Total 3,886 security analyst job vacancies

This role will be based at Menara Skymind. 

We are looking for an Analyst to join our Channels team in Penang.

The Analyst will be a part of Omdia’s Enterprise and Channels research team in Penang and will be responsible for contributing to Omdia’s global channels and partner ecosystems research services. The individual must be data and results-oriented, hungry to drive the innovation within our services, implement ideas, and work with team members to drive commercial success. A particular interest in technology and routes-to-market is critical. The individual will be part of a globally dispersed team and must be able to manage working with colleagues and senior executives from around the world.

Impact you’ll make 

• Support research and provide insights into channels to help vendors and channel partners develop their go-to-market strategies. 
• Supporting Omdia’s Channels team to produce data and high-quality insights to support the global team’s research.
• Creating and delivering research deliverables to support the wider analyst team and clients (including data, presentations, reports, surveys etc.).
• Contributing to global research engagements/projects, which including conducting research interviews.
• Contribute to global research engagements/projects, which may include conducting research interviews, creating questionnaires, working with digital research tools.

Responsibilities:

· Participate in internal audit engagements of various organisations, to assess the adequacy and effectiveness of internal controls through conducting process walkthroughs and documentation testing

· Conduct risk assessments to assess the risk profile and highlight key risk areas for various clients

· Perform compliance reviews related to the relevant legislations, guidelines and internal policies

· Be meticulous and accurate in documenting workpapers based on documents reviewed

· Assist in internal audit planning, execute fieldwork and draft internal audit reports

· Work independently and prepare deliverables (e.g. working papers and reports) under established timelines

Requirements:

· Degree in Accountancy, Computer Science or Information Systems

· Experience in BFSI would be a strong advantage.

· Good understanding of risks and internal controls.

· Experiences in internal audit and SOX engagements

· Possess initiatives, logical thinking and good analytical abilities.

Certification in CIA would be a plus point.

• Conduct fundamental equity research on listed companies, including business trend analysis, financial modelling, valuation assessment, and scenario sensitivity analysis.
• Develop investment views by synthesizing insights from company meetings, earnings calls, sell-side research, and expert network consultations.
• Perform industry and competitive analysis to evaluate key growth drivers, risks, and market positioning of companies.
• Build and maintain financial models to assess earnings outlook, valuation upside/downside, and investment risk-reward profiles.
• Engage directly with company management teams, analysts, and industry experts to validate investment theses and identify emerging trends.
• Conduct due diligence and field research in China through company visits, management meetings, and channel checks.
• Monitor macroeconomic, regulatory, and sector developments to assess their impact on portfolio companies and investment opportunities.

Job Description:

• Analyzing market data, building financial models and preparing client presentations for mergers and acquisitions or debt capital markets transactions.
• Conduct market research and summarize findings and conclusions to support pitch or execution document.
• Assisting in client transactions from pitch to close.
• Assist in credit ratings advisory work.
• Assist in sustainable financing advisory work.

Job Requirements:

• Ability to thrive in a dynamic, collaborative work environment.
• Excellent analytical, quantitative and interpretative skills.
• Being adaptable, flexible and resilient.

Overview

We are seeking an experienced Application Security Consultant to drive secure application development practices, perform security assessments, and support cloud security initiatives. The ideal candidate will have strong expertise in application security, secure SDLC, DevSecOps, threat modelling, and cloud technologies.

Responsibilities

• Perform application security assessments and reviews for web, mobile, and cloud-based applications.
• Conduct threat modelling exercises to identify, assess, and mitigate application security risks.
• Establish threat profiles and recommend security controls for application projects.
• Track, manage, and remediate security vulnerabilities through timely patching and remediation processes.
• Integrate security best practices and automated security testing into CI/CD pipelines.
• Conduct security awareness training and promote secure coding practices across development teams.
• Collaborate with developers, engineers, and stakeholders to strengthen application security posture.
• Support security governance, risk management, and compliance initiatives. 

Requirements

• Minimum 4 years of combined experience in software development, application security, and cloud computing (AWS preferred).
• Strong understanding of web and mobile application architectures and APIs, including REST, SOAP, SSL/TLS.
• Experience in threat modelling and application security risk assessment.
• Strong knowledge of application security standards and frameworks, including:OWASP Top 10OWASP Application Security Verification Standard (ASVS)
• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.
• Experience integrating security testing into development workflows.
• Hands-on experience with SAST (Static Application Security Testing) tools such as:Fortify on DemandSonarQubeSimilar security scanning platforms
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Professional certifications such as:CISSPOSCPAWS Security SpecialtyAWS DevOps EngineerEquivalent cybersecurity certifications
• Experience working with Government Commercial Cloud (GCC) environments.

Key Skills

Application Security | DevSecOps | Threat Modelling | OWASP Top 10 | OWASP ASVS | AWS Security | CI/CD | SAST | Fortify | SonarQube | REST API | SOAP | SSL/TLS | GitLab | GitHub | Ansible | Cloud Security | Vulnerability Management | Secure SDLC | Security Awareness Training | GCC Cloud Environment

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

This is a 12 months fixed term contract role.

What will you do?

• Develop and maintain IT security policies and action plans, reviewing them at least annually or as required by the Customer.
• Evaluate and recommend IT security products and solutions for implementation within the Customer's IT infrastructure.
• Implement and manage risk assessment methodologies, ensuring compliance with relevant service management requirements and industry standards.
• Develop and implement security management frameworks and governance structures as specified by the Customer.
• Establish and manage IT Security Incident Management processes, including detection, response, and handling of security incidents according to Customer guidelines.
• Collaborate with external partners and suppliers to resolve IT security incidents effectively.
• Participate in and contribute to industry-wide IT security incident response simulations and technical assessment exercises.
• Conduct forensic investigations when required, including secure disk image acquisition and analysis within specified timeframes.
• Monitor, analyze, and report on emerging security threats, vulnerabilities, and solutions relevant to the Customer's IT infrastructure.
• Conduct regular meetings with key stakeholders to highlight security issues and propose improvements to the Customer's IT infrastructure.
• Liaise and coordinate with external suppliers, security organizations, and the Government on IT security matters related to the Customer's infrastructure.
• Perform additional activities as necessary to secure the Customer's IT infrastructure.
• Review and follow up on security reports generated from central security tools, providing timely updates to the Customer.
• Manage the inventory of IT assets to be monitored by central security tools, ensuring compliance and proper onboarding of servers, networks, and databases.

Requirements

• At least 4 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (e.g. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred

Benefits

What do we offer in return?

• Fun working environment
• Employee Wellness Program
• To work in Singapore Government Agencies projects
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at careers@activate.sg

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.

Basic Operational Functions

• Working hours: 3 days per week, 7:00 AM to 7:00 PM

• Stationed at the guard house to monitor and control entry and exit activities.

• Register and record visitors’, contractors’, and vehicles’ in-and-out movements.

• Issue and collect visitor or contractor passes where required.

• Ensure only authorized personnel are allowed access to the premises.

• Monitor and report any suspicious activities, unauthorized entry, or unusual incidents.

• Maintain proper records and complete daily occurrence reports and related documentation.

• Respond appropriately to emergencies, fire alarms, or incidents and report to management when necessary.

• Enforce the company’s safety and security procedures within the premises.

• Carry out any other security-related duties assigned by the Company.

Requirements

• Singapore Citizens only.

• Possess a valid Security Officer License.

• Minimum 1–2 years of relevant experience as a Security Officer / Security Guard preferred.

• Experience working in a construction environment is an advantage.

• Able to communicate and write in basic English.

• Responsible, alert, and able to work independently.

As a Security Operations Analyst within the Security function, you will play a key role in protecting the organisation through proactive threat monitoring, vulnerability management, incident response, and operational resilience coordination across local, regional, and platform environments.

The Security Function operates as a 1.5 line of defense within the organisation, supporting security governance, engineering, and operational security capabilities across the business.

You will work closely with Security Engineering, Infrastructure, Engineering, Product, Platform, and GRC teams to strengthen operational security, resilience readiness, and security response capabilities across modern cloud-native and AI-driven environments.

The primary focus areas of this role include:

• Threat & Vulnerability Management
• Security Monitoring & Operations
• Incident Response
• Operational Resilience Planning & Coordination

This role is ideal for a hands-on security professional who enjoys operational security, incident investigation, threat analysis, operational coordination, and continuous improvement of security operations processes and capabilities.

Our client is a global leader in gateway services, who is seeking to recruit a Security Officer. This position is based in Singapore.

Security Officer (Training provided)

Responsibilities

You will be responsible for providing security services at the airport and key installation areas, such as safeguarding and protection of assets. Your role includes:

· Perform CCTV and Control Room monitoring duties.

· Undertake screening of baggage and personnel.

· Perform X-ray screening and access controls.

· Perform guarding and patrolling of installations.

· Any other duties as assigned.

Job Requirement:

· Proficient to communicate in English

· Normal colour vision

· Able to work on rotating shifts

· Able to take on assignments at various locations based on Company's discretion

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

We are looking for a motivated and skilled Security Consultant to join our client's expanding cybersecurity team in Singapore. You will play a key role in assessing and exploiting security vulnerabilities across networks and web applications, helping clients strengthen their security posture through actionable remediation.

Working closely with internal teams and clients, you will conduct thorough vulnerability assessments and penetration tests while staying abreast of emerging threats and offensive security best practices. Your expertise will contribute to both client solutions and internal research initiatives.

Job Requirements:

To excel in this role, candidates should meet the following qualifications:

• Minimally 1 year of hands-on experience in vulnerability assessment, penetration testing, or offensive security.
• Relevant certification, such as OSCP or OSCP+
• Strong knowledge of network protocols, web application architecture, and common vulnerabilities including OWASP Top 10.
• Proficiency with industry-standard tools like Burp Suite, Metasploit, Nmap, and Nessus.
• Excellent analytical, problem-solving, communication, and report-writing skills.

Job Description & Requirements

Position Summary

We are seeking a highly skilled Network Security Engineer with Subject Matter Expert (SME)–level expertise in AlgoSec Security Management solutions. The ideal candidate will have expert-level hands-on experience with AlgoSec firewall automation and integration with multiple firewall platforms including Palo Alto, Check Point, Cisco FTD, and FortiGate. This role also requires strong hands-on expertise with enterprise firewalls and will be responsible for firewall rule migrations, automation, and Day 2 operations support in the Network Security domain.

Key Responsibilities

- Serve as SME for AlgoSec, including design, implementation, customization, and ongoing optimization.
- Perform end-to-end firewall rule automation and policy management using AlgoSec.
- Integrate AlgoSec with multiple firewall platforms such as Palo Alto, Check Point, Cisco FTD, and FortiGate.
- Lead and execute firewall rule migrations between different firewall vendors.
- Provide Day 2 operational support for network security infrastructure with a primary focus on firewalls.
- Troubleshoot complex firewall and policy-related issues across heterogeneous environments.
- Collaborate with network, cloud, and application teams to support secure connectivity requirements.
- Ensure compliance with security policies, audit requirements, and industry best practices.
- Create and maintain technical documentation, SOPs, and operational runbooks.

Required Technical Skills

- Expert-level hands-on experience with AlgoSec Firewall Analyzer, Fire Flow, and AppViz (or equivalent modules).
- Strong hands-on expertise with Palo Alto and/or Check Point firewalls (SMElevel preferred).
- Experience working with Cisco FTD and FortiGate firewalls.
- Proven experience in firewall policy design, optimization, and cleanup.
- Strong understanding of network security concepts including ACLs, NAT, VPNs, and routing.
- Experience with firewall rule migration projects across multiple vendors.
- Familiarity with automation, APIs, and integration with ITSM tools is a plus.

Preferred Qualifications

- Industry certifications such as PCNSE,PCCSE, CCNP Security, Fortinet NSE, or AlgoSec certification.
- Experience supporting large enterprise or service provider environments.
- Exposure to cloud security platforms and hybrid network environments.
- Strong analytical, troubleshooting, and problem-solving skills.

Soft Skills

- Strong communication and stakeholder management skills.
- Ability to work independently and lead technical initiatives.
- Detail-oriented with a strong focus on operational excellence and security compliance.

Overview
We are seeking a Cyber Security Researcher to join a team focused on identifying and mitigating software vulnerabilities through advanced security research. This role offers the opportunity to work alongside cyber threat experts in conducting vulnerability research, reverse engineering, fuzzing, and code auditing to strengthen system security against evolving cyber threats.

Responsibilities

• Collaborate with cyber security and threat intelligence experts to identify and mitigate security risks.
• Conduct vulnerability research through fuzzing, reverse engineering, and source code auditing.
• Analyze software and systems to identify security weaknesses and exploit paths.
• Develop proof-of-concept (PoC) exploits to validate identified vulnerabilities.
• Investigate security flaws and recommend remediation strategies.
• Contribute to the development of tools and methodologies for vulnerability discovery and analysis.
• Stay current with emerging cyber threats, attack techniques, and security research trends.

Requirements

• Min 2 years of experience in vulnerability research, reverse engineering, software security, or cyber security research.
• Hands-on experience in native userland and or kernel-space vulnerability research.
• Experience identifying and analyzing security vulnerabilities through fuzzing, reverse engineering, and code auditing.
• Strong programming skills in C and Python.
• Familiarity with ARM/AArch64 assembly language and low-level system internals.

Reachfield Security (Grade “A” agency) specialises in supplying security manpower to Schools, Factories, Shopping Centres, Museums, libraries, etc.

Security Officer

Location: Braddell ( School )

Timing: 630-630

////////////////////////////////////////////////////////////////////////

1. Works in a school/ office building environment.

2. Good customer service skills; able to communicate with people of all levels.

3. 12hrs-shift (Fixed shift, no need to rotate)

4. PC knowledge required.

5. Job duties include traffic control, issue visitors/ contractor passes, patrolling, protecting clients’ premises and access control, etc.

6. Possess valid security license, completed WSQ RTT.

Office:10 Anson Road, #26-09 International Plaza

(Near Tanjong Pagar MRT Exit C)

Contact Us

Mobile: 8805 2291 Office: 6324 0648

You may fill in the application form online thru below link.

https://rss.armfort.com/direct... 

Do let us know once you submit the application online

Key Responsibilities

• Design, implement, and manage the Vulnerability Management Program, ensuring execution across all phases of the vulnerability management lifecycle.
• Configure, schedule, and monitor vulnerability scans using enterprise tools (e.g., Tenable/Nessus), ensuring successful execution and investigating/re-running failed scans.
• Perform continuous asset discovery and ensure newly identified assets are onboarded into the vulnerability management platform and properly registered in CMDB.
• Assess and prioritize vulnerabilities using a risk-based approach, considering asset criticality, business impact, and environmental context.
• Partner with infrastructure, network, and application teams (Windows, Unix, databases, etc.) to drive remediation of identified vulnerabilities.
• Provide technical advisory to stakeholders on vulnerability impact, exploitability, and remediation strategies.
• Analyze and validate false positives, identify technical constraints, and facilitate risk acceptance processes, including stakeholder alignment and approvals.
• Lead remediation planning for penetration testing findings in collaboration with cross-functional teams.
• Conduct threat exposure assessments and targeted vulnerability scans, driving mitigation and response actions.
• Maintain and enhance vulnerability dashboards and reporting, delivering insights to both technical teams and senior management.
• Track and report progress against defined KPIs and SLAs, ensuring compliance with organizational standards.
• Escalate critical risks and provide timely updates to leadership and relevant stakeholders.
• Drive continuous service improvements in vulnerability management processes, tools, and methodologies.
• Support global coordination across teams operating in multiple geographical regions.
• Ensure adherence to security policies, regulatory requirements, and compliance frameworks, including financial security and fraud prevention obligations.
• Stay updated on emerging threats, vulnerabilities, and industry best practices, applying insights to improve organizational defenses.

Qualifications and Profile

• 8–10 years of overall IT experience with 4–7 years in Information Security and minimum 4+ years in enterprise Vulnerability Management.
• Proven hands-on experience managing end-to-end Vulnerability Management programs in large enterprise environments.
• Strong technical knowledge of vulnerability assessment and remediation across:
• Operating systems (Windows, Unix/Linux)
• Networks and infrastructure
• Databases and application servers
• Ability to analyze vulnerabilities, assess risk exposure, and prioritize remediation using a risk-based approach.
• Hands-on experience with Tenable (Nessus) SecurityCenter or equivalent vulnerability scanning tools in large-scale environments.
• Familiarity with threat and vulnerability intelligence and its application to enterprise security operations.
• Strong understanding of security reporting requirements at both technical and management levels.
• Hands-on experience creating reports, dashboards, and trend analysis using:
• Excel, PowerPoint, Word
• BI tools such as Power BI or similar
• Ability to present insights in a clear, structured, and business-relevant manner.

Interested applicants please send your resume in MS Words format toprasant.sirohi@ambition.com.sg and attention to Prasant Sirohi (R22106307)

Shortlisted candidates will be notified

www.ambition.com.sg

EA Registration Number: R22106307

Data provided is for recruitment purposes only

Business Registration Number: 200611680D. License Number: 10C5117

Job Tasks and Responsibilities

Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure

Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms

Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks

Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities

Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management

Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption

Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities

Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes

Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure

Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards

Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle

Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency

Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs

Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation

Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage

Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage

Experience in agile development environment will be an added advantage

Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage

Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage

Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage

Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage

Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage

Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage

Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage

Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage

Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage

Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage

Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage

Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines