Total 42 process development engineer job vacancies in Legal / Public / Security category in Islandwide

We are seeking a skilled Cybersecurity Engineer to safeguard our organization's digital assets through effective security measures and proactive risk management. This role emphasizes leadership in incident response, vulnerability assessments, and the establishment of comprehensive security practices.

Responsibilities:

• Lead the execution of security awareness training initiatives, including sessions, phishing simulations, and assessments to foster a culture of security compliance.

• Conduct thorough IT security risk assessments to identify vulnerabilities and drive remediation efforts across the organization.

• Oversee vulnerability assessments, penetration testing, and security audits, coordinating with internal teams and external vendors for effective tracking of findings.

• Develop and maintain security frameworks, policies, and guidelines in line with regulatory and governance requirements.

• Monitor security systems to detect unauthorized access and respond appropriately to threats.

• Direct incident response efforts, including investigation, root-cause analysis, and documentation for audit readiness.

• Research emerging security threats and propose effective mitigation strategies.

• Provide technical security advice to teams involved in infrastructure, applications, and business processes.

• Support governance and compliance assessments through meticulous maintenance of security documentation and risk metrics.

• Manage IT security audit processes, ensuring timely handling of documentation and addressing auditors' queries.

Requirements:

• A recognized degree in Cybersecurity, Computer Science, IT, or a related field.

• A minimum of 3 years of experience in an IT security role.

• Strong understanding of security frameworks (e.g. ISO/IEC 27001, NIST Cybersecurity Framework), risk management methodologies, and awareness of the top 10 OWASP vulnerabilities.

• Preferred certifications: CRISC, CISM, and/or CISSP.

• Comprehensive hands-on experience with cybersecurity technologies including EDR and NDR solutions, firewalls, vulnerability scanning tools (e.g. Nessus), email security, DLP, Microsoft Purview, IPS, web security controls, and secure network protocols.

• Excellent collaboration skills, enabling effective teamwork across technical teams and stakeholders.

Interested candidate who wish to apply for the advertised position, please click “Apply”. We regret that only shortlisted candidates will be notified 

EA License No.: 01C4394 (PERSOL Singapore Pte Ltd) 

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy. 

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Security Operations Engineer

Location: Singapore, CBD
Employment Type: 12 months (renewable Contract)

Key Responsibilities:

• Administer and support security platforms, with a strong focus on CyberArk and Tenable.
• Perform day-to-day BAU activities including troubleshooting, patching, monitoring, and incident resolution.
• Manage privileged access management (PAM) solutions and ensure platform stability and security.
• Support security operations processes, ticket management, and vendor engagements.

Requirements:

• Hands-on experience as a CyberArk Administrator (not just an end user).
• Strong experience supporting CyberArk environments, including troubleshooting and maintenance.
• Experience with vulnerability management tools such as Tenable.
• CyberArk CDE (Certified Delivery Engineer) certification is mandatory.
• Good understanding of security operations, privileged access management, and cybersecurity best practices.

Preferred Skills:

• CyberArk plugin development and automation experience.
• Policy review and optimization expertise.
• Experience in CyberArk migration or upgrade projects.
• Scripting and process automation skills.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Cloud Security & DevSecOps Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

If you are a cheerful, self-initiated, holds strong integrity values and who likes to meet new people and are able to contribute by fulfilling clients’ needs, join us!

Job Description:

• To manage and ensure that the systems, servers and infrastructure is installed in accordance to the prescribed design document and/or requirements
• Understanding the scope of works and the needs of the clients and implement the appropriate output to the best of your ability or to the requirements
• To design the network architecture and configure in accordance to the requirements
• Configure, Test and Hand over the required systems and provide Training to client
• Ensure the highest standard of system and infrastructure availability
• To liaise with various parties such as system manufacturers or cybersecurity vendors to resolve issues and problems
• Attend new product trainings

Requirements:

• Applicants need to be able to work overtime/Night Shift.
• Required Skill(s): Communication skills, Analytical skills, Decision making, Organizational skills, Attention to details, Patience and Knowledge of Systems engineering software tools
• Min 3 years of relevant hands-on experiences
• Familiar with Security Systems such as ISMS, CCTV, ACS and VA systems will be advantageous
• Familiar with Networking systems (eg. Routing, VLAN, VPN, Wireless AP) will be advantageous
• Familiar with IT Security (eg. firewall, IPSEC, SSL, hardening) will be advantageous
• Able to work independently with minimum guidance, monitoring and a good team player
• Valid Class 3 driving license has an added advantage

Other Information:

• Location: Kaki Bukit or as needed
• Working hours: 9am to 6pm
• Salary (commensurate with experience): Basic Salary + Variable Bonus

Resumes please INCLUDE:

• Personal particulars
• Education background
• Work experiences in point forms
• All reasons for leaving
• Current and expected salary
• Date of availability / Notice Period

Interested applicants are invited to send your updated resume in MS Word format via Apply Now. We regret that only shortlisted applicants will be notified.

Job Summary:

The Application Security Consultants is responsible for auditing and validating the security posture of applications and their supporting infrastructure. This role focuses on reviewing security activities performed by development teams, including static and dynamic code analysis, infrastructure scans, and hardening practices. The analyst ensures that applications meet internal security standards and comply with regulatory requirements.

Key Responsibilities:

·      Review and validate results from SAST (Static Application Security Testing) and DAST( Dynamic Application Security Testing) tools.

·      Audit OS, container, and database scans for vulnerabilities and misconfigurations looking at reports a

·      Assess the effectiveness of hardening measures across application components (e.g., webservers, APIs, containers, databases).

·      Collaborate with application development and DevSecOps teams to ensure remediation of identified issues.

·      Maintain audit documentation, including findings, remediation tracking, and compliance status.

·      Evaluate adherence to secure coding practices and application security policies.

·      Support internal security audits related to application & underlying infrastructure security.

·      Stay updated on emerging threats, vulnerabilities, and secure development trends.

Required Qualifications:

·      Bachelor’s degree in computer science, Cybersecurity, or related field.

·      4+ years of experience in application security, security auditing, or secure software development.

·      Hands-on experience on one or more tools like SonarQube, Fortify SAST/DAST, Burp Suite,OWASP ZAP etc.

·      Strong understanding of OWASP Top 10, secure coding principles, and CI/CD pipelines.

·      Familiarity with container technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).

Certifications:

·      CRESTCertified Pen Tester

·      CISSP or CCSP 

·      Preferred Certified AWS DevSecOps Professional or equivalent

Key Competencies:

·      Analytical mindset with attention to detail

·      Ability to interpret scan results and prioritize remediation

·      Strong communication and collaboration skills

·      Knowledge of regulatory frameworks (e.g., ISO 27001, PCI-DSS, GDPR)

·      Experience working in Agile and DevOps environments'

Interested applicants please send your resume in MS Wordsformat to pooja.yadav@ambition.com.sg andattention to Pooja (R1551322)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1551322

Data provided is for recruitment purposes only

Business Registration Number: 200611680D.

License Number: 10C5117

Employment Type: Contract (1 year renewable, with potential for conversion)

Working Hours: Monday toThursday (8.30am – 6.00pm), Friday (8.30am – 5.30pm) (Hybrid WorkingArrangement)

Location: One North

Salary: Up to SGD 5,300

We are looking for an experienced IT Systems Governance & Project Management professional who can oversee enterprise systems from both an operational and governance perspective. The ideal candidate should have strong experience in IT governance, risk management, audit compliance, and system lifecycle management, while also being capable of coordinating system enhancements, security assessments, and change initiatives across multiple stakeholders.

Responsibilities:

• Conduct system criticality and risk assessments for enterprise systems.
• Manage system governance, compliance, and audit readiness activities.
• Coordinate system changes, enhancements, and remediation efforts.
• Track and manage security risks, vulnerabilities, and remediation actions.
• Support disaster recovery and cyber incident recovery planning.
• Perform access reviews and ensure timely user deprovisioning.
• Manage certificates, API keys, and system integration credentials.
• Maintain accurate system documentation and governance records.
• Collaborate with system owners, vendors, and internal stakeholders to drive system improvements.
• Provide regular reporting on system risks, issues, changes, and compliance status.

Requirements:

• Degree/Diploma in IT, Computer Science, Information Systems, or related field.
• At least 5 years of experience in IT governance, systems support, project management, or security-related roles.
• Strong understanding of IT governance, risk management, compliance, and audit processes.
• Experience managing system changes, vendors, and stakeholder engagements.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Endpoint Security Engineer – Singapore (SingaporeansOnly)

We are hiring an experienced and hands-on Endpoint SecurityEngineer to manage, operate, and enhance enterprise endpoint protectioncapabilities across our organization. The ideal candidate will have strongexperience in endpoint security operations, incident management, and enterprisesecurity tools such as Symantec Endpoint Protection Manager (SEPM) and/orMicrosoft Defender.

This role requires close collaboration with IToperations, security teams, and end users to ensure enterprise endpoints remainsecure against evolving cyber threats.

Key Responsibilities

Endpoint Protection & Security Operations

• Administer, maintain, and support Symantec Endpoint Protection Manager (SEPM), Microsoft Defender, or equivalent endpoint security platforms
• Deploy, configure, and manage endpoint protection policies including:
• Anti-malware
• Intrusion Prevention Systems (IPS)
• Firewall policies
• Device control
• Monitor endpoint security alerts and investigate incidents
• Perform root cause analysis and remediation activities
• Generate regular security posture and compliance reports
• Manage the complete lifecycle of endpoint security agents
• Execute upgrades, patching, and rollout activities during maintenance windows

User Support & Incident Management

• Provide Level 2 / Level 3 support for endpoint security-related incidents and requests
• Troubleshoot endpoint protection issues across Windows and/or Linux environments
• Work closely with internal IT and security teams to resolve operational issues efficiently

IT Service Management

• Follow ITIL processes for Incident, Problem, and Change Management
• Maintain accurate ticket documentation and resolution records
• Ensure SLA compliance and timely issue resolution

Required Skills & Qualifications

• Singaporeans only
• Degree in Computer Science, Information Technology, Cyber Security, or related discipline
• 4–6 years of relevant experience in endpoint security operations
• Minimum 1 year of hands-on experience with SEPM and/or Microsoft Defender
• Experience with HIPS/HIDS technologies
• Strong knowledge of Windows and/or Linux (RedHat) administration
• Ability to manage multiple priorities in a fast-paced environment
• Strong communication and interpersonal skills

Preferred Skills

• Knowledge of Microsoft Defender ecosystem
• Experience with scripting and automation using:
• Powershell
• Python

Job Title: Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer

Employment Period: August/September 2026 to March 2027, with possible yearly renewal
Location: 1 Fusionopolis Way
Working Hours: Monday to Friday, 8:30am to 6:00pm
Engagement Type: Contract / Renewable Term

Role Overview
We are seeking a Microsoft Purview DLP Security Analyst / M365 DLP Support Engineer to support Data Loss Prevention alert monitoring, incident handling, investigation, reporting, user support, and policy improvement activities.

The successful candidate will work closely with security operations, service desk, data owners, business users, compliance teams, and Microsoft Purview SMEs to ensure DLP alerts are properly monitored, investigated, classified, documented, escalated, and improved through continuous policy tuning.

Key Responsibilities

DLP Alert Monitoring & Incident Handling
Monitor DLP alerts from Microsoft Purview DLP Dashboard, Microsoft Defender XDR, email notifications, service desk tickets, and related alerting channels.

Log, track, triage, and classify DLP alerts, including initial investigation of true positives and false positives.

Perform first-level analysis and escalate high-risk or complex incidents to L2 security operations, L3 Purview SMEs, architects, compliance, legal, or other relevant stakeholders where required.

Investigation & Analysis
Perform detailed analysis of DLP incidents to identify root causes, including user behaviour, policy gaps, data misclassification, or process issues.

Validate and document false positives clearly to support policy improvement and operational reporting.

Support forensic analysis and evidence gathering for high-risk DLP incidents where required.

Escalation & Stakeholder Coordination
Coordinate with SOC teams, service desk, business units, data owners, compliance, legal, and IT stakeholders to ensure DLP incidents are handled appropriately and within expected timelines.

Communicate DLP-related issues clearly to both technical and non-technical users.

Policy Tuning & Change Management
Work with L3 SMEs and architects to recommend improvements to DLP policies based on repeated alerts, user feedback, threat trends, false positive patterns, and post-incident findings.

Support DLP change management activities arising from new regulatory requirements, new workloads such as Teams, Copilot or SaaS applications, and post-incident improvements.

Provide practical recommendations to improve DLP policy effectiveness and reduce unnecessary business disruption.

User Support & Awareness
Respond to user-reported DLP issues, including blocked activities, policy alerts, and suspected false positives.

Provide guidance to users on compliant data handling and proper use of sensitive information.

Support communication and awareness activities related to DLP policy enforcement.

Monitor and ensure the AI agent is running and responding correctly where applicable.

Reporting & Continuous Improvement
Prepare periodic DLP reports covering alert volumes, top users triggering policies, false positive rates, policy effectiveness trends, recurring issues, and recommended improvements.

Maintain proper documentation of investigations, findings, escalations, and closure actions.

Technical Skills Required
Strong hands-on knowledge of Microsoft Purview DLP is mandatory.

Experience in Microsoft Purview policy configuration, troubleshooting, alert review, and operational support.

Good understanding of DLP across Endpoint, Exchange, SharePoint, Teams, and Microsoft 365 workloads.

Knowledge of Microsoft Defender XDR, Microsoft 365 Compliance Portal, Microsoft Entra, sensitivity labels, data classification, and information protection.

Microsoft Intune experience will be an added advantage.

Operational & SOC Skills
Experience in incident triage, investigation, security alert analysis, ticket handling, true/false positive determination, and basic log analysis.

Experience with ticketing tools such as ServiceNow or similar platforms.

Ability to work with SOC, service desk, compliance, legal, and business stakeholders.

Data Security & Compliance Knowledge
Good understanding of data protection, data classification, data exfiltration risks, insider risk awareness, and DLP control concepts.

Knowledge of Singapore PDPA and data protection practices will be advantageous.

Soft Skills
Strong communication skills with business users and technical stakeholders.

Ability to explain DLP blocks, alerts, and policy enforcement in a professional and user-friendly manner.

Strong analytical thinking, root-cause analysis, documentation, and coordination skills.

Able to work independently while escalating appropriately when needed.

Experience Requirement
3 to 5 years of experience in Microsoft 365, Microsoft Purview, DLP, security operations, end-user support, or L2 support.

Hands-on experience supporting Microsoft Purview DLP in an enterprise environment is strongly preferred.

Preferred Certifications
Microsoft SC-400: Information Protection Administrator
Microsoft SC-200: Security Operations Analyst
Microsoft MS-102: Microsoft 365 Administrator
Microsoft SC-300: Identity and Access Administrator

• MNC Company
• Basic $2500 - $2800 + Incentive + AWS + Variable Bonus
• Excellent Welfare and Benefits + Career progression
• Working location: West
• Working hours: 12 Hours Rotating Shift: 7.30am-7.30pm, 7.30pm-7.30am (16 Shifts a month)

Job Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems
• Attending to customer request on alarm and card access systems
• Conducting patrols at night
• Any others ad hoc duties as assigned

Job Requirements:

• Possess minimum Higher Nitec in Electrical Engineering, Electronic & Computer Engineering, Mechanical Engineering, and other related fields
• Possess at least 1- 2 years of relevant experience
• Possess Class 3 Driving License will be an advantage

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

LIONG ZHAO GUAN (R22107632)

EA Recruitment Pte Ltd

EA License No: 21C0492

Feeling stuck in your career? It’s time for a change.

SICD’s 12-month Place-and-Train program equips you with the skills and confidence to launch a successful career as a Cyber Security Engineer.

Benefit from personalized 1:1 mentorship, a guaranteed SGD 3,000 monthly salary, and industry-recognized certifications — all designed to position you for long-term success.

Visit sicd.sg for more information, and join our upcoming webinar to learn more and ask questions about our career development program.

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

Cloud Security Engineer

Responsibilities:

• Conduct vulnerability tests on Client's Cloud infrastructure and services for potential threats, misconfigurations and weaknesses.
• Strong in Vulnerability management tools like Tenable.
• Implement best practices in Cloud security, Develop and maintain automated scripts for vulnerability scanning and reporting.
• Stay current with the latest security trends, tools, and AWS features to enhance our security posture.
• Address all findings promptly and effectively and document findings for reporting to management.

Requirements:

• Strong in Tenable AWS services such as EC2, S3, RDS, and Lambda.
• Proficient with security vulnerability tools and platforms
• Deep understanding of security principles, practices, and risk management.
• Certifications in AWS or RHEL are advantageous.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : kelvin@starcareerconsulting.com

Kelvin Lee (Reg. No. R1872625)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)