Total 70 it specialist job vacancies in Legal / Public / Security category

職位描述

部門：公司/合規

報告對象：營運長/管理階層

職位概述

我們正在尋找一位注重細節、成熟穩重的合規主管，以支持公司在馬來西亞和杜拜的營運中的合規、合約和員工相關事宜。

該職位適合具有企業法律/合規背景，能夠妥善處理勞動相關事宜、內部治理、合規協調、風險評估和跨境企業支援的候選人。

主要職責

• 審核並核實外部律師事務所所準備的合約、協議和內部文件
• 就法律、合規、僱用和公司事務與外部律師事務所進行協調和聯絡。
• 支持馬來西亞和阿聯酋業務中與員工相關的合規事宜。
• 處理勞動相關事宜、紀律處分文件、糾紛協調及合規風險評估
• 確保對敏感事項進行妥善的文件記錄、證據追蹤和檔案管理。
• 協助管理階層改善內部治理、合規流程和政策實施
• 必要時，為與國際稅務、跨境營運合規和公司架構相關的事宜提供支援。
• 對營運事項進行合規性審查和基本法律風險分析

要求

• 持有有效的律師執業許可證/法律資格
• 至少兩年企業法律、合規或內部法律相關工作經驗
• 具備處理勞資糾紛、合規事宜和合約審查的經驗
• 較強的分析思維與注重細節
• 高度的專業、保密意識和證據意識
• 能夠理性客觀地處理敏感問題
• 具備國際稅務或跨國公司事務的經驗是一項優勢。

首選資料

• 成熟穩重的性格
• 較強的文檔撰寫和組織能力
• 能夠獨立工作並具備良好的判斷力。
• 能夠適應快節奏且不斷變化的商業環境
• 有支援區域或國際業務營運經驗者優先考慮

申請連結：https://jobs.persolmalaysia.com/detail/39001?apply_id=39001&utm_source=jobstore&utm_medium=sponsored

聯絡信箱：jiayi.neoh@persolapac.com

好處

A. 彈性福利計畫（自 2026 年 1 月 1 日起生效）

• 每位符合資格的員工每年稅後預算為 3,000 令吉
• 可在五大類別中進行客製化：
• 健康與醫療保健
• 學習與發展
• 運動與健身
• 家庭與生活方式
• 工作效率與通勤
• 試用期滿合格後即可取得。

B. 混合工作福利

• 業務拓展職位：確認後可完全遠距辦公
• 解決方案架構師、技術客戶經理、營運專家、雲端營運團隊負責人、合規主管/合規專家：
• 確認後：4 天辦公室辦公 + 1 天遠距辦公
• 一年以上表現優異（B+級）：每週3天在辦公室辦公，2天遠距辦公
• 亮點：結構化的靈活性、工作與生活的平衡以及基於績效的晉升。

C. 其他福利

• 彈性的打卡時間
• 年假：14天（第1-5年），20天（第6年及以後）
• 醫療保險（門診和住院）
• 清晰的職涯發展路徑與晉昇機會
• 辦公室距離公共交通站點步行僅需10分鐘。

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

IT Security Engineer (Governance, Incident Response& Vulnerability Management)

Mon to Fri Office hours/ Outram Work Location
Cat2B security clearance for this 1 year project renewable

Salary Package:
• Up to S$5,000 Basic
• 1 Month Performance Bonus
• S$50 Monthly Mobile Phone Claim
• Additional S$100 Staff Amenities Claim given for Night Deployment or Weekend Patching Activities

Join a growing cybersecurity team responsible for protecting critical enterprise IT systems, applications, and infrastructure. We are seeking a hands-on IT Security Officer who enjoys security operations, incident response, vulnerability management, and compliance activities. You will be under Agency payroll for this 1 Yr project renewable assignment.

Key Responsibilities

Security Governance
• Develop, review and maintain information security policies, standards and procedures
• Support security risk assessments and risk register management
• Ensure compliance with security frameworks and regulatory requirements

Threat Detection & Incident Response
• Monitor and investigate security incidents using SIEM and EDR platforms
• Perform incident triage, root cause analysis and risk assessment
• Coordinate incident escalation and remediation activities
• Maintain incident response plans and playbooks

Vulnerability Management
• Perform vulnerability assessments and coordinate remediation activities
• Work closely with infrastructure, application and system owners to address security findings
• Prioritize vulnerabilities based on risk and business impact
• Track remediation progress and reporting

Compliance & Auditing
• Support internal and external security audits
• Prepare security documentation and evidence collection
• Assist in compliance reporting and governance reviews

Good to Have Exposure
• Cloud Security (AWS, Azure, GCP)
• IAM, SSO, MFA and PAM solutions
• Data Loss Prevention (DLP)
• Security Awareness Training
• Third-Party Risk Management
• Application Security and Secure SDLC
• OT / ICS / SCADA Security

Requirements
• Minimum 3 years of IT Security or Cybersecurity experience
• Hands-on experience in Security Operations, Incident Response or Vulnerability Management
• Experience using SIEM, EDR and Vulnerability Scanning tools
• Familiarity with security frameworks such as ISO27001, NIST or CIS Controls
• Strong stakeholder management and communication skills
• Ability to work independently and coordinate with multiple technical teams

Preferred Certifications
• Security+
• CEH
• GSEC
• CySA+
• SSCP
• CISSP (Advantageous)
• ISO27001 Lead Implementer/Auditor (Advantageous)

If you enjoy investigating security incidents, managing vulnerabilities and strengthening enterprise security posture, we would like to hear from you.

EA LicenseNo: 09C4235 I EA Reg: R1103307 (Hong Mei Lin)

Client introduction

Our client is an established financial institution, and regulated by the Monetary Authority of Singapore.

As part of strengthening its technology governance and security function, the firm is looking to hire an IT Security Analyst (Governance, Risk & Compliance) to join its infrastructure and security team. This role is well suited for someone with a foundation in IT risk, governance, assurance or security compliance, who is looking to build broader exposure across cyber governance, audit, vulnerability management, vendor due diligence and security operations within a regulated financial services environment.

Job responsibilities

• Support the review and overhaul of the firm's IT and security governance framework, drafting policies, standards and procedures for senior review and refinement.
• Help embed clear, well-understood policies and procedures across the organisation, aligned with regulatory expectations.
• Support compliance against MAS guidelines, including Technology Risk Management, Cyber Hygiene and Outsourcing, and assist with related risk assessments.
• Coordinate internal and external audit activity, including collating responses, gathering supporting artefacts and following up on findings with internal stakeholders through to closure.
• Track vulnerability assessment findings and remediation progress (assessments are run through an external vendor), working with the infrastructure and application teams to close gaps in good time.
• Conduct third-party and vendor due diligence in line with MAS outsourcing requirements, and respond to client and counterparty due diligence queries on the firm's security controls and governance practices.
• Support user access reviews, joiner-mover-leaver processes and identity access governance.
• Assist with business continuity, disaster recovery and related assurance exercises.
• Provide support on security operations and incident response coordination where required, with guidance from the team lead.

Job requirements

• At least 4 years of experience in IT risk, IT governance, technology assurance, IT audit or IT compliance, gained within a regulated financial institution such as a bank, securities or brokerage firm, asset manager or insurer.
• Working familiarity with the MAS Technology Risk Management Guidelines, Cyber Hygiene Notice and Outsourcing Guidelines.
• Exposure to audit coordination, evidence gathering, policy documentation, risk assessment or remediation tracking.
• A genuine interest in cyber security and a willingness to learn the hands-on operational side of the role. Deep SOC or security engineering experience is not required.
• Exposure to vulnerability management, access reviews, SIEM or IAM tooling is an advantage rather than a requirement.
• Strong written and verbal communication, with the ability to engage auditors, vendors, infrastructure and application teams, and business stakeholders clearly.
• A detail-oriented, proactive working style and a readiness to learn across both governance and operational security.
• Relevant certifications such as CISA, or progress toward them, are advantageous but not mandatory.

Why you should join them

• Breadth of exposure that is rare at this level, spanning governance, risk, compliance, audit and security operations in a single role, giving the right person a strong foundation early in their career.
• Direct mentorship from an experienced infrastructure and security team lead, who will actively coach the successful candidate on the technical and operational aspects of the role.
• A genuine opportunity to help rebuild and mature the firm's IT governance framework, with visible impact in a lean team.
• Regular interaction with auditors, vendors and counterparties, building a clear path toward a career in IT risk and security governance.

JL
Reg. No. R1766249
BeathChapman Pte Ltd
Licence no. 16S8112

Company Overview

JusConnect Services (JCS) delivers document production services using traditional and modern technologies to provide effective solutions tailored to client needs.

Job Summary

You will produce high-quality electronic and hard copy documents to support legal professionals by working independently and collaboratively using various software and office equipment.

Responsibilities

• Handle confidential documents with care to ensure security and accuracy during document production
• Quickly learn and apply new tasks and technologies to maintain an efficient workflow
• Collaborate with team members to complete document-related tasks accurately and on time
• Take ownership of assigned jobs by ensuring accuracy and meeting deadlines consistently
• Maintain a professional and positive attitude when interacting with clients and team members
• Independently manage routine document production tasks while demonstrating patience under pressure
• Use software, equipment and AI tools proficiently to create, edit, and manage documents effectively
• Analyze client requirements to develop and deliver high-quality documents that meet their needs

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

We are looking for a hands-on and experienced IT Infrastructure & Security professional to manage network, system, and cybersecurity operations within a 24x7 manufacturing environment.

Key Responsibilities

• Manage IT infrastructure, network security, and system availability

• Lead infrastructure and cybersecurity improvement projects

• Ensure high availability, performance, backup, and disaster recovery readiness

• Support network, server, virtualization, and security operations

• Lead and supervise Infra/Security/OA support team

• Maintain IT compliance, governance, and security standards

• Coordinate with HQ IT teams and external vendors

Requirements

• Degree in Computer Science, IT, Engineering, or related field

• Minimum 5 years of experience in IT Infrastructure & Security

• Strong hands-on experience in:

• Windows/Linux servers

• AD, SCCM, virtualization

• WAN/LAN/VPN, routing & switching

• Backup, security, SIEM, EDR/MDR

• Experience in manufacturing environment preferred

• Good troubleshooting, communication, and leadership skills

• Certifications such as CCNP, CISSP, RHCSA, ISO27001 are a plus

Interested candidate who wish to apply for the advertised position, please click “Apply”. We regret that only shortlisted candidates will be notified 

EA License No.: 01C4394 (PERSOL Singapore Pte Ltd) 

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy. 

Information Security Operations (Security Response & Incident Management)

Job Overview

• Operate Computer Security Incident Response Team (CSIRT)
• Manage Attack Surface Management (ASM); conduct security vulnerability assessments and remediation support
• Plan and execute security training and exercises; manage IT assets and patches; collect and leverage threat intelligence
• Operate cloud service application approval system; provide technical support and information dissemination to domestic and overseas group companies
• Analyze, investigate, and recover from security incidents, and develop recurrence prevention measures.

Required Skills & Experience

• Japanese (business) and English (business) to communicate with HQ in Japan
• 3+ years of experience in network, server, and cloud service (AWS, Azure, etc.) infrastructure design, deployment, and operations
• Experience with security incident response and CSIRT operations
• Hands-on experience with IT asset management and patch management
• Experience collecting and leveraging threat intelligence
• Experience with security vulnerability assessment and handling (discovery, validation, remediation recommendations)
• Experience planning and conducting security training and exercises
• Experience coordinating across departments and driving projects in large organizations
• Information security certifications (CISSP, CISM, Registered Information Security Specialist, CompTIA Security+, etc.)

Preferred Skills & Experience

• Experience with security operations in multinational/global organizations
• Cloud and endpoint management skills (SaaS/IaaS log operations, etc.)
• Work experience in the IT industry (SI vendors, technology vendors, etc.)
• Experience developing internal policies and guidelines
• Desired Qualities

Soft Skills

• Ability to explain and persuade based on the audience's perspective and knowledge level
• Proactive attitude and self-starter mindset
• Strong collaboration skills with ability to value teamwork and project harmony, and build balanced relationships

We’re Hiring: Assistant Manager, Digital Transformation Office

Join a dynamic team driving digital transformation and cybersecurity initiatives across enterprise ICT operations. This role offers the opportunity to strengthen ICT governance, improve cyber resilience, and lead impactful process enhancement initiatives within a collaborative and fast-paced environment.

Job Highlights

• Work Location: Pasir Panjang
• Employment Type: 12-Month Contract
• Salary: Up to SGD 5,300
• Working Environment: Collaborative and Transformation-Driven Team

Roles & Responsibilities

• Cybersecurity Specialist (Tier 3 SOC Analyst) will be responsible for cybersecurity monitoring and incident response.
• Monitoring network traffic, system logs, and security alerts to identify potential security incidents and unauthorized activities in a timely manner.
• Managing Security Operation team on daily monitoring alarms to respond on the incidents.
• Enhancing the SOC situational awareness posture by researching the latest Tactics, Techniques, and Procedures (TTPs), proactively identifying organizational blind spots.
• Monitors and stay aware of cybersecurity industry trends, tools, and techniques.

