Total 439 security job vacancies in Hong Kong

Job Title: Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer

Employment Period: August/September 2026 to March 2027, with possible yearly renewal
Location: 1 Fusionopolis Way
Working Hours: Monday to Friday, 8:30am to 6:00pm
Engagement Type: Contract / Renewable Term

Role Overview
We are seeking a Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer to support Data Loss Prevention alert monitoring, incident handling, investigation, reporting, user support, and policy improvement activities.

The successful candidate will work closely with security operations, service desk, data owners, business users, compliance teams, and Microsoft Purview SMEs to ensure DLP alerts are properly monitored, investigated, classified, documented, escalated, and improved through continuous policy tuning.

Key Responsibilities

DLP Alert Monitoring & Incident Handling
Monitor DLP alerts from Microsoft Purview DLP Dashboard, Microsoft Defender XDR, email notifications, service desk tickets, and related alerting channels.

Log, track, triage, and classify DLP alerts, including initial investigation of true positives and false positives.

Perform first-level analysis and escalate high-risk or complex incidents to L2 security operations, L3 Purview SMEs, architects, compliance, legal, or other relevant stakeholders where required.

Investigation & Analysis
Perform detailed analysis of DLP incidents to identify root causes, including user behaviour, policy gaps, data misclassification, or process issues.

Validate and document false positives clearly to support policy improvement and operational reporting.

Support forensic analysis and evidence gathering for high-risk DLP incidents where required.

Escalation & Stakeholder Coordination
Coordinate with SOC teams, service desk, business units, data owners, compliance, legal, and IT stakeholders to ensure DLP incidents are handled appropriately and within expected timelines.

Communicate DLP-related issues clearly to both technical and non-technical users.

Policy Tuning & Change Management
Work with L3 SMEs and architects to recommend improvements to DLP policies based on repeated alerts, user feedback, threat trends, false positive patterns, and post-incident findings.

Support DLP change management activities arising from new regulatory requirements, new workloads such as Teams, Copilot or SaaS applications, and post-incident improvements.

Provide practical recommendations to improve DLP policy effectiveness and reduce unnecessary business disruption.

User Support & Awareness
Respond to user-reported DLP issues, including blocked activities, policy alerts, and suspected false positives.

Provide guidance to users on compliant data handling and proper use of sensitive information.

Support communication and awareness activities related to DLP policy enforcement.

Monitor and ensure the AI agent is running and responding correctly where applicable.

Reporting & Continuous Improvement
Prepare periodic DLP reports covering alert volumes, top users triggering policies, false positive rates, policy effectiveness trends, recurring issues, and recommended improvements.

Maintain proper documentation of investigations, findings, escalations, and closure actions.

Technical Skills Required
Strong hands-on knowledge of Microsoft Purview DLP is mandatory.

Experience in Microsoft Purview policy configuration, troubleshooting, alert review, and operational support.

Good understanding of DLP across Endpoint, Exchange, SharePoint, Teams, and Microsoft 365 workloads.

Knowledge of Microsoft Defender XDR, Microsoft 365 Compliance Portal, Microsoft Entra, sensitivity labels, data classification, and information protection.

Microsoft Intune experience will be an added advantage.

Operational & SOC Skills
Experience in incident triage, investigation, security alert analysis, ticket handling, true/false positive determination, and basic log analysis.

Experience with ticketing tools such as ServiceNow or similar platforms.

Ability to work with SOC, service desk, compliance, legal, and business stakeholders.

Data Security & Compliance Knowledge
Good understanding of data protection, data classification, data exfiltration risks, insider risk awareness, and DLP control concepts.

Knowledge of Singapore PDPA and data protection practices will be advantageous.

Soft Skills
Strong communication skills with business users and technical stakeholders.

Ability to explain DLP blocks, alerts, and policy enforcement in a professional and user-friendly manner.

Strong analytical thinking, root-cause analysis, documentation, and coordination skills.

Able to work independently while escalating appropriately when needed.

