Total 3,270 Legal / Public / Security job vacancies

Lead Technical Manager

• Working Days & Hours: Monday to Friday, 8.30am to 6pm. Willing to commit for work outside working hours, if required.
• Location: Tiong Bahru, Commonwealth, Redhill Office at Outram Road
• Salary Range: basic up to $7000; transport $750 (car) or $400 (motorbike) or by reimbursement basis; HP by reimbursement basis

Job Summary:

• The Lead Technical Manager will be responsible for managing a group of Technical Officer for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Job Responsibilities:

• Oversee the whole process of service cum maintenance workflow.
• Front line contact with client representatives on all service/maintenance related issues.
• Lead a team of service team members.
• Prepare service scope and develop service plans, define resource loading, skill requirements, tracking milestones and metrics.
• Determine new, creative ways to employ teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results
• Continually seek and capitalize upon opportunities to increase customer satisfaction and deepen client relationships.
• Possess a knowledge base of each client's business, organization and objectives.
• Be responsible for operationally managing multiple aspects of the team.
• Must be a team player.
• Ensure smooth progress and timely delivery and completion of maintenance commitments to clients
• Perform a wide variety of technical and non-technical tasks.
• Enhance current documentation of all infrastructure components and operation processes.
• Track and identify the new opportunities to improve our methodology and training offerings.
• Build technical relationship with prospects or existing/new customers.
• Sets targets, implements guidelines, and assists with any issues the team member may have.
• Communicates effectively with clients to identify needs and evaluate alternative technical solutions and strategies.
• Handle customer complains.
• Participate in all programs and enforces all policies relating to performance evaluations and career development planning.
• All other duties as assigned by management.

Job Requirements:

• Minimum 6 years related experience
• Diploma or Degree in Electrical / Mechanical Engineering/Computer Science or its equivalents
• Experience in the Security and CCTV industry and exposure to products and operations will be an added advantage

Cheong Yeat Long | R25145358

The Supreme HR Advisory Pte Ltd | EA 14C7279

Company Overview

RAITO KOGYO CO., LTD SINGAPORE BRANCH specializes in underground soil stabilization and grouting works, delivering expert construction solutions in Singapore.

Job Summary

Manage comprehensive quantity surveying tasks to support construction projects, ensuring accurate cost control, procurement, and contract administration aligned with project requirements.

Responsibilities

• Prepare bills of quantities to enable accurate project budgeting and cost estimation.
• Measure construction quantities using drawings, site measurements, and project specifications to ensure precise cost tracking.
• Apply construction and engineering principles to assess project requirements and support quantity surveying activities.
• Analyze project costs to evaluate financial performance and manage budgets effectively throughout project lifecycles.
• Manage interim payments and claims by coordinating with clients, suppliers, and subcontractors to ensure timely and accurate financial transactions.
• Collaborate with site teams to administer contracts, including managing main contracts, subcontract agreements, interim payments, and final accounts.
• Perform any other duties and responsibilities as assigned
• Assist in construction engineering and site coordination
• Monitor project progress and ensure work is carried out according to specifications
• Coordinate with contractors, supervisors, and project teams

Requirements

• Degree in Quantity Surveying, Civil Engineering.
• Minimum 3 years of relevant quantity surveying experience with site-based exposure.
• Strong interpersonal, communication, and negotiation skills to effectively manage stakeholders.

Job Tasks and Responsibilities

Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure

Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms

Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks

Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities

Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management

Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption

Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities

Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes

Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure

Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards

Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle

Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency

Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs

Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation

Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage

Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage

Experience in agile development environment will be an added advantage

Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage

Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage

Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage

Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage

Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage

Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage

Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage

Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage

Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage

Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage

Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage

Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

Job Responsibilities:

1.         Collaborate with regional teams to establish and improve legal processes to support ongoing activities.

2.         Support legal and related documentation standardization and consistency across the region.

3.         Develop and implement structured legal risk assessment and escalation procedures across the region.

4.         Compile, review, and assess contractual and legal risks across the region and follow-up.

5.         Inter-departmental and regional collaboration to achieve coordinated and efficient outcomes on matters of common interest.

6.         Support drafting, preparation, and review of legal agreements, templates, and documents.

7.         Legal support, advise, and guidance.

8.         Monitoring of regional legal and regulatory changes.

9.         Conduct related training and awareness sessions.

10.      Provide legal advice to senior management and business units.

11.      Draft, review, and negotiate commercial agreements, ensuring that contracts align with business objectives while minimizing legal and commercial risks.

12.      Develop and maintain legal documents and contract templates.

13.      Identify, assess, and mitigate legal, regulatory, and operational risks.

14.      Handle dispute matters or matters under review or investigation.

15.      Instruct and manage external counsels as may be required.

16.      Support M&A activities.

17.      Ensuring compliance with local laws and regulations and local and group policies.

18.      Assist and collaborate with Internal Audit, Finance, and other teams on projects requiring legal input.

19.      Other tasks related to the roles maybe assigned from time to time.

Requirements:

• Degree in Law

• Experience in legal review, contract vetting, and providing legal advisory support.

• Organized and detailed.
  

HOW TO APPLY:

Interested applicants, please click on “Apply Now” or submit your resume to ref71@trustrecruit.com.sg

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Lee Jia Xiang

EA Personnel Reg No: R25158171

[Job ID: 1600983]

Responsibilities

• Deliver professional services, including deployment, implementation, and upgrades of cybersecurity products distributed by Netpoleon. This may occasionally involve customer coordination and project timeline management.
• Provide practical and effective technical solutions or alternatives based on customer requirements.
• Conduct product training for customers, partners, and internal teams.
• Perform installation, configuration, and basic troubleshooting independently using product documentation.
• Continuously upskill and obtain relevant technical certifications for assigned technologies.
• Develop into a subject matter expert over time and support knowledge transfer to internal teams for enhanced customer support.
• Provide technical support to sales and support teams, including product clarification, solution design input, tender compliance, and ad-hoc technical assistance.
• Perform any other duties as assigned.

Requirements

• 2 years of experience in IT, Information Security, or Cybersecurity preferred
• Strong knowledge of cybersecurity and IT infrastructure, including:
  Firewalls, VPN, DLP, IDS/IPS, Web Proxy, DNS, Email Security, SIEM, log management, virtualization, containers, cloud platforms (AWS, Azure, Google Cloud), DevOps/DevSecOps, IAM, PAM, endpoint security, CyberArk Conjur.
• Solid troubleshooting skills in networking and systems, including:
  TCP/IP, routing, NAT, VLAN, multicast, OSPF, BGP, Active Directory, LDAP, RADIUS, SNMP, Syslog, SMTP, TLS, SSH.
• Strong interest in cybersecurity trends and attack techniques.
• Relevant certifications are an advantage:
  Cisco CCNA/CCNP, Check Point CCSE/CCSM, CyberArk CDE, CISSP, CREST, OSCP, and other security-related certifications.

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771

We are looking for bright individualswho are energetic, having or showing a strong desire and determination tosucceed, and thrive in a fast-paced tech savvy work environment. We havevarious open positions and are looking for partners and associates who can bepart of our dynamic team of corporate secretarial, HR, admin, customerservices, accounting and taxation professionals.

Job Scope

• Manage and handle portfolio of 70 SME companies
• Perform corporate and secretarial duties (i.e. incorporation, prepare board resolutions and minutes, etc.)
• E-Meet clients and provide general advice on compliance requirements
• Perform other admin or secretarial ad-hoc duties as and when required

Job Requirements

• Good interpersonal and communication skills
• Able to work independently, multi-task and is meticulous
• Fast pace working environment

If you are looking to contribute to meaningful community-focused initiatives while building your administrative and customer service experience, we welcome your application!

We are seeking an Application Security Consultant to assess and validate the security posture of applications and supporting infrastructure. The role focuses on reviewing security testing activities, identifying vulnerabilities, and ensuring compliance with internal security standards and regulatory requirements.

Key Responsibilities

• Review and validate results from security testing tools such as SAST and DAST
• Perform vulnerability assessments across applications, systems, and databases
• Analyse security scan outputs and validate findings, including identifying false positives
• Assess system hardening and configuration compliance with security standards
• Collaborate with development, infrastructure, and DevOps teams to support remediation efforts
• Maintain documentation on vulnerabilities, risk assessments, and remediation tracking
• Support internal and external audits related to application and infrastructure security
• Prepare reports summarising findings, risk ratings, and recommended actions
• Monitor emerging threats and security best practices

Requirements

• Degree in Computer Science, Cybersecurity, or a related field
• Minimum 4 years of experience in cybersecurity, application security, or security auditing
• Hands-on experience with security tools such as Burp Suite, OWASP ZAP, or similar
• Understanding of vulnerability management and security testing concepts
• Familiarity with cloud platforms (e.g., AWS, Azure, or GCP) is advantageous
• Knowledge of security frameworks such as ISO 27001 or similar is preferred

Key Skills

• Strong analytical and problem-solving skills
• Ability to interpret security findings and priorities remediation
• Good communication and stakeholder management skills
• Ability to work independently and collaboratively in a team

Interested applicants please send your resume in MS Words format toprasant.sirohi@ambition.com.sg and attention to Prasant Sirohi (R22106307)

Shortlisted candidates will be notified

www.ambition.com.sg

EA Registration Number: R22106307

Dataprovided is for recruitment purposes only

Business Registration Number: 200611680D. License Number: 10C5117

Key Responsibilities

Client Service and Engagement Management

·       Lead and manage a portfolio of audit and assurance engagements across a diverse client base.

·       Act as the Engagement Partner and sign audit reports in accordance with applicable professional standards and regulatory requirements.

·       Ensure audits are planned, executed, and completed in compliance with Singapore Standards on Auditing, Singapore Financial Reporting Standards, and ACRA requirements.

·       Provide technical guidance and practical solutions to clients on accounting, auditing, and financial reporting matters.

·       Build and maintain strong relationships with clients, acting as a trusted business advisor.

Quality and Risk Management

·       Uphold the firm’s commitment to audit quality and professional excellence.

·       Ensure compliance with the firm’s System of Quality Management (SQM), ACRA regulations, and applicable professional standards.

·       Review engagement risks and implement appropriate safeguards to manage audit and business risks.

·       Drive continuous improvement of audit methodologies, processes, and quality control procedures.

Leadership and People Development

·       Lead, mentor, and develop audit managers and professional staff.

·       Foster a culture of technical excellence, accountability, and continuous learning.

·       Provide coaching and training to enhance the technical and professional competencies of team members.

·       Participate in recruitment, performance management, and succession planning initiatives.

Requirements

·       Chartered Accountant of Singapore (CA Singapore) or equivalent recognised professional qualification.

·       Registered Public Accountant with ACRA, or eligible to be registered as a Public Accountant under ACRA’s requirements.

·       Possess a valid practising certificate or be eligible to obtain one.

·       Minimum 10 years of external audit experience, with substantial experience managing audit engagements and client relationships.

·       Experience serving clients in the construction sector and not-for-profit organisations will be an advantage.

·       Strong technical knowledge of Singapore Financial Reporting Standards (SFRS), Singapore Standards on Auditing(SSA), and regulatory requirements.

·       Proven leadership capabilities with experience managing and developing professional teams.

·       Strong business acumen, commercial awareness, and client relationship management skills.

·       Excellent communication, interpersonal, and stakeholder management abilities.

·       Entrepreneurial mindset with an interest in contributing to the growth and development of the firm.

Partnership Opportunity

This position offers the opportunity to be part of the firm’s leadership team and play a key role in shaping its future direction. Depending on the candidate’s experience, capabilities, and contribution to the firm, there may be an opportunity to participate in the ownership and long-term growth of the practice.

What We Offer

·       Opportunity to lead and sign audit engagements across a diverse client portfolio.

·       Collaborative and professional working environment.

·       Platform to contribute to strategic decision-making and business growth.

·       Potential pathway to equity participation for the right candidate.

·       Competitive remuneration package commensurate with experience and contribution.

As a Networking Managed Services Engineer (L2) at NTT DATA, you'll take on a developing engineering role where your main goal is to ensure our clients' IT infrastructure and systems remain operational. You'll achieve this by proactively monitoring, identifying, investigating, and resolving technical incidents and problems. You'll work closely with our clients and internal teams to ensure that services are restored swiftly, in line with our service level agreements (SLAs).

Your day will revolve around reviewing client requests and tickets, applying your technical expertise to resolve them efficiently and effectively. You'll be the go-to person for second-line support, handling incidents and requests of medium complexity. In addition to your daily tasks, you'll have opportunities to contribute to exciting project work from time to time.

