Total 4,091 information security analyst job vacancies

Reports to

Security Supervisor/ Assistant Security Manager

Roles and Responsibilities

1. Must be responsible, disciplined, and able to lead by example, highly motivated and influence others positively

2. Primary duty is to assist in safeguarding CHS properties and assets

3. Secondary duty is to be a Service Ambassador of CHS.  In short, to ensure that guests of CHS have a safe and memorable experience

4. Conduct random checks on consignments and staff entering/leaving the hotel and their personal belongings at the security checkpoint to impede pilferage

5. Identify and report unusual or suspicious occurrences in the hotel to Superiors

6. Perform traffic enforcement patrols and take enforcement action against illegal parking

7. Performs basic Fire Command Centre (FCC) duties

8. Performs Access Control & Validation duties at Security Checkpoint including handling of lost and found property

9. Performs Witness and Bank Chaperone duties.11. Performs Lobby Surveillance and Driveway duties

10. Respond to Room safe and Door lock matters

11. Conduct basic Investigation/ Fact-findings and provide assistance to Guests/ Staff when handling incidents and generate incident reports.

12. Assist in planning the team deployment roster

13. Other duties encompass patrolling CHS property, security pass exchange, neutralize any domestic conflicts or criminal activities within CHS, monitoring of CCTVs, security coverage / chaperones for VIPs, checking on contractor’s work, identifying structure or operational deficiencies, identify security and safety hazards and report them to the supervisors

14. Any other duties as and when assigned by the Security Supervisor/ Assistant Security Manager

Education and Work Experience

1.     GCE ‘N’ Level or equivalent

2.     Minimum 1 year of relevant experience in security operation

3.     Possesses Security Officer License and relevant PWM module certificates

4.     Shift work including weekends, PH and when required

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Job Description:

• Control of internal & external team of security manpower to ensure smooth daily operations
• Instill operational discipline to security operations/personnel
• Handle security related issues at deployment sites
• Client Management for security related matters
• Conduct recruitment interview for security officers
• Preparation of operational reports

Requirements:

• Fluent in spoken & written English
• Good interpersonal & communication skills
• Minimum Security Supervisor PWM
• Minimum 3years of related experience in security

**Salary Up to $3600

Email or whatsapp to enquire : 80379071

Role Overview

This role focuses on building, integrating, and automating security systems to strengthen detection and response capabilities across on-premise, cloud, and network environments.

Core Responsibilities:

1.    Design, implement, and integrate security tools across enterprise environments

2.    Build and maintain telemetry pipelines into SIEM and detection platforms

3.    Support onboarding of systems into security monitoring

4.    Implement and manage vulnerability scanning and remediation workflows

5.    Work with SOC teams to translate operational gaps into engineering improvements

6.    Support incident response and post-incident remediation

Core Requirements:

1.    Degree in Cybersecurity, IT, Computer Engineering or related field

2.    At least 4 years of experience in Security Engineering, DevOps, or platform engineering

3.    Experience with enterprise security technologies (e.g. SIEM, SOAR, EDR, cloud security)

4.    Proficiency in scripting or automation (e.g. Python, PowerShell)

5.    Strong understanding of networking and security telemetry

6.    Experience implementing or integrating security platforms (e.g. SIEM, telemetry, cloud security tools)

7.    Experience working in multinational or large enterprise environments

8.    Ability to deliver engineering outcomes independently

Working Location : West Central

**We regret to inform that only shortlisted candidates will be notified. Personal data collected will be used for recruitment purposes**

Major Duties & Responsibilities:

· Protect property and safety by maintaining a safe and secure environment; Maintain a high visibility presence and prevent illegal or inappropriate actions that will/ may cause harm to the premise and the people within the premise

· Welcome guests of the organization, ensure contact tracing is done accordingly via electronic and/ or manual means; Ensure all visitors and/ or contractors to the premise fill up their particulars reflectively within the record.

· Observe signs of possible crime or disorder, investigate disturbances, take action of unusual occurrences and report any suspicious incidents in a timely manner; stay visible

· Carry out traffic control/ management to ensure vehicles and people are safe and are aware of the possible traffic hazard(s) within the premise

· Follow emergency response guidelines, protocols, hierarchy/ reporting structure as indicated by SWM ERT procedure, take specific and appropriate actions as a security guard in the event of any emergency, remain vigilant and ready for next steps, maintaining communication with the emergency response team, the management team and/ or SCDF (where appropriate and assigned by a SWM management team member)

· Any other reasonable guard duties (in relation to safety) assigned by superior

· Monitoring of the CCTV cameras and reporting any suspicious activity

· Ensuring that the Transportation trucks are allowed inside / outside facility after verifying relevant documents and/ or activities as follows:

• Prior to entrance:

· Absence of leakage from vehicle

· The vehicle is fit to transport and not over-loaded (fitness of delivery trucks to transit materials)

· Driver’s license

· Essential information as required by SWM’s VMS, including container number

• Prior to exit:

· Checking out the driver

- Traffic Control

Knowledge, Experience or Behavior Required to Perform Job Well

· This is an in-house position, 5 working days
· Qualified with the right certification/ credentials

· Integrity and professionalism – surveillance skills and detail orientation

· Trained in emergency response procedures/crisis management and proven hands-on experience in fire-fighting within reasonableness

· Proven work experience as a senior security guard or relevant position; Prior SCDF experience is highly advantageous

· Working knowledge of public safety and security procedures/ protocols

· Basic IT literacy and willingness to learn new software/ system

· Ability to maintain confidentiality of information shared

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

This position is responsible for :

·        Analyzes and defines security strategies basedon local context and identified threats

·        Implements security policies and coordinatessecurity actions at the country, LBU, and project levels

·        Ensures optimization of security CAPEX and OPEXby prescribing reliable, cost-effective solutions strictly adapted to needs

·        Advises and assists Country Chairs, EntityDirectors, and site managers to help them define the appropriate securityposture level

·        Recommends an OTOC security organization andvalidates internal or external recruitment of CSOs/security team members

·        Supports each CSO in their area to ensure theirskill development, completion of security training, and benefits from expertiseand experience to adopt the appropriate security posture level for evolvingthreats and security situations, and to handle emergency situations

·        Manages the CSO network in their area

·        Ensures Country Chairs and Entity Directors haveappropriate security plans, with the appropriate level of protection forpeople, facilities, and informational assets; also verifies proper POBmaintenance and implementation of measures regarding VPSHR compliance

·        Conducts security reviews in Company entities tocontrol effective protection of people and sites

·        Prescribes corrective or improvement measures tobe implemented and assists entities in action plan implementation

·        Evaluates and makes recommendations on theselection of security providers for subsidiaries

·        Identifies and updates security performanceindicators in their area

Additional information:

·        Anticipates threats, provides expertise, advice,support, and assistance in the security approach

·        Responsible for compliance with Company securityrequirements in their geographical area

·        Ensures compliance with the OTOC principle (OneTotalEnergies One Country) by guaranteeing that all Company entities present ina given country adhere to the same security standards

·        Co-manages subsidiary security budgets andcosts, evaluated by area of responsibility at several hundred million euros

·        Sovereign dimension: liaison with diplomaticrepresentations in their area: Ambassadors and Defense Attachés

·        Inter-company dimension: maintains aprofessional network with counterparts from major French companies and keyindustrial sector players in the area

Requirement
Qualification level required for the position : At least Bachelor or Master’s or equivalent level

Technical skills required for the position : - Experience in managing large projects - Experience in writing organizational and methodological documents

Behavioral competencies required for the position : - Rigorousness, strong responsiveness, and organizational skills are required -

Listening, perspective, and ability to convince are necessary

Specific knowledge required for the position : Good knowledge of the company's business and professions to be able to cross security vision and business challenges

Level of experience required for the position : - Minimum 15 years of executive experience in the security field with proven crisis

management skills - Successful managerial experience in operational situations or transverse management

Job Description

• Industry/ Organization Type: Security
• Position Title: Senior Security Officer
• Working Location: Island Wide
• Working Hours: 6days (8.00am-8.00pm, off on weekdays)
• Salary Package: Basic Salary $3,170
• Duration: Permanent Role

Key Responsibilities

• Respond to and report on complex or large-scale safety and security incidents; assist in evacuations when needed.
• Manage security systems, including the Central Alarm Monitoring, fire control, lift control, and car park systems.
• Regulate traffic according to the Road Traffic Act, ensuring smooth and safe flow.
• Monitor CCTV and the centralized alarm system, maintaining CCTV storage and preserving evidence.
• Assist state or auxiliary police in law enforcement and issue summons as required.

APPLY NOW!!!

• Valid PLRD license.
• Minimum of 3-5 years of experience in a security role.
• Strong leadership and team management skills.
• Excellent communication and interpersonal skills.
• Ability to handle emergencies and stressful situations calmly and effectively.
• Strong observational and analytical skills.
• Proficient in using security systems and technology.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #71348 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Role Overview

This role supports Security Operations Centre (SOC) activities, including monitoring, investigation, threat hunting, and incident response. The resource operates as a second line of defence, translating alerts into actionable findings and improving detection capability.

Core Responsibilities

1. Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms

2. Correlate events to identify root cause, scope, and impact of security incidents

3. Investigate phishing, malware, account compromise, and unauthorised access cases

4. Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK

5. Support containment, remediation, and recovery activities

6. Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools)

Core Requirements

1. Degree or Diploma in Cybersecurity, IT, or related field

2. At least 4 years of experience in SOC operations or incident response (L2 preferred)

3. Experience with SIEM, EDR/XDR, and cloud or identity security tools

4. Strong understanding of attack chains, MITRE ATT&CK, and threat analysis

5. Demonstrated hands-on experience in incident investigation or threat hunting

6. Ability to operate independently in a SOC environment
   

   Working Location : West Central
   

   **We regret to inform that only shortlisted candidates will be notified. Personal data collected will be used for recruitment purposes**

·  At least 4 years combined work experience in software development, application security, and cloud computing (e.g., AWS)

· Familiar with mobile and web application programming interfaces (API) architecture (e.g., REST, SOAP, SSL/TLS)

· Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks

· Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard

· Familiar with Agile development processes, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CD pipelines

·  Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc.

· Track and address security vulnerabilities with timely remediation and patching processes.

· Conduct security awareness training sessions

·Good verbal/written communication, collaboration skills and experience interactingwith various stakeholders

· Strong analytical, problem-solving, and troubleshooting skills; ability to workindependently

· Relevant certifications preferred (e.g., CISSP, OSCP, AWS security, AWS DevOps Engineer, or equivalent, etc.)

· Experience in working with Government Commercial Cloud (GCC) preferred.

Job Tasks and Responsibilities

Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure

Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms

Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks

Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities

Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management

Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption

Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities

Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes

Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure

Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards

Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle

Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency

Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs

Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation

Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage

Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage

Experience in agile development environment will be an added advantage

Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage

Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage

Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage

Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage

Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage

Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage

Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage

Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage

Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage

Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage

Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage

Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

[Job ID: 1600983]

Responsibilities

• Deliver professional services, including deployment, implementation, and upgrades of cybersecurity products distributed by Netpoleon. This may occasionally involve customer coordination and project timeline management.
• Provide practical and effective technical solutions or alternatives based on customer requirements.
• Conduct product training for customers, partners, and internal teams.
• Perform installation, configuration, and basic troubleshooting independently using product documentation.
• Continuously upskill and obtain relevant technical certifications for assigned technologies.
• Develop into a subject matter expert over time and support knowledge transfer to internal teams for enhanced customer support.
• Provide technical support to sales and support teams, including product clarification, solution design input, tender compliance, and ad-hoc technical assistance.
• Perform any other duties as assigned.

Requirements

• 2 years of experience in IT, Information Security, or Cybersecurity preferred
• Strong knowledge of cybersecurity and IT infrastructure, including:
  Firewalls, VPN, DLP, IDS/IPS, Web Proxy, DNS, Email Security, SIEM, log management, virtualization, containers, cloud platforms (AWS, Azure, Google Cloud), DevOps/DevSecOps, IAM, PAM, endpoint security, CyberArk Conjur.
• Solid troubleshooting skills in networking and systems, including:
  TCP/IP, routing, NAT, VLAN, multicast, OSPF, BGP, Active Directory, LDAP, RADIUS, SNMP, Syslog, SMTP, TLS, SSH.
• Strong interest in cybersecurity trends and attack techniques.
• Relevant certifications are an advantage:
  Cisco CCNA/CCNP, Check Point CCSE/CCSM, CyberArk CDE, CISSP, CREST, OSCP, and other security-related certifications.

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Software Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781