Experience Requirement
3 to 5 years of experience in Microsoft 365, Microsoft Purview, DLP, security operations, end-user support, or L2 support.

Hands-on experience supporting Microsoft Purview DLP in an enterprise environment is strongly preferred.

Preferred Certifications
Microsoft SC-400: Information Protection Administrator
Microsoft SC-200: Security Operations Analyst
Microsoft MS-102: Microsoft 365 Administrator
Microsoft SC-300: Identity and Access Administrator

Successful candidates need to be comfortable with working on weekends, and rotation shifts as and when required.

Key Responsibilities

• Work with infra and app teams on requirement gathering to implementation, for all the BAU activities.
• Review and analyze infrastructure changes and identify the gaps, for all the BAU activities.
• Perform all infra change activities (BAU and non-BAU). These include routers, switches, load balancers, firewalls, proxy, DNS and etc.
• Perform Network and Firewall patching and other administration tasks.
• Guide app team to troubleshoot infra related issues.
• Be the SME for Network and Firewall administration and automation.

Operation& Process:

• Collaborates with Application teams and other infra teams to develop technical solutions and enhancements.
• Drive the onboarding of new applications on to the production environment.
• Assist to deploy, maintain, and enhance the security of all infrastructure systems through administrative, preventive, detective, and reactive controls, such as change and configuration management, anti-virus measures, patch management, and system scans.
• Any other ad-hoc duties as assigned by supervisors

Requirements:

• Bachelor's degree in relevant field (e.g., Computer Science, Information Technology, Engineering).
• Around 8 years’ experience providing network operational and administration support for Cisco, Arista, F5, Huawei, Checkpoint, Infoblox, Fortinet (firewall & proxy) products.
• Knowledge in network routing and switching protocols, and its related technologies.
• Knowledge in network security, load balancing and optimization technologies.
• Able to work extended hours and perform standby duty after office hours when required.
• Possess good technical problem-solving and troubleshooting skills.
• Attention to detail and well-versed in documentation.
• Hands on experience in Cloud computing, Microsoft Dynamics CRM, Office365 is an added advantage.
• Minimum CCNA/CCNP certification or equivalent is essential.
• Other network/firewall/DNS/F5/proxy certification will be an added advantage.
• Able to work as a team player, as well as independently.

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: douglastan@recruitexpress.com.sg

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd

Successful candidates need to be comfortable with working on weekends, and rotation shifts as and when required.

Key Responsibilities

• Work with infra and app teams on requirement gathering to implementation, for all the BAU activities.
• Review and analyze infrastructure changes and identify the gaps, for all the BAU activities.
• Perform all infra change activities (BAU and non-BAU). These include routers, switches, load balancers, firewalls, proxy, DNS and etc.
• Perform Network and Firewall patching and other administration tasks.
• Guide app team to troubleshoot infra related issues.
• Be the SME for Network and Firewall administration and automation.
• Any other ad-hoc duties as assigned by supervisors

Operation& Process:

• Collaborates with Application teams and other infra teams to develop technical solutions and enhancements.
• Drive the onboarding of new applications on to the production environment.
• Assist to deploy, maintain, and enhance the security of all infrastructure systems through administrative, preventive, detective, and reactive controls, such as change and configuration management, anti-virus measures, patch management, and system scans.

Requirements:

• Bachelor's degree in relevant field (e.g., Computer Science, Information Technology, Engineering).
• Around 8 years’ experience providing network operational and administration support for Cisco, Arista, F5, Huawei, Checkpoint, Infoblox, Fortinet (firewall & proxy) products.
• Knowledge in network routing and switching protocols, and its related technologies.
• Knowledge in network security, load balancing and optimization technologies.
• Able to work extended hours and perform standby duty after office hours when required.
• Possess good technical problem-solving and troubleshooting skills.
• Attention to detail and well-versed in documentation.
• Hands on experience in Cloud computing, Microsoft Dynamics CRM, Office365 is an added advantage.
• Minimum CCNA/CCNP certification or equivalent is essential.
• Other network/firewall/DNS/F5/proxy certification will be an added advantage.
• Able to work as a team player, as well as independently.

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: douglastan@recruitexpress.com.sg

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd

Location: Changi AIrport
Salary: $2,800 – $3,100 per month
Working days: 4 days work 2 days off OR 5 days work 1 day off

Responsibilities
• Manning of static/access control points
• Checking of passes and other documents at static/access points
• Screening and checking of all personnel and vehicles entering and exiting the premises
• Patrolling and guarding client’s personnel and properties
• Operating metal/explosive detectors/x-ray machines at checkpoints
• Issuing of visitor/contractor pass in exchange for their identification cards
• Attending to alarm activation
• CCTV Monitoring
• Responding to incidents such as unattended bags, etc.
• Maintaining records of all incidents
• Checking of boarding, staff, and valid entry passes

Benefits
• Full-time: Attractive salary package – Up to SGD3,600*
• 12hrs shift work (can be rotating or perm)
• Joining bonus up to $3500*
• Yearly Increment*
• Fully sponsored WSQ certified security training
• Comprehensive medical and dental benefits, etc

Our client is a Computer and Network Security Industry. Due to business needs, they are now recruiting a Business Development Executive to be part of their Team for ongoing transformation projects. They are located in the West - easily accessible.

About the Role:

Are you passionate about technology and eager to drive business growth in a fast-evolving field? We are looking for a proactive and ambitious Business Development professional to play a key role in expanding our cyber-security portfolio across Singapore and the APAC region.

Responsibilities:

• Spot, evaluate, and pursue new business opportunities in priority industries and markets across the region.
• Develop and implement go-to-market strategies to accelerate the adoption of our cyber-security solutions.
• Build strong, consultative relationships with customers and partners, collaborating with internal technical teams when needed.

Requirements:

• Min Degree Cybersecurity, Computer Science, or a related field.
• Minimum 1 year of experience in business development or sales 

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email Address: jobs@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No: 19C9682

EA Personnel No: R25157233 (Loh Pooi Keng)

Successful candidates need to be comfortable with working on weekends, and rotation shifts as and when required.

Key Responsibilities

• Work with infra and app teams on requirement gathering to implementation, for all the BAU activities.
• Review and analyze infrastructure changes and identify the gaps, for all the BAU activities.
• Perform all infra change activities (BAU and non-BAU). These include routers, switches, load balancers, firewalls, proxy, DNS and etc.
• Perform Network and Firewall patching and other administration tasks.
• Guide app team to troubleshoot infra related issues.
• Be the SME for Network and Firewall administration and automation.

Operation& Process:

• Collaborates with Application teams and other infra teams to develop technical solutions and enhancements.
• Drive the onboarding of new applications on to the production environment.
• Assist to deploy, maintain, and enhance the security of all infrastructure systems through administrative, preventive, detective, and reactive controls, such as change and configuration management, anti-virus measures, patch management, and system scans.
• Any other ad-hoc duties as assigned by supervisors

Requirements:

• Bachelor's degree in relevant field (e.g., Computer Science, Information Technology, Engineering).
• Around 8 years’ experience providing network operational and administration support for Cisco, Arista, F5, Huawei, Checkpoint, Infoblox, Fortinet (firewall & proxy) products.
• Knowledge in network routing and switching protocols, and its related technologies.
• Knowledge in network security, load balancing and optimization technologies.
• Able to work extended hours and perform standby duty after office hours when required.
• Possess good technical problem-solving and troubleshooting skills.
• Attention to detail and well-versed in documentation.
• Hands on experience in Cloud computing, Microsoft Dynamics CRM, Office365 is an added advantage.
• Minimum CCNA/CCNP certification or equivalent is essential.
• Other network/firewall/DNS/F5/proxy certification will be an added advantage.
• Able to work as a team player, as well as independently.

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: douglastan@recruitexpress.com.sg

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

• Well Established Security Inspection Solutions Company

• Salary: $2500 - $2800 (Basic) + $300 Transport Allowance

• Working Hour: Monday - Friday (8.30am – 5.30pm)

• Company Location: Jurong East (Based on Project Site)

• Variable bonus + Excellent Wellfare

• Training Provided

Job Scope:

• Assist Engineers in the maintenance, repair, and installation of equipment. Diagnose errors and technical issues and determine appropriate solutions.
• Support Engineers in project management, including planning, execution, and monitoring.
• Assist with the installation of new equipment and systems.
• Conduct routine troubleshooting of mechanical and electrical equipment to ensure smooth operations.
• Produce timely and detailed reports regarding maintenance activities, project status, and any issues or delays.
• Follow all company field processes and protocols to ensure safety and efficiency.
• Perform basic housekeeping duties to ensure a clean and safe work environment.
• Perform any other engineering-related tasks as assigned by senior engineers or management.

Requirement:

• NITEC / Diploma in Electrical / Mechanical Engineering or equivalent
• 0 - 2 years of relevant working experience in similar position

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume:

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

YEOW CHANG FU (R23118759)

EA Recruitment Pte Ltd

EA License No: 21C0492

Overview

We are seeking an experienced Application Security Consultant to drive secure application development practices, perform security assessments, and support cloud security initiatives. The ideal candidate will have strong expertise in application security, secure SDLC, DevSecOps, threat modelling, and cloud technologies.

Responsibilities

• Perform application security assessments and reviews for web, mobile, and cloud-based applications.
• Conduct threat modelling exercises to identify, assess, and mitigate application security risks.
• Establish threat profiles and recommend security controls for application projects.
• Track, manage, and remediate security vulnerabilities through timely patching and remediation processes.
• Integrate security best practices and automated security testing into CI/CD pipelines.
• Conduct security awareness training and promote secure coding practices across development teams.
• Collaborate with developers, engineers, and stakeholders to strengthen application security posture.
• Support security governance, risk management, and compliance initiatives. 

Requirements

• Minimum 4 years of combined experience in software development, application security, and cloud computing (AWS preferred).
• Strong understanding of web and mobile application architectures and APIs, including REST, SOAP, SSL/TLS.
• Experience in threat modelling and application security risk assessment.
• Strong knowledge of application security standards and frameworks, including:OWASP Top 10OWASP Application Security Verification Standard (ASVS)
• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.
• Experience integrating security testing into development workflows.
• Hands-on experience with SAST (Static Application Security Testing) tools such as:Fortify on DemandSonarQubeSimilar security scanning platforms
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Professional certifications such as:CISSPOSCPAWS Security SpecialtyAWS DevOps EngineerEquivalent cybersecurity certifications
• Experience working with Government Commercial Cloud (GCC) environments.

Key Skills

Application Security | DevSecOps | Threat Modelling | OWASP Top 10 | OWASP ASVS | AWS Security | CI/CD | SAST | Fortify | SonarQube | REST API | SOAP | SSL/TLS | GitLab | GitHub | Ansible | Cloud Security | Vulnerability Management | Secure SDLC | Security Awareness Training | GCC Cloud Environment

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

This is a 12 months fixed term contract role.

What will you do?

• Develop and maintain IT security policies and action plans, reviewing them at least annually or as required by the Customer.
• Evaluate and recommend IT security products and solutions for implementation within the Customer's IT infrastructure.
• Implement and manage risk assessment methodologies, ensuring compliance with relevant service management requirements and industry standards.
• Develop and implement security management frameworks and governance structures as specified by the Customer.
• Establish and manage IT Security Incident Management processes, including detection, response, and handling of security incidents according to Customer guidelines.
• Collaborate with external partners and suppliers to resolve IT security incidents effectively.
• Participate in and contribute to industry-wide IT security incident response simulations and technical assessment exercises.
• Conduct forensic investigations when required, including secure disk image acquisition and analysis within specified timeframes.
• Monitor, analyze, and report on emerging security threats, vulnerabilities, and solutions relevant to the Customer's IT infrastructure.
• Conduct regular meetings with key stakeholders to highlight security issues and propose improvements to the Customer's IT infrastructure.
• Liaise and coordinate with external suppliers, security organizations, and the Government on IT security matters related to the Customer's infrastructure.
• Perform additional activities as necessary to secure the Customer's IT infrastructure.
• Review and follow up on security reports generated from central security tools, providing timely updates to the Customer.
• Manage the inventory of IT assets to be monitored by central security tools, ensuring compliance and proper onboarding of servers, networks, and databases.

Requirements

• At least 4 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (e.g. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred

Benefits

What do we offer in return?

• Fun working environment
• Employee Wellness Program
• To work in Singapore Government Agencies projects
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at careers@activate.sg

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.

Overview
We are seeking a Cyber Security Researcher to join a team focused on identifying and mitigating software vulnerabilities through advanced security research. This role offers the opportunity to work alongside cyber threat experts in conducting vulnerability research, reverse engineering, fuzzing, and code auditing to strengthen system security against evolving cyber threats.

Responsibilities

• Collaborate with cyber security and threat intelligence experts to identify and mitigate security risks.
• Conduct vulnerability research through fuzzing, reverse engineering, and source code auditing.
• Analyze software and systems to identify security weaknesses and exploit paths.
• Develop proof-of-concept (PoC) exploits to validate identified vulnerabilities.
• Investigate security flaws and recommend remediation strategies.
• Contribute to the development of tools and methodologies for vulnerability discovery and analysis.
• Stay current with emerging cyber threats, attack techniques, and security research trends.

Requirements

• Min 2 years of experience in vulnerability research, reverse engineering, software security, or cyber security research.
• Hands-on experience in native userland and or kernel-space vulnerability research.
• Experience identifying and analyzing security vulnerabilities through fuzzing, reverse engineering, and code auditing.
• Strong programming skills in C and Python.
• Familiarity with ARM/AArch64 assembly language and low-level system internals.

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell ( School )

Timing: 630-630

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Key Responsibilities

• Lead SIEM configuration, rule tuning, and onboarding of logs from servers, applications, and network infrastructure.

• Perform daily security alert monitoring and analysis, including alert triage, classification, investigation, escalation, and case closure.

• Prepare weekly security monitoring and alert trend reports, including event summaries, detection metrics, and operational observations.

• Deploy and manage log collection agents across Linux, Windows, and network infrastructure, ensuring stable log coverage and platform reliability.

• Maintain and enhance AI-assisted detection and behavioral analysis workflows, including alert flow stability and detection optimization.

• Define and refine detection logic, including rules, correlation patterns, and behavioral indicators.

• Support integration of OS and application logs for monitoring, correlation, and activity analysis.

• Manage dashboards, alert metrics, and reporting to provide visibility into security posture and monitoring operations.

• Support incident investigation and coordinate with infrastructure and application teams where required.

• Ensure platform health, log retention, monitoring coverage, and overall reliability of the SIEM environment.

Preferred Skills & Qualifications

• Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, or related field.

• Minimum 5 years of experience in SIEM administration, security monitoring, or detection engineering.

• Hands-on experience with SIEM, log management, or security monitoring platforms.

• Strong knowledge of Linux and Windows systems administration and security log analysis.

• Experience with Python, Shell scripting, or automation tools for log processing and workflow optimization.

• Familiarity with security event correlation, behavioral analysis, and detection engineering concepts.

• Exposure to API integration, middleware, or AI-assisted analysis solutions is an advantage.

• Strong analytical, troubleshooting, and problem-solving skills with attention to detail.

• Ability to communicate effectively in English

• Fluency in spoken and written Chinese is essential, as the role requires frequent liaison with Chinese-speaking counterparts and stakeholders, and the preparation, review and handling of Chinese-language work materials.


主要職責

資安監控與事件分析

• 執行日常資安警示監控與分析，包括警示分流、分類、調查、升級處理及案件結案
• 支援資安事件調查，並在需要時與基礎架構及應用程式團隊協作
• 準備每週資安監控與警示趨勢報告，包括事件摘要、偵測指標及營運觀察

SIEM 管理與偵測工程

• 主導 SIEM 設定、日誌導入、規則調校及偵測優化，涵蓋伺服器、應用程式及網路基礎架構
• 定義並優化偵測邏輯，包括關聯規則、行為指標及監控使用情境
• 維護並改善 AI 輔助偵測及行為分析工作流程

日誌管理與平台營運

• 在 Linux、Windows 及網路設備上部署並管理日誌收集代理程式，確保穩定且完整的日誌覆蓋範圍
• 支援作業系統與應用程式日誌整合，用於監控、關聯分析及活動分析
• 確保 SIEM 環境的平台健康狀態、日誌保存、監控覆蓋率及整體可靠性

儀表板與報告

• 管理儀表板、警示指標及報告，提升組織資安狀態的可視性
• 支援營運報告及資安監控績效檢討

流程改善與自動化

• 透過腳本與系統整合，推動資安監控自動化及工作流程改善
• 參與資安平台強化與營運優化專案

理想條件

• 資訊安全、網路安全、電腦科學或相關領域學士學位
• 至少 5 年 SIEM 管理、資安監控或偵測工程相關經驗
• 具備 SIEM 或日誌平台實務經驗，例如 ELK、Wazuh、Splunk、Graylog、QRadar 或相關技術
• 熟悉 Linux 與 Windows 系統管理及資安日誌分析
• 具備 Python、Shell Scripting 或自動化工具經驗，可應用於日誌處理與工作流程優化
• 熟悉資安事件關聯分析、行為分析及偵測工程相關概念
• 具備 API 整合、中介軟體或 AI 輔助分析解決方案經驗者佳
• 具備良好的分析、故障排除與問題解決能力，並注重細節
• 能以英文進行有效溝通；具普通話能力者佳，有助於與區域利害關係人協作
• 須具備流利的中文聽說讀寫能力，因本職位需經常與中文溝通之合作方及持份者聯繫，並需撰寫、審閱及處理中文工作文件

核心能力

• 資安監控與事件分析
• SIEM 管理
• 偵測工程
• 日誌管理與關聯分析
• 自動化與腳本撰寫
• 分析思維
• 問題解決能力
• 跨部門溝通與協作能力

對資安偵測、SIEM 平台管理及資安監控營運有豐富經驗，並希望參與區域型資安平台優化與威脅偵測工作的專業人士，歡迎與我們聯繫了解更多。

Lumina Advisory & Global Search Pte Ltd | 25C3262

Joyce Yeo | R1218489

We are seeking an experienced ITSO Security Officer to join our team. In this role, you will act as the security advisor throughout the software development lifecycle, partnering closely with developers, architects, DevOps engineers, and project stakeholders to ensure applications are designed, built, and deployed securely.

Why Join Us:

• Salary up to $9,000 + AWS
• Hybrid Work Arrangement
• Government Projects

Responsibilities:

• Conduct threat modelling exercises to identify, assess, and mitigate application security risk
• Perform and review security assessments using SAST, DAST, and other application security tools
• Review security controls for cloud-hosted applications, particularly within AWS environments
• Provide ongoing support and troubleshooting for deployed features, maintaining platform stability, performance, and a strong user experience

Requirements:

• Minimum 4 years of experience across software development, application security, DevSecOps, or cloud security
• Working knowledge of: OWASP Top 10, OWASP ASVS
• Experience with security scanning tools such as: Fortify on Demand, SonarQube, Similar SAST/DAST solutions
• Familiarity with AWS cloud environments and cloud security best practices

If you’re passionate about contributing to impactful government projects while advancing your career, we welcome you to explore this opportunity with us

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Elias Yeo HongJie (Outsourcing Team)
ScienTec Consulting Pte Ltd - 11C5781