You'll proactively monitor work queues, execute operational tasks, and update tickets with the actions you've taken. Identifying, analysing, and logging issues before they escalate will be a key part of your role. You'll communicate with other teams and clients to provide support and ensure that changes are executed with clear risk identification and mitigation plans.

As part of the shift handover process, you'll highlight key tickets and upcoming critical tasks for the next shift. When needed, you'll escalate tickets to ensure the right focus from our Centres of Excellence (CoE) and other teams. Collaborating with our automation teams, you'll work on optimizing efforts and automating routine tasks, all while coaching our Service desk and L1 teams in both technical and behavioural skills.

You'll also establish monitoring for client infrastructure, leading and managing initial client escalations for operational issues. Contributing to the change management process, you'll log change requests, execute approved maintenance activities, and audit incident and request tickets for quality. Your insights will drive trend analysis reports, identifying tasks suitable for automation to reduce tickets and optimize efforts. You might also support disaster recovery functions and other related tasks as needed.

To thrive in this role, you need to have:

• Proficiency in technologies such as Pulse Secure SSL VPN, Palo Alto, Fortinet, Cisco Nexus switches/routers/firewalls, and more familiarity with ticketing tools.

• At least one technical certification in the above-mentioned technologies.

• Strong planning skills, with the ability to anticipate and adapt to changing circumstances.

• Adaptability and resilience in a dynamic work environment.

• Ability to communicate and work effectively across different cultures and social groups.

• Proficiency in active listening and client-centric communication.

• A positive outlook and the ability to work well under pressure.

• A client-first attitude, always seeking to create positive client experiences.

• A bachelor's degree or equivalent qualification in IT/Computing, or equivalent work experience.

· Prepare detailed design reports, calculations and drawings.

· Prepare submissions to statutory agencies/ authorities.

· Participate in the coordination with other disciplines in preparation of design deliveries.

· Participate in preparing tender documentations.

· Participate in the successful delivery of projects.

· Perform any other duties as assigned.

Requirements:

· Degree in Civil or Structural Engineering from a recognized University and eligible for registration with the Professional Engineers Board (Singapore).

· Conversant with local codes and authority submission procedures.

· Excellent interpersonal, good written and verbal communication skills.

· Have good knowledge of common engineering design software.

· Working experience in engineering design consulting practice on building, geotechnical, infrastructure, rail or road projects (underground/basement/elevated structures, tunnel structures and MRT station structures).

· Strong analytical skills.

· Able to work under pressure with good time management skill.

Civil:

· Familiar in the design of major civil infrastructure projects such as roads, drains, sewers, utilities, road and rail alignments.

If you wish to have the opportunity to work in an international consultancy firm that offers attractive remuneration, a 5-day work week and a conducive environment to enhance your skills and experience, please send your full resume, including your salary expectations and contact number to

2 International Business Park, #06-08
The Strategy, Tower 1, Singapore 609930

Email: HR@sg.tylin.com
(Only shortlisted candidates will be notified)

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

• 1-year contract, renewable
• Hybrid work arrangement
• Government project

Key Responsibilities

• Perform threat modelling and establish threat profiles to identify, assess, and remediate application security risks.

• Review application architectures, APIs, and cloud environments to ensure compliance with security best practices.

• Conduct security testing using SAST tools such as Fortify-on-Demand, SonarQube, and similar solutions.

• Track, manage, and remediate security vulnerabilities through timely patching and mitigation activities.

• Work closely with development, DevOps, and infrastructure teams to integrate security controls into CI/CD pipelines.

• Conduct security awareness training and provide security advisory support to project teams.

• Ensure adherence to security standards and frameworks such as OWASP Top 10 and OWASP ASVS.

Requirements

• Minimum 4 years of experience in software development, application security, and/or cloud computing (AWS preferred).

• Strong understanding of web and mobile application security, API security, and related technologies (REST, SOAP, SSL/TLS).

• Experience in threat modelling and application security risk assessment.

• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.

• Hands-on experience with security scanning tools such as Fortify-on-Demand, SonarQube, or equivalent.

• Good knowledge of security best practices and secure software development lifecycle (SSDLC).

• Strong analytical, troubleshooting, communication, and stakeholder management skills.

• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Relevant certifications such as CISSP, OSCP, AWS Security Specialty, AWS DevOps Engineer, or equivalent.

• Experience working in Government environments.

• Experience with Government Commercial Cloud (GCC) environments.

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred