the job

• Handling IT Infrastructure Operations in a cloud based environment
• Handling IT security such as designing and deploy Zero trust /  Conditional Access (CA) policies that evaluate signals (User, Device, Location, Application, and Real-time risk)
• Design, maintain, and rigorously test robust disaster recovery and business continuity plans to ensure system uptime and data integrity.
• Manage external vendors, ensuring SLA is adhered

Skills and experience required

As a successful applicant, you will have at least 7 years of experience in security and IT infrastructure. Exposure to Azure AD / Entra ID security or O365 Conditional Access will be highly preferred. 

Whats on offer

This is an excellent opportunity to join an established company with heavy investments in Security. 

To apply online please use the 'apply' function, alternatively you can reach me at https://www.linkedin.com/in/hoonteck-nologyrecruitment. (EA: 94C3609/ R1219669)