Total 2,936 Legal / Public / Security job vacancies

About the Role

We are seeking an experienced and adaptable Practice Assistant / Legal Secretary to support Partner Indraneil Ghosh and Special Counsel, Esther Yee in our Singapore office. This is an excellent opportunity to join a high-performing, collaborative team within a top tier law firm.

This is a varied role where you will provide high-quality support to eight fee earners across different levels, while contributing to the smooth operation of a close-knit office. You will work alongside a team of three Practice Assistants in a highly collaborative and supportive team environment.

Key responsibilities:

• Proactive and efficient diary and calendar management
• Coordinating travel arrangements and itineraries
• Preparing engagement letters and assisting with minor document processing
• Opening files, assisting with billing and general matter management
• Liaising confidently with internal stakeholders
• Supporting client events
• Participating in a rotating reception roster (1–2 days per week), including meeting coordination, greeting visitors, and managing calls
• Providing team support and holiday cover for other Practice Assistants as required

About You

You are a collaborative, adaptable and positive team player who enjoys working in a dynamic, people-focused environment.

We are looking for:

• Solid experience as a Practice Assistant/Legal Secretary within a law firm environment
• Experience supporting multiple lawyers at varying levels
• Strong organisational skills and a proactive approach to managing competing priorities
• Experience with billing, file opening and matter administration
• A flexible, “can-do” attitude and willingness to step in and support others
• Ability to build strong relationships
• Business Mandarin language skills would be highly regarded

Who are we?

We are Mallesons. The top-tier independent firm with almost 200 years of history in Australia and internationally. Singapore is our Asia hub as we embrace opportunities across the Asia-Pacific region. We combine our top-tier capability in Australia and Singapore with an international network of relationship firms.

Our independence gives us the flexibility to combine our extensive top tier full-service capability with the best advisers in every market. With deep expertise, collective judgment and genuine collaboration, we cut through complexity so our clients can move forward with confidence and make more happen.

Why work with us?

Webuild careers that go everywhere. Mallesons is a special place to work where anything is possible, ambitions are limitless and diversity and inclusion play an important role. It’s a place where you will collaborate with exceptional colleagues and clients, where you will sharpen your edge and support others to do the same, where you will make a difference you can be proud of. You will have access to a suite of wellbeing initiatives, benefits, policies and process that will support you to achieve your career goals.

Together we learn. Together we master. Together we lead.

Next Steps

Please click ‘Apply Now’ to apply online with your cover letter summarising why you’re applying and your resume to support your experience.

If you have any questions or need any further information, please don’t hesitate to reach out to Sophie Larrett at sophie.larrett@mallesons.com.

If you are not a Singaporean Citizen or permanent resident, you must hold all visas and other approvals necessary for you to work for the firm in Singapore.

Diversity and Inclusion

Mallesons is an equal opportunity employer and is committed to diversity and inclusion. We encourage applications from Orang Laut and Malay peoples, and people from diverse backgrounds. We welcome, value, support and harness the positive benefits that people’s different life experiences bring, especially as they relate to gender, sexual identity, culture, faith, disability and life stages. 

If you are unsure if you meet all criteria for this role, but have a passion for delivering high quality work, developing your skills and realising your full potential, then we encourage you to apply and have a further conversation about how you could fit at Mallesons.

We have a range of inclusive hiring practices – if you would like to seek workplace adjustments to complete your application please contact the Recruitment contact for this role or email careers@mallesons.com.

Job description

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

With your technical expertise you will manage project priorities, deadlines, and deliverables. You will design, develop, test, deploy, maintain, and enhance software solutions.

Additional job description

As a Senior Software Engineer for the Singapore Cloud and Third Party Security team, you will be a key technical driver for our growing software engineering team. You will leverage your software development expertise to own the design and delivery of scalable, high-quality systems and products that identify and remediate security risks across Alphabet's public cloud and third-party footprint. You will work with a high degree of autonomy, collaborate closely with cross-functional stakeholders, and mentor junior engineers to help build a strong engineering culture at our Singapore site.

Qualifications

Job responsibilities

• Design, implement, and deploy critical software components and products autonomously to identify, measure, and remediate security gaps in Alphabet's public cloud and third-party vendor usage.
• Own and drive engineering milestones for specific projects within the Cloud and Third Party Security domain, ensuring high code quality, scalability, and security.
• Partner cross-functionally with Security Engineers, Technical Solutions Consultants, and partner teams to define requirements, design systems, and implement scalable security controls.
• Mentor junior software engineers in the team, fostering a culture of technical excellence, high code quality, and continuous learning.
• Identify technical debt and implement refactoring efforts to improve the overall maintainability, reliability, and complexity of engineering efforts within the team.
  

Minimum qualifications

• Bachelor’s degree or equivalent practical experience.
• 5 years of experience with software development in one or more programming languages.
• 3 years of experience building software for data privacy or security (e.g., identity and access management).
• 3 years of experience testing, maintaining, or launching software products.
• 1 year of experience with software design and architecture.

Preferred qualifications

• Master's degree or PhD in Computer Science or a related technical field.
• Strong proficiency in Go or Python, with a proven track record of designing and evolving distributed systems that handle global-scale data with high availability and security.
• Track record of technical leadership, including mentoring junior engineers and driving technical alignment for small-to-medium sized projects.
• Strong background in relevant security domains, particularly in cloud infrastructure and third party security controls.
• Ability to navigate ambiguity and translate complex product/security requirements into robust technical designs.

Bayfront Law LLC is seeking a meticulous and organised Administrative Executive to support our client onboarding and Know-Your-Client (KYC) compliance team. Key responsibilities will include conducting client due diligence and KYC checks, reviewing identification documents, corporate records and ownership information and liaising with clients to obtain the necessary information, assisting with preparation of onboarding materials (such as letters of engagement), monitoring and following up on ongoing KYC requirements, and supporting ongoing compliance and administrative functions as required. You will gain good exposure to compliance requirements in a supportive working environment.

Candidates must meet the following requirements:

• Diploma, degree or equivalent qualification

• Strong attention to detail

• Responsible 

• Proficient in Microsoft Office applications and open to learning new applications

• Good organisational and communication skills

• Teamplayer

Applicants are to send their detailed resume by email to enquiries@bayfrontlaw.sg. Please state relevant working experience, and current and expected salary.

We seek your understanding that only shortlisted candidates will be contacted.

Company Overview

The client provides civil and structural consultancy, project management, and engineering solutions integrating technology to support infrastructure and building projects.

Job Summary

The Project Engineer supports project delivery by managing site and office operations, conducting inspections, resolving technical issues, and ensuring projects meet quality, time, cost, and safety standards.

Responsibilities

• Manage daily site and office project operations, including inspections, handovers, and site measurements to ensure project progress and compliance
• Conduct independent inspections of civil and structural works such as infrastructures, roads, and buildings to identify defects and define repair scopes
• Supervise repair works performed by contractors and ground agencies, maintaining accurate records of activities
• Coordinate and monitor work progress through regular site inspections and participation in site and design meetings
• Prepare detailed inspection reports using provided templates and submit reports and project documentation within target deadlines
• Ensure all projects comply with relevant authority standards and implement safe work procedures on site
• Manage projects to achieve time, cost, and quality objectives by effective planning and coordination
• Address and resolve technical and engineering issues arising during project execution
• Collaborate effectively within project teams, demonstrating leadership, planning, decision-making, and interpersonal communication skills
• Perform other ad-hoc duties as assigned to support company operations

Required competencies and certifications

• Degree/Diploma in Civil & Structural Engineering recognized by the Professional Engineers Board (PEB)
• Minimum 2 year of relevant work experience

Preferred competencies and qualifications

• Proficiency in Microsoft Office applications
• Positive, responsible, and self-motivated attitude
• Ability to work collaboratively in a team environment
• RE/RTO Certificate will be a plus

Lead Technical Manager

• Working Days & Hours: Monday to Friday, 8.30am to 6pm. Willing to commit for work outside working hours, if required.
• Location: Tiong Bahru, Commonwealth, Redhill Office at Outram Road
• Salary Range: basic up to $7000; transport $750 (car) or $400 (motorbike) or by reimbursement basis; HP by reimbursement basis

Job Summary:

• The Lead Technical Manager will be responsible for managing a group of Technical Officer for security equipment installation, testing, commissioning and system programming in accordance to required standards.