Requirements

• Bachelor’s Degree in Information Security/ Computer Science/ Information Technology or any other relevant courses.
• Hands on experience in SIEM tools such as Splunk, Microsoft Sentinel, Securonix, etc.
• Hands on experience in security operations, incident response, or a related cybersecurity field, with a track record of leading complex investigations.
• Experience with security technologies such as firewalls, intrusion detection/prevention systems, and data encryption.
• Advanced understanding of cyber threat intelligence and TTPs (tactics, techniques, procedures).
• ⁠Expert-level knowledge of security monitoring tools, threat analysis, and digital forensics.
• Hands on experience in security monitoring tools, threat analysis, and digital forensics.
• Has experience in security technologies such as Antivirus/Endpoint Detection and Response (EDR), Privilege Access Management (PAM), and Web Application Firewall (WAF).
• Security Related certifications such as GIAC, GCIA, GCFA, or CISSP are Mandatory.
• Experience with security technologies such as firewalls, intrusion detection/prevention systems, and data encryption.

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

We are seeking an experienced ITSO Security Officer to join our team. In this role, you will act as the security advisor throughout the software development lifecycle, partnering closely with developers, architects, DevOps engineers, and project stakeholders to ensure applications are designed, built, and deployed securely.

Why Join Us:

• Salary up to $9,000 + AWS
• Hybrid Work Arrangement
• Government Projects

Responsibilities:

• Conduct threat modelling exercises to identify, assess, and mitigate application security risk
• Perform and review security assessments using SAST, DAST, and other application security tools
• Review security controls for cloud-hosted applications, particularly within AWS environments
• Provide ongoing support and troubleshooting for deployed features, maintaining platform stability, performance, and a strong user experience

Requirements:

• Minimum 4 years of experience across software development, application security, DevSecOps, or cloud security
• Working knowledge of: OWASP Top 10, OWASP ASVS
• Experience with security scanning tools such as: Fortify on Demand, SonarQube, Similar SAST/DAST solutions
• Familiarity with AWS cloud environments and cloud security best practices

If you’re passionate about contributing to impactful government projects while advancing your career, we welcome you to explore this opportunity with us

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Elias Yeo HongJie (Outsourcing Team)
ScienTec Consulting Pte Ltd - 11C5781

Summary:

In this role, you will help ensure that vulnerabilities and exposures across our environment are identified, validated, and remediated in a timely manner. You will work closely with system owners and report findings, helping to keep our risk posture visible and well-managed.

Job Scope

Attack Surface Monitoring, Vulnerability Scanning, and Triage

• Monitor and triage findings surfaced by our Attack Surface Management (ASM) and Vulnerability Management tools
• Assess each finding for validity, severity, and exploitability before escalating or acting on it
• Distinguish genuine exposures from false positives and contextualise findings against our asset inventory
• Prioritise remediation efforts based on risk
• Remediation Workflow Management
• Work with system owners to follow up on outstanding findings
• Track remediation progress and ensure findings are resolved in a timely manner
• Manage exceptions and risk acceptance where remediation is not immediately feasible
• Communicate clearly with non-technical stakeholders, translating technical findings into actionable guidance

Reporting & Insights

• Consolidate vulnerability data and remediation metrics for reporting
• Identify trends and surface systemic issues across the organisation's attack surface and internal asset landscape
• Provide recommendations to improve our overall exposure management programme

Process Improvement

• Contribute to the refinement of ASM and vulnerability management processes, tooling configurations, and escalation playbooks over time
• Support the development and maintenance of vulnerability management policies, standards, and procedures in alignment with industry best practices

Prerequisites

• Bachelor’s Degree in Computer Science/Information Security or equivalent
• Professional certifications, including GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred
• Preferably 5 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (eg CVSS), and external-facing attack surface risks
• Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar)
• Proficiency in programming languages such as Python will be advantageous
• Strong analytical and judgement skills, with the ability to think critically and make sound recommendations
• Good communication and interpersonal skills, with the ability to multitask, prioritise, and translate technical findings
• Meticulous, with a high degree of integrity, initiative, and energy

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred