Total 34 software engineer job vacancies in Legal / Public / Security category in Islandwide

• Perform security assessments, identify risks and gaps, and recommend improvement plans.
• Support the design, evaluation, and deployment of cybersecurity solutions including EDR, SASE, Zero Trust, and endpoint/network security controls.
• Participate in proof-of-concept activities, vendor evaluations, technical workshops, and customer engagements.
• Prepare assessment reports, technical documentation, project deliverables, and presentations.
• Collaborate with customers, vendors, and internal teams to ensure successful project delivery.
• Keep up to date with cybersecurity trends, threats, and industry best practices.

Qualifications:

• Degree in Information Technology, Cybersecurity, Computer Science, Computer Engineering, or a related discipline.
• At least 5 years of experience in cybersecurity, security engineering, security assessments, solution implementation, consulting, or related areas.
• Hands-on experience in security assessments, gap analysis, risk identification, and remediation planning.
• Experience engaging customers or stakeholders in advisory, consulting, or project delivery environments.
• Practical knowledge in one or more areas: EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
• Ability to assess cybersecurity risks and provide practical, business-focused recommendations.
• Strong communication skills to present technical concepts effectively to both technical and non-technical audiences.
• Experience with Cato Cloud or comparable SASE platforms.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, ISO/IEC 27001, or similar standards.
• Understanding of firewalls, VPNs, routing, Active Directory, Microsoft 365 security, and cloud connectivity.
• Relevant certifications such as CISSP, CISM, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, Azure Security, or equivalent.

To apply, please visit www.gmprecruit.com and search for Job Reference: 3W36XV68

We regret that only shortlisted candidates will be notified.

GMP Technologies (S) Pte Ltd | EA License: 11C3793 | EA Personnel: Bautista Gia Grace De Guzman | Registration No: R23111973

Responsibilities

• Conduct security assessments, identify risks and gaps, and propose practical improvement plans.
• Support design, evaluation, and implementation of cybersecurity solutions such as EDR, SASE, Zero Trust, and endpoint/network security controls.
• Support proof-of-concept activities, vendor evaluations, technical workshops, and customer discussions.
• Prepare assessment reports, technical documentation, project deliverables, and presentation materials.
• Coordinate with customers, internal teams, and vendors to deliver cybersecurity projects on time and within scope.
• Stay updated on cybersecurity technologies, threats, and best practices to improve service quality.

Requirements

• Minimum 5 years of experience in cybersecurity, security engineering, security assessment, solution implementation, or cybersecurity consulting.
• Experience in security assessment, gap analysis, risk identification, and remediation planning.
• Experience working with customers or stakeholders in consulting, project delivery, or advisory roles.
• ⁠Knowledge and practical experience in one or more areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance
• Ability to understand cybersecurity risks and translate technical findings into practical recommendations.
• Ability to explain cybersecurity risks, solutions, and priorities clearly to technical and non-technical audiences.

GMP Recruitment Services (S) Pte Ltd | EA Licence: 09C3051 | VO UYEN AI LINH | Registration No: R22109232 

• Administer, configure, and maintain network security technologies, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control solutions.
• Monitor network security events and investigate security alerts, incidents, and potential threats.
• Implement and maintain firewall policies, network segmentation, access controls, and secure connectivity solutions.
• Troubleshoot and resolve network security issues while ensuring minimal disruption to business operations.
• Conduct security reviews, vulnerability assessments, and configuration audits of network infrastructure.
• Support the design and implementation of secure network architectures and infrastructure solutions.
• Create and manage security architecture and design artefacts that embed security principles into enterprise systems and ensure alignment with organizational architecture standards and business objectives.
• Develop and maintain network security documentation, diagrams, standards, procedures, and operational guides.
• Collaborate with infrastructure, application, and enterprise architecture teams to ensure security requirements are incorporated into projects and operational activities.
• Support security incident response, root cause analysis, and remediation activities.
• Assist with compliance, audit, and risk management initiatives by providing technical expertise and evidence of security controls.
• Stay current with emerging cybersecurity threats, technologies, and industry best practices.

Required Skills and Experience

• Strong understanding of networking concepts, including TCP/IP, routing, switching, DNS, DHCP, VPNs, and network segmentation.
• Hands-on experience managing enterprise firewalls and security technologies.
• Knowledge of network security principles, security monitoring, threat detection, and incident response.
• Experience with vulnerability management and security hardening practices.
• Ability to interpret security requirements and implement appropriate technical controls.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent documentation and communication skills.

Qualifications

• Bachelor’s degree in information technology, Computer Science, or a related field.
• Minimum 7 Years of experience in network security, cybersecurity, or ICT infrastructure security roles.
• Should have experience in Azure Cloud environment  

Required Certifications

• CCNA or CCNP
• PCNSA
• AWS/Azure Certified

Key Responsibilities

1. Administer, configure, and maintain network security technologies, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control solutions.
2. Monitor network security events and investigate security alerts, incidents, and potential threats.
3. Implement and maintain firewall policies, network segmentation, access controls, and secure connectivity solutions.
4. Troubleshoot and resolve network security issues while ensuring minimal disruption to business operations.
5. Conduct security reviews, vulnerability assessments, and configuration audits of network infrastructure.
6. Support the design and implementation of secure network architectures and infrastructure solutions.
7. Create and manage security architecture and design artefacts that embed security principles into enterprise systems and ensure alignment with organizational architecture standards and business objectives.
8. Develop and maintain network security documentation, diagrams, standards, procedures, and operational guides.
9. Collaborate with infrastructure, application, and enterprise architecture teams to ensure security requirements are incorporated into projects and operational activities.
10. Support security incident response, root cause analysis, and remediation activities.
11. Assist with compliance, audit, and risk management initiatives by providing technical expertise and evidence of security controls.
12. Stay current with emerging cybersecurity threats, technologies, and industry best practices.

Required Skills and Experience

1. Strong understanding of networking concepts, including TCP/IP, routing, switching, DNS, DHCP, VPNs, and network segmentation.
2. Hands-on experience managing enterprise firewalls and security technologies.
3. Knowledge of network security principles, security monitoring, threat detection, and incident response.
4. Experience with vulnerability management and security hardening practices.
5. Ability to interpret security requirements and implement appropriate technical controls.
6. Strong analytical, troubleshooting, and problem-solving skills.
7. Excellent documentation and communication skills.

Qualifications

1. Bachelor’s degree in information technology, Computer Science, or a related field.
2. Minimum 7 Years of experience in network security, cybersecurity, or ICT infrastructure security roles.
3. Should have experience in Azure Cloud environment  

Required Certifications

1. CCNA or CCNP
2. PCNSA
3. AWS/Azure Certified

We are seeking a skilled Cybersecurity Engineer to safeguard our organization's digital assets through effective security measures and proactive risk management. This role emphasizes leadership in incident response, vulnerability assessments, and the establishment of comprehensive security practices.

Responsibilities:

• Lead the execution of security awareness training initiatives, including sessions, phishing simulations, and assessments to foster a culture of security compliance.

• Conduct thorough IT security risk assessments to identify vulnerabilities and drive remediation efforts across the organization.

• Oversee vulnerability assessments, penetration testing, and security audits, coordinating with internal teams and external vendors for effective tracking of findings.

• Develop and maintain security frameworks, policies, and guidelines in line with regulatory and governance requirements.

• Monitor security systems to detect unauthorized access and respond appropriately to threats.

• Direct incident response efforts, including investigation, root-cause analysis, and documentation for audit readiness.

• Research emerging security threats and propose effective mitigation strategies.

• Provide technical security advice to teams involved in infrastructure, applications, and business processes.

• Support governance and compliance assessments through meticulous maintenance of security documentation and risk metrics.

• Manage IT security audit processes, ensuring timely handling of documentation and addressing auditors' queries.

Requirements:

• A recognized degree in Cybersecurity, Computer Science, IT, or a related field.

• A minimum of 3 years of experience in an IT security role.

• Strong understanding of security frameworks (e.g. ISO/IEC 27001, NIST Cybersecurity Framework), risk management methodologies, and awareness of the top 10 OWASP vulnerabilities.

• Preferred certifications: CRISC, CISM, and/or CISSP.

• Comprehensive hands-on experience with cybersecurity technologies including EDR and NDR solutions, firewalls, vulnerability scanning tools (e.g. Nessus), email security, DLP, Microsoft Purview, IPS, web security controls, and secure network protocols.

• Excellent collaboration skills, enabling effective teamwork across technical teams and stakeholders.

Interested candidate who wish to apply for the advertised position, please click “Apply”. We regret that only shortlisted candidates will be notified 

EA License No.: 01C4394 (PERSOL Singapore Pte Ltd) 

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy. 

Required Skills & Qualifications

• Strong hands-on experience with:
• IBM Watsonx (Watsonx.ai, Watsonx.data, Watsonx Orchestrate)
• QRadar SIEM
• IBM Resilient SOAR
• Experience in:
• AI/ML integration or LLM-based applications
• Prompt engineering and automation workflows
• Proficiency in:
• Python / APIs / automation frameworks
• Strong understanding of:

• SOC operations (incident response, threat analysis)

  • Fully functional and optimized AI-driven automation agents
  • Integration with QRadar and Resilient platforms
  • Documentation of workflows and configurations
  • Production deployment support and knowledge transfer

Job Title: Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer

Employment Period: August/September 2026 to March 2027, with possible yearly renewal
Location: 1 Fusionopolis Way
Working Hours: Monday to Friday, 8:30am to 6:00pm
Engagement Type: Contract / Renewable Term

Role Overview
We are seeking a Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer to support Data Loss Prevention alert monitoring, incident handling, investigation, reporting, user support, and policy improvement activities.

The successful candidate will work closely with security operations, service desk, data owners, business users, compliance teams, and Microsoft Purview SMEs to ensure DLP alerts are properly monitored, investigated, classified, documented, escalated, and improved through continuous policy tuning.

Key Responsibilities

DLP Alert Monitoring & Incident Handling
Monitor DLP alerts from Microsoft Purview DLP Dashboard, Microsoft Defender XDR, email notifications, service desk tickets, and related alerting channels.

Log, track, triage, and classify DLP alerts, including initial investigation of true positives and false positives.

Perform first-level analysis and escalate high-risk or complex incidents to L2 security operations, L3 Purview SMEs, architects, compliance, legal, or other relevant stakeholders where required.

Investigation & Analysis
Perform detailed analysis of DLP incidents to identify root causes, including user behaviour, policy gaps, data misclassification, or process issues.

Validate and document false positives clearly to support policy improvement and operational reporting.

Support forensic analysis and evidence gathering for high-risk DLP incidents where required.

Escalation & Stakeholder Coordination
Coordinate with SOC teams, service desk, business units, data owners, compliance, legal, and IT stakeholders to ensure DLP incidents are handled appropriately and within expected timelines.

Communicate DLP-related issues clearly to both technical and non-technical users.

Policy Tuning & Change Management
Work with L3 SMEs and architects to recommend improvements to DLP policies based on repeated alerts, user feedback, threat trends, false positive patterns, and post-incident findings.

Support DLP change management activities arising from new regulatory requirements, new workloads such as Teams, Copilot or SaaS applications, and post-incident improvements.

Provide practical recommendations to improve DLP policy effectiveness and reduce unnecessary business disruption.

User Support & Awareness
Respond to user-reported DLP issues, including blocked activities, policy alerts, and suspected false positives.

Provide guidance to users on compliant data handling and proper use of sensitive information.

Support communication and awareness activities related to DLP policy enforcement.

Monitor and ensure the AI agent is running and responding correctly where applicable.

Reporting & Continuous Improvement
Prepare periodic DLP reports covering alert volumes, top users triggering policies, false positive rates, policy effectiveness trends, recurring issues, and recommended improvements.

Maintain proper documentation of investigations, findings, escalations, and closure actions.

Technical Skills Required
Strong hands-on knowledge of Microsoft Purview DLP is mandatory.

Experience in Microsoft Purview policy configuration, troubleshooting, alert review, and operational support.

Good understanding of DLP across Endpoint, Exchange, SharePoint, Teams, and Microsoft 365 workloads.

Knowledge of Microsoft Defender XDR, Microsoft 365 Compliance Portal, Microsoft Entra, sensitivity labels, data classification, and information protection.

Microsoft Intune experience will be an added advantage.

Operational & SOC Skills
Experience in incident triage, investigation, security alert analysis, ticket handling, true/false positive determination, and basic log analysis.

Experience with ticketing tools such as ServiceNow or similar platforms.

Ability to work with SOC, service desk, compliance, legal, and business stakeholders.

Data Security & Compliance Knowledge
Good understanding of data protection, data classification, data exfiltration risks, insider risk awareness, and DLP control concepts.

Knowledge of Singapore PDPA and data protection practices will be advantageous.

Soft Skills
Strong communication skills with business users and technical stakeholders.

Ability to explain DLP blocks, alerts, and policy enforcement in a professional and user-friendly manner.

Strong analytical thinking, root-cause analysis, documentation, and coordination skills.

Able to work independently while escalating appropriately when needed.

Experience Requirement
3 to 5 years of experience in Microsoft 365, Microsoft Purview, DLP, security operations, end-user support, or L2 support.

Hands-on experience supporting Microsoft Purview DLP in an enterprise environment is strongly preferred.

Preferred Certifications
Microsoft SC-400: Information Protection Administrator
Microsoft SC-200: Security Operations Analyst
Microsoft MS-102: Microsoft 365 Administrator
Microsoft SC-300: Identity and Access Administrator

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Security Operations Engineer

Location: Singapore, CBD
Employment Type: 12 months (renewable Contract)

Key Responsibilities:

• Administer and support security platforms, with a strong focus on CyberArk and Tenable.
• Perform day-to-day BAU activities including troubleshooting, patching, monitoring, and incident resolution.
• Manage privileged access management (PAM) solutions and ensure platform stability and security.
• Support security operations processes, ticket management, and vendor engagements.

Requirements:

• Hands-on experience as a CyberArk Administrator (not just an end user).
• Strong experience supporting CyberArk environments, including troubleshooting and maintenance.
• Experience with vulnerability management tools such as Tenable.
• CyberArk CDE (Certified Delivery Engineer) certification is mandatory.
• Good understanding of security operations, privileged access management, and cybersecurity best practices.

Preferred Skills:

• CyberArk plugin development and automation experience.
• Policy review and optimization expertise.
• Experience in CyberArk migration or upgrade projects.
• Scripting and process automation skills.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Cloud Security & DevSecOps Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

If you are a cheerful, self-initiated, holds strong integrity values and who likes to meet new people and are able to contribute by fulfilling clients’ needs, join us!

Job Description:

• To manage and ensure that the systems, servers and infrastructure is installed in accordance to the prescribed design document and/or requirements
• Understanding the scope of works and the needs of the clients and implement the appropriate output to the best of your ability or to the requirements
• To design the network architecture and configure in accordance to the requirements
• Configure, Test and Hand over the required systems and provide Training to client
• Ensure the highest standard of system and infrastructure availability
• To liaise with various parties such as system manufacturers or cybersecurity vendors to resolve issues and problems
• Attend new product trainings

Requirements:

• Applicants need to be able to work overtime/Night Shift.
• Required Skill(s): Communication skills, Analytical skills, Decision making, Organizational skills, Attention to details, Patience and Knowledge of Systems engineering software tools
• Min 3 years of relevant hands-on experiences
• Familiar with Security Systems such as ISMS, CCTV, ACS and VA systems will be advantageous
• Familiar with Networking systems (eg. Routing, VLAN, VPN, Wireless AP) will be advantageous
• Familiar with IT Security (eg. firewall, IPSEC, SSL, hardening) will be advantageous
• Able to work independently with minimum guidance, monitoring and a good team player
• Valid Class 3 driving license has an added advantage

Other Information:

• Location: Kaki Bukit or as needed
• Working hours: 9am to 6pm
• Salary (commensurate with experience): Basic Salary + Variable Bonus

Resumes please INCLUDE:

• Personal particulars
• Education background
• Work experiences in point forms
• All reasons for leaving
• Current and expected salary
• Date of availability / Notice Period

Interested applicants are invited to send your updated resume in MS Word format via Apply Now. We regret that only shortlisted applicants will be notified.

• MNC Company
• Basic $2500 - $2800 + Incentive + AWS + Variable Bonus
• Excellent Welfare and Benefits + Career progression
• Working location: West
• Working hours: 12 Hours Rotating Shift: 7.30am-7.30pm, 7.30pm-7.30am (16 Shifts a month)

Job Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems
• Attending to customer request on alarm and card access systems
• Conducting patrols at night
• Any others ad hoc duties as assigned

Job Requirements:

• Possess minimum Higher Nitec in Electrical Engineering, Electronic & Computer Engineering, Mechanical Engineering, and other related fields
• Possess at least 1- 2 years of relevant experience
• Possess Class 3 Driving License will be an advantage

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

LIONG ZHAO GUAN (R22107632)

EA Recruitment Pte Ltd

EA License No: 21C0492

Job Summary:

The Application Security Consultants is responsible for auditing and validating the security posture of applications and their supporting infrastructure. This role focuses on reviewing security activities performed by development teams, including static and dynamic code analysis, infrastructure scans, and hardening practices. The analyst ensures that applications meet internal security standards and comply with regulatory requirements.

Key Responsibilities:

·      Review and validate results from SAST (Static Application Security Testing) and DAST( Dynamic Application Security Testing) tools.

·      Audit OS, container, and database scans for vulnerabilities and misconfigurations looking at reports a

·      Assess the effectiveness of hardening measures across application components (e.g., webservers, APIs, containers, databases).

·      Collaborate with application development and DevSecOps teams to ensure remediation of identified issues.

·      Maintain audit documentation, including findings, remediation tracking, and compliance status.

·      Evaluate adherence to secure coding practices and application security policies.

·      Support internal security audits related to application & underlying infrastructure security.

·      Stay updated on emerging threats, vulnerabilities, and secure development trends.

Required Qualifications:

·      Bachelor’s degree in computer science, Cybersecurity, or related field.

·      4+ years of experience in application security, security auditing, or secure software development.

·      Hands-on experience on one or more tools like SonarQube, Fortify SAST/DAST, Burp Suite,OWASP ZAP etc.

·      Strong understanding of OWASP Top 10, secure coding principles, and CI/CD pipelines.

·      Familiarity with container technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).

Certifications:

·      CRESTCertified Pen Tester

·      CISSP or CCSP 

·      Preferred Certified AWS DevSecOps Professional or equivalent

Key Competencies:

·      Analytical mindset with attention to detail

·      Ability to interpret scan results and prioritize remediation

·      Strong communication and collaboration skills

·      Knowledge of regulatory frameworks (e.g., ISO 27001, PCI-DSS, GDPR)

·      Experience working in Agile and DevOps environments'

Interested applicants please send your resume in MS Wordsformat to pooja.yadav@ambition.com.sg andattention to Pooja (R1551322)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1551322

Data provided is for recruitment purposes only

Business Registration Number: 200611680D.

License Number: 10C5117