Total 210 computer security job vacancies in Information Technology category

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

[Job ID: 1600983]

Responsibilities

• Deliver professional services, including deployment, implementation, and upgrades of cybersecurity products distributed by Netpoleon. This may occasionally involve customer coordination and project timeline management.
• Provide practical and effective technical solutions or alternatives based on customer requirements.
• Conduct product training for customers, partners, and internal teams.
• Perform installation, configuration, and basic troubleshooting independently using product documentation.
• Continuously upskill and obtain relevant technical certifications for assigned technologies.
• Develop into a subject matter expert over time and support knowledge transfer to internal teams for enhanced customer support.
• Provide technical support to sales and support teams, including product clarification, solution design input, tender compliance, and ad-hoc technical assistance.
• Perform any other duties as assigned.

Requirements

• 2 years of experience in IT, Information Security, or Cybersecurity preferred
• Strong knowledge of cybersecurity and IT infrastructure, including:
  Firewalls, VPN, DLP, IDS/IPS, Web Proxy, DNS, Email Security, SIEM, log management, virtualization, containers, cloud platforms (AWS, Azure, Google Cloud), DevOps/DevSecOps, IAM, PAM, endpoint security, CyberArk Conjur.
• Solid troubleshooting skills in networking and systems, including:
  TCP/IP, routing, NAT, VLAN, multicast, OSPF, BGP, Active Directory, LDAP, RADIUS, SNMP, Syslog, SMTP, TLS, SSH.
• Strong interest in cybersecurity trends and attack techniques.
• Relevant certifications are an advantage:
  Cisco CCNA/CCNP, Check Point CCSE/CCSM, CyberArk CDE, CISSP, CREST, OSCP, and other security-related certifications.

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Software Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Job Description:

• Handle Maintenance and Support related matters
• Identify & resolve gaps within Post-Sales Resources to ensure day to day Post-Sales operations are not affected
• Providing point of contact for support/project escalation relating to assigned product coverage
• Constantly working with product team leads on building the team capabilities and well equipped with skills on delivery of services
• Ensure projects are consistently follow up by project owners and push towards closure
• Exploring ways on optimizing implementation duration
• Ensure Calendar updates and Eworkorders process are in place
• Working closely with Pre-sales on incoming service delivery based on team capabilities.
• Work with Technical Lead on setting roles, responsibilities and monitor achievements of individual team members
• Point of contact for all Post-Sales relatedmatters on assigned product coverage

Requirements:

• Bachelor's degree or Diploma in Cyber Security, Computer Science, Computer Engineering or related field
• At least 5 - 7 years relevant experience in IT industry
• Able to work independently as well as in a team environment
• Excellent interpersonal and communication skills

Responsibilities

• Design, train, and deploy perception systems for object detection, segmentation, depth estimation, and 3D scene reconstruction
• Build multi-modal pipelines fusing RGB, depth, and inertial data into robust real-time representations
• Develop vision models that transfer reliably from simulation to physical hardware
• Optimize inference pipelines for embedded compute constraints
• Partner with navigation and manipulation teams to ensure perception outputs meet downstream needs
• Drive systematic evaluation on hardware and iterate on failure modes

Requirements

• Strong foundations in computer vision, 3D geometry, and deep learning
• Hands-on experience building perception systems for physical robots or real-time embedded platforms, gained through industry or research work
• Proficient in Python and C++, with strong PyTorch or JAX experience
• Experience taking perception models from prototype to deployed inference
• Familiarity with sensor fusion across camera, depth, and inertial modalities
• Candidates with limited industry experience are welcome to apply, provided this is supported by strong relevant academic or research work, such as a thesis, publications, or hands-on robotics projects

Tyson Jay Management Pte Ltd | EA License No.: 24C2479 

Ivan Lim | EA Personnel No.: R1109856

About Company:

Our Client is a 100% subsidiary company of a Japanese information and Communications Company. They are one-stop service provider of all communication services . Their Singapore office is the regional HQ, providing comprehensive global and local communication services to companies developing their businesses in the region including Singapore, by tailoring services according to the characteristics of each region.

Job Description:

- Understand and articulate layered security approaches across endpoint, network, cloud, and application layers

- Explore, evaluate, and recommend existing and emerging security products

- Conduct Proof of Concept (POC) testing and drive productization of validated solutions

- Provide technical consultancy and advisory services to clients on security best practices

- Perform Solution Design or Consultancy for other products which department currently carries (for example: Managed Service for LAN infra), when necessary

- Collaborate with sales teams to identify customer requirements and propose tailored security solutions

- Deliver technical presentations, demonstrations, and workshops to prospects and clients

- Assist in RFP/RFI responses and solution proposals

- Train and enable sales teams with technical knowledge of security offerings

- Develop presales collateral such as solution briefs, architecture diagrams, and competitive positioning

- Stay updated on the latest security trends, threats, and technologies

- Contribute to the development of new service offerings and go-to-market strategies

- Other ad hoc duties as assigned by the Company

Job Requirements:

- Minimum 5 years of experience in a Security Service Provider or equivalent role

- Bachelor’s degree in IT, Engineering, or related field

- Strong exposure to: (1) Microsoft O365 Security (Defender, Purview, etc.), (2) Network Security (SASE, firewalls, intrusion prevention, zero trust frameworks), (3) Cloud Security (AWS, Azure, GCP security controls)

- Proven experience in conducting POCs and transitioning validated solutions into productized offerings

- Excellent communication and presentation skills for both technical and non-technical audiences

- Ability to work cross-functionally with sales, product, and delivery teams

Compensation:

- Work location: Tanjong Pagar

- Working hour: 8:30AM - 5:30PM

- Sales Commission

- Annual Variable Bonus (Dec / Jun)

- Annual Leave and medical leave

- Group Insurance covering hospitalization and surgical with outpatient/dental benefits, personal accident insurance coverage

- Annual Health Screening provided

• Permanent role
• Great exposure to a variety of projects in various technologies

About Our Client

We are partnering with a well-established organisation in the IT security industry, headquartered in Singapore with global presence in multiple countries as well.

Job Description

• Maintain and optimise network infrastructure to ensure reliable performance.
• Monitor, troubleshoot, and resolve network-related issues promptly.
• Collaborate with cross-functional teams to implement network enhancements.
• Ensure compliance with security protocols and best practices in network management.
• Provide technical support and guidance to internal stakeholders.
• Stay updated on industry trends and emerging technologies to improve operations.

The Successful Applicant

A successful Network Engineer should have:

• A strong understanding of network systems, protocols, and configurations
• Experience in troubleshooting and maintaining network infrastructure
• Proficiency with networking tools and technologies
• Familiarity with security measures in a technology environment

What's on Offer

• Competitive annual salary ranging including allowance and performance-based bonus
• Supportive work environment in the business services industry.

Michael Page International Pte Ltd | Registration No. 199804751N 

Product area

Whether it is paying online with Autofill, using tap and pay in stores, or using the Google Pay app, the Payments team at Google is focused on making payments simple, seamless, and secure. In addition to consumer payment technologies, the Payments team also powers the money movement between Google and its consumers and businesses.

Job description

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

Qualifications

Job responsibilities

• Write and review backend infrastructure code.
• Triage product or system issues and debug/track/resolve by analyzing the sources of issues and the impact on hardware, network, or service operations and quality.
• Perform technical security assessments, code audits and design reviews.
• Develop technical solutions to help mitigate security vulnerabilities.
• Advocate security and secure practices throughout Google Payments.

Minimum qualifications

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with software development in one or more programming languages (e.g., Go, Python, C, C++, Java, JavaScript), or 1 year of experience with an advanced degree.
• 1 year of experience with security in attacks and mitigation methods.

Preferred qualifications

• Master's degree or PhD in Computer Science, or a related technical field.
• Experience in application and service security, including design reviews, and source code assessments.
• Knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.

Company Description

Paradox Singapore is an urban resort that offers guests a sophisticated yet playful blend of traditional refinement and modern elegance. Located in the vibrant river district of Clarke Quay, the hotel is perfect for those looking for a stylish home base during business travel, or a quiet sanctuary to relax and unwind. Our comfortable rooms and spacious suites feature picturesque views of the city's skyline and are equipped with thoughtful amenities for laid-back style without any fuss.

Role Description

This is a full-time on-site role for Technology and Information Security Manager to oversee both hotel technology operations and corporate information security initiatives.

This role combines operational IT leadership with regional security governance and project management responsibilities. Focuses on supporting Paradox Singapore's technology infrastructure and day-to-day operations, while dedicated to corporate governance, information security, and enterprise-wide technology projects.

Responsibilities:

Property Cybersecurity & Data Defense

• Endpoint & Perimeter Security: Manage, monitor, and maintain 100% deployment coverage of Endpoint Detection and Response (EDR) agents across all local property workstations, front-desk pods, and back-office servers.
• Network Segmentation: Enforce and regularly audit the absolute logical isolation of guest networks (Guest Wi-Fi, In-room IPTV) from secure administrative and corporate data environments.
• Human Firewall Development: Design and execute localized scam-awareness briefings, phishing simulations, and mandatory cybersecurity onboarding training tailored specifically for high-risk frontline hotel staff.
• PDPA Compliance & Data Protection: Act as the on-site IT operational champion for the Singapore Personal Data Protection Act (PDPA). Ensure that the information collection, processing, storage, and disposal of PII strictly adhere to PDPA obligations.

Local IT Project Management & Execution

• Project Lifecycle Management: Lead the end-to-end delivery (initiation, scoping, procurement, implementation, and closeout) of local property-level technology upgrades, such as Opera Cloud POS, Document Management Systems (DMS) or PMS Integration refreshes.
• Change Control & User Acceptance Testing (UAT): Coordinate with local department heads to design UAT workflows and schedule maintenance windows, ensuring zero disruption to guest services and operational downtime during system cutovers.

Daily Operations & Systems Support

• Core Systems Escalation (L2): Act as the ultimate on-site escalation layer for critical hospitality hardware and software, including the Property Management System (PMS), POS platforms, and secure payment processing gateways.
• Business Continuity: Manage local IT operational expenditure (OPEX), verify the automated integrity of daily localized server and cloud backups, and maintain disaster recovery readiness

Enterprise Project Management & Architecture

• Tenant Unification & Consolidation: Serve as the Lead Regional Project Manager orchestrating the multi-phase consolidation of disparate property email domains and assets into a unified enterprise Microsoft 365 tenant environment.
• Identity Boundary Engineering: Design, build, and maintain a secure multi-site Active Directory forest architecture mapping out secure connections between regional property domains.
• Strategic Roadmap Delivery: Champion and execute infrastructure and security milestones aligned with the group’s overarching 5-year IT Strategic Roadmap.

Corporate Security Governance & Risk Management

• Vulnerability Orchestration: Manage group-wide enterprise network vulnerability scanning protocols. Schedule regular external and internal scans across all regional properties and hold local teams accountable to strict remediation timelines.
• Forcepoint DLP Administration & Oversight: Engineer, deploy, and manage the Forcepoint Data Loss Prevention (DLP) enterprise architecture across all regional property and corporate endpoints. Design and enforce centralized DLP rules, discovery policies, and data classification tags to monitor and prevent unauthorized exfiltration of sensitive guest and corporate data via email, web channels, USB, or cloud storage.
• Global PCI-DSS & PDPA Alignment: Point of contact for external security auditors. and reporting to demonstrate continuous, audit-ready compliance with global PCI-DSS standards and localized data privacy laws (such as Singapore's PDPA).
• Incident Response Playbooks: Standardize and update corporate Incident Response plans and business continuity guidelines. Logs from SIEM can be used to discover threats and incident consoles to triage, investigate, and mitigate potential internal data leaks or brand-level digital crises.
• Vendor Risk Management: Conduct rigorous security architecture reviews and data privacy assessments on all third-party APIs, hospitality booking engines, and enterprise software platforms before approving group-wide deployment.

Technical AI Safeguards & Governance

• Understand and lead Risk Governance & SaaS Management,
• Track data tier classifications, vendor SOC 2 compliance, and geographic data hosting locations.
• Establish and manage a centralized ERM (Enterprise Risk Management) SaaS registry and automated vetting workflow to catalog, risk-score, and govern all group-wide AI models, autonomous agents, and SaaS vendors before regional deployment.
• Established the policies used to build, monitor, and regulate AI models. Its goal is to ensure AI technologies remain safe, transparent, unbiased, and compliant with laws

Local Policy Localization & Operationalization

• Localized Policy Standards: Translate corporate IT blueprints into operational reality by authoring localized standard operating procedures (SOPs)

Corporate IT Policy Architecture & Global Governance

• Provide support to the Global Director, Information and Technology for policy review and audit compliance: the annual review and revision cycle of all corporate IT security policies, modifying standards based on shifting threat landscapes, emerging technologies (like Agentic AI), and global hospitality audit requirements (PCI-DSS)

Additional Responsibilities

• Undertake projects and assignments as directed by Corporate Management

We are seeking a Security Architect with a strong development and solution architecture background to lead our architecture consulting team and design security solutions that enable business outcomes while maintaining robust security postures. This role reports to CISO.

Key Responsibilities:

Architecture Security Reviews and Threat Modelling 

·       Lead a team of security architecture consultants, providing threat-driven architecture security reviews and threat modelling

·       Drive development of AI enabled security reviews, threat modelling and security enhancements of CI/CD pipeline

Build Security In / Shift Left 

·       Drive strategic security architecture decisions across business units and technology domains

·       Develop secure reference architectures and design patterns for modern application stacks and BSI

·       Build security-by-design with development workflows

·       Enhance CI/CD security tooling and automation and drive adoption and metrics reporting 

·       Reignite Security Champions initiative to improve shift left approach

Enterprise and Identity security architecture 

·       Design identity governance solutions for hybrid and multi-cloud environments

·       Assess and implement advanced IAM patterns including fine-grained authorization, privilege escalation controls, and just-in-time access

·       Develop identity integration strategies for AI systems and automated decisioning

·       Engage with platform and DevOps engineering teams to build secure infrastructure and technology foundations

·       Propose initiatives to address security gaps or enhance the overall security posture

·       Build positive flywheel effect among stakeholders to enable security adoption and cultural transformation

Gen AI Security

·       Design and integrate security frameworks for Gen AI deployment, monitoring, and governance within AI risk framework

·       Maintain security blueprints for(Gen) AI deployments, including MCP and AI guardrails

·       Lead agentic AI security initiative with focus on authentication and authorization of AI agents

Requirements:

·       Bachelor’s degree in computer science, engineering, or related fields

·       Strong software engineering background with more than 5years of experience as a software engineer / developer.

·       3+ years of team or lateral leadership experience in technology architecture or security consulting teams

·       Proven leadership of security architecture/threat modelling.

·       Track record leading complex, multi-stakeholder security initiatives.

·       Ability to ship secure reference architectures and drive developer adoption at scale.

·       Experience with AI/ML security challenges and solutions including Large Language Model (LLM), Model Context Protocols (MCP), Agentic AI and AI governance frameworks

·       Comprehensive knowledge of application security principles(OWASP, SANS, etc.)

·       Experience with modern security tooling: SAST, DAST, SCA, container scanning, secrets management

·       Relevant certifications (eg. SANS, AWS, Azure)

Should focus on day-2-day operations, incident, change management, and user centric trouble shooting.

Operate andcontinuously improve the organization’s Secure Access Service Edge (SASE)services using Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA),ensuring secure, reliable user connectivity and strong policy governance.

Keyresponsibilities (Operational / BAU)

• Runday-to-day operations for ZIA (web gateway, SSL inspection, URL filtering,cloud app control, sandbox, DLP , DNS security).

• Runday-to-day operations for ZPA (App Segments, Access Policies, Connectormanagement, posture requirements, policy troubleshooting).

• Monitorservice health and user experience; proactively identify trends and recurringissues.

• HandleL2/L3 incident troubleshooting: authentication issues (SSO/SAML),PAC/forwarding issues, tunnel/connector issues, policy blocks, certificate/SSLinspection issues.

• Performpolicy administration: create/update rules, exceptions, and change deploymentsfollowing CAB/ITSM change controls.

• Maintainforwarding architecture: Zscaler Client Connector, GRE/IPsec tunnels, PACfiles, forwarding profiles, location configuration, traffic steering.

• Manageintegrations: IdP (Azure AD/Entra ID, Okta, ADFS), SIEM (Splunk/QRadar),ticketing (ServiceNow), endpoint tools (Intune/Jamf), MFA.

• Executeroutine operational tasks: connector upgrades, certificate updates, locationupdates, application onboarding to ZPA, user/group updates.

• Work withvendors/TAC; drive cases to closure and implement corrective actions.

• Maintaindocumentation: runbooks, SOPs, troubleshooting guides, policy standards,onboarding checklists.

• Supportaudits and compliance: policy reviews, recertification evidence,logging/retention checks. Menlo Web Isolation Maintain allow-list/whitelist forapproved URLs/domains based on business justification and securityrequirements.

• Manageexception lifecycle: approvals, expiry dates, periodic review/cleanup, andrecertification evidence.

• Ensureisolation policies align with ZIA policies and do not create conflicting userexperience (e.g., bypass vs isolate logic) Site not loading in isolation,rendering issues, broken web apps, file download/upload restrictions,clipboard/printing controls (as applicable)

Coreskills:

• Strongworking knowledge of ZIA (SSL inspection, URL filtering, CASB/app control,sandbox, forwarding methods).

• Strongworking knowledge of ZPA (connectors, app segments, access policies, posture,authentication flows).

• Troubleshootingacross endpoint + network + identity (DNS, TLS cert chains, proxy behavior,SAML/SSO, routing).

•ITSM/change management discipline (ServiceNow/JIRA), documentation habits.Strong knowledge about Zero Trust concepts

•Nice-to-have: SIEM integration, DLP, basic scripting (PowerShell/Python) forops automation.

We are seeking an Application Security Consultant to assess and validate the security posture of applications and supporting infrastructure. The role focuses on reviewing security testing activities, identifying vulnerabilities, and ensuring compliance with internal security standards and regulatory requirements.

Key Responsibilities

• Review and validate results from security testing tools such as SAST and DAST
• Perform vulnerability assessments across applications, systems, and databases
• Analyse security scan outputs and validate findings, including identifying false positives
• Assess system hardening and configuration compliance with security standards
• Collaborate with development, infrastructure, and DevOps teams to support remediation efforts
• Maintain documentation on vulnerabilities, risk assessments, and remediation tracking
• Support internal and external audits related to application and infrastructure security
• Prepare reports summarising findings, risk ratings, and recommended actions
• Monitor emerging threats and security best practices

Requirements

• Degree in Computer Science, Cybersecurity, or a related field
• Minimum 4 years of experience in cybersecurity, application security, or security auditing
• Hands-on experience with security tools such as Burp Suite, OWASP ZAP, or similar
• Understanding of vulnerability management and security testing concepts
• Familiarity with cloud platforms (e.g., AWS, Azure, or GCP) is advantageous
• Knowledge of security frameworks such as ISO 27001 or similar is preferred

Key Skills

• Strong analytical and problem-solving skills
• Ability to interpret security findings and priorities remediation
• Good communication and stakeholder management skills
• Ability to work independently and collaboratively in a team

Interested applicants please send your resume in MS Words format toprasant.sirohi@ambition.com.sg and attention to Prasant Sirohi (R22106307)

Shortlisted candidates will be notified

www.ambition.com.sg

EA Registration Number: R22106307

Dataprovided is for recruitment purposes only

Business Registration Number: 200611680D. License Number: 10C5117

☑ Good Bonuses

☑ Near MRT

☑ Family Friendly Environment

Job Description:

• Lead and manage SOC team resources to ensure 24x7 security event monitoring, incident response, and timely escalation of cyber threats.
• Maintain and enhance SIEM/SOAR platforms, including fine-tuning detection rules, log ingestion, and ensuring high availability and disaster recovery.
• Lead forensic investigations, threat hunting for IOCs and TTPs, and drive end-to-end SOC capability uplift projects.
• Prepare and present detailed incident reports, including root cause analysis and remediation recommendations, to management.

Requirements:

• At least a degree in Computer Science or related certifications.
• Strong hands-on expertise in SIEM/SOAR operations, incident response methodologies, and defence solutions across host-based and network-based layers.
• Familiarity with Singapore regulatory frameworks (Cybersecurity Act 2018, MAS TRMG, CCoP) and industry frameworks such as MITRE ATT&CK, OWASP Top 10, and Cyber Kill Chain.
• Proven team leadership with direct reporting experience.

To apply, please include the following details inside your CV for faster processing:

• Reasons for leaving each past & current employment
• Salary drawn for each past & current employment
• Expected Salary
• Earliest availability date

We regret that only short-listed candidates will be contacted shortly.

Loh Puay Hwee David

EA License | 24C2215

EA Registration Number | R1766892

Successful candidate must be comfortable with rotation shifts and weekends as and when required.

Responsibilities:

Network & Security Implementation

·        Implement firewall rule changes to support migration activities and ongoing operations.

·        Configure and manage network security devices (e.g., Fortigate, Palo Alto).

·        Support hybrid connectivity setup including VPN and ExpressRoute configurations.

·        Implement network segmentation and micro-segmentation strategies.

·        Enforce enterprise security policies and compliance requirements across environments.

·        Support secure connectivity between on-premise and Azure environments.

Azure Networking &Cloud Security

·        Configure and manage Azure networking components (VNets, NSGs, route tables, load balancers).

·        Implement and maintain secure access controls and network security principles in cloud environments.

·        Support design and implementation of secure hybrid architectures.

·        Assist in implementing security controls for cloud-based workloads.

Technical Support &Incident Management

·        Resolve incidents and service requests within agreed SLA timelines under general supervision.

·        Monitor network and security systems proactively to detect and mitigate issues.

·        Investigate, analyse, and troubleshoot network and security-related incidents.

·        Maintain accurate and timely updates in ticketing systems with resolution details.

·        Escalate complex issues to senior engineers or Technical Leads where required.

Service Delivery &Process Compliance

·        Ensure adherence to ITIL processes including Incident, Problem, and Change Management.

·        Support, track, and document change implementation activities.

·        Participate in security audits, compliance checks, and risk assessments.

·        Contribute to continuous improvement of security and network operations.

Collaboration &Knowledge Sharing

·        Work closely with migration teams, cloud engineers, and security architects.

·        Share knowledge and document solutions for recurring issues.

·        Support junior engineers and contribute to team capability development.

Any other ad-hoc duties as assigned by supervisor.

Requirements

·        Degree in IT or related discipline

·        3–5 years of experience in networking and security engineering (Fortigate / Palo alto & Azure networking and security).

·        Hands-on experience with:

-         Firewall administration (Fortigate, PaloAlto preferred)

-         Azure networking (VNets, NSGs, routing)

-         VPN and ExpressRoute connectivity

-         Network security principles and segmentation

·        Security policy implementation and compliance

·        Strong understanding of hybrid cloud networking architectures.

·        Experience supporting enterprise infrastructure and migration projects.

Preferred certifications:

-         CCNA / CCNP (Networking)

-         Palo Alto, Fortinet, or other firewall certifications

-         Microsoft Certified: Azure NetworkEngineer Associate

-         Security certifications (e.g., CISSP,Security+) are advantageous

·        Experience with Zero Trust architectures.

·        Exposure to cloud security tools(Defender for Cloud, Sentinel).

Interested applicants, please email your resume to Karin Chan Wei Kien

Email: karinchan@recruitexpress.com.sg

CEI Reg No: R1104584

Recruit Express Pte Ltd

UEN: 199601303W

EA Licence No: 99C4599

Successful candidate must be comfortable with rotation shifts and weekends as and when required.

Responsibilities:

Should focus on day-2-day operations, incident, change management, and user centric troubleshooting.

Operate and continuously improve the organization’s Secure Access Service Edge (SASE)services using Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA),ensuring secure, reliable user connectivity and strong policy governance.

• Run day-to-day operations for ZIA (web gateway, SSL inspection, URL filtering, cloud app control, sandbox, DLP , DNS security).

• Run day-to-day operations for ZPA (App Segments, Access Policies, Connector management, posture requirements, policy troubleshooting).

• Monitor service health and user experience; proactively identify trends and recurring issues.

• HandleL2/L3 incident troubleshooting: authentication issues (SSO/SAML),PAC/forwarding issues, tunnel/connector issues, policy blocks, certificate/SSL inspection issues.

• Perform policy administration: create/update rules, exceptions, and change deployments following CAB/ITSM change controls.

• Maintain forwarding architecture: Zscaler Client Connector, GRE/IPsec tunnels, PAC files, forwarding profiles, location configuration, traffic steering.

• Manage integrations: IdP (Azure AD/Entra ID, Okta, ADFS), SIEM (Splunk/QRadar),ticketing (ServiceNow), endpoint tools (Intune/Jamf), MFA.

• Execute routine operational tasks: connector upgrades, certificate updates, location updates, application onboarding to ZPA, user/group updates.

• Work with vendors/TAC; drive cases to closure and implement corrective actions.

• Maintain documentation: runbooks, SOPs, troubleshooting guides, policy standards, onboarding checklists.

• Support audits and compliance: policy reviews, recertification evidence, logging/retention checks. Menlo Web Isolation Maintain allow-list/whitelist for approved URLs/domains based on business justification and security requirements.

• Manage exception lifecycle: approvals, expiry dates, periodic review/cleanup, and recertification evidence.

• Ensure isolation policies align with ZIA policies and do not create conflicting user experience (e.g., bypass vs isolate logic) Site not loading in isolation, rendering issues, broken web apps, file download/upload restrictions, clipboard/printing controls (as applicable)

Any other ad-hoc duties as assigned by supervisor.

Requirements:
Degree in IT or related discipline

Good to have:

• Strong working knowledge of ZIA (SSL inspection, URL filtering, CASB/app control, sandbox, forwarding methods).

• Strong working knowledge of ZPA (connectors, app segments, access policies, posture, authentication flows).

•Troubleshooting across endpoint + network + identity (DNS, TLS cert chains, proxy behavior, SAML/SSO, routing).

•ITSM/change management discipline (ServiceNow/JIRA), documentation habits. Strong knowledge about Zero Trust concepts

•Nice-to-have: SIEM integration, DLP, basic scripting (PowerShell/Python) forops automation.

Interested applicants, please email your resume to Karin Chan Wei Kien

Email: karinchan@recruitexpress.com.sg

CEI Reg No: R1104584

Recruit Express Pte Ltd

UEN: 199601303W

EA Licence No: 99C4599