Job Responsibilities:

• Oversee the whole process of service cum maintenance workflow.
• Front line contact with client representatives on all service/maintenance related issues.
• Lead a team of service team members.
• Prepare service scope and develop service plans, define resource loading, skill requirements, tracking milestones and metrics.
• Determine new, creative ways to employ teams on service deliveries and distribute responsibilities.
• Manage day-to-day client interactions and expectations for optimal results
• Continually seek and capitalize upon opportunities to increase customer satisfaction and deepen client relationships.
• Possess a knowledge base of each client's business, organization and objectives.
• Be responsible for operationally managing multiple aspects of the team.
• Must be a team player.
• Ensure smooth progress and timely delivery and completion of maintenance commitments to clients
• Perform a wide variety of technical and non-technical tasks.
• Enhance current documentation of all infrastructure components and operation processes.
• Track and identify the new opportunities to improve our methodology and training offerings.
• Build technical relationship with prospects or existing/new customers.
• Sets targets, implements guidelines, and assists with any issues the team member may have.
• Communicates effectively with clients to identify needs and evaluate alternative technical solutions and strategies.
• Handle customer complains.
• Participate in all programs and enforces all policies relating to performance evaluations and career development planning.
• All other duties as assigned by management.

Job Requirements:

• Minimum 6 years related experience
• Diploma or Degree in Electrical / Mechanical Engineering/Computer Science or its equivalents
• Experience in the Security and CCTV industry and exposure to products and operations will be an added advantage

Cheong Yeat Long | R25145358

The Supreme HR Advisory Pte Ltd | EA 14C7279

Company Overview

RAITO KOGYO CO., LTD SINGAPORE BRANCH specializes in underground soil stabilization and grouting works, delivering expert construction solutions in Singapore.

Job Summary

Manage comprehensive quantity surveying tasks to support construction projects, ensuring accurate cost control, procurement, and contract administration aligned with project requirements.

Responsibilities

• Prepare bills of quantities to enable accurate project budgeting and cost estimation.
• Measure construction quantities using drawings, site measurements, and project specifications to ensure precise cost tracking.
• Apply construction and engineering principles to assess project requirements and support quantity surveying activities.
• Analyze project costs to evaluate financial performance and manage budgets effectively throughout project lifecycles.
• Manage interim payments and claims by coordinating with clients, suppliers, and subcontractors to ensure timely and accurate financial transactions.
• Collaborate with site teams to administer contracts, including managing main contracts, subcontract agreements, interim payments, and final accounts.
• Perform any other duties and responsibilities as assigned
• Assist in construction engineering and site coordination
• Monitor project progress and ensure work is carried out according to specifications
• Coordinate with contractors, supervisors, and project teams

Requirements

• Degree in Quantity Surveying, Civil Engineering.
• Minimum 3 years of relevant quantity surveying experience with site-based exposure.
• Strong interpersonal, communication, and negotiation skills to effectively manage stakeholders.

Job Tasks and Responsibilities

Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure

Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms

Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks

Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities

Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management

Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption

Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities

Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes

Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure

Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards

Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle

Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency

Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs

Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation

Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage

Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage

Experience in agile development environment will be an added advantage

Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage

Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage

Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage

Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage

Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage

Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage

Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage

Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage

Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage

Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage

Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage

Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

Job Responsibilities:

1.         Collaborate with regional teams to establish and improve legal processes to support ongoing activities.

2.         Support legal and related documentation standardization and consistency across the region.

3.         Develop and implement structured legal risk assessment and escalation procedures across the region.

4.         Compile, review, and assess contractual and legal risks across the region and follow-up.

5.         Inter-departmental and regional collaboration to achieve coordinated and efficient outcomes on matters of common interest.

6.         Support drafting, preparation, and review of legal agreements, templates, and documents.

7.         Legal support, advise, and guidance.

8.         Monitoring of regional legal and regulatory changes.

9.         Conduct related training and awareness sessions.

10.      Provide legal advice to senior management and business units.

11.      Draft, review, and negotiate commercial agreements, ensuring that contracts align with business objectives while minimizing legal and commercial risks.

12.      Develop and maintain legal documents and contract templates.

13.      Identify, assess, and mitigate legal, regulatory, and operational risks.

14.      Handle dispute matters or matters under review or investigation.

15.      Instruct and manage external counsels as may be required.

16.      Support M&A activities.

17.      Ensuring compliance with local laws and regulations and local and group policies.

18.      Assist and collaborate with Internal Audit, Finance, and other teams on projects requiring legal input.

19.      Other tasks related to the roles maybe assigned from time to time.

Requirements:

• Degree in Law

• Experience in legal review, contract vetting, and providing legal advisory support.

• Organized and detailed.
  

HOW TO APPLY:

Interested applicants, please click on “Apply Now” or submit your resume to ref71@trustrecruit.com.sg

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Lee Jia Xiang

EA Personnel Reg No: R25158171

Key Responsibilities

Client Service and Engagement Management

·       Lead and manage a portfolio of audit and assurance engagements across a diverse client base.

·       Act as the Engagement Partner and sign audit reports in accordance with applicable professional standards and regulatory requirements.

·       Ensure audits are planned, executed, and completed in compliance with Singapore Standards on Auditing, Singapore Financial Reporting Standards, and ACRA requirements.

·       Provide technical guidance and practical solutions to clients on accounting, auditing, and financial reporting matters.

·       Build and maintain strong relationships with clients, acting as a trusted business advisor.

Quality and Risk Management

·       Uphold the firm’s commitment to audit quality and professional excellence.

·       Ensure compliance with the firm’s System of Quality Management (SQM), ACRA regulations, and applicable professional standards.

·       Review engagement risks and implement appropriate safeguards to manage audit and business risks.

·       Drive continuous improvement of audit methodologies, processes, and quality control procedures.

Leadership and People Development

·       Lead, mentor, and develop audit managers and professional staff.

·       Foster a culture of technical excellence, accountability, and continuous learning.

·       Provide coaching and training to enhance the technical and professional competencies of team members.

·       Participate in recruitment, performance management, and succession planning initiatives.

Requirements

·       Chartered Accountant of Singapore (CA Singapore) or equivalent recognised professional qualification.

·       Registered Public Accountant with ACRA, or eligible to be registered as a Public Accountant under ACRA’s requirements.

·       Possess a valid practising certificate or be eligible to obtain one.

·       Minimum 10 years of external audit experience, with substantial experience managing audit engagements and client relationships.

·       Experience serving clients in the construction sector and not-for-profit organisations will be an advantage.

·       Strong technical knowledge of Singapore Financial Reporting Standards (SFRS), Singapore Standards on Auditing(SSA), and regulatory requirements.

·       Proven leadership capabilities with experience managing and developing professional teams.

·       Strong business acumen, commercial awareness, and client relationship management skills.

·       Excellent communication, interpersonal, and stakeholder management abilities.

·       Entrepreneurial mindset with an interest in contributing to the growth and development of the firm.

Partnership Opportunity

This position offers the opportunity to be part of the firm’s leadership team and play a key role in shaping its future direction. Depending on the candidate’s experience, capabilities, and contribution to the firm, there may be an opportunity to participate in the ownership and long-term growth of the practice.

What We Offer

·       Opportunity to lead and sign audit engagements across a diverse client portfolio.

·       Collaborative and professional working environment.

·       Platform to contribute to strategic decision-making and business growth.

·       Potential pathway to equity participation for the right candidate.

·       Competitive remuneration package commensurate with experience and contribution.

As a Networking Managed Services Engineer (L2) at NTT DATA, you'll take on a developing engineering role where your main goal is to ensure our clients' IT infrastructure and systems remain operational. You'll achieve this by proactively monitoring, identifying, investigating, and resolving technical incidents and problems. You'll work closely with our clients and internal teams to ensure that services are restored swiftly, in line with our service level agreements (SLAs).

Your day will revolve around reviewing client requests and tickets, applying your technical expertise to resolve them efficiently and effectively. You'll be the go-to person for second-line support, handling incidents and requests of medium complexity. In addition to your daily tasks, you'll have opportunities to contribute to exciting project work from time to time.

You'll proactively monitor work queues, execute operational tasks, and update tickets with the actions you've taken. Identifying, analysing, and logging issues before they escalate will be a key part of your role. You'll communicate with other teams and clients to provide support and ensure that changes are executed with clear risk identification and mitigation plans.

As part of the shift handover process, you'll highlight key tickets and upcoming critical tasks for the next shift. When needed, you'll escalate tickets to ensure the right focus from our Centres of Excellence (CoE) and other teams. Collaborating with our automation teams, you'll work on optimizing efforts and automating routine tasks, all while coaching our Service desk and L1 teams in both technical and behavioural skills.

You'll also establish monitoring for client infrastructure, leading and managing initial client escalations for operational issues. Contributing to the change management process, you'll log change requests, execute approved maintenance activities, and audit incident and request tickets for quality. Your insights will drive trend analysis reports, identifying tasks suitable for automation to reduce tickets and optimize efforts. You might also support disaster recovery functions and other related tasks as needed.

To thrive in this role, you need to have:

• Proficiency in technologies such as Pulse Secure SSL VPN, Palo Alto, Fortinet, Cisco Nexus switches/routers/firewalls, and more familiarity with ticketing tools.

• At least one technical certification in the above-mentioned technologies.

• Strong planning skills, with the ability to anticipate and adapt to changing circumstances.

• Adaptability and resilience in a dynamic work environment.

• Ability to communicate and work effectively across different cultures and social groups.

• Proficiency in active listening and client-centric communication.

• A positive outlook and the ability to work well under pressure.

• A client-first attitude, always seeking to create positive client experiences.

• A bachelor's degree or equivalent qualification in IT/Computing, or equivalent work experience.

· Prepare detailed design reports, calculations and drawings.

· Prepare submissions to statutory agencies/ authorities.

· Participate in the coordination with other disciplines in preparation of design deliveries.

· Participate in preparing tender documentations.

· Participate in the successful delivery of projects.

· Perform any other duties as assigned.

Requirements:

· Degree in Civil or Structural Engineering from a recognized University and eligible for registration with the Professional Engineers Board (Singapore).

· Conversant with local codes and authority submission procedures.

· Excellent interpersonal, good written and verbal communication skills.

· Have good knowledge of common engineering design software.

· Working experience in engineering design consulting practice on building, geotechnical, infrastructure, rail or road projects (underground/basement/elevated structures, tunnel structures and MRT station structures).

· Strong analytical skills.

· Able to work under pressure with good time management skill.

Civil:

· Familiar in the design of major civil infrastructure projects such as roads, drains, sewers, utilities, road and rail alignments.

If you wish to have the opportunity to work in an international consultancy firm that offers attractive remuneration, a 5-day work week and a conducive environment to enhance your skills and experience, please send your full resume, including your salary expectations and contact number to

2 International Business Park, #06-08
The Strategy, Tower 1, Singapore 609930

Email: HR@sg.tylin.com
(Only shortlisted candidates will be notified)

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

• 1-year contract, renewable
• Hybrid work arrangement
• Government project

Key Responsibilities

• Perform threat modelling and establish threat profiles to identify, assess, and remediate application security risks.

• Review application architectures, APIs, and cloud environments to ensure compliance with security best practices.

• Conduct security testing using SAST tools such as Fortify-on-Demand, SonarQube, and similar solutions.

• Track, manage, and remediate security vulnerabilities through timely patching and mitigation activities.

• Work closely with development, DevOps, and infrastructure teams to integrate security controls into CI/CD pipelines.

• Conduct security awareness training and provide security advisory support to project teams.

• Ensure adherence to security standards and frameworks such as OWASP Top 10 and OWASP ASVS.

Requirements

• Minimum 4 years of experience in software development, application security, and/or cloud computing (AWS preferred).

• Strong understanding of web and mobile application security, API security, and related technologies (REST, SOAP, SSL/TLS).

• Experience in threat modelling and application security risk assessment.

• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.

• Hands-on experience with security scanning tools such as Fortify-on-Demand, SonarQube, or equivalent.

• Good knowledge of security best practices and secure software development lifecycle (SSDLC).

• Strong analytical, troubleshooting, communication, and stakeholder management skills.

• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Relevant certifications such as CISSP, OSCP, AWS Security Specialty, AWS DevOps Engineer, or equivalent.

• Experience working in Government environments.

• Experience with Government Commercial Cloud (GCC) environments.

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred