Total 213 security job vacancies

Job Requirements

• Candidate must possess at least a Diploma in Computer Science/Information Security, Engineering (Computer/Telecommunication) or equivalent.
• Required skill(s): Python.
• Expertise in other programming languages are advantageous.
• Only Singaporeans or PR are eligible.
• Candidates who possess OSCP and CREST Registered Tester certification.will be preferred.

Job Description

• Participate in security review and assessment for our clients' systems.
• Participate in forensics and incident response engagements.
• Participate in security consultancy and advisory engagements.
• Learn how to work independently and in a team.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Cloud Security & DevSecOps Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Responsibilities

·      Define and drive the vision, roadmap, and maturity model for application security across the enterprise.

·      Align application security initiatives with business objectives, compliance requirements, and risk management frameworks.

·      Act as the primary liaison between development teams, security functions, and executive stakeholders.

·      Secure Development Lifecycle (SDLC) Integration

·      Embed security practices into the SDLC, including threat modeling, secure design reviews, and code analysis.

·      Champion DevSecOps principles, ensuring security automation and continuous integration pipelines are robust and scalable.

·      Provide guidance on secure coding standards, frameworks, and best practices.

·      Establish policies, standards, and metrics to measure application security effectiveness.

·      Conduct regular risk assessments and oversee remediation of vulnerabilities.

·      Lead and mentor a team of application security engineers and specialists.

·      Partner with product owners, architects, and developers to balance innovation with security requirements.

·      Build strong relationships with executive leadership to communicate risks, progress, and strategic priorities.

·      Evaluate emerging technologies, tools, and methodologies to enhance application security capabilities.

Qualifications

·      Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

·      8+ years of experience in application security, software development, or cybersecurity, with at least 3 years in a leadership role.

·      Strong knowledge of secure coding practices, OWASP Top 10, and modern application architectures (cloud-native, microservices, APIs).

·      Hands-on experience with application security tools (SAST, DAST, IAST,RASP, container security).

·      Proven ability to lead cross-functional teams and influence executive stakeholders.

·      Excellent communication, leadership, and problem-solving skills.

All Successful candidates can expect a very competitive remuneration package and a comprehensive range of benefits.

Alternatively, you may wish to email your resume in a detailed Word format to debbie@peopleprofilers.com

We regret that only shortlisted candidates will be notified

People Profilers Pte Ltd, 20 Cecil Street, #08-09 PLUS Building, Singapore 049705

 Tel: 69509748

http://www.peopleprofilers.com

debbie@peopleprofilers.com

Consultant in charge: So Boon Shyen, Debbie

EA Licence Number: 02C4944

Registration Number: R1111376

Job Description:

• In charge of leading and directing projects and ensure they are directed towards a common objective
• Responsible for engaging and communicating with stakeholders to deliver project milestones and comply with strict deadlines
• In charge of ensuring client satisfaction and manage escalations, acting as single point of contact to the client
• In charge of ensuring that the project delivers as-sold solution, remains within the baseline budget and is delivered on time whilst maintaining quality criteria and client satisfaction
• Coordinate activities of the project teams through task delegation, resource assignment and programme management
• Take charge of proper documentation is in order
• Any other duties as assigned

Job Requirement:

• Minimum Diploma in Electronics & Communication Engineering or related field
• Minimum with 2 years’ relevant work experience in Security Industry
• Basic technical knowledge on ELV, Automation, Networking and Security Systems (CCTV, Card Access, Alarm System) will be an advantage

To submit your application, please apply online to apply@rn-care.com or call +(65) 6513 5697 for private and confidential discussion.

Your interest will be treated with the strictest of confidence. We regret that only shortlisted candidates will be notified or contacted.

RN Care Pte. Ltd
EA License No: 17C8900

Job Overview:

We are seeking a reliable and responsible Security Officer to join our team and ensure the safety and security of our premises, assets, and personnel. As a Security Officer, you will be expected to maintain a visible presence, conduct regular patrols, monitor surveillance systems, and respond to incidents promptly.

Key Responsibilities:

* Monitor and patrol assigned areas to detect and respond to potential security risks.

* Control access to the premises by checking IDs, issuing visitor passes, and ensuring proper authorization.

* Observe and report suspicious activity to management and authorities as necessary.

* Operate and monitor security systems, including surveillance cameras and alarm systems.

* Enforce safety protocols and company policies to maintain a secure environment.

* Respond promptly to emergency situations, accidents, or alarms and provide appropriate action.

* Prepare incident reports and logs for daily activities.

* Assist in crowd control and manage access during events, as needed.

* Work with law enforcement and emergency services when necessary.

Qualifications:

* Valid security certification (e.g., PLRD, RTT, etc.) is required.

* Experience in condo or serviced apartment industry required.

* Proven experience in security or a related field (preferred, but not mandatory).

* Strong attention to detail and ability to remain alert during long shifts.

* Ability to respond quickly and effectively in emergency situations.

* Must be physically fit and capable of handling the demands of the role.

* Ability to work flexible hours, including nights, weekends, and holidays.

Benefits:

* Competitive salary

* Health and wellness benefits

* Opportunities for career advancement

* Paid training and certification

Working Hours and Timing:

• Shift Pattern: [12-hour shifts , rotating schedule]

• Working Hours: [4 days of work followed by 2 days off in a rotating schedule]

• On-call availability may be required in case of emergencies.

Note: The security officer will be expected to work in shifts, and the schedule may vary based on the organization's operational needs.

Working Location:

2 Teck Chye Terrace Singapore 545726

How to Apply:

Interested candidates can send resumes and cover letters to Ms. Kimberly Teoh, email address : kimberly.teoh@gh15group.com

Key Responsibilities

• Lead SIEM configuration, rule tuning, and onboarding of logs from servers, applications, and network infrastructure.

• Perform daily security alert monitoring and analysis, including alert triage, classification, investigation, escalation, and case closure.

• Prepare weekly security monitoring and alert trend reports, including event summaries, detection metrics, and operational observations.

• Deploy and manage log collection agents across Linux, Windows, and network infrastructure, ensuring stable log coverage and platform reliability.

• Maintain and enhance AI-assisted detection and behavioral analysis workflows, including alert flow stability and detection optimization.

• Define and refine detection logic, including rules, correlation patterns, and behavioral indicators.

• Support integration of OS and application logs for monitoring, correlation, and activity analysis.

• Manage dashboards, alert metrics, and reporting to provide visibility into security posture and monitoring operations.

• Support incident investigation and coordinate with infrastructure and application teams where required.

• Ensure platform health, log retention, monitoring coverage, and overall reliability of the SIEM environment.

Preferred Skills & Qualifications

• Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, or related field.

• Minimum 5 years of experience in SIEM administration, security monitoring, or detection engineering.

• Hands-on experience with SIEM, log management, or security monitoring platforms.

• Strong knowledge of Linux and Windows systems administration and security log analysis.

• Experience with Python, Shell scripting, or automation tools for log processing and workflow optimization.

• Familiarity with security event correlation, behavioral analysis, and detection engineering concepts.

• Exposure to API integration, middleware, or AI-assisted analysis solutions is an advantage.

• Strong analytical, troubleshooting, and problem-solving skills with attention to detail.

• Ability to communicate effectively in English

• Fluency in spoken and written Chinese is essential, as the role requires frequent liaison with Chinese-speaking counterparts and stakeholders, and the preparation, review and handling of Chinese-language work materials.


主要職責

資安監控與事件分析

• 執行日常資安警示監控與分析，包括警示分流、分類、調查、升級處理及案件結案
• 支援資安事件調查，並在需要時與基礎架構及應用程式團隊協作
• 準備每週資安監控與警示趨勢報告，包括事件摘要、偵測指標及營運觀察

SIEM 管理與偵測工程

• 主導 SIEM 設定、日誌導入、規則調校及偵測優化，涵蓋伺服器、應用程式及網路基礎架構
• 定義並優化偵測邏輯，包括關聯規則、行為指標及監控使用情境
• 維護並改善 AI 輔助偵測及行為分析工作流程

日誌管理與平台營運

• 在 Linux、Windows 及網路設備上部署並管理日誌收集代理程式，確保穩定且完整的日誌覆蓋範圍
• 支援作業系統與應用程式日誌整合，用於監控、關聯分析及活動分析
• 確保 SIEM 環境的平台健康狀態、日誌保存、監控覆蓋率及整體可靠性

儀表板與報告

• 管理儀表板、警示指標及報告，提升組織資安狀態的可視性
• 支援營運報告及資安監控績效檢討

流程改善與自動化

• 透過腳本與系統整合，推動資安監控自動化及工作流程改善
• 參與資安平台強化與營運優化專案

理想條件

• 資訊安全、網路安全、電腦科學或相關領域學士學位
• 至少 5 年 SIEM 管理、資安監控或偵測工程相關經驗
• 具備 SIEM 或日誌平台實務經驗，例如 ELK、Wazuh、Splunk、Graylog、QRadar 或相關技術
• 熟悉 Linux 與 Windows 系統管理及資安日誌分析
• 具備 Python、Shell Scripting 或自動化工具經驗，可應用於日誌處理與工作流程優化
• 熟悉資安事件關聯分析、行為分析及偵測工程相關概念
• 具備 API 整合、中介軟體或 AI 輔助分析解決方案經驗者佳
• 具備良好的分析、故障排除與問題解決能力，並注重細節
• 能以英文進行有效溝通；具普通話能力者佳，有助於與區域利害關係人協作
• 須具備流利的中文聽說讀寫能力，因本職位需經常與中文溝通之合作方及持份者聯繫，並需撰寫、審閱及處理中文工作文件

核心能力

• 資安監控與事件分析
• SIEM 管理
• 偵測工程
• 日誌管理與關聯分析
• 自動化與腳本撰寫
• 分析思維
• 問題解決能力
• 跨部門溝通與協作能力

對資安偵測、SIEM 平台管理及資安監控營運有豐富經驗，並希望參與區域型資安平台優化與威脅偵測工作的專業人士，歡迎與我們聯繫了解更多。

Lumina Advisory & Global Search Pte Ltd | 25C3262

Joyce Yeo | R1218489

We are seeking an experienced ITSO Security Officer to join our team. In this role, you will act as the security advisor throughout the software development lifecycle, partnering closely with developers, architects, DevOps engineers, and project stakeholders to ensure applications are designed, built, and deployed securely.

Why Join Us:

• Salary up to $9,000 + AWS
• Hybrid Work Arrangement
• Government Projects

Responsibilities:

• Conduct threat modelling exercises to identify, assess, and mitigate application security risk
• Perform and review security assessments using SAST, DAST, and other application security tools
• Review security controls for cloud-hosted applications, particularly within AWS environments
• Provide ongoing support and troubleshooting for deployed features, maintaining platform stability, performance, and a strong user experience

Requirements:

• Minimum 4 years of experience across software development, application security, DevSecOps, or cloud security
• Working knowledge of: OWASP Top 10, OWASP ASVS
• Experience with security scanning tools such as: Fortify on Demand, SonarQube, Similar SAST/DAST solutions
• Familiarity with AWS cloud environments and cloud security best practices

If you’re passionate about contributing to impactful government projects while advancing your career, we welcome you to explore this opportunity with us

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Elias Yeo HongJie (Outsourcing Team)
ScienTec Consulting Pte Ltd - 11C5781

The Security Manager is responsible for leading and overseeing all aspects of security and safety for Sports Excellence Singapore. This role ensures the security and safety of staff, student-athletes, residents, visitors, physical assets, and operations through robust security strategies, operational excellence, and regulatory compliance.

The incumbent will drive a proactive and risk-informed security posture by strengthening governance, improving operational readiness, leveraging security technologies, and working closely with internal and external stakeholders to maintain a safe and secure environment.

Key Responsibilities

Security Strategy & Risk Management

·       Lead site security framework aligned with organisational priorities

·       Conduct risk assessments and implement mitigation plans

·       Set and monitor KPIs for prevention, response, and improvement

Operations & Incident Management

·       Oversee daily security operations and environment safety

·       Lead incident response, investigation, and documentation

·       Ensure effective surveillance, access control, and asset protection

·       Use technology to enhance efficiency and resilience

Compliance& Governance

·       Ensure compliance with relevant laws and regulations

·       Maintain audit readiness and data confidentiality

Emergency Preparedness & Business Continuity

·       Lead emergency planning and response(fire, security threats)

·       Conduct drills and continuous improvement reviews

·       Coordinate with relevant government agencies

Team & Vendor Management

·       Oversee outsourced vendors and service performance

Financial Management

·       Manage budget and ensure cost-effective security investment

Stakeholder Engagement

·       Collaborate with internal and external stakeholders on security matters

·       Build trust and promote awareness across community

·       Maintain professional, balanced conduct in all situations

Any other matters, as assigned by Management Team.

Job Requirements

·       Diploma in Security Management, Risk Management, WSQ security qualifications, Advanced Certificate in Security, management-level security training or a related field is preferred

·       Certification in Fire Safety Manager, First Aid, AED/CPR is preferred

·       At least 5 years of experience in a managerial role leading security teams and site operations

·       Minimum 8 years of security experience, preferably in residential, education, or customer-facing environments

·       Valid Singapore security license and regulatory compliance

·       Strong knowledge of security operations, risk assessment, incident management, investigation, and emergency planning

·       Familiarity with security technologies such as CCTV, access control, various alarm monitoring, incident reporting systems, and related security platforms

·       Knowledge of relevant legislation(WSH, PDPA, security procedures)

·       Experience in liaising with police and external agencies on security matters

·       Experience in budgeting, manpower planning, vendor management, security related improvement works and service partner oversight

·       Able to work shifts, weekends, and respond to incidents beyond working hours

·       Able to stay in provided accommodation will be an advantage

·       Independent, team oriented and able to work under pressure

·       Proficient in MS Office with strong reporting and documentation skills

We regret to inform that only shortlisted candidates will be notified.

Security Operations Engineer

Location: Singapore, CBD
Employment Type: 12 months (renewable Contract)

Key Responsibilities:

• Administer and support security platforms, with a strong focus on CyberArk and Tenable.
• Perform day-to-day BAU activities including troubleshooting, patching, monitoring, and incident resolution.
• Manage privileged access management (PAM) solutions and ensure platform stability and security.
• Support security operations processes, ticket management, and vendor engagements.

Requirements:

• Hands-on experience as a CyberArk Administrator (not just an end user).
• Strong experience supporting CyberArk environments, including troubleshooting and maintenance.
• Experience with vulnerability management tools such as Tenable.
• CyberArk CDE (Certified Delivery Engineer) certification is mandatory.
• Good understanding of security operations, privileged access management, and cybersecurity best practices.

Preferred Skills:

• CyberArk plugin development and automation experience.
• Policy review and optimization expertise.
• Experience in CyberArk migration or upgrade projects.
• Scripting and process automation skills.

The Cyber Security Specialist will architect, design, review, and implement cybersecurity solutions for large-scale projects and critical infrastructure. The role involves ensuring compliance with cybersecurity standards, monitoring and mitigating security risks, and developing cloud security architectures.

The specialist will also conduct vulnerability assessments, security audits, and provide consultancy on security vulnerabilities and risks.

Requirements:

• Lead and support cybersecurity implementation for large-scale projects and critical infrastructure systems.
• Ensure compliance with critical infrastructure cybersecurity standards (e.g., KINS/CII).
• Develop and implement cloud security architectures and solutions.
• Monitor, research, and analyse security risks to mitigate threats and attacks.
• Conduct vulnerability assessments, penetration testing (VAPT), and provide remediation recommendations.
• Perform system hardening, patch management, and secure configuration practices.
• Prepare and maintain security documentation (e.g., design documents, risk assessments, compliance reports).
• Provide guidelines for coding, key management, hardening, patch management, backup management, and incident management.
• Familiarity with public cloud infrastructures (Azure, AWS, GCP, Huawei).

Qualifications:

• Proven experience in large-scale projects, preferably in government or critical infrastructure environments.
• Strong familiarity with cybersecurity frameworks and standards (e.g., IM8, CIS, NIST).
• Hands-on experience in security architecture, system hardening, vulnerability assessment, and network/system security controls.
• Experience with network security, firewalls, VPNs, and identity and access control.
• Experience in system integration or project delivery environments.
• Strong documentation, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.

Job Description

We are seeking a committed and responsible Operations Executive to support and coordinate security operations across multiple sites. The successful candidate will assist with manpower deployment, site supervision and daily operational matters while ensuring that company and regulatory requirements are met.

Key Responsibilities

Operations Coordination

• Coordinate the daily deployment of security officers across assigned sites
• Prepare and manage duty rosters and manpower arrangements
• Monitor attendance and ensure that sufficient manpower is deployed
• Conduct regular site visits and assist with daily operational matters
• Arrange relief officers or replacements when required

Compliance and Site Management

• Ensure that security operations comply with company policies and regulatory requirements
• Monitor officers’ PLRD licensing and deployment requirements
• Conduct site inspections and report any operational issues
• Ensure that security equipment and systems are operational and properly maintained
• Assist with incident reporting and follow-up actions

Staff Coordination

• Provide guidance and operational support to security personnel
• Conduct on-site briefings and monitor officers’ performance
• Address attendance, deployment and manpower issues promptly
• Escalate serious operational matters to management when necessary

Client and Management Coordination

• Liaise with clients regarding site operations and service delivery
• Provide operational updates, incident reports and manpower status reports to management
• Act as a point of contact for site-related operational matters
• Perform other related duties as assigned

REQUIREMENTS

• Minimum 2 years of experience in security operations, manpower deployment or a supervisory role is preferred
• Possess a valid PLRD licence where applicable
• Basic knowledge of security regulations and operational procedures
• Able to prepare duty rosters and coordinate manpower deployment
• Good communication and interpersonal skills
• Responsible, organised and able to handle operational issues promptly
• Able to travel between multiple sites in Singapore
• Preferably possess own transport to travel between sites efficiently
• Able to work on a rostered schedule, including weekends and Public Holidays when required

SKILLS

• Security Operations
• Manpower Deployment
• Duty Rostering
• Licensing
• Access Control
• Compliance
• Risk Management
• Incident Reporting
• Site Inspections
• Security Surveillance Management
• Monitoring CCTV
• Communication Skills
• Management Skills
• Problem Solving
• Team Player

HOW TO APPLY

Interested candidates may submit their CV via:

Email: hr@suitssecurity.com
WhatsApp: 8036 2434

As a Networking Managed Services Engineer (L2) at NTT DATA, you'll take on a developing engineering role where your main goal is to ensure our clients' IT infrastructure and systems remain operational. You'll achieve this by proactively monitoring, identifying, investigating, and resolving technical incidents and problems. You'll work closely with our clients and internal teams to ensure that services are restored swiftly, in line with our service level agreements (SLAs).

Your day will revolve around reviewing client requests and tickets, applying your technical expertise to resolve them efficiently and effectively. You'll be the go-to person for second-line support, handling incidents and requests of medium complexity. In addition to your daily tasks, you'll have opportunities to contribute to exciting project work from time to time.

You'll proactively monitor work queues, execute operational tasks, and update tickets with the actions you've taken. Identifying, analysing, and logging issues before they escalate will be a key part of your role. You'll communicate with other teams and clients to provide support and ensure that changes are executed with clear risk identification and mitigation plans.

As part of the shift handover process, you'll highlight key tickets and upcoming critical tasks for the next shift. When needed, you'll escalate tickets to ensure the right focus from our Centres of Excellence (CoE) and other teams. Collaborating with our automation teams, you'll work on optimizing efforts and automating routine tasks, all while coaching our Service desk and L1 teams in both technical and behavioural skills.

You'll also establish monitoring for client infrastructure, leading and managing initial client escalations for operational issues. Contributing to the change management process, you'll log change requests, execute approved maintenance activities, and audit incident and request tickets for quality. Your insights will drive trend analysis reports, identifying tasks suitable for automation to reduce tickets and optimize efforts. You might also support disaster recovery functions and other related tasks as needed.

To thrive in this role, you need to have:

• Proficiency in technologies such as Pulse Secure SSL VPN, Palo Alto, Fortinet, Cisco Nexus switches/routers/firewalls, and more familiarity with ticketing tools.

• At least one technical certification in the above-mentioned technologies.

• Strong planning skills, with the ability to anticipate and adapt to changing circumstances.

• Adaptability and resilience in a dynamic work environment.

• Ability to communicate and work effectively across different cultures and social groups.

• Proficiency in active listening and client-centric communication.

• A positive outlook and the ability to work well under pressure.

• A client-first attitude, always seeking to create positive client experiences.

• A bachelor's degree or equivalent qualification in IT/Computing, or equivalent work experience.

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred