Total 538 information security analyst job vacancies in Legal / Public / Security category in The Philippines

• Support the planning, implementation and upgrade of the cybersecurity products and solutions.
• Train external and internal clients on how to use the company products and solutions.

Requirements:

• Diploma in IT/Cyber Security Engineering or equivalent
• At least 2 years of CyberArk experience in IT, IS or Cybersecurity industry.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701
Registration: R21100996

Responsibilities:

• Own and manage the Vulnerability Management process across enterprise systems
• Serve as primary advisor on vulnerability findings and remediation strategies
• Plan and execute the full lifecycle (scan, assess, remediate, report)
• Ensure vulnerability scans are configured, scheduled, and executed properly
• Perform risk assessment & prioritisation based on business impact
• Collaborate with Infrastructure & Application teams to drive remediation efforts
• Manage false positives and risk acceptance processes with stakeholders
• Maintain dashboards and reports for both technical and management audiences
• Track and ensure compliance with KPIs and security standards
• Lead penetration testing remediation planning
• Conduct threat exposure analysis and recommend mitigation actions
• Drive continuous service improvement initiatives
• Ensure compliance with security, regulatory, and internal policies

Requirements:

• Degree in Computer Science / IT / Engineering or equivalent
• Professional certifications preferred: CISSP, GIAC (GEVA) or equivalent, CREST
• Minimum 10 to 12 years of IT experience, including 6 to 8 years in IT Security and at least 5 years in enterprise-level Vulnerability Management
• Familiar with ITIL processes
• Technical Skills:
• Hands-on experience with Vulnerability Management tools (e.g. Tenable / Nessus)
• Strong knowledge of vulnerability assessment and remediation
• Strong understanding of operating systems (Windows, Linux/Unix)
• Good knowledge of network and application security
• Ability to assess vulnerabilities and prioritise remediation using a risk-based approach
• Scripting knowledge in PowerShell or SQL
• Experience in reporting and dashboarding (Excel, PowerPoint, Power BI or similar)
• Nice to Have:
• Experience in financial services environment
• Exposure to penetration testing & threat assessment

Work Schedule:

• Standard hours: 10AM – 7PM OR 11AM – 8PM (SGT)
• Shift rotation (as required): 12PM – 9PM (SGT)
• May require after-hours support for critical incidents

To apply, please visit www.gmprecruit.com and search for Job Reference: 4R8VX367

To learn more about this opportunity, please contact Yingying at yingying.lai@gmprecruit.com

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA Licence: 11C3793 | EA Personnel: Lai Yingying | Registration No: R1110239

Role Overview

We are seeking a motivated and skilled Security Consultant to join our cybersecurity team. The ideal candidate will have hands-on experience in vulnerability assessment and penetration testing (VAPT), and a strong foundation in offensive security practices. This role requires a proactive individual who can assess, identify, and exploit security vulnerabilities across network and web environments, and provide actionable remediation recommendations to strengthen clients’ security posture.

Key Responsibilities

• Conduct network and webapplication vulnerability assessments and penetration tests (VAPT) to identifyand validate security risks.
• Prepare detailed reports outlining findings, risks, and practical remediation strategies.
• Work closely with clients and internal teams to deliver effective security solutions.
• Stay updated with emerging security threats, exploits, and industry best practices.
• Support internal research and development to enhance service offerings.

Requirements

• Nationality: Must be a Singapore Citizen.
• Experience: Minimum 2 years of relevant hands-on security testing experience.
• Certifications (at least one required): OSCP/ OSCP+ / CRT
• Strong knowledge of network protocols, web application architecture, and common vulnerabilities (e.g.,OWASP Top 10).
• Familiarity with industry-standard tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, etc.).
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication and report-writing skills.

Good to Have

• Additional offensive security certifications (e.g., OSWE, OSEP, CRTO, CRTL).
• Exposure to source code review,cloud penetration testing and mobile application testing.
• Experience working with government or regulated industry clients.

Why Join Us?

• Opportunity to work on challenging, real-world security engagements.
• Professional growth through advanced projects and certifications.
• Collaborative and knowledge-sharing environment.

Job Responsibilities:

• Ensure a safe environment for visitors.

• Handle situations with professionalism.

• Respond to urgent situations and provide first aid when necessary.

• Manage and control crowd sizes.

• Manage and check the vehicles parking in the vicinity.

• Conduct regular patrols around the compound.

• Other ad-hoc duties assigned by supervisor.

Job Requirements:

• Day Shift 5.5 days week.

• Prefer 1 to 3 years of related work experience.

Job Description:

· Coordinate with stakeholders, security and blast mitigation consultants, security system integrators, for the implementation of an integrated security system (CCTV, FIDS, EACS, EKMS, etc.), physical security systems, hostile vehicle mitigation systems and blast mitigation measures.

· Review technical write-up and shop drawings from security system specialists and prepare for submission to consultants for approval.

· Oversee the installation of integrated security systems and blast mitigation measures, to ensure they meet the requirements and project timelines.

· Prepare weekly and monthly reports for the work progress.

· Liaison with architectural, structural and MEP colleagues for requirements related to security systems and blast mitigation systems.

· Lead the standalone testing and commissioning of security systems and blast mitigation systems, and liaise with other stakeholders for integrated system testing.

Requirements

·      Degree / Diploma in engineering, security management, or related field.

· Minimum 4 years of work experience in the coordination and implementation of integrated security systems and blast mitigation measures.

·      Familiar with the public shelter requirements or hardened structure requirements.

·      Systema Integrator Physical Security Course(SIPSC) certificate holder will have an added advantage.

We are seeking an experienced IT Security Officer (ITSO) to manage incidents, assess vulnerabilities, ensure policy compliance, and safeguard IT and network assets. The ideal candidate will work closely with internal IT teams and external vendors to uphold cybersecurity posture and compliance requirements.

Key Responsibilities:

Incident Response & Security Monitoring

• Track, manage, and escalate cybersecurity incidents and critical security threat events as required.
• Conduct information security awareness trainings to cultivate a security-conscious culture among staff.
• Stay current with emerging threats, vulnerabilities, and threat intelligence related to cloud platforms.
• Disseminate security advisories, threat intelligence reports, security directives, and patch recommendations promptly to the relevant stakeholders in the agencies.
• Partake in tabletop exercises, security risk management activities, audits and third-party assessments to enhance incident response readiness.

Security Product Management

• Perform Vulnerability Assessments (Tenable Nessus) on applications (e.g. web client/server, mobile apps), networking and computing devices (e.g. firmware, Operating System).
• Analyse vulnerability scan results, recommend remediation actions, and track resolution status.
• Monitor security events on SIEM (e.g. Splunk, Cortex, Exa beam), perform event triage and analysis.
• Perform onboarding and vulnerability scanning of computing devices before connecting to the corporate network to ensure compliance with cyber hygiene standards.

Security Governance & Compliance

• Conduct periodic security reviews to ensure adherence to IT Security Policies, Standards, Controls and industry best practices.
• Recommend and implement security initiatives and enhancement based on findings from tabletop exercises (TTX) and audits.
• Monitor and ensure compliance with secure configuration standards across network, systems and endpoint (i.e. CIS Hardening) at agencies.
• Analyse Vulnerability Assessment (VA) scan results, track and report remediation status according to the stipulated timeframe.

Network, Systems and Endpoint Security

• Manage, configure, and optimize security tools and platforms to ensure effective integration with network and IT infrastructure.
• Manage network, system, endpoint and runtime security of on-premises and cloud environments.
• Perform regular reviews of accounts for both on-premises and on cloud systems/applications.

Documentation and Reporting

• Implement and update security policies, technical baselines, Standard Operating Procedures (SOPs).
• Maintain documentation of security incidents, vulnerability assessments, security checklist, security controls and policies.
• Prepare and deliver regular reports to update security performance metrics, incident trends, compliance status and risk mitigation efforts.
• Ensure timely escalation and reporting of cybersecurity incidents to management and stakeholders.

Collaboration and Stakeholder Management

• Collaborate with various IT teams (e.g. Infrastructure, Applications, Project) and external vendors to implement and maintain security controls and measures.
• Provide security advisory and recommendations to support projects and system implementations.
• Act as the key liaison with stakeholders (e.g. SIRO/SIRM, IT, Application Teams) and cloud service providers to align security-by-design principles, cybersecurity strategies and compliance requirements.

Qualifications:

Education & Experience

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related discipline.
• Minimum 3 years of experience in Security Operations.

Technical Skills

• Hands-on experience with security tools (e.g. SIEM, WAF, AV, EDR, PAM, DAM).
• Deep understanding of vulnerability management, threat analysis, and incident response (IR) processes.
• Good understanding of secure network design, endpoint security, and system hardening techniques.
• Familiarity with ICT security compliance frameworks, cybersecurity standards, and risk management practices.
• Familiar with IaC security (e.g. Terraform, CloudFormation) and CI/CD security.

Certifications

• Professional certifications such as CISSP or CISM are preferred.
• Cloud certifications such as CCSP, AWS Certified Security, Azure Security Engineer Associate or equivalent would be advantageous.

Other Skills

• Strong analytical and problem-solving skills with attention to detail.
• Effective communication skills, both written and verbal, with the ability to clearly articulate security risks and recommendations.
• Ability to work independently with minimal supervision and collaboratively within a team in a dynamic and fast-paced environment.
• Proactive mindset with a continuous improvement attitude towards cybersecurity operations.

Key Responsibilities

1. Assist the Project Manager in the planning and execution of IT, security system, and IoT projects.
2. Coordinate with vendors, contractors, and internal departments to ensure timely delivery of project milestones.
3. Conduct site visits, supervise installation works, and ensure compliance with technical specifications.
4. Perform hardware and software testing, configuration, and troubleshooting during deployment.
5. Ensure all project documentation including schedules, drawings, checklists, and handover documents are maintained and updated.
6. Liaise with clients for technical clarification and support during the implementation phase.
7. Monitor project progress, identify potential risks, and propose mitigation measures.
8. Support Testing and Commissioning activities and assist in system handover to the client.

Requirements

• Diploma or Degree in Engineering, Information Technology, or related field.
• 2+ years of relevant experience in managing or supporting IT and/or security system projects.
• Knowledge of systems such as CCTV, Access Control, Networking, Servers, and IoT-based solutions.
• Familiar with project tools, documentation, and coordination workflows.
• Strong interpersonal and communication skills.
• Able to work independently and in a fast-paced environment.
• Willing to travel for site work when required.
• 5.5 work days
• Location: 3 Shan Road

Location: Melbourne

Team: Business Systems & Security

Reporting to: Head of Business Systems & Security

The PaperCut Story

At PaperCut, we believe two things: great code can change the world, and a great flat white can change your morning.

Now, let's be honest, "print management" doesn't usually make people leap out of their chairs. But here at PaperCut, we’ve turned the most boring part of IT into one of the most exciting and impactful jobs in tech. How? Simply put, our code saves trees!

We’re a BCorp-certified company on a mission to make our customers' printing waste-free, easy, and secure. With a global footprint spanning 195 countries and 140 million end users, we are a true Australian success story moving forward into the cloud, SaaS, and beyond print.

What you’ll actually be doing

• Influencing without Hierarchy: You’ll work across our diverse tech stack  (Java, Go, React, TypeScript etc.), across the organisation, to ensure security is baked into the SDLC from day one.

• The Helpful Expert: You’ll be the person developers want to talk to. You’ll help them run threat models for new features and coach them on writing code that is secure by design.

• Modern Cloud Security: You’ll take ownership of securing our global SaaS offerings (along with the DevSecOps team), focusing primarily on Google Cloud Platform (GCP) with some exposure to AWS.

• Technical Compliance: You’ll work with our Legal team to ensure we meet ISO27001 and other standards, not by filling out spreadsheets, but by building the technical controls that make those standards a reality.

• Scaling the Practice: You’ll help us select and tune the right mix of SAST, DAST, and SCA tools to keep our pipelines fast and our code safe.

What you bring to the table

• Deep Technical Roots: You’ve spent time in the weeds of information security and are comfortable reading and reviewing code.

• The "Uplift" Mindset: You measure your success not by how many tickets you open, but by how much more secure the engineering teams become because of your guidance.

• Cloud Fluency: You have a strong understanding of GCP or AWS and how to secure containerised workloads at scale.

• Ambition to Lead: You aren't looking for a "Lead" role just yet—you want to stay hands-on while developing the skills to lead a practice and mentor other engineers.

Why Join PaperCut?

• Values-Driven: We’re guided by our values: Caring, Honest, Intelligent, and Nimble (CHIN). They aren't just posters; they’re how we build products and treat each other.

• Melbourne Born & Bred: We are a true Australian success story, still owned and run by our founder right here in Melbourne.

• Share the Success: We offer all permanent employees a Share the Success bonus, ensuring that when the company thrives, our people do too.

• Real Impact: PaperCutters are involved in strategic decisions through collaborative leadership groups. We respect expertise and give you the autonomy to build.

• Generous Leave: Including up to 18 weeks of parental leave and a genuine commitment to Diversity, Equity, Inclusion, and Belonging.

The PaperCut Pledge

Ghosting is for Halloween, we commit to responding to every single applicant. Our hiring process is designed to be enjoyable, thorough, and fair, allowing you to show the best version of yourself.

Ready to trade your old code for code that saves trees? Apply now—the first coffee is on us!

​Our Client is an established and leading company in Singapore, who is seeking to recruit a Cyber Security Analyst.

KEY ROLES AND RESPONSIBILITIES

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 6 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

    Job Description

·      We are seeking a skilled and proactive Cyber Security Analyst to join our Security Operations Center (SOC). The ideal candidate will be responsible for real-time security monitoring, incident investigation, and response across enterprise environments.

·       This role requires strong expertise in threat detection, incident handling, and continuous improvement of SOC capabilities. 

Key Responsibilities 

·      Security Monitoring & Incident Response Monitor, investigate, and respond to medium to high-severity security incidents across network, endpoint, cloud, and application environments

·       Perform in-depth analysis of alerts, logs, and security telemetry to identify root cause, impact, and remediation actions

·       Coordinate incident response activities with internal teams and external stakeholders when required 

·      Escalate critical incidents to management as per defined protocols 

·      Ensure all incidents are handled in accordance with SLAs, playbooks, and compliance requirements 

·      Threat Detection & Use Case Management Tune and optimize SIEM detection rules to improve detection accuracy and reduce false positives

·       Analyze emerging threats and enhance detection use cases accordingly

·       Continuous Improvement & SOC Maturity Contribute to the development and enhancement of SOC processes, runbooks, and playbooks 

·      Identify opportunities for automation using SOAR and AI-driven solutions 

·      Support initiatives to improve SOC efficiency and maturity 

·      Leadership & Mentorship Provide guidance and mentoring to junior SOC analysts Act as an escalation point for complex investigations 

·      Promote knowledge sharing, training, and continuous learning within the team 

Required Skills & Experience 

·      Hands-on experience with SIEM platforms such as Splunk, Elasticsearch, Microsoft Sentinel, or Google SecOps Strong understanding of network, endpoint, identity, and cloud security concepts 

·      Experience analyzing logs from firewalls, EDR, IDS/IPS, cloud platforms, and operating systems 

·      Knowledge of incident response methodologies and digital forensics fundamentals 

·      Experience 3–5 years of experience in Cyber Security Operations, SOC, or Incident 

·      Response roles Proven ability to independently handle medium to high-severity incidents 

·      Experience working in regulated environments (financial services, healthcare, government) is an advantage 

·      Soft Skills Strong analytical and problem-solving abilities 

·      Ability to remain calm and structured under pressure High level of ownership, accountability, and attention to detail 

Preferred / Nice-to-Have 

·      Experience with SOAR platforms and security automation 

·      Cloud security expertise (AWS, Azure, GCP) Scripting/query skills (SPL, KQL, SQL, Python) 

·      Experience in SOC transformation or SIEM migration projects 

·      Certifications (Preferred) GCIA, GCIH, GCED SIEM-related certifications (Elastic, Google SecOps, Microsoft Sentinel, or equivalent)vv

Role: Principal Security Engineer - Cloud & Innovation

Location: Singapore

We are partnering with a leading organization to hire a Principal Engineer to drive innovation in cloud security, zero trust architecture, and next-generation threat detection across multi-cloud environments. This role is ideal for someone passionate about building cutting-edge security solutions, working at the intersection of cloud, Kubernetes, and AI security.

Key Responsibilities

• Drive security innovation initiatives by identifying emerging threats across cloud, containers, and AI systems, and developing scalable solutions

• Research, prototype, and implement advanced security capabilities from proof-of-concept to production

• Design and enhance runtime security for Kubernetes and cloud-native environments

• Build and simulate multi-cloud attack scenarios to strengthen detection and response capabilities

• Develop and implement security automation and policy-as-code frameworks

• Architect and enforce security best practices across multi-cloud platforms (IAM, logging, encryption, network controls)

• Lead Kubernetes security initiatives, including workload protection, admission controls, and supply chain security

• Explore and integrate emerging technologies for security (e.g., eBPF, confidential computing, AI security techniques)

• Collaborate with cross-functional teams to ensure secure system design and implementation

Requirements

• Degree in Computer Science, Engineering, or a related field

• 8+ years of experience in cloud / infrastructure security, with leadership exposure

• Strong hands-on experience with public cloud platforms (AWS and/or Azure/GCP)

• Deep understanding of Kubernetes security and cloud-native architectures

• Experience with automation and Infrastructure as Code (e.g., Terraform)

• Proficiency in Python or Go for building security tools

• Strong problem-solving and research mindset with experience in developing innovative security solutions

• Familiarity with modern application and AI security concepts

Good to Have

• Experience with multi-cloud security architectures

• Exposure to advanced threat detection, runtime security, or forensic techniques

• Relevant certifications such as Kubernetes Security, Cloud Security, or similar
  

  UEN: 202329526G

  EA Licence: 23S2061

Project Security Systems Engineer [Camps Project] X2

• Location Office at Outram Road| Project will be Islandwide depending on assigned project
• Working Hours: Mon to Fri [830am – 6pm] Night and weekend works will be required depending on project requirements
• Salary: Basic up to $4500 + Transport $750 (car) or $400 (motorbike) – must have own vehicle due to site conditions + HP by reimbursement basis

Overall Objective:

• Project Engineers will be responsible for leading and managing projects for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Key Roles and Responsibilities:

• Lead and direct projects and ensure they are directed towards a common objective
• Engage and communicate with stakeholders to deliver project milestones and comply with strict deadlines
• Ensure client satisfaction and manage escalations, acting as point of contact to the client
• Ensure that the project delivers as-sold solution, remains within the baseline budget and is delivered on time whilst maintaining quality criteria and client satisfaction
• Coordinate activities of the project teams through task delegation, resource assignment and programme management
• Ensure proper documentation is in order
• Any other duties as assigned

Job Requirement:

• Minimum Diploma in Electronics & Communication Engineering or related field
• Preferably with 2 years’ relevant work experience in project management for security systems
• Technical knowledge on ELV, Networking and Security Systems (CCTV, Card Access, Alarm System) required

Cheong Yeat Long | R25145358

The Supreme HR Advisory Pte Ltd | EA 14C7279

Position: Security Officers

• Able to commit 4 days work 1 day off, 3 days work 1 day off schedule.
• 12 hours permanent shift
• Location: islandwide
• Salary Package:  $2,870 to $3,600 (Depends on experience)
  Completion Bonus : $2500 (untrained) $4500 (trained)

Job Description:

• Incident Response, Manage Security & Safety Systems
• Prevent unauthorised entry into the premises
• Monitor CCTV
• Patrolling and clocking
• Access control duties

Requirements:

• Secondary education

Email: supreme.jacksontan@gmail.com

Tan Yong Zhi (Jackson) | Reg: R24124461

The Supreme HR Advisory Pte. Ltd | EA No: 14C7279

Location: Islandwide
Salary: $2,700 – $3,300 per month
Working days: 4 days work followed by 1 day off and then 3 day work followed by 1 day off

Description

Responsibilities

• Patrolling and carry out enforcement duties such as illegal parking on public roads or public health
• Attend to public feedback
• Possess minimum class 2B license

Benefits
• Full-time: Attractive salary package – Up to SGD3,300*
• 12hrs shift work (can be rotating or perm)
• Joining bonus up to $3500*
• Yearly Increment*
• Fully sponsored WSQ certified security training
• Comprehensive medical and dental benefits, etc

Location: Central Region
Salary: $2,800 – $3,100 per month (Gross salary up to 4k-5k)
Working days: 5 Days work week (Off day not fixed at weekend)

Responsibilities
• Manning of static/access control points
• Checking of passes and other documents at static/access points
• Screening and checking of all personnel and vehicles entering and exiting the premises
• Patrolling and guarding client’s personnel and properties
• Operating metal/explosive detectors/x-ray machines at checkpoints
• Issuing of visitor/contractor pass in exchange for their identification cards
• Attending to alarm activation
• CCTV Monitoring
• Responding to incidents such as unattended bags, etc.
• Maintaining records of all incidents
• Checking of boarding, staff, and valid entry passes

Benefits
• Full-time: Attractive salary package – Up to SGD3,600*
• 12hrs shift work (can be rotating or perm)
• Joining bonus up to $3500*
• Yearly Increment*
• Fully sponsored WSQ certified security training
• Comprehensive medical and dental benefits, etc