Total 3,050 Others security analyst job vacancies in Hong Kong

We are seeking a Java Developer to design, build, and maintain high-performing, scalable, and enterprise-grade Java applications. You will be a key part of our engineering team, collaborating with cross-functional teams to translate business requirements into functional, high-quality software.

• Application Development: Translate software requirements and use cases into clean, efficient, and functional Java applications.
• Code Quality: Design, build, and maintain highly reusable, reliable, and testable Java code.
• Testing & Debugging: Conduct unit and integration testing to ensure reliability, and proactively identify and resolve bottlenecks and bugs

Interested applicants please send your resume to venessagoh@recruitexpress.com.sg

Venessa Goh Wee Ni

R24124686

Recruit Express Pte Ltd

EA License No: 99C4599

We regret that only shortlisted candidates will be contacted.

Product area

Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.

Job description

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

Qualifications

Job responsibilities

• Write and review backend infrastructure code.
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact on hardware, network, or service operations and quality.
• Perform technical security assessments, code audits and design reviews.
• Develop technical solutions to help mitigate security vulnerabilities.
• Advocate security and secure practices throughout Google Payments.

Minimum qualifications

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with software development in one or more programming languages (e.g., Go, Python, C, C++, Java, JavaScript), or 1 year of experience with an advanced degree.
• 1 year of experience with security in attacks and mitigation methods.

Preferred qualifications

• Master's degree or PhD in Computer Science, or a related technical field.
• Experience in application and service security, including design reviews, and source code assessments.
• Knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.

Key Responsibilities

Global SIG Logistics & Trade Orchestration

• Act as the single global point of coordination for SIG logistics and trade operations across regions.

• Serve as the primary communicate with Micron Global Trade, Global Logistics, customs brokers, and 3PL partners.

• Align SIG logistics execution with enterprise‑level trade strategy, risk posture, and cost objectives.

Process Architecture, Governance & SOP Ownership

• Architect and own end‑to‑end SIG logistics and trade process frameworks, including:

• Imports, exports, inter‑site transfers, repairs/RMA, returns, and exception flows.

• Translate global policies into SIG‑specific SOPs, playbooks, and decision frameworks that are clear, auditable, and execution‑ready.

• Establish process controls, blocking issue paths, and hand‑offs without duplicating regulatory ownership.

Digital, Analytics & AI Enablement

• Drive adoption of digital tools, analytics, and AI‑enabled capabilities to:

• Improve shipment visibility, risk detection, and cycle‑time predictability.

• Identify documentation gaps, compliance risks, and process deviations early.

• Reduce manual touchpoints through workflow automation and intelligent exception management.

• Partner with IT, data, and automation teams to embed AI‑assisted insights into logistics and trade workflows (e.g., predictive delays, anomaly detection, documentation completeness).

Global Site Enablement & Change Leadership

• Enable consistent, scalable SIG execution across Malaysia, Singapore, India, China, Mexico, and the United States.

• Lead rollout of new logistics models, trade flows, and operating changes with structured organizational change.

• Work with site logistics teams to elevate capability, judgment, and execution maturity.

Sophisticated Issue Resolution & Risk Coordination

• Coordinate resolution of shipment holds, customs issues, documentation discrepancies, and cross‑region misalignment.

• Drive fact‑based root cause analysis and corrective actions.

• Bring up regulatory interpretations and decisions to the appropriate Global Trade owners, maintaining clear separation of accountability.

Required Experience & Capabilities

• MBA or Master’s or Bachelor's in Supply Chain / Logistics / Business / Engineering / Global Business

• 12 years of proven experience in global logistics, international trade operations, or supply chain execution within a sophisticated, multi‑country environment.

• Proven track record managing cross‑border import/export operations across multiple regulatory regimes (Asia, Americas preferred).

• Strong experience in process architecture, SOP design, and global operating model deployment.

• Demonstrated ability to operate in high‑judgment, ambiguous environments involving compliance risk, cost tradeoffs, and delivery pressure.

• Experience demonstrating digital tools, data analytics, automation, or AI‑enabled solutions to improve logistics or trade execution (hands‑on or through partnership).

• Strong collaborator and leadership skills — able to influence without authority across global, matrixed organizations.

• Background in semiconductor, high‑tech manufacturing, or capital equipment supply chains strongly preferred.

• Possess CSCP / CLTD (APICS) / Trade compliance certificate (IOE&IT / CTLE)
  

  Organizes and implements a variety of responsibilities related to the flow of materials, products, services and associated systems information. Duties involve but are not limited to supply chain services, inventory control, critical parts availability, material handling, import-export licensing, shipment of products, and third party warehousing. Evaluates customer support and field service commitments to ensure customer requirements are met. Serves as liaison between sales and operations teams to develop concepts and coordinate product knowledge; provides data analysis for production planning and volume studies; and participates in process/rating improvement efforts. Assists in developing logistics plans and procedures.

Key Responsibilities

Global SIG Logistics & Trade Orchestration

• Act as the single global point of coordination for SIG logistics and trade operations across regions.

• Serve as the primary communicate with Micron Global Trade, Global Logistics, customs brokers, and 3PL partners.

• Align SIG logistics execution with enterprise‑level trade strategy, risk posture, and cost objectives.

Process Architecture, Governance & SOP Ownership

• Architect and own end‑to‑end SIG logistics and trade process frameworks, including:

• Imports, exports, inter‑site transfers, repairs/RMA, returns, and exception flows.

• Translate global policies into SIG‑specific SOPs, playbooks, and decision frameworks that are clear, auditable, and execution‑ready.

• Establish process controls, blocking issue paths, and hand‑offs without duplicating regulatory ownership.

Digital, Analytics & AI Enablement

• Drive adoption of digital tools, analytics, and AI‑enabled capabilities to:

• Improve shipment visibility, risk detection, and cycle‑time predictability.

• Identify documentation gaps, compliance risks, and process deviations early.

• Reduce manual touchpoints through workflow automation and intelligent exception management.

• Partner with IT, data, and automation teams to embed AI‑assisted insights into logistics and trade workflows (e.g., predictive delays, anomaly detection, documentation completeness).

Global Site Enablement & Change Leadership

• Enable consistent, scalable SIG execution across Malaysia, Singapore, India, China, Mexico, and the United States.

• Lead rollout of new logistics models, trade flows, and operating changes with structured organizational change.

• Work with site logistics teams to elevate capability, judgment, and execution maturity.

Sophisticated Issue Resolution & Risk Coordination

• Coordinate resolution of shipment holds, customs issues, documentation discrepancies, and cross‑region misalignment.

• Drive fact‑based root cause analysis and corrective actions.

• Bring up regulatory interpretations and decisions to the appropriate Global Trade owners, maintaining clear separation of accountability.

Required Experience & Capabilities

• MBA or Master’s or Bachelor's in Supply Chain / Logistics / Business / Engineering / Global Business

• 12 years of proven experience in global logistics, international trade operations, or supply chain execution within a sophisticated, multi‑country environment.

• Proven track record managing cross‑border import/export operations across multiple regulatory regimes (Asia, Americas preferred).

• Strong experience in process architecture, SOP design, and global operating model deployment.

• Demonstrated ability to operate in high‑judgment, ambiguous environments involving compliance risk, cost tradeoffs, and delivery pressure.

• Experience demonstrating digital tools, data analytics, automation, or AI‑enabled solutions to improve logistics or trade execution (hands‑on or through partnership).

• Strong collaborator and leadership skills — able to influence without authority across global, matrixed organizations.

• Background in semiconductor, high‑tech manufacturing, or capital equipment supply chains strongly preferred.

• Possess CSCP / CLTD (APICS) / Trade compliance certificate (IOE&IT / CTLE)
  

  Organizes and implements a variety of responsibilities related to the flow of materials, products, services and associated systems information. Duties involve but are not limited to supply chain services, inventory control, critical parts availability, material handling, import-export licensing, shipment of products, and third party warehousing. Evaluates customer support and field service commitments to ensure customer requirements are met. Serves as liaison between sales and operations teams to develop concepts and coordinate product knowledge; provides data analysis for production planning and volume studies; and participates in process/rating improvement efforts. Assists in developing logistics plans and procedures.

Young and research-intensive, Nanyang Technological University, Singapore (NTU Singapore) is ranked among the world’s top universities. NTU’s College of Computing and Data Science (CCDS) is a leading college that is known for its excellent curriculum, outstanding and impactful research, and world-renowned faculty.

A hot bed of cutting-edge technology and groundbreaking research, the College aims to groom the next generation of leaders, thinkers, and innovators to thrive in the digital age. Located in the heart of Asia, NTU’s College of Computing and Data Science is an ‘exciting place to learn and grow. We welcome you to join our community of faculty, students and alumni who are shaping the future of AI, Data Science and Computing.

Key Responsibilities:

• Assist in conducting research on cybercrime and AI-enabled threats using large language models (LLMs), artificial intelligence techniques, and empirical security analysis methods.

• Support the design and implementation of research prototypes and tools for AI-driven cyber threat analysis, malicious activity detection, and cybercrime measurement.

• Collaborate with academic and industry partners by assisting in project-related research tasks, experiments, documentation, and technical discussions in cybercrime and AI security research.

• Support the preparation of research outputs, including literature reviews, experiment summaries, technical reports, figures, tables, and manuscript drafts for academic publication.

• Assist in proposal preparation and grant-related documentation in areas such as cybercrime, AI-driven cybercrime measurement, and AI security.

• Assist in building and maintaining experimental platforms, benchmarks, and datasets for cybercrime measurement, threat analysis, and LLM security.

Job Requirements:

• A Bachelor degree in Computer Science, Cyber Security, or a related discipline.

• Research or applied experience in cybercrime measurement, AI-enabled cybercrime analysis, or LLM security through coursework, projects, internships, or research activities.

• Knowledge of cybercrime concepts and LLM prompt techniques.

• Proficiency in programming languages such as Python, C/C++, and Java.

• Familiarity with vulnerability analysis, network analysis, and cybercrime comprehension techniques through coursework, projects, or hands-on practice.

• Ability to support academic writing and research outputs, including literature reviews, technical reports, experiment summaries, and manuscript preparation for international conferences.

We regret that only shortlisted candidates will be notified.

Able to commit 4 days work 1 day off, 3 days work 1 day off schedule.
12 hours permanent shift
Location: islandwide
Salary Package:  $2,870 - $3,500 (gross)
Bonus : $2,000


 Responsibilities:
Manning of static/access control points
Checking of passes and other documents at static/access points
Screening and checking of all personnel and vehicles entering and exiting the premises
Patrolling and guarding client’s personnel and properties
Operating metal/explosive detectors/x-ray machines at checkpoints
Issuing of visitor/contractor pass in exchange for their identification cards
Attending to alarm activation
CCTV Monitoring
Responding to incidents such as unattended bags, etc.
Maintaining records of all incidents
Checking of boarding, staff, and valid entry passes

Requirements:
PSLE
 
Benefits:
Competitive Salary and Benefits Package 
Paid Training Provided
Medical & Dental Coverage 
Career Progression
Yearly Salary Increment

Kelly Chong Reg No:R26161160

The Supreme HR Advisory Pte Ltd EA No: 14C7279

To lead and ensure that security management practices across the region are implemented and

maintained to ensure the security of people, assets and operations of DP World within the region.

• To ensure security compliance of the BUs in the region to their respective applicable mandatory,

voluntary and client specific security compliance requirements. These requirements must be identified

and the list to be maintained.

• To plan and support implementation of compliance standards like ISPS Code, ISO 28000, TAPA etc. that

are required or planned as improvement by the BUs within the region.

• To ensure that security awareness becomes a culture within the region, using security campaigns,

training, outreach, and awareness sessions, either in person to locally based colleagues or remotely

through delegated security managers regionally

• To ensure all travellers in the region are apprised of security risk factors and implement measures and

mitigation techniques appropriate to the specific location

• To maintain close contact with regional peers within DP World and to build effective relationships with

regional and local agencies who can assist the collection of security information and the response to an

incident

• Undertake Risk Assessments and provide advice on security matters and compliance for new projects.

• Undertake security reviews and/or audits within the region as per frequency agreed with Group Security

and Regional Head.

• Lead, support and project manage on all aspects of security for new businesses and acquisitions.

• Support and where assigned lead security systems projects within the region.

• Support the integration of new businesses to the global security management system requirements.

• Prepare and submit security reports for the region to Group Security and Regional Head in the agreed

template(s) and frequency.

OTHER

• Applicable if role has direct or indirect reports - responsible for the management and leadership of an

engaged team, promoting collaboration and ensuring that each is developed and evaluated against goals

and objectives which are aligned, specific, measurable, attainable yet challenging, realistic and time

bound.

• Act as an ambassador for DP World at all times when working; promoting and demonstrating positive

behaviours in harmony with DP World's Principles, values and culture; ensuring the highest level of safety

is applied in all activities; understanding and following DP World's Code of Conduct and Ethics policies.

• Perform other related duties as assigned

Position Overview:

Squarepoint is seeking a subject matter expert to join our Information Security team as a Senior Information Security Engineer. This senior position plays a pivotal role in strengthening our security posture by providing expert guidance, and driving improvements across key areas such as network, cloud, data, and system security. The successful candidate will act as an escalation point to the Security Operations, ensuring complex security problems are effectively analysed and resolved. This role includes overseeing security in critical IT projects, leading threat modelling for complex systems, auditing key systems for security gaps, and building automated capabilities to continuously validate controls’ effectiveness and system resilience. This position offers an opportunity to lead security initiatives and shape the security roadmap. A high degree of self-motivation and proactivity is mandatory for success in this role.

• Strengthen security across core areas, including network and system security, email security, cloud security, and data protection.
• Serve as a security advisor for IT projects, ensuring security requirements are met and risks are mitigated.
• Manage and optimize security tools, ensuring they are effectively deployed and maintained.
• Lead the design and development of security solutions and architectures to protect critical assets.
• Provide second-line support to Security Operations.
• Conduct threat modelling and risk assessments to identify vulnerabilities and drive proactive mitigation strategies.
• Oversee relationships with the Managed Detection and Response (MDR) provider, ensuring service effectiveness and continuous improvement.
• Execute security roadmap’s initiatives, aligning with business objectives and emerging threats.
• Collaborate with cross-functional teams to enhance security awareness and integrate security into business processes.

Required Qualifications:

• Minimum 5 years of hands-on experience in an information security role, such as security engineering, security architecture, security operations, or application security.
• Thorough understanding of security best-practices, principles, and system hardening techniques.
• Hands-on experience with threat modelling, security testing, including penetration testing, and automated security validation.
• Solid knowledge of cloud, network, and systems security concepts.
• Experience with scripting with one or more languages – Python and PowerShell experience is a plus.
• Familiarity with security tools such as EDR software, DLP solutions, vulnerability scanners, firewalls and email gateways.
• Strong analytical skills and problem-solving skills, with the ability to investigate complex problems and design pragmatic solutions.
• Effective communication skills to work with technical and non-technical teams.
• Degree in Engineering, Computer Science, or STEM related field.

Nice to have:

• Strong knowledge of risk assessment methodologies.
• Familiarity with security best practices, configurations, and threat management in Azure, AWS, and GCP.
• Ability to analyse software for security risks, including reviewing source code, performing static and dynamic analysis, and identifying vulnerabilities in application design and implementation.
• Familiarity with regulatory frameworks and security standards (e.g., SEC Cybersecurity rules, MAS TRM Guidelines, NFA Cybersecurity Guidance, GDPR etc.)
• Relevant security certifications.

Job Requirements

• Candidate must possess at least a Diploma in Computer Science/Information Security, Engineering (Computer/Telecommunication) or equivalent.
• Required skill(s): Python.
• Expertise in other programming languages are advantageous.
• Only Singaporeans or PR are eligible.
• Candidates who possess OSCP and CREST Registered Tester certification.will be preferred.

Job Description

• Participate in security review and assessment for our clients' systems.
• Participate in forensics and incident response engagements.
• Participate in security consultancy and advisory engagements.
• Learn how to work independently and in a team.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Cloud Security & DevSecOps Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Responsibilities

·      Define and drive the vision, roadmap, and maturity model for application security across the enterprise.

·      Align application security initiatives with business objectives, compliance requirements, and risk management frameworks.

·      Act as the primary liaison between development teams, security functions, and executive stakeholders.

·      Secure Development Lifecycle (SDLC) Integration

·      Embed security practices into the SDLC, including threat modeling, secure design reviews, and code analysis.

·      Champion DevSecOps principles, ensuring security automation and continuous integration pipelines are robust and scalable.

·      Provide guidance on secure coding standards, frameworks, and best practices.

·      Establish policies, standards, and metrics to measure application security effectiveness.

·      Conduct regular risk assessments and oversee remediation of vulnerabilities.

·      Lead and mentor a team of application security engineers and specialists.

·      Partner with product owners, architects, and developers to balance innovation with security requirements.

·      Build strong relationships with executive leadership to communicate risks, progress, and strategic priorities.

·      Evaluate emerging technologies, tools, and methodologies to enhance application security capabilities.

Qualifications

·      Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

·      8+ years of experience in application security, software development, or cybersecurity, with at least 3 years in a leadership role.

·      Strong knowledge of secure coding practices, OWASP Top 10, and modern application architectures (cloud-native, microservices, APIs).

·      Hands-on experience with application security tools (SAST, DAST, IAST,RASP, container security).

·      Proven ability to lead cross-functional teams and influence executive stakeholders.

·      Excellent communication, leadership, and problem-solving skills.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to debbie@peopleprofilers.com

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

 Tel: 69509748

http://www.peopleprofilers.com

debbie@peopleprofilers.com

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

The Cyber Security Specialist will architect, design, review, and implement cybersecurity solutions for large-scale projects and critical infrastructure. The role involves ensuring compliance with cybersecurity standards, monitoring and mitigating security risks, and developing cloud security architectures.

The specialist will also conduct vulnerability assessments, security audits, and provide consultancy on security vulnerabilities and risks.

Requirements:

• Lead and support cybersecurity implementation for large-scale projects and critical infrastructure systems.
• Ensure compliance with critical infrastructure cybersecurity standards (e.g., KINS/CII).
• Develop and implement cloud security architectures and solutions.
• Monitor, research, and analyse security risks to mitigate threats and attacks.
• Conduct vulnerability assessments, penetration testing (VAPT), and provide remediation recommendations.
• Perform system hardening, patch management, and secure configuration practices.
• Prepare and maintain security documentation (e.g., design documents, risk assessments, compliance reports).
• Provide guidelines for coding, key management, hardening, patch management, backup management, and incident management.
• Familiarity with public cloud infrastructures (Azure, AWS, GCP, Huawei).

Qualifications:

• Proven experience in large-scale projects, preferably in government or critical infrastructure environments.
• Strong familiarity with cybersecurity frameworks and standards (e.g., IM8, CIS, NIST).
• Hands-on experience in security architecture, system hardening, vulnerability assessment, and network/system security controls.
• Experience with network security, firewalls, VPNs, and identity and access control.
• Experience in system integration or project delivery environments.
• Strong documentation, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell

Timing: 630-630

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462