Total 113 security job vacancies in Others category

Reports To: Security Manager / Director of Security

Job Summary

The Senior Security Officer is a working supervisory role responsible for the direct oversight, coordination, and performance of the security personnel team. This position acts as the primary liaison between the security management and the frontline officers, ensuring that all security operations are executed effectively, professionally, and in accordance with established policies and procedures. The Senior Security Officer will lead by example, conducting patrols, managing access control, and responding to incidents while simultaneously coaching and developing the security team.

Key Responsibilities

Personnel Supervision & Leadership:

• Directly supervise, schedule, and coordinate the daily activities of assigned security personnel.

• Lead shift briefings to communicate updates, security threats, and operational priorities.

• Mentor, coach, and provide on-the-job training to new and existing officers to ensure high performance and adherence to protocols.

• Monitor officer performance, conduct regular performance evaluations, and provide constructive feedback.

• Address minor disciplinary issues and escalate significant personnel matters to the Security Manager.

• Manage shift rotations, breaks, and overtime to ensure adequate coverage at all times.

Operational Security & Enforcement:

• Conduct regular patrols of the facility to inspect for safety hazards, security breaches, and policy violations.

• Monitor and manage access control systems, ensuring only authorized personnel enter the premises.

• Oversee the operation of the Security Command Center, including CCTV surveillance and alarm monitoring.

• Enforce site rules, regulations, and emergency procedures consistently among staff, visitors, and contractors.

• Serve as the first responder and Incident Commander on-site for security-related emergencies (e.g., medical incidents, fire alarms, disturbances, theft) until management arrives.

Reporting & Communication:

• Compile and review daily activity reports (DARs), incident reports, and shift logs submitted by officers; ensure accuracy and completeness.

• Write detailed, clear, and objective reports on significant incidents, investigations, and unusual occurrences.

• Serve as the primary point of contact for security management during assigned shifts, providing real-time updates on critical situations.

• Communicate effectively with local emergency services (police, fire, EMS) as required.

Customer Service & Professionalism:

• Model exemplary customer service behavior for the team, interacting with employees, clients, and visitors in a courteous and professional manner.

• Handle inquiries and complaints from the public and staff, resolving issues diplomatically or escalating as necessary.

• Maintain a professional appearance and demeanor in accordance with company uniform and grooming standards.

Administrative Duties:

• Assist in the inventory management of security equipment (radios, keys, uniforms) and report deficiencies.

• Participate in the development and updating of post orders and standard operating procedures (SOPs).

• Assist with the onboarding process for new hires, including paperwork and equipment issuance.

Senior Security Officer (SSO)

Role Summary: Acts as a lead officer responsible for guarding, patrolling, and protecting premises.
Key Responsibilities:
Monitors CCTV cameras and fire control systems at the Command Centre.
Manages key presses and access control, including visitor management.
Handles emergencies, investigates incidents, and completes incident reports.
Regulates traffic and conducts patrols to deter potential threats.
Provides supervisory support to security officers

Security Officer (SO)

Key Responsibilities
Perform access control and visitor registration
Conduct routine patrols and surveillance
Respond to incidents and emergencies
Maintain occurrence reports and daily records
Provide assistance and customer service to residents and visitors
Ensure safety and security of the premises at all times

Key Responsibilities

• Lead the monitoring and analysis of security events across networks, applications, and systems.

• Oversee incident response activities, ensuring rapid containment, investigation, and remediation.

• Conduct advanced threat hunting and forensic analysis to identify sophisticated attacks.

• Develop and enforce security policies, standards, and procedures across the organization.

• Collaborate with IT, compliance, and business units to align security initiatives with organizational goals.

• Evaluate and recommend new security tools, technologies, and processes.

• Prepare and review reports on security posture, risks, and incident trends.

• Stay ahead of emerging threats, vulnerabilities, and regulatory requirements.

• Assist with security audits and assessments.

Qualifications

• Bachelor’s or Master’s degree in computer science, Cybersecurity, or related field.

• 5–8 years of experience in cybersecurity.

• Strong expertise in SIEM platforms, intrusion detection/prevention, endpoint protection, and cloud security.

• In-depth knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and regulatory standards (MAS TRM, PDPA and Cyber Hygiene).

• Proven experience in incident response, digital forensics, and threat intelligence.

• Excellent leadership, communication, and stakeholder management skills.

• Excellent analytical, problem-solving, and communication skills.

Preferred Skills

• Advanced certifications such as CISSP, CISM, OSCP.

• Experience with cloud security (AWS, Azure)

• Experience with security automation and orchestration (SOAR).

• Familiarity with DevSecOps practices and secure software development lifecycle.

• Ability to translate complex technical risks into clear business impacts

ARSLAN SRS SINGAPORE (Security & Risk Solutions)

Arslan SRS Singapore (formerly Security & Risk Solutions)

Key Responsibilities

• Perform vulnerability scanning/discovery, tracking of remediation SLA and vulnerability fix verification in support of the remediation

• Support and coordinate in pre-engagement, delivery and follow-up of penetration testing activities for internal teams with vendor testing service providers.

• Review and share the Vulnerability Assessment and Penetration Testing findings with the affected teams and follow-up discussion on any queries on the findings.

• Troubleshoot, follow up and resolve any operational issues pertaining to VA through liaison with internal teams and with external vendor support, case creation via relevant product support ticket on issues or queries from the teams.

• Support DevSecOps CICD application deployment to adhere Income’s Application Security Testing (DAST) standard, configure and resolve DAST scans issues for new onboarded applications.

• Monitor, health checks and ensure availability of all DAST scans.

• System administration on vulnerability management tools, perform system health checks, verification of scanning agents, ensure operation availability, assist in log extraction for investigation.

• Support in ensuring configuration changes follow Income procedure, standards, assist in bi-weekly access management review matters, ensure scanners adhere to hardening standards, configuration change processes.

• Weekly and Monthly metrics/dashboard generation for VAPT activities and testing results to be shared with Department HOD and team manager in weekly team meetings.

• Prepare VA statistics and reports in the quarterly management meetings.

Support in technical risk assessment and recommend mitigations on vulnerability findings when remediation is not possible.

• Support and assist in process and procedures improvement initiatives that may be assigned by management.

Qualifications

• Minimum of 3 years experience in information security, application security vulnerability management, penetration testing, vulnerability assessment or similar roles.

• Background in application development, web application technologies and architectures, application security testing or vulnerability assessment.

• Familiar with penetration testing steps, methods, procedures, and excellent in using penetration testing tools.

• Familiar with attack techniques and methods, common security vulnerabilities and threats of network and application systems, and competent in identifying and evaluating these vulnerabilities and threats with existing tools.

• Relevant industry certifications such as CEH, OSCP, BSCP, CREST CRT certifications is preferred.

Savita Rai

EA REG NO: R1873418

EA License No:23C2060

Disclaimer: The company is committed to ensuring the privacy and security of your information. By submitting this form, you consent to the collection, processing, and retention of the information you provide. The data collected (which may include your contact details, educational background, work experience and skills) will be used solely for the purpose of evaluating your qualifications for the position you're applying for. Your data will be stored securely and retained for the duration necessary to fulfill our hiring process. If you are not selected for the position, your data will be kept on file for a limited period in case future opportunities arise. You have the right to access, correct, or delete your data at any time by contacting us at Quess Singapore | A Leading Staffing Services Provider in Singapore (quesscorp.sg)

“This is in partnership with the Employment and Employability Institute Pte Ltd (“e2i”).

e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance and skills upgrading services, and partnering employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nation-wide manpower and skills upgrading initiatives. By applying for this role, you consent to Quesscorp Singapore’s PDPA and e2i’s PDPA.”

Arslan SRS Singapore (formerly Security & Risk Solutions)

Arslan SRS Singapore (formerly Security & Risk Solutions)

Our client is in the banking industry and they have a few job openings for the IT Manager(Security) position

The IT Manager (Security) is responsible for keeping the bank compliant with MAS Technology Risk Management (TRM) guidelines while proactively defending against cyber threats.

Responsibilities

• Compliance & Governance: Conducting security risk assessments, gap analysis on MAS advisories (like FINTEL), and managing third-party/vendor risks.

• Technical Defense: Leading system hardening, patch management, and vulnerability remediation. You will also review access logs and manage security tools like Firewalls and Proxies.

• Project Leadership: Acting as a subject matter expert to lead or support new IT security initiatives and infrastructure upgrades.

Requirements

• The IT Manager is required to know both modern cloud security and traditional banking infrastructure:

• Security Tools: CyberArk (PAM), MASTERSAM, Trend Micro, Symantec, Tenable Nessus, and M365 Security.

• Infrastructure: Windows/Red Hat Linux, Active Directory, VMware, and notably AS400 systems (common in legacy banking).

• Networking: Firewalls, Proxy servers, and Network Segmentation.

