Total 3,275 Full-time information security analyst job vacancies

Overview

We are seeking an experienced Application Security Consultant to drive secure application development practices, perform security assessments, and support cloud security initiatives. The ideal candidate will have strong expertise in application security, secure SDLC, DevSecOps, threat modelling, and cloud technologies.

Responsibilities

• Perform application security assessments and reviews for web, mobile, and cloud-based applications.
• Conduct threat modelling exercises to identify, assess, and mitigate application security risks.
• Establish threat profiles and recommend security controls for application projects.
• Track, manage, and remediate security vulnerabilities through timely patching and remediation processes.
• Integrate security best practices and automated security testing into CI/CD pipelines.
• Conduct security awareness training and promote secure coding practices across development teams.
• Collaborate with developers, engineers, and stakeholders to strengthen application security posture.
• Support security governance, risk management, and compliance initiatives. 

Requirements

• Minimum 4 years of combined experience in software development, application security, and cloud computing (AWS preferred).
• Strong understanding of web and mobile application architectures and APIs, including REST, SOAP, SSL/TLS.
• Experience in threat modelling and application security risk assessment.
• Strong knowledge of application security standards and frameworks, including:OWASP Top 10OWASP Application Security Verification Standard (ASVS)
• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.
• Experience integrating security testing into development workflows.
• Hands-on experience with SAST (Static Application Security Testing) tools such as:Fortify on DemandSonarQubeSimilar security scanning platforms
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Professional certifications such as:CISSPOSCPAWS Security SpecialtyAWS DevOps EngineerEquivalent cybersecurity certifications
• Experience working with Government Commercial Cloud (GCC) environments.

Key Skills

Application Security | DevSecOps | Threat Modelling | OWASP Top 10 | OWASP ASVS | AWS Security | CI/CD | SAST | Fortify | SonarQube | REST API | SOAP | SSL/TLS | GitLab | GitHub | Ansible | Cloud Security | Vulnerability Management | Secure SDLC | Security Awareness Training | GCC Cloud Environment

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

This is a 12 months fixed term contract role.

What will you do?

• Develop and maintain IT security policies and action plans, reviewing them at least annually or as required by the Customer.
• Evaluate and recommend IT security products and solutions for implementation within the Customer's IT infrastructure.
• Implement and manage risk assessment methodologies, ensuring compliance with relevant service management requirements and industry standards.
• Develop and implement security management frameworks and governance structures as specified by the Customer.
• Establish and manage IT Security Incident Management processes, including detection, response, and handling of security incidents according to Customer guidelines.
• Collaborate with external partners and suppliers to resolve IT security incidents effectively.
• Participate in and contribute to industry-wide IT security incident response simulations and technical assessment exercises.
• Conduct forensic investigations when required, including secure disk image acquisition and analysis within specified timeframes.
• Monitor, analyze, and report on emerging security threats, vulnerabilities, and solutions relevant to the Customer's IT infrastructure.
• Conduct regular meetings with key stakeholders to highlight security issues and propose improvements to the Customer's IT infrastructure.
• Liaise and coordinate with external suppliers, security organizations, and the Government on IT security matters related to the Customer's infrastructure.
• Perform additional activities as necessary to secure the Customer's IT infrastructure.
• Review and follow up on security reports generated from central security tools, providing timely updates to the Customer.
• Manage the inventory of IT assets to be monitored by central security tools, ensuring compliance and proper onboarding of servers, networks, and databases.

Requirements

• At least 4 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (e.g. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred

Benefits

What do we offer in return?

• Fun working environment
• Employee Wellness Program
• To work in Singapore Government Agencies projects
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at careers@activate.sg

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.

Job Responsibilities:

·       Process trade and transfer transactions accurately and within established service levels.

·       Perform trade and transfer documentation checks, ensuring completeness and compliance with operational requirements.

·       Manage incoming trade-related cash settlements and asset transfer requests, including transaction monitoring and exception handling.

·       Investigate and resolve pending transactions, ensuring timely settlement and reconciliation.

·       Administer corporate action events, including cash and stock distributions, with a high degree of accuracy.

·       Adhere to operational risk and control frameworks, maintaining compliance with procedures and implementing process updates as required.

·       Investigate, track, and resolve client queries through phone and email channels, providing timely and effective solutions.

·       Deliver high-quality client service while maintaining strong attention to accuracy, responsiveness, and stakeholder satisfaction.

·       Adhoctasks and projects as assigned

Job Requirements

·       Minimum Degree in a related discipline

·       Minimum 1 years of relevant experience

·       Experience with fixed income securities and structured products will be an added advantage

·       Able to start immediately or within short notice

Interested candidates, kindly email your detailed resumes in MS word format to joseph.koh@ambition.com.sg

Attention to Joseph Koh Wei Jie(R1873431)

Shortlisted candidates will be notified

www.ambition.com.sg

EA Registration Number: R1873431

Data provided is for recruitment purposes only

Business Registration Number:200611680D. License Number: 10C5117

At Citi, we get to connect millions of people across hundreds of cities and countries every day.  And we've been doing it for more than 200 years.  We do this through our unparalleled global network.  We provide a broad range of financial services and products to our clients – whether they be consumers, corporations, governments or institutions – to help them meet their biggest opportunities and face the world's toughest challenges.

The Digital S/W Eng Lead Analyst is a strategic professional who stays abreast of developments within own field and contributes to directional strategy by considering their application in own job and the business. Recognized technical authority for an area within the business. Requires basic commercial awareness. There are typically multiple people within the business that provide the same level of subject matter expertise. Developed communication and diplomacy skills are required in order to guide, influence and convince others, in particular colleagues in other areas and occasional external customers. Significant impact on the area through complex deliverables. Provides advice and counsel related to the technology or operations of the business. Work impacts an entire area, which eventually affects the overall performance and effectiveness of the sub-function/job family.

Responsibilities:

• Accountable for executing and driving results on large-scale efforts or multiple smaller efforts and serving as a development lead for most medium and large projects. This includes expertise with application development methodologies and standards for program analysis, design, coding, testing, debugging and implementation.

• Accountable for exhibiting a strong understanding of client core business functions.

• Required to support situations in which end user consultation is required to identify system function specifications and incorporate them into overall system design and delivery. Additionally, utilize comprehensive knowledge of multiple areas within technology to achieve technological objectives.

• Independent work style, requiring little or no guidance by more senior developers. Decisions will make a significant, measurable impact on the business goals for the client organization. During team discussions you will play a significant role with TPMs and engineering managers to determine potential risks to a schedule.

• Assist in the planning and managing of application development assignments generally involving large budgets, cross functional projects or multiple projects. This includes effectively understanding and analyzing both technical and business risks and impact.

• Expected to effectively communicate those risks to the business owners, so that they can make informed decisions.

• Accountable for providing guidance on architecturally significant efforts during the preplanning phase, and ensuring principles and best practices are followed prior to initiation of work. In doing so, closely watch and evaluate Digital roadmaps, including impacts to support upcoming journeys.

• Publish design review extensions, and provide documented guidance aligned to sprint plans and timelines.

• Be part of the design review board that will focus on the design process, search for generic patterns, and, at the same time, share best practices across the organization.

• Publish design patterns across lines of business and domain commonalities. Drive design reviews for Next Gen Architecture (NGA) and Plan of Record (POR) projects, supporting design principles and best practices.

• Participate in micro services and NGA code reviews.

• Empower SDEs and their teams by mentoring and coaching.

• Have a comprehensive understanding of the business domain, the systems, and the products in your space. Understand their accountabilities, boundaries, limitations, scale factors and the reasons behind architectural decisions.

• Provide a long-term perspective for business and technology choices; using technical judgment to vet architecture as required.

• Able to direct teams on how to develop and deliver systems that are efficient with resource usage such as hardware, runtime, performance, load, and memory requirements.

• Responsible for broader design decisions and development of long-term strategies that significantly influence the development process and standards.

• Accountable for Design Reviews of Agile and Plan of Record (POR) projects as well as accountable for Code Reviews of Next Gen Architecture (NGA) projects and are expected to elaborate, promote and communicate Design Patterns applicable to NGA architectures and solutions.

• Accountable for providing architectural guidance to the SDE’s based on best practices and in alignment with CTO guidelines and platform.

• Drive clarity and work with complete independence as business and or technical strategy is not defined.

• Provide the corresponding architectural guidance, and conduct design reviews and code reviews based on the projects assigned to your LOB. The product definition and technical planning is out of scope.

• Accountable for the overall strategy and for driving the teams inside and outside of your organization to deliver expected results. Drive mindful discussion with business and technical stakeholders that lead to timely decisions. Participate in discussions to drive smart trade-off decisions that balance efforts, delivery timelines, features, and technical constraints. Identify and remove blockers and always find the path forward in challenging situations.

• Create plans that have a clear path to delivery. Solve for dependencies between agile and waterfall delivery efforts. Help your teams organize for delivery while maximizing resources for the greater good of the Digital organization. Understand engineering best practices and apply best practices to the software development lifecycle (SDLC)

• Accountable for Design Reviews for Citi Agile and POR projects as well as Code Reviews for the NGA projects. Accountable for providing architectural guidance to the SDE’s based on best practices and in alignment with CTO guidelines and platform. Elaborate, promote and communicate Design Patterns applicable to NGA architectures and solutions.

• Elaborate, bring and communicate clear metrics on Design Reviews, Code Reviews, CI/CD and Design Patterns adoption.

• Communicate progress, anticipate bottlenecks, provide escalation management, identify, assess, track and mitigate issues/risks at multiple levels. Recognize discordant views and take part in constructive dialog to resolve them.

• Demonstrate the ability to implement continuous improvement and the induction of new technology. Demonstrate examples of influence in scrum teams beyond your own area of focus.

• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Recommended Qualifications: 

• 8-15 years of relevant experience in an Apps Development role or senior level experience in an Enterprise Architecture role with subject matter expert in one or more areas.

• Exhibit expertise in all aspects of technology by understanding broader patterns and techniques as they apply to Citi’s internal and external cloud platforms (AWS, PCF, Akamai)

• Lead resources and serve as a functional SME across the company through advanced knowledge of algorithms, data structures, distributed systems, networking, use of knowledge and experience to lead, architect, and drive broader adoption forward.

• Acquire relevant technology and financial industry skills (AWS PWS) and understand all aspects of NGA technology – including innovative approaches and new opportunities.

• Demonstrate knowledge on automating code quality, code performance, unit testing, and build processing in the CI/CD.

Education:

• Bachelor’s/University degree, Master’s degree preferred