Total 276 Legal / Public / Security job vacancies

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

Job Responsibilities:

1.         Collaborate with regional teams to establish and improve legal processes to support ongoing activities.

2.         Support legal and related documentation standardization and consistency across the region.

3.         Develop and implement structured legal risk assessment and escalation procedures across the region.

4.         Compile, review, and assess contractual and legal risks across the region and follow-up.

5.         Inter-departmental and regional collaboration to achieve coordinated and efficient outcomes on matters of common interest.

6.         Support drafting, preparation, and review of legal agreements, templates, and documents.

7.         Legal support, advise, and guidance.

8.         Monitoring of regional legal and regulatory changes.

9.         Conduct related training and awareness sessions.

10.      Provide legal advice to senior management and business units.

11.      Draft, review, and negotiate commercial agreements, ensuring that contracts align with business objectives while minimizing legal and commercial risks.

12.      Develop and maintain legal documents and contract templates.

13.      Identify, assess, and mitigate legal, regulatory, and operational risks.

14.      Handle dispute matters or matters under review or investigation.

15.      Instruct and manage external counsels as may be required.

16.      Support M&A activities.

17.      Ensuring compliance with local laws and regulations and local and group policies.

18.      Assist and collaborate with Internal Audit, Finance, and other teams on projects requiring legal input.

19.      Other tasks related to the roles maybe assigned from time to time.

Requirements:

• Degree in Law

• Experience in legal review, contract vetting, and providing legal advisory support.

• Organized and detailed.
  

HOW TO APPLY:

Interested applicants, please click on “Apply Now” or submit your resume to ref71@trustrecruit.com.sg

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Lee Jia Xiang

EA Personnel Reg No: R25158171

Key Responsibilities

Client Service and Engagement Management

·       Lead and manage a portfolio of audit and assurance engagements across a diverse client base.

·       Act as the Engagement Partner and sign audit reports in accordance with applicable professional standards and regulatory requirements.

·       Ensure audits are planned, executed, and completed in compliance with Singapore Standards on Auditing, Singapore Financial Reporting Standards, and ACRA requirements.

·       Provide technical guidance and practical solutions to clients on accounting, auditing, and financial reporting matters.

·       Build and maintain strong relationships with clients, acting as a trusted business advisor.

Quality and Risk Management

·       Uphold the firm’s commitment to audit quality and professional excellence.

·       Ensure compliance with the firm’s System of Quality Management (SQM), ACRA regulations, and applicable professional standards.

·       Review engagement risks and implement appropriate safeguards to manage audit and business risks.

·       Drive continuous improvement of audit methodologies, processes, and quality control procedures.

Leadership and People Development

·       Lead, mentor, and develop audit managers and professional staff.

·       Foster a culture of technical excellence, accountability, and continuous learning.

·       Provide coaching and training to enhance the technical and professional competencies of team members.

·       Participate in recruitment, performance management, and succession planning initiatives.

Requirements

·       Chartered Accountant of Singapore (CA Singapore) or equivalent recognised professional qualification.

·       Registered Public Accountant with ACRA, or eligible to be registered as a Public Accountant under ACRA’s requirements.

·       Possess a valid practising certificate or be eligible to obtain one.

·       Minimum 10 years of external audit experience, with substantial experience managing audit engagements and client relationships.

·       Experience serving clients in the construction sector and not-for-profit organisations will be an advantage.

·       Strong technical knowledge of Singapore Financial Reporting Standards (SFRS), Singapore Standards on Auditing(SSA), and regulatory requirements.

·       Proven leadership capabilities with experience managing and developing professional teams.

·       Strong business acumen, commercial awareness, and client relationship management skills.

·       Excellent communication, interpersonal, and stakeholder management abilities.

·       Entrepreneurial mindset with an interest in contributing to the growth and development of the firm.

Partnership Opportunity

This position offers the opportunity to be part of the firm’s leadership team and play a key role in shaping its future direction. Depending on the candidate’s experience, capabilities, and contribution to the firm, there may be an opportunity to participate in the ownership and long-term growth of the practice.

What We Offer

·       Opportunity to lead and sign audit engagements across a diverse client portfolio.

·       Collaborative and professional working environment.

·       Platform to contribute to strategic decision-making and business growth.

·       Potential pathway to equity participation for the right candidate.

·       Competitive remuneration package commensurate with experience and contribution.

As a Networking Managed Services Engineer (L2) at NTT DATA, you'll take on a developing engineering role where your main goal is to ensure our clients' IT infrastructure and systems remain operational. You'll achieve this by proactively monitoring, identifying, investigating, and resolving technical incidents and problems. You'll work closely with our clients and internal teams to ensure that services are restored swiftly, in line with our service level agreements (SLAs).

Your day will revolve around reviewing client requests and tickets, applying your technical expertise to resolve them efficiently and effectively. You'll be the go-to person for second-line support, handling incidents and requests of medium complexity. In addition to your daily tasks, you'll have opportunities to contribute to exciting project work from time to time.

You'll proactively monitor work queues, execute operational tasks, and update tickets with the actions you've taken. Identifying, analysing, and logging issues before they escalate will be a key part of your role. You'll communicate with other teams and clients to provide support and ensure that changes are executed with clear risk identification and mitigation plans.

As part of the shift handover process, you'll highlight key tickets and upcoming critical tasks for the next shift. When needed, you'll escalate tickets to ensure the right focus from our Centres of Excellence (CoE) and other teams. Collaborating with our automation teams, you'll work on optimizing efforts and automating routine tasks, all while coaching our Service desk and L1 teams in both technical and behavioural skills.

You'll also establish monitoring for client infrastructure, leading and managing initial client escalations for operational issues. Contributing to the change management process, you'll log change requests, execute approved maintenance activities, and audit incident and request tickets for quality. Your insights will drive trend analysis reports, identifying tasks suitable for automation to reduce tickets and optimize efforts. You might also support disaster recovery functions and other related tasks as needed.

To thrive in this role, you need to have:

• Proficiency in technologies such as Pulse Secure SSL VPN, Palo Alto, Fortinet, Cisco Nexus switches/routers/firewalls, and more familiarity with ticketing tools.

• At least one technical certification in the above-mentioned technologies.

• Strong planning skills, with the ability to anticipate and adapt to changing circumstances.

• Adaptability and resilience in a dynamic work environment.

• Ability to communicate and work effectively across different cultures and social groups.

• Proficiency in active listening and client-centric communication.

• A positive outlook and the ability to work well under pressure.

• A client-first attitude, always seeking to create positive client experiences.

• A bachelor's degree or equivalent qualification in IT/Computing, or equivalent work experience.

· Prepare detailed design reports, calculations and drawings.

· Prepare submissions to statutory agencies/ authorities.

· Participate in the coordination with other disciplines in preparation of design deliveries.

· Participate in preparing tender documentations.

· Participate in the successful delivery of projects.

· Perform any other duties as assigned.

Requirements:

· Degree in Civil or Structural Engineering from a recognized University and eligible for registration with the Professional Engineers Board (Singapore).

· Conversant with local codes and authority submission procedures.

· Excellent interpersonal, good written and verbal communication skills.

· Have good knowledge of common engineering design software.

· Working experience in engineering design consulting practice on building, geotechnical, infrastructure, rail or road projects (underground/basement/elevated structures, tunnel structures and MRT station structures).

· Strong analytical skills.

· Able to work under pressure with good time management skill.

Civil:

· Familiar in the design of major civil infrastructure projects such as roads, drains, sewers, utilities, road and rail alignments.

If you wish to have the opportunity to work in an international consultancy firm that offers attractive remuneration, a 5-day work week and a conducive environment to enhance your skills and experience, please send your full resume, including your salary expectations and contact number to

2 International Business Park, #06-08
The Strategy, Tower 1, Singapore 609930

Email: HR@sg.tylin.com
(Only shortlisted candidates will be notified)

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

• 1-year contract, renewable
• Hybrid work arrangement
• Government project

Key Responsibilities

• Perform threat modelling and establish threat profiles to identify, assess, and remediate application security risks.

• Review application architectures, APIs, and cloud environments to ensure compliance with security best practices.

• Conduct security testing using SAST tools such as Fortify-on-Demand, SonarQube, and similar solutions.

• Track, manage, and remediate security vulnerabilities through timely patching and mitigation activities.

• Work closely with development, DevOps, and infrastructure teams to integrate security controls into CI/CD pipelines.

• Conduct security awareness training and provide security advisory support to project teams.

• Ensure adherence to security standards and frameworks such as OWASP Top 10 and OWASP ASVS.

Requirements

• Minimum 4 years of experience in software development, application security, and/or cloud computing (AWS preferred).

• Strong understanding of web and mobile application security, API security, and related technologies (REST, SOAP, SSL/TLS).

• Experience in threat modelling and application security risk assessment.

• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.

• Hands-on experience with security scanning tools such as Fortify-on-Demand, SonarQube, or equivalent.

• Good knowledge of security best practices and secure software development lifecycle (SSDLC).

• Strong analytical, troubleshooting, communication, and stakeholder management skills.

• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Relevant certifications such as CISSP, OSCP, AWS Security Specialty, AWS DevOps Engineer, or equivalent.

• Experience working in Government environments.

• Experience with Government Commercial Cloud (GCC) environments.

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred

Legal Counsel

Work Location: Changi site office
Working days: 5 days 8am to 5pm
Salary: $12k to $15k (depends on experience)

Requirements

• Possess at least Bachelor’s Degree in Law (LLB) from a recognized university
• Minimum 10 years of relevant legal experience in a law firm and/or in-house (preferably in the construction industry)
• Deep knowledge and understanding of construction laws, regulations, and compliance frameworks in Singapore

Job Description

• Ensure the legal integrity of contracts to protect the company's interests and prevent potential legal issues.
• Advise on the appropriate legal structures for project entities (e.g., joint ventures, SPVs) and ensure their compliance with local and international laws.
• Address international legal considerations, including trade laws, export controls, and multi-jurisdictional regulatory requirements.
• Draft, review, and revise contracts to ensure legal soundness, regulatory compliance, and alignment with the company’s strategic objectives. This includes negotiating contract terms with external parties to achieve favorable outcomes and safeguard the company’s interests.
• Identify and assess potential risks associated with contracts and implement strategies to mitigate them.
• Support the acquisition and maintenance of all necessary licenses, permits, and regulatory approvals required for project implementation.
• Negotiate and mediate disputes arising during contract execution, leveraging legal expertise to deliver fair and efficient resolutions.
• Provide legal guidance and support to internal teams on contract-related matters and broader legal issues as needed.
• Clearly communicate contract terms and obligations to internal stakeholders to ensure uniform understanding and compliance.
• Collaborate with external legal counsel on legal and/or regulatory matters when necessary and manage legal engagements effectively
• Work closely with project management, finance, procurement, and other departments to ensure cohesive contract management across the organization.
• Conduct legal training and briefings for internal stakeholders to ensure awareness of key legal issues and compliance requirements. 
• Maintain comprehensive and accurate records of contracts, correspondence, and related documentation.
• Oversee and manage claims, arbitrations, and court proceedings related to the company’s projects.
• Participate in ad hoc projects and assignments as directed by management, ensuring all legal and regulatory considerations are addressed.
• Assist in the development and implementation of internal policies and procedures to strengthen legal governance in project execution.

Cheong Yeat Long | R25145358

The Supreme HR Advisory Pte Ltd | EA 14C7279

Position title : Civil Engineer Assistant Engineer / Engineer

Location: Tuas Avenue (Company transport at designated pick up points - Jurong east, Bukit batok, Choa chu kang, Lakeside, Tuas crescent etc)

Working Days: 5 days A Week

Working hours : 8:00am - 5:00pm or 9:00am - 6:00pm (40 hrs per week)

Salary : $2,800 to $4,200 (Based on market rate, subject to individual’s qualification & experience)

Overview

• We are a public-listed company that specialises in the manufacturing of steel prefabricated reinforcement for the construction industry. We are seeking suitably qualified personnel to join our team.

Roles & Responsibilities:

• Extract bill of quantities for steel reinforcements from structural drawings to ensure accurate material planning
• Schedule and draft technical drawings using appropriate tools for submission and production purposes
• Coordinate technical issues with project site personnel to facilitate smooth project progress
• Attend site discussions as needed to resolve technical queries and support project teams

Requirements:

• Diploma / Degree in Structural/Civil Engineering or QS / Structural Engineering Design or related discipline to support technical understanding
• Working knowledge of AutoCad and Revit-BIM tools to enhance drawing accuracy and efficiency
• Minimum of 1 year of relevant work experience in a similar field to ensure familiarity with industry practices

Interested applicants, WA your resume to +65 9136 9792 or email your resume to supreme.yentan@gmail.com.

Tan Yen Zhen (Chen Yan Zhen) Reg No: R25138932

The SupremeHR Advisory Pte Ltd EA No: 14C7279

Reachfield Security (Grade “A” agency) specializes in supplyingsecurity manpower to Schools, Factories, Shopping Centres, Museums, libraries,etc

Position: Full Time, Security Supervisor

Salary up to $3730 gross per month (5666days work arrangement)

Location of work:

SS > Tampines / Outram / Telok Ayer/ Hillview

***

1. Supervise a team ofsecurity personnel.   

2. Good leadershipskills and able to lead a security team to meet the client's requirements.

3. Day / Night dependson location; 12hr-shift (Fixed shift, no need to rotate)

4. Job duties includeleading the team, conduct daily briefing, patrolling, protecting clients’premise and access control, etc.

5. Possessed with PLRDlicense (SSS / SS rank), and completed CERT training.

6. Work with client’srepresentative closely and carry out instructions according to set SOP.

7. PC literate and canable to put up incident reports.

8. Conduct OJT for newstaff; guide, advise and orientate new staff for the job.

9. Attend managementmeetings.

Reachfield Security & Safety Management Pte Ltd

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

Please email the updated resume to hr@reachfield.com

Job Description

We are seeking a dedicated and results-oriented Unit Manager to oversee daily operations, service delivery, team performance, and customer satisfaction within our food service operations. The successful candidate will be responsible for ensuring operational excellence, maintaining food safety and workplace safety standards, managing resources effectively, and supporting business growth initiatives.

Key Responsibilities

Operations Management

• Oversee the day-to-day operations of the assigned unit to ensure smooth and efficient service delivery.
• Ensure services are delivered in accordance with company standards, operational requirements, and client expectations.
• Plan, coordinate, and monitor operational activities to maintain service quality and consistency.
• Manage inventory levels, supplies, and operational resources to support business needs.
• Coordinate maintenance and upkeep of facilities, equipment, and work areas to ensure operational readiness.
• Identify operational challenges and implement appropriate solutions to improve efficiency and effectiveness.

Food Service & Quality Management

• Monitor food preparation, presentation, and service standards to ensure consistency and quality.
• Ensure compliance with food safety, hygiene, and sanitation requirements.
• Conduct regular checks on operational processes and implement corrective actions when necessary.
• Support menu planning, service enhancements, and operational improvements where required.
• Ensure proper storage, handling, and rotation of food products in accordance with company procedures.

People Management

• Supervise, guide, and support employees in the assigned unit.
• Conduct employee briefings and ensure team members understand their responsibilities and operational procedures.
• Monitor employee performance and provide coaching, training, and development opportunities.
• Foster a positive and inclusive work environment that promotes teamwork and collaboration.
• Ensure employees comply with workplace safety policies and operational standards.

Health, Safety & Compliance

• Ensure compliance with all applicable food safety, workplace safety, and regulatory requirements.
• Conduct regular workplace inspections and ensure corrective actions are implemented when necessary.
• Maintain accurate operational records and documentation as required.
• Promote a culture of safety, quality, and continuous improvement.

Business Performance

• Monitor operational costs and support initiatives to improve productivity and efficiency.
• Assist in implementing promotional activities, customer engagement initiatives, and service improvements.
• Support efforts to enhance customer satisfaction and operational performance.
• Prepare reports and provide updates on operational performance as required.

Job Requirements

• Diploma, Advanced Diploma, Degree, or equivalent qualification in any discipline.
• Experience in operations management, food services, hospitality, facilities management, retail operations, or a related field will be an advantage.
• Strong leadership, communication, and interpersonal skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Good problem-solving and organizational skills.
• Proficient in Microsoft Office applications and basic reporting tools.
• Ability to work independently as well as collaboratively within a team environment.
• Willingness to work according to operational requirements, including shifts, weekends, or public holidays where applicable.

Preferred Competencies

• Customer service orientation.
• Team leadership and people management skills.
• Operational planning and coordination.
• Quality and compliance management.
• Continuous improvement mindset.

We welcome applications from all suitably qualified candidates. Selection will be based on merit, skills, experience, and the ability to perform the job requirements.

We are seeking a Java Developer to design, build, and maintain high-performing, scalable, and enterprise-grade Java applications. You will be a key part of our engineering team, collaborating with cross-functional teams to translate business requirements into functional, high-quality software.

• Application Development: Translate software requirements and use cases into clean, efficient, and functional Java applications.
• Code Quality: Design, build, and maintain highly reusable, reliable, and testable Java code.
• Testing & Debugging: Conduct unit and integration testing to ensure reliability, and proactively identify and resolve bottlenecks and bugs

Interested applicants please send your resume to venessagoh@recruitexpress.com.sg

Venessa Goh Wee Ni

R24124686

Recruit Express Pte Ltd

EA License No: 99C4599

We regret that only shortlisted candidates will be contacted.

• Up till $3,300 + Bonus

• 5 days work week

• Work with an award-winning corporate services leader

• Manage diverse portfolios ranging from SMEs to MNCs

• Supportive, growth-oriented work environment with clear career progression
  

Our Client, Singapore's most highly-rated corporate service provider, is inviting qualified candidates to fill the position as Corporate Secretarial Executive.

RESPONSIBILITIES:

• Assist in managing a portfolio of clients, ensuring compliance with the Companies Act and other statutory requirements.

• Prepare and file statutory documents with ACRA accurately and within deadlines.

• Draft basic resolutions, minutes, and other corporate documents.

• Maintain and update corporate records and registers.

• Liaise with clients and relevant government agencies professionally.

• Support senior team members in handling more complex corporate secretarial matters.
  

REQUIREMENTS:

• ICSA qualification or Diploma/Degree in Law, Business, or related field.

• 1–2 years’ corporate secretarial experience in a professional or corporate services firm (fresh graduates may be considered).

• Basic knowledge of Singapore Companies Act and ACRA filing requirements.

• Strong attention to detail and organisational skills.

• Good communication and interpersonal skills.

Overview

We are seeking an experienced Application Security Consultant to drive secure application development practices, perform security assessments, and support cloud security initiatives. The ideal candidate will have strong expertise in application security, secure SDLC, DevSecOps, threat modelling, and cloud technologies.

Responsibilities

• Perform application security assessments and reviews for web, mobile, and cloud-based applications.
• Conduct threat modelling exercises to identify, assess, and mitigate application security risks.
• Establish threat profiles and recommend security controls for application projects.
• Track, manage, and remediate security vulnerabilities through timely patching and remediation processes.
• Integrate security best practices and automated security testing into CI/CD pipelines.
• Conduct security awareness training and promote secure coding practices across development teams.
• Collaborate with developers, engineers, and stakeholders to strengthen application security posture.
• Support security governance, risk management, and compliance initiatives. 

Requirements

• Minimum 4 years of combined experience in software development, application security, and cloud computing (AWS preferred).
• Strong understanding of web and mobile application architectures and APIs, including REST, SOAP, SSL/TLS.
• Experience in threat modelling and application security risk assessment.
• Strong knowledge of application security standards and frameworks, including:OWASP Top 10OWASP Application Security Verification Standard (ASVS)
• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.
• Experience integrating security testing into development workflows.
• Hands-on experience with SAST (Static Application Security Testing) tools such as:Fortify on DemandSonarQubeSimilar security scanning platforms
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Professional certifications such as:CISSPOSCPAWS Security SpecialtyAWS DevOps EngineerEquivalent cybersecurity certifications
• Experience working with Government Commercial Cloud (GCC) environments.

Key Skills

Application Security | DevSecOps | Threat Modelling | OWASP Top 10 | OWASP ASVS | AWS Security | CI/CD | SAST | Fortify | SonarQube | REST API | SOAP | SSL/TLS | GitLab | GitHub | Ansible | Cloud Security | Vulnerability Management | Secure SDLC | Security Awareness Training | GCC Cloud Environment