Total 7 security job vacancies in D26 Upper Thomson, Springleaf

IT Security Engineer (Governance, Incident Response& Vulnerability Management)

Mon to Fri Office hours/ Outram Work Location
Cat2B security clearance for this 1 year project renewable

Salary Package:
• Up to S$5,000 Basic
• 1 Month Performance Bonus
• S$50 Monthly Mobile Phone Claim
• Additional S$100 Staff Amenities Claim given for Night Deployment or Weekend Patching Activities

Join a growing cybersecurity team responsible for protecting critical enterprise IT systems, applications, and infrastructure. We are seeking a hands-on IT Security Officer who enjoys security operations, incident response, vulnerability management, and compliance activities. You will be under Agency payroll for this 1 Yr project renewable assignment.

Key Responsibilities

Security Governance
• Develop, review and maintain information security policies, standards and procedures
• Support security risk assessments and risk register management
• Ensure compliance with security frameworks and regulatory requirements

Threat Detection & Incident Response
• Monitor and investigate security incidents using SIEM and EDR platforms
• Perform incident triage, root cause analysis and risk assessment
• Coordinate incident escalation and remediation activities
• Maintain incident response plans and playbooks

Vulnerability Management
• Perform vulnerability assessments and coordinate remediation activities
• Work closely with infrastructure, application and system owners to address security findings
• Prioritize vulnerabilities based on risk and business impact
• Track remediation progress and reporting

Compliance & Auditing
• Support internal and external security audits
• Prepare security documentation and evidence collection
• Assist in compliance reporting and governance reviews

Good to Have Exposure
• Cloud Security (AWS, Azure, GCP)
• IAM, SSO, MFA and PAM solutions
• Data Loss Prevention (DLP)
• Security Awareness Training
• Third-Party Risk Management
• Application Security and Secure SDLC
• OT / ICS / SCADA Security

Requirements
• Minimum 3 years of IT Security or Cybersecurity experience
• Hands-on experience in Security Operations, Incident Response or Vulnerability Management
• Experience using SIEM, EDR and Vulnerability Scanning tools
• Familiarity with security frameworks such as ISO27001, NIST or CIS Controls
• Strong stakeholder management and communication skills
• Ability to work independently and coordinate with multiple technical teams

Preferred Certifications
• Security+
• CEH
• GSEC
• CySA+
• SSCP
• CISSP (Advantageous)
• ISO27001 Lead Implementer/Auditor (Advantageous)

If you enjoy investigating security incidents, managing vulnerabilities and strengthening enterprise security posture, we would like to hear from you.

EA LicenseNo: 09C4235 I EA Reg: R1103307 (Hong Mei Lin)

[Order Number: 1093349]

Responsibilities:

• Manage post-sales activities for cybersecurity or network performance monitoring products.
• Implement large-scale projects locally and regionally.
• Provide on-site implementation services, including testing, deployment, and documentation.
• Offer technical support to ensure customer satisfaction.
• Analyze and clarify customer queries through troubleshooting and researching existing knowledgebase articles/known issues.
• Be on routine standby to support 24×7 maintenance support calls.
• Communicate issues clearly and concisely.
• Demonstrate excellent written and verbal communication skills.
• Perform any other ad-hoc tasks as assigned.

Requirements:

• 1 year of relevant experience in the IT industry providing network support and administration.
• Knowledge and experience in networking, such as routing and switching technology.
• Possess CCNA or CCSA certification.
• Willingness to work hard and eagerness to learn about new technologies.

To Apply, please kindly email your updated resume to

cv_gary@goodjobcreations.com.sg

Please kindly refer to the Privacy Policy of Good Job Creations for your reference:

https://goodjobcreations.com.sg/en/privacy-policy/

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

EA Personnel Name: Gary Ho Cheng Xuan

EA Personnel Reg. No.: R1549767

EA License No.: 07C5771

A Security Engineer I is professional responsible for designing, implementing, and maintaining technical security measures, focusing on vulnerability management, threat detection, and infrastructure protection. They secure cloud/on-prem environments using automation (Python, Terraform) and tools like SIEM or EDR, often collaborating with DevOps to remediate security risks and strengthen security posture.

Essential Functions:

• Develop and maintain security policies, guidelines, and lead implementation in all systems, including AWS and in particular CloudTrail, EKS, AWS Inspector, EC2, EMR, S3, AWS Identity Center, RDS, Security Hub, Guard Duty.

• Architect, design, implement, support, and evaluate security-focused tools and controls to meet security and compliance needs.

•  Integrate security checks into the CI/CD pipelines to ensure continuous compliance and shift left security practice.

• Utilize tools like Terraform or Cloud Formation to build, deploy and enforce compliance and secure cloud infrastructure.

• Utilize networking (VPC, Firewall, Transit Gateways), container security and encryption.

• Builds scripts (phyton, bash) and serverless functions (AWS Lambda) for alerting on anomalies, misconfigurations and threats include automations to auto respond to such threat actors/findings.

• Oversee threat management and security incident handling, including the coordination of investigations and reporting of security incidents to management, in alignment with business.

•  Work with the team and QSA on PCI (level 1 & level 2 service provider) & SOC initiatives for the company.

• Ensure that security is factored into the evaluation, selection, and configuration of hardware, applications and software.

• Ensure audit trails, systems logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements. Provide support and guidance for legal and regulatory compliance efforts, including audit support.

• Promote information security awareness throughout the company. Stay current with security technologies and threats by monitoring vendor and industry publications and attending training.

• Secure sensitive data, manage user credentials through principal of least privileges, track user activity.

• Proactively identify security risks and implement practices that meet standards for information security, by analyzing current systems, and working with IT and the business. Partner with development and infrastructure teams to identify and remediate vulnerabilities Develop mitigation plans.

Qualifications:

• Bachelor Degree in Computer Science or related technical field

• 3 to 5 years in cybersecurity experience within a professional environment

• Certified Information Systems Security Professional certification is a plus

Knowledge, Skills and Abilities:

• Experience with IDS/IPS, file integrity, internal/ external penetration & vulnerability tests, FIM, SEIM, Log aggregation tools required

• Development and scripting experience to build automation: Lambda, Terraform, Cloud Formation, API Integrations

• Understanding of the software development life cycle and CI/CD pipelines

• Ability to execute process and standards around code quality and the deployment lifecycle including SAST and DAST

• Experience in SIEM, MDR, EDR, DLP Identity Management, WAF, WAS, Incident Response, attack surface management

• Proactively find weaknesses in applications and network through audits, penetration tests and security assessments

• Prepare reports on security metrics, attempted attacks, document findings and actions taken

• Proven record of learning new languages, skills and technologies quickly, with minimal guidance

• Takes initiative, stays focused, always accountable

• Thrives in a fast-paced environment with the ability to focus on achieving the target whole minding longer term goals along the way

• Excellent communication skills

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/ or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Description

IAM Operations

• Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities.
• Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment.
• Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance.
• Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows.
• Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly.
• Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

• Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements.
• Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders.
• Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

• Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution.
• Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs.
• Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

[Order Number: 1093116]

Responsibilities:

• Provide pre-sales technical support on assigned cybersecurity products to customers and partners.
• Collaborate with the Sales team to develop and position solutions for market selling and customer proposals.
• Understand customer IT/Security infrastructure and business requirements.
• Perform strategic cybersecurity solution selling.
• Demonstrate cybersecurity solutions.
• Conduct proof of concept for proposed cybersecurity solutions and network performance solutions.
• Work with solution vendors on business solution proposals and attend to RFI/RFP design, compliance, and clarifications.
• Develop design guidelines and recommend improvements to customers on assigned cybersecurity products.
• Perform in-house lab tests to validate customer proof-of-concept setups, endpoint/network designs, and endpoint/network deployments using new products and features.
• Stay updated on competitive solutions, products, and services.
• Provide enablement training for partners' internal post-sales engineers on product/technology knowledge.
• Conduct routine updates on new products/technologies to internal sales staff.
• Maintain good rapport with customers and vendors.

Requirements:

• Minimum 1 year of experience in pre-sales activities for large enterprises or government sectors, or related fields. Candidates with several years of experience in delivering and implementing cybersecurity technology and solutions, and open to embarking on a pre-sales consultant role, are welcome to apply.
• Strong knowledge and understanding of the security industry.
• Ready to perform demos and presentations on product expertise in key security technologies.
• Possess good technical knowledge in internet architecture, network infrastructure, software-defined networks, network performance tools and solutions, UNIX, Windows, VMware, and security covering endpoint, email, web, and cloud.
• Ability to design an architecture and write proposals.

To Apply, please kindly email your updated resume to

cv_gary@goodjobcreations.com.sg

Please kindly refer to the Privacy Policy of Good Job Creations for your reference:

https://goodjobcreations.com.sg/en/privacy-policy/

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

EA Personnel Name: Gary Ho Cheng Xuan

EA Personnel Reg. No.: R1549767

EA License No.: 07C5771

Systems Engineer (Linux & Windows Infrastructure Security)

3 job vacancies due to project expansion

Cat2A security clearance

Join a Team Supporting Mission-Critical Infrastructure

We are seeking 3 Systems Engineers with strong Linux and Windows administration experience to support, secure, and maintain enterprise backend infrastructure operating in a high-availability environment.

This role is ideal for Infrastructure Engineers, Linux Administrators, Windows Engineers, System Engineers, and Cybersecurity-focused professionals looking to deepen their expertise in server hardening, infrastructure security, disaster recovery, and enterprise systems operations.

You will work closely with experienced engineers responsible for maintaining critical backend systems, ensuring system resilience, security compliance, and operational readiness.

Key Responsibilities

Infrastructure Configuration & Administration

• Configure, deploy, and maintain Linux and Windows servers

• Perform system setup, testing, installation, and upgrades

• Monitor server health, performance, and system availability

• Support infrastructure maintenance and lifecycle management

• Perform basic computer and network maintenance activities

Security Hardening & System Protection

• Perform CIS Hardening for Windows and Linux servers

• Configure and maintain Linux server security settings

• Manage SSH configurations and access controls (sshd_config)

• Administer Linux user accounts and sudo privileges (sudoers)

• Implement password policies and account management controls (chage / passwd)

• Maintain system security configurations in accordance with organisational standards

Backup, Recovery & Disaster Recovery

• Perform server backup and restoration activities

• Execute system recovery procedures using REAR (Relax-and-Recover)

• Support disaster recovery exercises and testing

• Validate system recovery readiness and business continuity requirements

Troubleshooting & Support

• Investigate infrastructure incidents and perform root cause analysis

• Resolve server, operating system, and infrastructure issues

• Support change implementation and system enhancement activities

• Work closely with project teams and stakeholders to ensure smooth operations

• Install, test, and implement systems in accordance with specifications and service level requirements, ensuring compliance with industry best practices.

• Manage systems changes using an established change request process, including assessing the impact, obtaining necessary approvals, and communicating status updates to multiple stakeholders.

• Conduct root cause analysis for system issues and proactively implement measures to prevent recurrence.

• Continuously monitor the effectiveness of implemented measures and make adjustments as necessary.

• Develop and implement comprehensive service continuity measures, including robust backup/restore procedures and disaster recovery plans, to ensure uninterrupted business operations in the event of disruption.

• Provide expert technical advice and guidance on systems to customers and project teams, assisting them in making informed decisions and resolving complex technical issues.

Required Technical Skills

Must-Have Skills

• Linux Security Configuration

• SSH Administration (sshd_config)

• Linux User Management (sudoers)

• Password Policy Administration (chage / passwd)

• REAR (Relax-and-Recover)

• Linux Server Administration

• Windows Server Administration

• Device Hardening

• Systems Configuration & Setup

• CIS Security Hardening

• Infrastructure Troubleshooting

• Backup & Recovery Operations

• Basic Networking Knowledge

Educational Requirements

Candidates should possess min NITEC in Electrical Engineering, Electronics Engineering, or Information Technology (IT) from a recognized institution.

Communication Skills

Successful candidates should possess:

• Strong verbal and written communication skills

• Ability to communicate effectively with technical and non-technical stakeholders

• Ability to explain technical concepts clearly and professionally

• Strong documentation and reporting capabilities

If you enjoy working with Linux, Windows infrastructure, cybersecurity hardening, and enterprise backend systems, we'd love to hear from you.

EA License No: 09C4235 I EA Reg: R1103307 Hong Mei Lin

Job Summary

We are looking for enthusiastic and passionate candidate to join the cyber security team as a Digital Forensics Incident Responder (DFIR).

Mandatory Skill-set

• Diploma or Degree in Computer Science, Engineering, Information Systems, Information Security;
• Must have 5 years of work experience in Information Security focusing on identifying remediating and investigation of Cyber Security Incidents or Digital Forensics;
• Experience in forensic tool kits such as Magnet AXIOM, Encase, X-Ways, FTK or Autopsy in imaging, collection, transformation, analysing, gathering, examination, investigation different kinds of digital evidences;
• Good understanding of Malware, Intrusion Detection Systems and SIEM platforms;
• Proactive and self-motivated team player with a strong sense of responsibility and accountability;
• Keen learner and strong passion in self-development and cyber security research;
• Strong problem solving and analytical skills with ability to work in fast paced environment;
• Good written and communication skills.

Desired Skill-set

• Certifications, including GIAC GCFA, GCFE, GCIH or related certifications;
• Experience working in a Security Operation Centre (SOC).

Responsibilities

• Part of the Cyber Forensic team to provide forensic support to manage Digital Forensic and Incident Reponses and ensure smooth operations of daily operations;
• Responsible to monitor, triage cyber threat information from news, incoming feeds and logs;
• Assist and support Digital Forensics Incident Responder Analyst to investigate any malware out-rage, security incidents or root-cause analysis;
• Investigate cybersecurity incidents that may involve digital forensic analysis, malware analysis and log analysis;
• Perform cybersecurity threats and vulnerabilities assessment;
• Provide strong technical guidance on investigation and threat assessments;
• Track and manage incidents and handle end-to-end resolution starting from detection (opening) to closure;
• Adhere to the Standard Operation Procedures (SOP) within the security operations; regularly review them to improve the efficiency;
• Maintain situational awareness and keep current with cyber security news and threat actor Tactics, Techniques and Procedures (TTPs);
• Prepare and review incident reports to update stakeholders and report potential findings from both technical and business perspective.

Should you be interested in this career opportunity, please send in your updated resume to apply@sciente.com at the earliest.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the SCIENTE Group Privacy Policy, a copy of which is published at SCIENTE’s website

(https://www.sciente.com/privacy-policy).

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

EA Licence No. 07C5639