Total 46 security analyst job vacancies in Engineering category

• Well Established Security Inspection Solutions Company

• Salary: $2500 - $2800 (Basic) + $300 Transport Allowance

• Working Hour: Monday - Friday (8.30am – 5.30pm)

• Company Location: Jurong East (Based on Project Site)

• Variable bonus + Excellent Wellfare

• Training Provided

Job Scope:

• Assist Engineers in the maintenance, repair, and installation of equipment. Diagnose errors and technical issues and determine appropriate solutions.
• Support Engineers in project management, including planning, execution, and monitoring.
• Assist with the installation of new equipment and systems.
• Conduct routine troubleshooting of mechanical and electrical equipment to ensure smooth operations.
• Produce timely and detailed reports regarding maintenance activities, project status, and any issues or delays.
• Follow all company field processes and protocols to ensure safety and efficiency.
• Perform basic housekeeping duties to ensure a clean and safe work environment.
• Perform any other engineering-related tasks as assigned by senior engineers or management.

Requirement:

• NITEC / Diploma in Electrical / Mechanical Engineering or equivalent
• 0 - 2 years of relevant working experience in similar position

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume:

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

YEOW CHANG FU (R23118759)

EA Recruitment Pte Ltd

EA License No: 21C0492

Systems Engineer (Linux & Windows Infrastructure Security)

3 job vacancies due to project expansion

Cat2A security clearance

Join a Team Supporting Mission-Critical Infrastructure

We are seeking 3 Systems Engineers with strong Linux and Windows administration experience to support, secure, and maintain enterprise backend infrastructure operating in a high-availability environment.

This role is ideal for Infrastructure Engineers, Linux Administrators, Windows Engineers, System Engineers, and Cybersecurity-focused professionals looking to deepen their expertise in server hardening, infrastructure security, disaster recovery, and enterprise systems operations.

You will work closely with experienced engineers responsible for maintaining critical backend systems, ensuring system resilience, security compliance, and operational readiness.

Key Responsibilities

Infrastructure Configuration & Administration

• Configure, deploy, and maintain Linux and Windows servers

• Perform system setup, testing, installation, and upgrades

• Monitor server health, performance, and system availability

• Support infrastructure maintenance and lifecycle management

• Perform basic computer and network maintenance activities

Security Hardening & System Protection

• Perform CIS Hardening for Windows and Linux servers

• Configure and maintain Linux server security settings

• Manage SSH configurations and access controls (sshd_config)

• Administer Linux user accounts and sudo privileges (sudoers)

• Implement password policies and account management controls (chage / passwd)

• Maintain system security configurations in accordance with organisational standards

Backup, Recovery & Disaster Recovery

• Perform server backup and restoration activities

• Execute system recovery procedures using REAR (Relax-and-Recover)

• Support disaster recovery exercises and testing

• Validate system recovery readiness and business continuity requirements

Troubleshooting & Support

• Investigate infrastructure incidents and perform root cause analysis

• Resolve server, operating system, and infrastructure issues

• Support change implementation and system enhancement activities

• Work closely with project teams and stakeholders to ensure smooth operations

• Install, test, and implement systems in accordance with specifications and service level requirements, ensuring compliance with industry best practices.

• Manage systems changes using an established change request process, including assessing the impact, obtaining necessary approvals, and communicating status updates to multiple stakeholders.

• Conduct root cause analysis for system issues and proactively implement measures to prevent recurrence.

• Continuously monitor the effectiveness of implemented measures and make adjustments as necessary.

• Develop and implement comprehensive service continuity measures, including robust backup/restore procedures and disaster recovery plans, to ensure uninterrupted business operations in the event of disruption.

• Provide expert technical advice and guidance on systems to customers and project teams, assisting them in making informed decisions and resolving complex technical issues.

Required Technical Skills

Must-Have Skills

• Linux Security Configuration

• SSH Administration (sshd_config)

• Linux User Management (sudoers)

• Password Policy Administration (chage / passwd)

• REAR (Relax-and-Recover)

• Linux Server Administration

• Windows Server Administration

• Device Hardening

• Systems Configuration & Setup

• CIS Security Hardening

• Infrastructure Troubleshooting

• Backup & Recovery Operations

• Basic Networking Knowledge

Educational Requirements

Candidates should possess min NITEC in Electrical Engineering, Electronics Engineering, or Information Technology (IT) from a recognized institution.

Communication Skills

Successful candidates should possess:

• Strong verbal and written communication skills

• Ability to communicate effectively with technical and non-technical stakeholders

• Ability to explain technical concepts clearly and professionally

• Strong documentation and reporting capabilities

If you enjoy working with Linux, Windows infrastructure, cybersecurity hardening, and enterprise backend systems, we'd love to hear from you.

EA License No: 09C4235 I EA Reg: R1103307 Hong Mei Lin

• Well Established Security Inspection Solutions Company

• Salary: $2500 - $2800 (Basic) + $300 Transport Allowance

• Working Hour: Monday - Friday (8.30am – 5.30pm)

• Company Location: Jurong East (Based on Project Site)

• Variable bonus + Excellent Wellfare

• Training Provided

Job Scope:

• Assist Engineers in the maintenance, repair, and installation of equipment. Diagnose errors and technical issues and determine appropriate solutions.
• Support Engineers in project management, including planning, execution, and monitoring.
• Assist with the installation of new equipment and systems.
• Conduct routine troubleshooting of mechanical and electrical equipment to ensure smooth operations.
• Produce timely and detailed reports regarding maintenance activities, project status, and any issues or delays.
• Follow all company field processes and protocols to ensure safety and efficiency.
• Perform basic housekeeping duties to ensure a clean and safe work environment.
• Perform any other engineering-related tasks as assigned by senior engineers or management.

Requirement:

• NITEC / Diploma in Electrical / Mechanical Engineering or equivalent
• 0 - 2 years of relevant working experience in similar position

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume:

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

YEOW CHANG FU (R23118759)

EA Recruitment Pte Ltd

EA License No: 21C0492

Job Description: Join the future of enterprise security! At ASIS Technologies, we don't just sell hardware; we design intelligent security ecosystems. We are looking for a motivated individual to join our Singapore HQ as a Solution Engineer.

Whether you are a fresh Engineering graduate or looking to switch into the high-growth Security & AI industry, we provide the blueprint and tools for your success.

Key Responsibilities:

• System Design: Learn to create professional project proposals, system diagrams, and Bill of Quantities (BOQ) for enterprise clients.

• Tech-AI Integration: Utilize advanced AI tools to streamline technical support and design compliance-ready security solutions.

• Customer Collaboration: Work closely with the sales team to address technical enquiries and provide top-tier support.

• Professional Growth: Undergo structured in-house training to become a subject matter expert in Access Control and CCTV systems.

Requirements:

• Education: Diploma or Degree in Engineering (Electrical, Electronics, Computer, or related fields).

• Experience: 0–2 years. We value aptitude over years of service. If you are meticulous and tech-savvy, we want you.

• Mindset: A strong desire to learn the intricacies of Enterprise Security Systems.

• Bonus: Prior experience in ELV/Security systems is a plus, but not mandatory.

RESPONSIBILITIES:

• Post-sales activities of Cybersecurity or Network Performance Monitoring products
• Involve in Large-scale (Local & Regional) Project Implementation
• Provide on-site implementation services including testing, deployment & documentation
• Provide technical support in ensuring customer satisfaction
• Analyse and clarify customer queries though troubleshooting and researching existing
  knowledgebase articles/known issues
• Be on routine standby to support 24x7 maintenance support calls
• Requires the ability to communicate issues clearly and concisely

REQUIREMENTS:

• Bachelor's degree or Diploma in Cyber Security, Computer Science, Computer Engineering or related field
• At least 1-2 years relevant experience in IT industry providing network support and
  administration.
• Equip with knowledge & experience in networking such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Able to work independently as well as in a team environment.
• Willing to work hard and eager to learn about new technologies.
• Polite and able to communicate well to the clients.
• Analytical and possess good troubleshooting skills.
• Willing to work extended hours and on standby duty.
• Excellent interpersonal and communication skills.
• Independent and motivated.

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

This is a 2 years fixed term contract role.

What will you do?

The Full Stack Engineer is a pivotal role responsible for the end-to-end design, development, deployment, and maintenance of scalable, high-performance, and secure web applications.

This role combines application development (AI-assisted programming) with hands-on ownership of cloud infrastructure, ensuring reliable, secure, and scalable systems on Azure. The engineer would be working on PUB’s gen-AI assisted procurement-related web application as part of PUB’s AI initiative.

User Engagement & Requirements Gathering:

• Conduct user testing sessions to gather valuable feedback on application functionality and user experience.
• Actively engage with stakeholders and end-users to gather, refine, and translate product functionality requirements into technical specifications/ testable artifacts.

AI-Assisted Development & Code Quality:

• Own end-to-end application delivery (frontend, backend, and cloud), leveraging AI coding assistants to accelerate development while ensuring quality, scalability, and maintainability (DRY, modular design, separation of concerns).
• Build responsive, accessible, and performant web interfaces, using AI to speed up development while retaining full ownership of architecture and reusability.
• Design and operate secure, reliable, and observable backend services and APIs, guiding AI for boilerplate and tests while owning API contracts and data models.
• Review and validate all AI-generated code, identifying hallucinations, logic flaws, and maintainability issues before integration.

Cloud Architecture & Infrastructure:

• Own the end-to-end design, implementation, and operation of Azure infrastructure, ensuring solutions are secure, scalable, highly available, and compliant by design.
• Translate application and security requirements into well-architected Azure reference architectures, balancing performance, cost, and operational complexity.
• Design and implement secure network topologies, including segmented VNets, subnet strategies, private connectivity patterns (Private Endpoints, VNet Integration) to eliminate public exposure of critical services, and network security enforcement using NSGs
• Architect and deploy cloud-native application platforms, leveraging services such as:

1. Compute: Azure Kubernetes Service (AKS)
2. Integration: API Management (APIM)
3. Security: Key Vault, Managed Identities, Entra ID integration
4. Edge & Protection: Application Gateway, WAF
5. Storage: Azure Blob Storage, Azure PostgreSQL Flexible Server

• Implement secure-by-default infrastructure patterns, including secret management and end-to-end encryption (in transit and at rest)

DevOps:

• Design, implement, and maintain full-stack CI/CD deployment strategies and pipelines, ensuring automated, compliant, and efficient release processes.

Testing & Quality Assurance:

• Establish comprehensive automated test strategies, including unit, integration, and end-to-end testing, ensuring high code coverage.
• Resolve all identified software defects, bugs to maintain application stability and integrity.

Security & Compliance:

• Ensure adherence to IM8 compliance requirements and any other emerging organizational compliance mandates.
• Implement and maintain comprehensive full-stack security measures, including robust authentication, authorization, API security, and frontend security best practices.
• Establish regular SAST, SCA, container image, vulnerability scans and other regular security related scans and resolve identified security vulnerabilities according to compliance timeline.

Requirements

What are we looking for?

Full Stack Development:

• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology, or related disciplines.
• Experience with Git and modern branching workflows (GitFlow, trunk-based development).
• Strong proficiency in both frontend and backend development.
• Strong understanding of software engineering best practices (DRY, single responsibility principle, meaningful abstraction, testability) and the ability to enforce these standards within an AI-augmented development workflow.
• Strong code review instincts — can catch hallucinations, logic errors, and security issues in AI output
• Working in an agile release model, engineers must be adaptable and proactive to evolving requirements and user feedback.

Technologies:

• Next.js, TypeScript, React.js, UI component libraries (e.g., ShadCN, Tailwind CSS).
• Experience with relational databases

Security & Compliance:

• Experience with IM8 compliance and system commissioning for government projects
• Strong knowledge of frontend security (CSP, CORS, XSS prevention).
• Experience with backend security (OAuth, JWT, API rate limiting, encryption).
• Familiarity with cloud security (IAM, Secrets Management, OWASP Top 10).

DevOps & Infrastructure:

• Proven experience setting up and managing Azure infrastructure (refer to Azure services listed in the Cloud Architecture & Infrastructure of Key Responsibilities).
• Experience with CI/CD pipelines using GitLab CI
• Experience with containerization and orchestration (Docker, Kubernetes).

Software Quality & Testing:

• Experience with unit and integration testing (Jest, Cypress, Playwright, Pact).
• Backend testing using Postman, Supertest, contract testing.

Observability & Monitoring:

• Experience implementing application performance monitoring (APM) tools (Prometheus, OpenTelemetry).
• Knowledge of logging frameworks (ELK Stack, Loki, Fluentd) to track and debug issues across distributed systems.

Backend Scalability & API Design:

• Strong experience in API design principles
• Knowledge of API rate limiting, caching strategies (Redis, Varnish), and performance optimizations.
• Familiarity with backend service scalability strategies (horizontal scaling, autoscaling, load balancing).

Bonus Experience (Added Advantage):

• Experience with government procurement processes
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Certified: Azure Security Engineer Associate

Benefits

What do we offer in return?

• Fun working environment
• Employee Wellness Program
• To work in Singapore Government Agencies projects
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at careers@activate.sg

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.

At Citi, we get to connect millions of people across hundreds of cities and countries every day.  And we've been doing it for more than 200 years.  We do this through our unparalleled global network.  We provide a broad range of financial services and products to our clients – whether they be consumers, corporations, governments or institutions – to help them meet their biggest opportunities and face the world's toughest challenges.

The Digital S/W Eng Lead Analyst is a strategic professional who stays abreast of developments within own field and contributes to directional strategy by considering their application in own job and the business. Recognized technical authority for an area within the business. Requires basic commercial awareness. There are typically multiple people within the business that provide the same level of subject matter expertise. Developed communication and diplomacy skills are required in order to guide, influence and convince others, in particular colleagues in other areas and occasional external customers. Significant impact on the area through complex deliverables. Provides advice and counsel related to the technology or operations of the business. Work impacts an entire area, which eventually affects the overall performance and effectiveness of the sub-function/job family.

Responsibilities:

• Accountable for executing and driving results on large-scale efforts or multiple smaller efforts and serving as a development lead for most medium and large projects. This includes expertise with application development methodologies and standards for program analysis, design, coding, testing, debugging and implementation.

• Accountable for exhibiting a strong understanding of client core business functions.

• Required to support situations in which end user consultation is required to identify system function specifications and incorporate them into overall system design and delivery. Additionally, utilize comprehensive knowledge of multiple areas within technology to achieve technological objectives.

• Independent work style, requiring little or no guidance by more senior developers. Decisions will make a significant, measurable impact on the business goals for the client organization. During team discussions you will play a significant role with TPMs and engineering managers to determine potential risks to a schedule.

• Assist in the planning and managing of application development assignments generally involving large budgets, cross functional projects or multiple projects. This includes effectively understanding and analyzing both technical and business risks and impact.

• Expected to effectively communicate those risks to the business owners, so that they can make informed decisions.

• Accountable for providing guidance on architecturally significant efforts during the preplanning phase, and ensuring principles and best practices are followed prior to initiation of work. In doing so, closely watch and evaluate Digital roadmaps, including impacts to support upcoming journeys.

• Publish design review extensions, and provide documented guidance aligned to sprint plans and timelines.

• Be part of the design review board that will focus on the design process, search for generic patterns, and, at the same time, share best practices across the organization.

• Publish design patterns across lines of business and domain commonalities. Drive design reviews for Next Gen Architecture (NGA) and Plan of Record (POR) projects, supporting design principles and best practices.

• Participate in micro services and NGA code reviews.

• Empower SDEs and their teams by mentoring and coaching.

• Have a comprehensive understanding of the business domain, the systems, and the products in your space. Understand their accountabilities, boundaries, limitations, scale factors and the reasons behind architectural decisions.

• Provide a long-term perspective for business and technology choices; using technical judgment to vet architecture as required.

• Able to direct teams on how to develop and deliver systems that are efficient with resource usage such as hardware, runtime, performance, load, and memory requirements.

• Responsible for broader design decisions and development of long-term strategies that significantly influence the development process and standards.

• Accountable for Design Reviews of Agile and Plan of Record (POR) projects as well as accountable for Code Reviews of Next Gen Architecture (NGA) projects and are expected to elaborate, promote and communicate Design Patterns applicable to NGA architectures and solutions.

• Accountable for providing architectural guidance to the SDE’s based on best practices and in alignment with CTO guidelines and platform.

• Drive clarity and work with complete independence as business and or technical strategy is not defined.

• Provide the corresponding architectural guidance, and conduct design reviews and code reviews based on the projects assigned to your LOB. The product definition and technical planning is out of scope.

• Accountable for the overall strategy and for driving the teams inside and outside of your organization to deliver expected results. Drive mindful discussion with business and technical stakeholders that lead to timely decisions. Participate in discussions to drive smart trade-off decisions that balance efforts, delivery timelines, features, and technical constraints. Identify and remove blockers and always find the path forward in challenging situations.

• Create plans that have a clear path to delivery. Solve for dependencies between agile and waterfall delivery efforts. Help your teams organize for delivery while maximizing resources for the greater good of the Digital organization. Understand engineering best practices and apply best practices to the software development lifecycle (SDLC)

• Accountable for Design Reviews for Citi Agile and POR projects as well as Code Reviews for the NGA projects. Accountable for providing architectural guidance to the SDE’s based on best practices and in alignment with CTO guidelines and platform. Elaborate, promote and communicate Design Patterns applicable to NGA architectures and solutions.

• Elaborate, bring and communicate clear metrics on Design Reviews, Code Reviews, CI/CD and Design Patterns adoption.

• Communicate progress, anticipate bottlenecks, provide escalation management, identify, assess, track and mitigate issues/risks at multiple levels. Recognize discordant views and take part in constructive dialog to resolve them.

• Demonstrate the ability to implement continuous improvement and the induction of new technology. Demonstrate examples of influence in scrum teams beyond your own area of focus.

• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Recommended Qualifications: 

• 8-15 years of relevant experience in an Apps Development role or senior level experience in an Enterprise Architecture role with subject matter expert in one or more areas.

• Exhibit expertise in all aspects of technology by understanding broader patterns and techniques as they apply to Citi’s internal and external cloud platforms (AWS, PCF, Akamai)

• Lead resources and serve as a functional SME across the company through advanced knowledge of algorithms, data structures, distributed systems, networking, use of knowledge and experience to lead, architect, and drive broader adoption forward.

• Acquire relevant technology and financial industry skills (AWS PWS) and understand all aspects of NGA technology – including innovative approaches and new opportunities.

• Demonstrate knowledge on automating code quality, code performance, unit testing, and build processing in the CI/CD.

Education:

• Bachelor’s/University degree, Master’s degree preferred

1. Installation, maintenance and servicing of a wide variety of equipment including but not limited to:

• General security systems
• Alarm systems
• CCTV systems
• Access control systems

2. Troubleshoot problems encountered on site

3. Diagnose and resolve issues related to network connectivity, server performance, and communication between security systems (e.g., CCTV, alarm systems, access control systems).

4. Provide feedback to management on issues faced on the ground

5. Perform routine maintenance and firmware updates on servers, network devices, and security system software to ensure systems remain reliable and up-to-date

Job Requirements

• Candidate must possess at least a NITEC or Diploma in Engineering (Electrical/ Electronic/ Information Technology) or equivalent
• Minimum 2 years’ experience in Operational Technology/ Information Technology industry
• Knowledge of networking and IP/TCP protocol
• In-depth knowledge in CCTV, Access Control and System Server etc.
• Hands-on experience in security-related tasks such as OS tightening, patching and updating, virus scanning will be an added advantage.
• IT Certification in windows system & storage, network, database, virtualization, cloud technologies will be an added advantage
• Good communication skills and positive working attitude.
• Candidate must possess a Class 3 or 3A driving licence

Benefits

• Annual Wage Supplement (13th month) and Performance Bonus
• Medical and Dental Benefits
• Corporate Insurance coverage
• Annual Pay Increment

Clarice Lim (R1656152) | Anchor Search Group Pte Ltd (17C8528)

• Well Established Security Inspection Solutions Company

• Salary: $2500 - $2800 (Basic) + $300 Transport Allowance

• Working Hour: Monday - Friday (8.30am – 5.30pm)

• Company Location: Jurong East (Based on Project Site)

• Variable bonus + Excellent Wellfare

• Training Provided

Job Scope:

• Assist Engineers in the maintenance, repair, and installation of equipment. Diagnose errors and technical issues and determine appropriate solutions.
• Support Engineers in project management, including planning, execution, and monitoring.
• Assist with the installation of new equipment and systems.
• Conduct routine troubleshooting of mechanical and electrical equipment to ensure smooth operations.
• Produce timely and detailed reports regarding maintenance activities, project status, and any issues or delays.
• Follow all company field processes and protocols to ensure safety and efficiency.
• Perform basic housekeeping duties to ensure a clean and safe work environment.
• Perform any other engineering-related tasks as assigned by senior engineers or management.

Requirement:

• NITEC / Diploma in Electrical / Mechanical Engineering or equivalent
• 0 - 2 years of relevant working experience in similar position

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume:

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

YEOW CHANG FU (R23118759)

EA Recruitment Pte Ltd

EA License No: 21C0492

Job Description:

o Cybersecurity System Maintenance

- Regularly monitor and maintain security tools, firewalls, antivirus software, and intrusion detection/prevention systems (IDS/IPS)

o Incident Response Support

- Assist in identifying, investigating, and responding to security incidents, providing first-level troubleshooting and documentation

o Liaise with technology vendors for escalation where required

o Vulnerability Management

- Conduct regular vulnerability assessments and patch management to ensure systems remain secure

o Security Audits

- Support security audits by gathering and preparing necessary logs and reports. Ensure compliance with security best practices and regulatory standards

o Collaboration

- Work closely with IT teams, network engineers, and other stakeholders to implement security measures and support operational needs

o Documentation

- Maintain detailed documentation on security procedures, incidents, and the overall state of cybersecurity environment

Skill Sets:

o Able to lead a team of engineers to fulfil Day 1 and Day 2 functions

o Strong analytical skills and attention to detail

o Ability to work independently and manage multiple tasks simultaneously

o Excellent communication skills, both written and verbal

o Team-oriented with a strong customer service mindset

o Experience in either one of the multiple cyber security domain eg. (Endpoint protection, Network Security, IAM)

o Certifications in CISSP or equivalent would be advantageous

o Operational experience in Container Security and Key Management is a plus

Key Responsibilities

 Support project by delivering project deliverables and completing project milestones

 Responsible for configuration, installation of servers, networks and related hardware and software

 Coordinate with external parties (including vendors) and customers for problem implementation and resolutions

 Prepare and Participate in System Acceptance Tests (including security) with external vendors and customers

 Troubleshoot and debug issues that arise

 Develop and maintain technical and configuration documentation

 Documenting and explaining network topologies, diagram and diagram

 Prepare standard documentation Eg. SOW, system handover document, inventory etc

 Provide technical support and incident response to the maintenance team.

Technical Skill Sets:

Operating Systems: Linux, CentOS, SUSE

Networking: Dell, Cisco, routing, switching, TCP/IP

Security & Firewall: Fortinet, firewall management

Infrastructure Hardware: Fiber-optic transmission devices

Big Data & Data Platform: Hadoop, HDFS, ZooKeeper, Cloudera, Hue, Apache

Search & Analytics: Elasticsearch

Operations & Support: System implementation, troubleshooting, system maintenance, production support

As an OT / ICS Cybersecurity Professional at ST Engineering Info-Security, you will play a critical role in safeguarding operational technology and industrial control systems for our diverse clientele. This position offers an exciting opportunity to apply advanced engineering principles and cyber security knowledge in challenging, real-world environments.

In this role, you will be responsible for developing, and implementing comprehensive cyber security solutions tailored to operational technology landscapes. You will collaborate with multidisciplinary teams to assess security risks, develop mitigation strategies, and deploy protective measures that ensure the resilience and integrity of critical infrastructure.

Key Responsibilities:

• Development and integration of cybersecurity solutions specifically targeting operational technology systems, including SCADA, DCS, and PLC environments.
• Design and implement remediation plans and security architecture enhancements to address identified risks.
• Collaborate closely with projectteams, clients, and stakeholders to ensure security requirements are embeddedthroughout the project lifecycle.
• Stay abreast of emerging cyberthreats, industry trends, and regulatory requirements related to OTenvironments and incorporate this knowledge into solution design.
• Participate in incident response and forensic investigations as needed, providing expert analysis and recommendations.
• Contribute to the development of internal best practices, standards, and documentation to elevate the division's capabilities.
• Cultivate engineering excellence via coaching and development. 

Qualifications and Experience:

• Equip with knowledge of control system architectures such as SCADA, DCS, and PLC, and their associated security challenges
• Equip with knowledge of cyber security frameworks, standards, and technologies relevant to IT/OT environments.
• Familiarity with endpoint security, network security, intrusion detection and access control.
• Excellent problem-solving skills and the ability to work effectively both independently and within a team.
• Strong communication skills to convey complex technical concepts clearly to diverse audiences.
• Minimum 6 years experience in OT/IT cybersecurity roles.
• Proven record in managing teams for OT/IT cybersecurity deployment projects.

Why Join ST Engineering Info-Security?

At ST Engineering Info-Security, we are committed to innovation, quality, and creating secure environments for critical infrastructure globally. You will join a forward-thinking team that values expertise, collaboration, and integrity. Our focus on operational technology security places you at the forefront of protecting vital systems that underpin modern society. We offer opportunities for professional development and career progression in a supportive and inclusive workplace.

If you are passionate about advancing cyber security in operational technology and seeking a challenging yet rewarding career with a leading organisation, we encourage you to apply and become part of ST Engineering Info-Security's mission to deliver trusted security solutions worldwide.

Work location: Jurong East

ALTEN Group is a world leader in Engineering and Technologyconsulting services providing outsourced Engineering, R&D, and IT Servicesfor different industries such as Transportation, Defence, Energy and Securitywith 55,000 engineers in nearly 35 countries. ANOTECH is the subsidiary of the Group delivering ALTEN's Engineering Services in Singapore.

As a Level 2 Engineer, you will support a command and control system. The ideal candidate will actively participate in advanced troubleshooting, in-depth analysis of problems, and implementing solutions that may involve more specialized knowledge for a mission-critical24x7 system.

Responsibilities

·        Preventive Maintenance for Network & Security Equipment

Ø  Perform quarterly preventive maintenance (PM)for Network & Security Equipment

Ø  Update and submit checklist after PM

·        VAPT Support

Ø  Conduct Vulnerability assessment using Nessus

Ø  Validate scan completion and analyse findings

Ø  Perform remediation planning and coordination

Ø  Security Hardening and Configuration Review

Ø  Remediation validation

Ø  Reporting & Documentation for VAPT

·        Quarterly Compliance Check

Ø  Conduct vulnerability assessment on the systems across all sites using Nessus

Ø  Perform remediation planning and coordination with Level 2 engineers

·        IM8 Governance Compliance

Ø  Ensure day-to-day operations comply with IM8ICT Security Standards

Ø  Support security assessments with Authority

Ø  Maintain audit-ready documentation

Ø  Support IM8 policy enforcement example patching SLAs

·        Firewall Operations

Ø  Manage policies, and troubleshoot traffic issues

Ø  Support IPS/Threats modules

Ø  Support logs extraction

Ø  Perform firmware updates, patches, security fixes and vulnerability remediation

Ø  Maintain up-to-date configurations

·        Hardware Security Module

Ø  Monitor HSM health and readiness

Ø  Understand and able HSM to support cryptographic operations under strict governance and dual control

Ø  Review and maintain HSM logs

Ø  Manage HSM key management operation

Ø  Perform firmware updates, patches, security fixes and vulnerability remediation

·        SIEM Monitoring

Ø  Configure SIEM to show high severity events as alerts on the dashboard

Ø  Identify unusual patterns, anomalies, and suspicious events in the logs

Ø  Ensure all critical systems send security logs to the SIEM

Ø  Ensure antivirus definitions and engines are automatically updated

Ø  Monitor update compliance across all end points/servers

Ø  Investigate if not updating, outdated, failing scans and recover

Ø  Tuning and optimization of SIEM rules

Ø  Develop and maintain / optimize dashboard for real-time display of alerts

Ø  Perform firmware updates, patches, security fixes and vulnerability remediation

·        Aruba ClearPass Monitoring

Ø  Manage and maintain ClearPass Access Control policies

Ø  Integrate Aruba ClearPass with Network infrastructure

Ø  Maintain up-to-date configurations

Ø  Perform firmware updates, patches, security fixes and vulnerability remediation

·        SamsungKnox MDM

Ø  Onboard new devices into Samsung Knox

Ø  Configure and maintain MDM policies

Ø  Manage approved application via Knox

Ø  Monitor device compliance dashboard

Ø  Manage deployment of certificates and rotation of certificates on the mobile devices

Ø  Maintain accurate record of mobile device lifecycle management

Ø  Perform application patches, security fixes and vulnerability remediation

Ø  Maintain up-to-date configurations

·        Incident & Problem Management

Ø  Resolve P1/P2 issues within SLA

Ø  Perform resolution and communications

Ø  Perform root cause analysis and recommend permanent fixes

Ø  Escalate unresolved issues that required software coding to Level 3 or engineering teams

Ø  Ensure proper closure of incident and problem

·        Change Management

Ø  Perform operational impact assessment

Ø  Present change in Change Advisory Board

Ø  Pre-Change Preparation such as review Change Request and Release Plan

Ø  Documentation update in the knowledge base

Ø  Post change review and feedback

·        Patch Management

Ø  Perform patch management readiness

Ø  Stakeholder coordination and team coordination

Ø  System Readiness and Post-Patch Validation

Ø  Documentation update and knowledge transfer

Ø  Compliance and audit readiness

·        Documentation and Compliance

Ø  Operational documentation. SOPs, Incident response checklist, RCA, PIR, monitoring and alert guidebook

Ø  Configuration & Infrastructure Documentation. System configuration baseline, application dependency maps, environment inventories such as hosts, services, accounts

Ø  Knowledge Base Articles for level 2 enablement and faster resolution e.g. Known Errors and Fixes, Frequent How-To Guides, Script Repositories, Lessons Learned

Ø  Maintain application documentation

Ø  Knowledge Management

·        Configuration Management

Ø  Perform validation and accuracy of configurations

Ø  Maintain readiness of operational documentation

Ø  Perform audit to confirm compliance of configurations

Ø  CMDB asset verification

Ø  Change-linked configuration tracking

Ø  Ensure environment consistency between DEV –IVVQ – ISO-PROD – UAT and PROD

·        Testing and Verification

Ø  Ensure operational readiness testing before production deployment rollout

Ø  Ensure post-change verification coordination

Ø  Perform regression and sanity test following patching or upgrades, in UAT and PROD

Ø  Participation in user acceptance testing

·        Knowledge Management

Ø  Documentation of resolution

Ø  Knowledge Base Contribution

Ø  Validation of knowledge

Ø  Subject Matter Expertise Sharing

·        Root Cause Analysis

Ø  Gather logs, system metrics at the time of failure

Ø  Reproduction of issues in a controlled environment to understand the conditions under which it occurs

Ø  Determine the scope and severity in terms of the systems affected, downtime duration and business impact

Ø  Narrow down the possible sources of causing the failure

Ø  Use of diagnostic tools such to analyse the application behaviour

Ø  Correlation of events to sequence the chain of events leading up to the failure and identify the dependencies

·        Work Schedule

Ø  Require rotational on-call duty support

Ø  Available for graveyard hours change request deployment as scheduled

Requirements

·        Diploma / Bachelor Degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a closely related discipline

·        At least 2-5 years in Level2 support for mission critical 24x7 production support, preferably in public sector

·        Proven experience in handling P1/P2 incidents, managing post-incident reviews (PIRs) and root cause analysis

·        Preferably certification in Check Point / Palo Alto firewall, Cisco CCNA, Aruba, LogRhythm Analyst

·        Strong understanding of IM8 compliance reporting, audit evidence and configuration traceability

·        Handson technical experience in the following:

Ø  Networking Fundamentals

Ø  Firewall / Aruba Fundamentals

Ø  Nessus for vulnerability scanning

Ø  CIS-CAT Pro for security configuration compliance

Ø  Symantec Endpoint Protection Manager

Ø  Hardware Security Module (Safenet)

Ø  LogRhythm SIEM

Ø  Samsung Knox MDM

Ø  Aruba ClearPass Network Access Control

Ø  Cisco Switches, Wireless LAN Controller, Prime/DNA Center, IPS

Ø  Cisco CMX / DNA Spaces

Ø IM8 Security Standards

·        Must be eligible to obtain G50 security clearance

·        Must have at least  5-8 years of IT infrastructure experience

· Technical mastery of both on-premises Active Directory and cloud-native Entra ID, including B2B/B2C scenarios, app registrations, and enterprise applications.

· Proven experience implementing the full Microsoft 365 Defender suite and Microsoft Purview, encompassing DLP, EDR, EPP, and identity security capabilities.

· Proficiency in PowerShell and MS Graph API for comprehensive security and identity auditing, as well as automated threat remediation.

·        Ability to synthesize complex security and identity logs into actionable risk recommendations for executive leadership.

· SC-100 (Microsoft Cybersecurity Architect), SC-300 (Microsoft Identity and Access Administrator), MS-500 (Microsoft 365 Security Administration), and CISSP or an equivalent security-focused accreditation.

· Proactive and dedicated individual with good leadership and multitasking capabilities as aswell as the ability to work independently without the need for close supervision.

· Experienced in contract and vendor management.

· Good communication skills, both oral and written, with the ability to pitch ideas and communicate effectively with stakeholders.

· Team player with strong organization and people handling skills.

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

We are seeking highly skilled and innovative engineer to join our transformative SSOE Programme that manages more than 350 schools across Singapore. This is an exceptional opportunity to shape the future of educational technology infrastructure and enhance the learning experience of more than 450,000 students and 35,000 education professionals.

As a Senior / IT Infra Engineer focusing on Identity and Security, you will be the primary engineer for our Zero Trust ecosystem. You will lead the end-to-end design and implementation of both a secure endpoint environment; center heavily on Data Loss Prevention (DLP), Endpoint Protection Platforms (EPP), and Endpoint Detection and Response (EDR); and identity-driven access governance utilizing on-premises Active Directory (AD) and cloud-native Entra. Your mission is to ensure that every user, device, and application within the Microsoft 365 cloud ecosystem is verified, seamlessly managed throughout the identity lifecycle, and continuously monitored against evolving threats.

What will you do?

Identity & Access Governance

• Design and architect Entra ID (Azure AD) solutions, focusing on Conditional Access policies, Privileged Identity Management (PIM), and Identity Protection to enforce least privileged access.
• Manage complex Identity Lifecycle processes, ensuring seamless and secure integration between on-premises Active Directory and cloud-native identity providers.
• Implement and maintain Passwordless authentication and Multi-Factor Authentication (MFA) strategies to eliminate credential-based vulnerabilities.

Security Engineering & Threat Protection

• Work with security team to engineer and operate the Microsoft Defender for Endpoint and Defender for Office 365 suites (EPP/EDR) to proactively hunt for threats and remediate vulnerabilities across the fleet.
• Deploy and manage Microsoft Purview for information protection, Data Loss Prevention (DLP), and eDiscovery, ensuring sensitive corporate data remains governed and compliant.
• Develop automated response playbooks using PowerShell and Microsoft Graph API to neutralize security incidents in real-time.

Identity & Access Governance

• Design and architect Entra ID (Azure AD) solutions, focusing on Conditional Access policies, Privileged Identity Management (PIM), and Identity Protection to enforce least privileged access.
• Implement and maintain Passwordless authentication and Multi-Factor Authentication (MFA) strategies to eliminate credential-based vulnerabilities.
• Lead the identity and access design for enterprise-wide rollouts, ensuring robust authentication mechanisms are baked into every deployment.
• Act as the primary technical liaison for Cybersecurity Audits, providing data-driven evidence of compliance regarding identity lifecycles and access control.
• Mentor the team on security best practices, conducting knowledge-sharing sessions on the latest Entra features and identity threat landscapes.

Automation & Observability

• Automation: Engineer for scalability by building reusable automation and utilizing PowerShell scripting and related tools like PowerBI, Dynatrace and Axonius to monitor service health and reporting to derive insights.
• Scripting & API: Use PowerShell, Bash, and Python to automate repetitive tasks and interact with the Microsoft Graph API for custom reporting.
• Fleet Analytics: Utilize KQL and Endpoint Analytics to monitor device health, battery wear, and application performance across the entire estate.
• Self-Service: Develop and maintain "Self-Service" portals for both staff and students to empower users and reduce helpdesk ticket volume.

General Responsibilities

• Engage stakeholders to translate business requirement into design and services to meet the intended availability, capacity, resiliency, security and continuity requirements.
• Forecast budget needed to support the project initiatives and maintenance contracts.
• Ensure MOE’s related Technical Architecture are in compliance with IM8 and Agency’s IT Policies and Standards.
• Manage day-to-day delivery and support of application infrastructure services and collaborate with other government agencies and central services teams to facilitate and deliver government-wide services.

Leadership & Strategic Compliance

• Lead the security design for enterprise-wide software rollouts, ensuring "Security by Design" is baked into every deployment.
• Act as the primary technical liaison for Cybersecurity Audits, providing data-driven evidence of compliance with global security standards (e.g., ISO 27001, SOC2).
• Mentor the team on security best practices, conducting regular knowledge-sharing sessions on the latest M365 security features and threat landscapes.

Requirements

• Identity Expertise: Technical mastery of both on-premises Active Directory and cloud native Entra ID, including B2B/B2C scenarios, App Registrations, and Enterprise Applications.
• Security Stack Mastery: Proven experience implementing the full Microsoft 365 Defender suite and Microsoft Purview, encompassing DLP, EDR, EPP, and identity security capabilities.
• Automation-First Mindset: Proficiency in PowerShell and MS Graph API for comprehensive security and identity auditing, as well as automated threat remediation.
• Analytical Rigor: Ability to synthesize complex security and identity logs into actionable risk recommendations for executive leadership.
• Preferred Certifications: SC-100 (Microsoft Cybersecurity Architect), SC-300 (Microsoft Identity and Access Administrator), MS-500 (Microsoft 365 Security Administration), and CISSP or an equivalent security-focused accreditation.
• Proactive and dedicated individual with good leadership and multi-tasking capabilities as well as the ability to work independently without the need for close supervision.
• Experienced in contract and vendor management.
• Good communication skills, both oral and written, with the ability to pitch ideas and communicate effectively with stakeholders.
• Team player with strong organization and people handling skills

Benefits

What do we offer in return?

• Fun working environment
• Employee Wellness Program
• To work in Singapore Government Agencies projects
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at 

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.