• At least 3 years in IT Security, ideally within banking or for a financial tech vendor.
• A degree or diploma in IT.
• Highly values certifications like CISSP, CISM, or CISA.
• Strong vendor management (onboarding/auditing) and project management abilities.
• hands-on infrastructure support experience with Windows and Linux environments, as this role requires hands-on support and 24x7 rotating duty

Applicants with the Fast And Secure Transfer(FAST) experience will have an advantage

Applicants who are keen to apply for this position can send latest resume to alfred.lai@paradigmrecruitment.com.sg

Alfred Lai
EA Reg No: R1545971
EA License No: 21C0434

​Our Client is an established company in Singapore, who is seeking to recruit a Lead Cybersecurity Specialist (Security Operations).

Lead Cybersecurity Specialist (Security Operations)

You will be the primary architect of the security governance and risk management framework., with the mission to transform GRC from a compliance-heavy exercise into a strategic enabler. You will ensure that risk management is deeply integrated into the lifecycle of every digital system, from web applications to critical Operational Technology (OT) environments.

1. Incident Management & Response Standardisation

·       Unified Playbooks: Establish and maintain Incident Response (IR) playbooks for diverse threat scenarios (e.g., Ransomware, Data Exfiltration, Cloud breaches).

·       Crisis Leadership: Provide direct guidance and technical oversight to agencies during High and Critical severity incidents, ensuring timely reporting and effective containment.

·       Incident Governance: Work with CIOs and CISOs to establish clear command structures and roles, empowering leaders to make difficult, high-stakes decisions during a crisis.

2. Operational Readiness & Resiliency Testing

·       Advanced Exercises: Design and oversee high-quality Tabletop Exercises (TTX) for various stakeholders (system owners, SIROs, CISOs, CIOs). You will evaluate external vendors to ensure these exercises are realistic, comprehensive, and push the limits.

·       Chaos Testing: Drive the adoption of chaos testing across agencies to validate the adequacy of resiliency plans and identify hidden failure points in critical systems.

·       Capability Building: Continuously assess the operational readiness of the Family and lead initiatives to bridge identified gaps in incident management.

3. Continuous Monitoring & Asset Governance

·       Centralised Monitoring: Ensure all systems are effectively onboarded to central monitoring services. Work with system owners on overcoming challenges encountered during onboarding.

·       Asset Visibility: Partner with CIOs to maintain a robust and updated IT asset inventory, ensuring that "you cannot protect what you do not know."

·       Custom Threat Scenarios: Provide expert guidance for agencies with unique threat use cases or specialised systems (e.g., OT/ICS) that fall outside standard monitoring coverage, helping them build bespoke detection capabilities.

4. Vulnerability & Attack Surface Management

·       Full-Spectrum SOPs: Establish Standard Operating Procedures for vulnerability management across on-premises, cloud (GCC), and OT environments. Ensure that there are proper procedures for managing unpatched vulnerabilities.

·       Attack Surface Scanning: Ensure agencies deploy adequate internal and external scanning tools. You will oversee the workflow for finding prioritisation and validate that patches are applied and effective.

5. Advocacy & Education

·       Resilience Culture: Educate stakeholders on the critical importance of Response and Business Continuity Planning (BCP).

·       Stakeholder Inculcation: Foster a mindset of "assumed breach," ensuring project owners and leaders understand their roles in threat monitoring and incident management.

Requirements

Experience

·       Years of Experience: 8 to 10 years of deep experience in Cybersecurity Operations, SOC Management, or Incident Response.

·       Crisis Management: Proven track record of leading or providing technical oversight in high-pressure, high-severity security incidents.

·       Domain Expertise: Experience managing security operations across complex hybrid environments (On-premise, Cloud, and OT).

Technical Skills

·       Incident Response & Forensics: Mastery of IR methodologies and a strong understanding of digital forensics and malware analysis.

·       Threat Intelligence & TTPs: Deep knowledge of the threat landscape and the ability to map monitoring use cases to the MITRE ATT&CK framework.

·       Vulnerability & Exploitation Research: Deep understanding of the CVE (Common Vulnerabilities and Exposures) system and CVSS scoring. Knowledge of exploitation techniques and the mechanics of how vulnerabilities are weaponised by threat actors. Ability to assess the "exploitability" of a vulnerability within the specific context of the environment to prioritise remediation.

·       Detection Technologies: Proficiency in SIEM, SOAR, XDR, and EDR technologies. Ability to evaluate the relevancy of existing monitoring tools against evolving threats.

·       Cloud Operations: Strong understanding of monitoring and responding to incidents within Government Commercial Cloud (GCC) and native cloud environments.

·       Certifications: Professional certifications such as GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), CHFI, or CISSP are highly desirable.

Soft Skills

·       Command & Control: Ability to remain calm and provide clear, authoritative guidance during high-stakes security crises.

·       Diplomacy & Education: Skill in translating operational needs into strategic priorities for CIOs and CISOs.

