Total 1,158 security analyst job vacancies in Hong Kong

Job Duties:

• Analyze internal and external data to identify trends, assess performance, and support business strategy;
• Translate data insights into clear, actionable recommendations that support execution across product, marketing, and operations;
• Build and maintain dashboards, business reports, and performance metrics to monitor KPIs and key initiatives;
• Design, develop and maintain reporting frameworks, defining reporting cadences and delivering executive-level reports to senior leadership;
• Collaborate with cross-functional teams to define data requirements and support business planning;
• Ensure data integrity and accuracy across all reporting outputs by developing validation processes and partnering with data source/system owners;
• Develop data-driven reports and presentations to communicate key findings and strategic recommendations to senior management and non-technical stakeholders;
• • Provide ad hoc insights and data support for strategic and operational projects;
  

Required Skills and Qualifications

• 7-8 years of professional experience as a Business Analyst or a similar role.
• Demonstrated exposure to or strong interest in corporate real estate, facilities management, or construction.
• Minimum Bachelor’s degree in Business, Project Management, Data Science, Statistics, or a related field.
• Expert proficiency with Business Intelligence (BI) platforms (e.g., Tableau, Cognos) for creating insightful dashboards and automated reports.
• Understanding of construction project lifecycles, facilities maintenance processes, corporate real estate and relevant industry best practices is a significant plus.
  

Interested applicants please send your resume in MS Words format to Joanna.Tan@ambition.com.sg and attn it to Tan Joanna (R1104661).
Short listed candidates will be notified
www.ambition.com.sg
EA Registration Number: R1104661
Data provided is for recruitment purposes only

Successful candidates need to be comfortable with working on weekends, and rotation shifts as and when required.

Key Responsibilities:

• Manage critical production incidents in collaboration with Users and Ops teams, ensuring minimal impact to business operations, especially payment processing. Provide immediate workarounds to avoid delays and ensure service continuity.
• Collaborate with multiple application, interface, and infrastructure teams (onshore/offshore) to triage, track, and resolve production issues across complex environments.
• Debug and analyze application/system failures, perform RCA using structured techniques, and work with development teams to implement permanent fixes while providing interim solutions.
• Track and manage production incidents via tools such as DCon and JIRA, ensuring timely updates, proper escalation, and closure within defined SLAs.
• Actively participate in release cycles, including deployment activities, post-release verification, and health checks to ensure zero disruption to services.
• Lead and support End-of-Life (EOL) upgrades, ensuring successful UAT validation and smooth production deployment of application and infrastructure upgrades.
• Any other ad-hoc duties as assigned by supervisors

Contribute to infra-level activities such as:

• JBoss / WebSphere patching and upgrades
• Oracle DB patching and upgrades
• OS upgrades and maintenance
• Platform migrations (e.g., VPC → VIC, VPC → OCP)
• Drive initiatives to reduce operational toil through automation, performance tuning, and process optimization to improve system reliability and efficiency.
• Continuously monitor system health (availability, latency, throughput, batch processing) and act on alerts promptly; design and implement new alerting mechanisms where necessary.
• Ensure smooth execution of BOD/EOD batch jobs, proactively resolving job failures and preventing transaction loss. Perform reconciliation checks post-processing to ensure payment integrity.
• Work closely with Ops teams to recover impacted payments due to system or infrastructure failures, ensuring minimal financial and operational impact.
• Manage and execute DR drills(quarterly/annually) in coordination with dependent systems to validate business continuity readiness.
• Support business users with data extraction requests for audit and regulatory purposes, ensuring accuracy and compliance.
• Provide regular updates on production health, incident status, and risk to stakeholders, including management and business users; escalate issues proactively when required.
• Conduct periodic reviews of open issues with stakeholders, ensuring timely closure within SLA commitments.
• Maintain detailed documentation of production incidents, solutions, and known errors; build and contribute to knowledge base repositories.
• Deliver KT sessions for new applications, processes, and team members to ensure smooth onboarding and capability building.
• Liaise with external infrastructure providers (e.g., IBM teams) to resolve issues related to WebSphere, Oracle, and UNIX servers.
• Manage multiple priorities effectively, coordinate deliverables, and adapt quickly to changing business needs while meeting timelines
• Any other ad-hoc duties as assigned by supervisors

Requirement:

• Around 8+ years of experience and above
• Bachelor’s degree in engineering / computer science / information technology or related field.

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: douglastan@recruitexpress.com.sg

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd

The Applications Development Senior Programmer Analyst is an intermediate level position responsible for participation in the establishment and implementation of new or revised application systems and programs in coordination with the Technology team. The overall objective of this role is to contribute to applications systems analysis and programming activities.

Responsibilities:

• Conduct tasks related to feasibility studies, time and cost estimates, IT planning, risk technology, applications development, model development, and establish and implement new or revised applications systems and programs to meet specific business needs or user areas

• Monitor and control all phases of development process and analysis, design, construction, testing, and implementation as well as provide user and operational support on applications to business users

• Utilize in-depth specialty knowledge of applications development to analyze complex problems/issues, provide evaluation of business process, system process, and industry standards, and make evaluative judgement

• Recommend and develop security measures in post implementation analysis of business usage to ensure successful system design and functionality

• Consult with users/clients and other technology groups on issues, recommend advanced programming solutions, and install and assist customer exposure systems

• Ensure essential procedures are followed and help define operating standards and processes

• Serve as advisor or coach to new or lower level analysts

• Has the ability to operate with a limited level of direct supervision.

• Can exercise independence of judgement and autonomy.

• Acts as SME to senior stakeholders and /or other team members.

• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Recommended Qualifications:

• 5-8 years of relevant experience

• Experience in systems analysis and programming of software applications

• Experience in managing and implementing successful projects

• Working knowledge of consulting/project management techniques/methods

• Ability to work under pressure and manage deadlines or unexpected changes in expectations or requirements

Education:

• Bachelor’s degree/University degree or equivalent experience

Note: Successful candidates need to be comfortable with working on weekends and shifts as and when required

Responsibilities:

• Provide support and maintenance for insurance-related applications on the AS400 platform.
• AS400 Application Support
• Able to provide maintenance support
• Any other ad-hoc duties as assigned by supervisors

Requirements:

• Strong analytical and problem-solving skills
• Hands-on experience with AS400/IBM i
• Knowledge of Smart400
• Experience with PolisyAsia/Polisy400
• BusinessObjects (BO) development experience

Good to Have:

• Experience in Web Services/REST API development
• Exposure to Smart Upgrade
• Understanding of General Insurance business processes
• Willingness to work onsite and coordinate with business stakeholders
• Relevant experience in AS400 application support and insurance domain preferred.

Interested applicants, please email your resume to Karin Chan Wei Kien

Email: karinchan@recruitexpress.com.sg

CEI Reg No: R1104584

Recruit Express Pte Ltd

UEN: 199601303W

EA Licence No: 99C4599

• IT Business Analyst
• Business Requirements Gathering & Process Analysis
• Stakeholder Management & Solution Delivery
• User Stories, UAT & Digital Application Projects
• Government project

Job Scope:

• Gather, analyse, and document business requirements from stakeholders

• Facilitate workshops, meetings, and discussions to understand business needs and objectives

• Analyse current business processes and identify opportunities for improvement and optimisation

• Prepare business requirement documents (BRD), user stories, process flows, use cases, and functional specifications

• Work closely with developers, testers, project managers, and business users throughout project implementation

• Support solution design, system testing, User Acceptance Testing (UAT), and implementation activities

• Track issues, risks, dependencies, and change requests to ensure smooth project delivery

• Generate reports, dashboards, and analysis to support business decisions

• Ensure project deliverables align with business objectives, timelines, and compliance requirements

• Any other ad-hoc duties as assigned

Requirements:

• Degree/Diploma in Business, Information Technology, Computer Science, or related discipline

• Minimum 3 years of experience as a Business Analyst or in a similar role

• Experience in requirements gathering, process mapping, and documenting user stories/use cases for transactional or customer-facing systems

• Strong communication and stakeholder management skills with the ability to collaborate across business and technical teams

• Strong analytical, problem-solving, and documentation skills

• Ability to work independently and manage multiple priorities effectively

• Exposure to Agile methodologies (Scrum/Kanban) and tools such as Jira, Confluence, and ServiceNow is preferred

• Familiarity with mobile application projects, UX/UI collaboration, and customer journey design for digital platforms is advantageous

Other Information:

• Location: CBD

• Working Hours: 5 Days, Office Hour

To apply please click on the APPLY NOW button or email your resume to search70@searchindex.com.sg for faster processing:

We regret only shortlisted candidates will be notified. By submitting any application or résumé to us, you will be deemed to have agreed and consented to us collecting, using, retaining and disclosing your personal information to prospective employers for their consideration.

Yoong Poh Feng
EA License | 14C7092
EA Registration Number | R1105076

About Keyrus

Keyrus is an international consulting firm specialising in Data Intelligence and Digital solutions. With more than 3,000 employees across 20 countries, Keyrus supports clients across industries including Banking & Finance, Healthcare, Pharmaceuticals, FMCG, Oil & Gas, Retail and more.

As part of our consulting delivery model, Keyrus provides experienced functional and technical consultants to support strategic client initiatives.

Role Overview

The team in Singapore is looking for a Senior IT Project Manager / Business Analyst Consultant to support a regional data privacy and Asset Management integration programme within the banking sector.

The consultant will work closely with Data Office, Business, Legal, Compliance, IT, Operations, Data Protection and regional/global stakeholders to support project delivery, governance enhancement, privacy documentation, risk assessments and stakeholder coordination.

Key Responsibilities

- Act as Project Manager / Business Analyst for regional data privacy and Asset Management initiatives.
- Support the enhancement of the Personal Data Protection governance framework, including policies, procedures, playbooks, governance forums and operating processes.
- Perform gap analysis between existing regional frameworks and Asset Management-specific requirements.
- Coordinate with business stakeholders, Data Office, Legal, Compliance, IT teams, Data Protection Officers and central/global teams.
- Support the identification and documentation of personal data processing activities across regional entities.
- Assist Processing Owners in creating, updating and maintaining privacy documentation in relevant Group tools.
- Support privacy assessments such as PAQ, TIA, LIA and DPIA.
- Review business and IT change triggers, including third-party risk, new activity approval, outsourcing and IT service validation processes.
- Support the improvement of consent collection and Data Protection Notice processes.
- Prepare project governance materials including project plan, roadmap, RACI, KPIs/KRIs/KSIs, dashboards, steering committee packs and meeting minutes.
- Track milestones, risks, issues, dependencies and remediation actions.
- Prepare training materials and support awareness sessions for business and operational stakeholders.


Required Skills & Experience

• Strong experience as a Project Manager, Business Analyst or PM/BA in banking or financial services.
• Experience in data privacy, data governance, regulatory, compliance or risk-related initiatives.
• Good understanding of Asset Management, Corporate Banking, Investment Banking or regional banking operating models.
• Strong project management skills, including planning, governance, reporting, risk management and stakeholder coordination.
• Strong business analysis skills, including requirement gathering, process mapping, gap analysis and documentation.
• Ability to work with senior business, IT, Legal, Compliance, Data Office and regional/global stakeholders.
• Good understanding of privacy assessments, personal data inventories, data flows, third-party risk or regulatory documentation.
• Excellent communication, documentation and presentation skills.
• Proactive, structured and able to manage complexity across multiple stakeholders and workstreams.
• Hands-on experience with Excel, PowerPoint, SharePoint, Confluence, Jira or similar collaboration tools.
• SQL or data analysis experience would be an advantage.

Nice to Have

• Experience with APAC banking regulatory or data privacy programmes.
• Knowledge of Asset Management operations and data protection requirements.
• Exposure to Records of Processing Activities, data protection tools or data quality improvement exercises.
• Previous experience with large international banking environments.

Business Function

Group Operations enables and empowers our Bank with an efficient, nimble, scalable standard infrastructure through a strategic focus on Productivity, Quality & Control, Operating Models, Technology and People. In Group Operations, we manage most of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Perform loan processing & servicing such as, loan creation, disbursement, repayment, 
  repricing, redemption, fee collection, etc

• Perform audit confirmation activities – setup of new auditors, creation of customers’ 
  instructions in system

• Prepare manual computations of loan instalments or schedules for customers

• Follow up with units/stakeholders to ensure all issues & rectifications are resolved

• Liaise with BU/SU on loan processing matters

• Perform ad-hoc and day-end reconciliations

• Assist and support project related or process improvement tasks

• Adhere to performance standards in processing turnaround time and accuracy requirement

Requirements

• Minimum 2 years or above in loan processing operations exceptional handling investigation skillset with strong accounting & GL knowledge. System knowledge in Finacle is an advantage

• Ability to work with a sense of urgency to meet various cut-off times and customer’s specific SLA with zero error rate.

• Meticulous with an eye for details and having strong operational risk management & problem-solving skills

• Good working attitude and positive mindset to change, constantly looking for better ways of doing things and challenging status quo

• Comfort with variable workload, not a fixed output per day.

• Ability to work extended hours (typically including, but not limited to Mondays (across weekend), post holidays, month end weeks) due to surge in volume during these periods.

• Ability to participate in weekend/late night LVs.

• Ability to work on SG public holidays when the need arises.

• Excellent knowledge of Microsoft Office – Word, Excel & PowerPoint

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

Responsibilities:

KYC and Due Diligence

• Conduct thorough KYC due diligence on new individual and corporate clients.
• Review and validate client documents (passports, proof of address, corporate documents, trust deeds, source of wealth statements, etc.).
• Perform background screening using internal tools and third-party databases.
• Identify and escalate any potential red flags (e.g., PEPs, sanctions exposure, adverse media hits).

Client Onboarding Support

• Act as the key point of contact for Relationship Managers during the onboarding process.
• Guide front office teams on KYC requirements and ensure complete and accurate submissions.
• Ensure timely onboarding of clients while maintaining compliance with internal SLAs.

Data Entry and System Management

• Accurately input and maintain client data in internal systems (e.g., Avaloq, CRM tools).
• Update client KYC profiles and risk ratings during the onboarding process

Risk and Compliance Control

• Ensure that all onboarding activities comply with AML laws, FATCA/CRS requirements, sanctions rules, and internal policies.
• Support periodic quality assurance reviews and internal/external audits related to onboarding and KYC files.
• Maintain strong records and audit trails for all KYC and onboarding actions.

Process Improvement

• Propose improvements to the onboarding workflow to enhance efficiency and client experience.
• Participate in projects related to onboarding process upgrades or regulatory changes.

Requirement:

• Bachelor’s degree in business, Finance or related field.
• 2–5 years of KYC/AML experience, preferably within private banking or wealth management.
• Experience with onboarding high-net-worth (HNW) and ultra-high-net-worth (UHNW) clients is a plus.
• Fluent and comfortable conversing in English (Mandarin & Cantonese is a plus) to communication with external clients.
• Good stakeholder management skills.
• Strong time management, organizational, planning and follow-up skills.
• Ability to work independently and manage high volumes under tight deadlines.
• Strong interpersonal and communication skills to work with front office and compliance teams.
• Proficiency with Microsoft Office and familiarity with banking platforms and screening tools.

Note: Successful candidates need to be comfortable with working on weekends and shifts as and when required

Responsibilities:

• Provide support and maintenance for insurance-related applications on the AS400 platform.
• AS400 Application Support
• Able to provide maintenance support
• Any other ad-hoc duties as assigned by supervisors

Requirements:

• Strong analytical and problem-solving skills
• Hands-on experience with AS400/IBM i
• Knowledge of Smart400
• Experience with PolisyAsia/Polisy400
• BusinessObjects (BO) development experience

Good to Have:

• Experience in Web Services/REST API development
• Exposure to Smart Upgrade
• Understanding of General Insurance business processes
• Willingness to work onsite and coordinate with business stakeholders
• Relevant experience in AS400 application support and insurance domain preferred.

Interested applicants, please email your resume to Karin Chan Wei Kien

Email: karinchan@recruitexpress.com.sg

CEI Reg No: R1104584

Recruit Express Pte Ltd

UEN: 199601303W

EA Licence No: 99C4599

Salary: up to $3500 + 1m completion bonus
Duration: 1 year

Working Days & Hours: Mon-Fri Office Hours

Location: Ubi

Job Description:

• Performs all laboratory functions as tasked with high degree of accuracy and strict adherence to Company’s quality requirements.

• Maintains proper records that are compliant with good documentation practices (GDP) and data integrity requirements, for all testing and test-related activities (e.g. raw data sheets, usage log books, and all other records).

• Generates reports for all tests performed in an accurate and timely manner, ensuring that targets are met for accuracy and turnaround time.

• Performs good housekeeping and maintenance of the laboratory, especially in the area of responsibility.

• Prepares client test protocols, facilitates training of other analysts for the approved client test protocols, and updates protocol database.

• Generates or revises standard operating procedures (SOPs) relating to area of responsibility during routine document review or when there is a regulatory update.

• Participates in investigations (e.g. root cause analysis, impact analysis, risk assessment, corrective action, etc.)

• Contributes significantly to the activities of the assigned technical committee, as per the duties and responsibilities designated to the committee.

• Provides support during external and internal audits for the areas of responsibility.

• Actively seeks improvement within area of responsibility and takes necessary action to implement such improvements.

• Participate in method development and validation of routine and customised testing services.

• Participate in the establishment of customised routine testing services and validations that are in compliance with the latest regulatory and/or customer requirements.

• Conducts test demonstrations to clients during site visit or when necessary.

• Documents and reports to immediate superior any event that has occurred at the laboratory which could, in his/her reasonable opinion, potentially result in a hazardous, litigious or quality-compromising situation.

• Adheres to Company Policies and Procedures.

• Ensures relevant Health and Safety requirements are adhered to, including undertaking any mandatory training as required.

• Undertakes any other duty or responsibility, at the request of your manager that may be required within reason within the remit of your role.

General requirements

• Maintains confidentiality of all Client information according to internal SOPs, Quality Service Agreements, and regulatory requirements.

• Actively seeks improvement within area of responsibility and takes necessary action to implement such improvements.

• Adheres to Company Policies and Procedures, including Code of Ethics and to Health and Safety requirements.

• Performs all other related duties as assigned.

Job Requirements:

Min Diploma/Degree in Sciences or similar w min 2 yrs of relevant experience in QC microbiological experience working in an ISO17025 / GMP laboratory environment

Interested candidates, please submit your resume to: anna.chen@recruitexpress.com.sg

Anna Chen jiaxin

CEI No: R25157621

Recruit Express Pte Ltd

EA License: 99C4599

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

Overview
We are seeking a Cyber Security Researcher to join a team focused on identifying and mitigating software vulnerabilities through advanced security research. This role offers the opportunity to work alongside cyber threat experts in conducting vulnerability research, reverse engineering, fuzzing, and code auditing to strengthen system security against evolving cyber threats.

Responsibilities

• Collaborate with cyber security and threat intelligence experts to identify and mitigate security risks.
• Conduct vulnerability research through fuzzing, reverse engineering, and source code auditing.
• Analyze software and systems to identify security weaknesses and exploit paths.
• Develop proof-of-concept (PoC) exploits to validate identified vulnerabilities.
• Investigate security flaws and recommend remediation strategies.
• Contribute to the development of tools and methodologies for vulnerability discovery and analysis.
• Stay current with emerging cyber threats, attack techniques, and security research trends.

Requirements

• Min 2 years of experience in vulnerability research, reverse engineering, software security, or cyber security research.
• Hands-on experience in native userland and or kernel-space vulnerability research.
• Experience identifying and analyzing security vulnerabilities through fuzzing, reverse engineering, and code auditing.
• Strong programming skills in C and Python.
• Familiarity with ARM/AArch64 assembly language and low-level system internals.

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell ( School )

Timing: 630-630

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Key Responsibilities

• Lead SIEM configuration, rule tuning, and onboarding of logs from servers, applications, and network infrastructure.

• Perform daily security alert monitoring and analysis, including alert triage, classification, investigation, escalation, and case closure.

• Prepare weekly security monitoring and alert trend reports, including event summaries, detection metrics, and operational observations.

• Deploy and manage log collection agents across Linux, Windows, and network infrastructure, ensuring stable log coverage and platform reliability.

• Maintain and enhance AI-assisted detection and behavioral analysis workflows, including alert flow stability and detection optimization.

• Define and refine detection logic, including rules, correlation patterns, and behavioral indicators.

• Support integration of OS and application logs for monitoring, correlation, and activity analysis.

• Manage dashboards, alert metrics, and reporting to provide visibility into security posture and monitoring operations.

• Support incident investigation and coordinate with infrastructure and application teams where required.

• Ensure platform health, log retention, monitoring coverage, and overall reliability of the SIEM environment.

Preferred Skills & Qualifications

• Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, or related field.

• Minimum 5 years of experience in SIEM administration, security monitoring, or detection engineering.

• Hands-on experience with SIEM, log management, or security monitoring platforms.

• Strong knowledge of Linux and Windows systems administration and security log analysis.

• Experience with Python, Shell scripting, or automation tools for log processing and workflow optimization.

• Familiarity with security event correlation, behavioral analysis, and detection engineering concepts.

• Exposure to API integration, middleware, or AI-assisted analysis solutions is an advantage.

• Strong analytical, troubleshooting, and problem-solving skills with attention to detail.

• Ability to communicate effectively in English

• Fluency in spoken and written Chinese is essential, as the role requires frequent liaison with Chinese-speaking counterparts and stakeholders, and the preparation, review and handling of Chinese-language work materials.


主要職責

資安監控與事件分析

• 執行日常資安警示監控與分析，包括警示分流、分類、調查、升級處理及案件結案
• 支援資安事件調查，並在需要時與基礎架構及應用程式團隊協作
• 準備每週資安監控與警示趨勢報告，包括事件摘要、偵測指標及營運觀察

SIEM 管理與偵測工程

• 主導 SIEM 設定、日誌導入、規則調校及偵測優化，涵蓋伺服器、應用程式及網路基礎架構
• 定義並優化偵測邏輯，包括關聯規則、行為指標及監控使用情境
• 維護並改善 AI 輔助偵測及行為分析工作流程

日誌管理與平台營運

• 在 Linux、Windows 及網路設備上部署並管理日誌收集代理程式，確保穩定且完整的日誌覆蓋範圍
• 支援作業系統與應用程式日誌整合，用於監控、關聯分析及活動分析
• 確保 SIEM 環境的平台健康狀態、日誌保存、監控覆蓋率及整體可靠性

儀表板與報告

• 管理儀表板、警示指標及報告，提升組織資安狀態的可視性
• 支援營運報告及資安監控績效檢討

流程改善與自動化

• 透過腳本與系統整合，推動資安監控自動化及工作流程改善
• 參與資安平台強化與營運優化專案

理想條件

• 資訊安全、網路安全、電腦科學或相關領域學士學位
• 至少 5 年 SIEM 管理、資安監控或偵測工程相關經驗
• 具備 SIEM 或日誌平台實務經驗，例如 ELK、Wazuh、Splunk、Graylog、QRadar 或相關技術
• 熟悉 Linux 與 Windows 系統管理及資安日誌分析
• 具備 Python、Shell Scripting 或自動化工具經驗，可應用於日誌處理與工作流程優化
• 熟悉資安事件關聯分析、行為分析及偵測工程相關概念
• 具備 API 整合、中介軟體或 AI 輔助分析解決方案經驗者佳
• 具備良好的分析、故障排除與問題解決能力，並注重細節
• 能以英文進行有效溝通；具普通話能力者佳，有助於與區域利害關係人協作
• 須具備流利的中文聽說讀寫能力，因本職位需經常與中文溝通之合作方及持份者聯繫，並需撰寫、審閱及處理中文工作文件

核心能力

• 資安監控與事件分析
• SIEM 管理
• 偵測工程
• 日誌管理與關聯分析
• 自動化與腳本撰寫
• 分析思維
• 問題解決能力
• 跨部門溝通與協作能力

對資安偵測、SIEM 平台管理及資安監控營運有豐富經驗，並希望參與區域型資安平台優化與威脅偵測工作的專業人士，歡迎與我們聯繫了解更多。

Lumina Advisory & Global Search Pte Ltd | 25C3262

Joyce Yeo | R1218489

We are seeking an experienced ITSO Security Officer to join our team. In this role, you will act as the security advisor throughout the software development lifecycle, partnering closely with developers, architects, DevOps engineers, and project stakeholders to ensure applications are designed, built, and deployed securely.

Why Join Us:

• Salary up to $9,000 + AWS
• Hybrid Work Arrangement
• Government Projects

Responsibilities:

• Conduct threat modelling exercises to identify, assess, and mitigate application security risk
• Perform and review security assessments using SAST, DAST, and other application security tools
• Review security controls for cloud-hosted applications, particularly within AWS environments
• Provide ongoing support and troubleshooting for deployed features, maintaining platform stability, performance, and a strong user experience

Requirements:

• Minimum 4 years of experience across software development, application security, DevSecOps, or cloud security
• Working knowledge of: OWASP Top 10, OWASP ASVS
• Experience with security scanning tools such as: Fortify on Demand, SonarQube, Similar SAST/DAST solutions
• Familiarity with AWS cloud environments and cloud security best practices

If you’re passionate about contributing to impactful government projects while advancing your career, we welcome you to explore this opportunity with us

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Elias Yeo HongJie (Outsourcing Team)
ScienTec Consulting Pte Ltd - 11C5781