·       Strategic Foresight: A strong interest in emerging security technologies and the ability to proactively adapt monitoring strategies to counter new actor TTPs.

JJ Consulting Services

EA Licence No.: 12C6207

Applicants are invited to send in a MS Word resume to jobs@jjconsulting.com.sg stating position applying for/present/expected salaries and earliest available date.

We thank all applicants in advance and regret that only short listed candidates will be notified.

NextLabs®, Inc. provides zero trust data-centric security software to protect business critical data and applications. Our patented dynamic authorization technology and industry leading attribute-based zero trust policy platform helps enterprises identify and protect sensitive data, monitor and control access to the data, and prevent regulatory violations – whether in the cloud or on premises. The software automates enforcement of security controls and compliance policies to prevent unauthorized access and data breach. NextLabs’ policy management platform and universal enforcement solutions enable centrally managed information control policy across all applications, data, and digital business processes. NextLabs has some of the largest global enterprises as customers and has strategic relationships with industry leaders such as SAP, Siemens, Microsoft, AWS, Accenture, Deloitte, Infosys, and IBM.

We are looking for a SecOps / GRC Professional with hands-on experience in AWS cloud security and exposure to Azure and GCP. The role involves managing cloud security controls, maintaining the Risk Registry, and taking ownership of the internal GRC portal to ensure continuous audit readiness (ISO 27001, SOC 2 or similar).

You will be part of our growing DevSecOps team, responsible for implementing, maintaining, and improving our security posture across environments.

Key Responsibilities include but are not limited to:

• Implement and monitor security controls across AWS (primary), Azure, and GCP.
• Manage IAM, logging, encryption, network security, and cloud security posture.
• Support vulnerability management and incident response documentation.
• Maintain and update the Risk Registry, including risk identification, tracking, and mitigation monitoring.
• Take ownership of the internal GRC portal, ensuring all controls, policies, and evidence are up-to-date.
• Maintain audit evidence for access reviews, backups, incidents, and change management.
• Support ISO 27001, SOC 2, and similar audits.
• Ensure continuous compliance and documentation governance.

Requirements:

• Minimum 2 years of experience in SecOps, Cloud Security, or GRC.
• Strong AWS security experience (mandatory).
• Working knowledge of Azure and/or GCP.
• Experience with security audits (ISO 27001, SOC 2 preferred).
• Strong documentation and risk management skills.
• AWS Security Specialty or similar certification preferred
• Cloud Focus: AWS (Primary), Azure & GCP (Good to have)

Interested candidates may send resume to jobs.sg@nextlabs.com or use our online form.

Responsibilities

• Owner of the Incident Response playbooks for diverse threat scenarios (Ransomware, Data Exfiltration, Cloud breaches).
• Direct guidance and technical oversight during High and Critical severity incidents, ensuring timely reporting and effective containment.
• Establish clear command structures and roles, empowering leaders to make difficult, high-stakes decisions during a crisis.
• Create and maintain high-quality Tabletop Exercises for stakeholders (system owners, SIROs, CISOs, CIOs).
• Evaluate external vendors to ensure exercises are realistic, comprehensive, and limits pushing.
• Adopt chaos testing to validate the adequacy of resiliency plans and identify hidden failure points in critical systems.
• Assess operational readiness to bridge identified gaps in incident management.
• Ensure all systems are effectively onboarded to central monitoring services.
• Collaborate with system owners on overcoming challenges encountered during onboarding.
• Maintain a robust and updated IT asset inventory.
• Guidance on unique threat use cases or specialised systems (OT/ICS) that fall outside standard monitoring coverage, and help to build bespoke detection capabilities.
• Develop Standard Operating Procedures for vulnerability management across on-premises, cloud (GCC), and OT environments.
• Ensure proper procedures for managing unpatched vulnerabilities.
• Deploy adequate internal and external scanning tools.
• Oversee workflow for finding prioritisation and validate patches are applied and effective.
• Educate stakeholders on the critical importance of Response and Business Continuity Planning (BCP).
• Ensure project owners and agency leaders understand their roles in threat monitoring and incident management.

Requirement

• 8 years of deep experience in Cybersecurity Operations, SOC Management, or Incident Response.
• Experience leading or providing technical oversight in high-pressure, high-severity security incidents.
• Experience managing security operations across complex hybrid environments (On-premise, Cloud, and OT).
• Expert in IR methodologies
• Skilled in SIEM, SOAR, XDR, and EDR technologies.
• Strong understanding of digital forensics and malware analysis.
• Deep knowledge of the threat landscape and the ability to map monitoring use cases to the MITRE ATT&CK framework.
• In-depth understanding of the CVE (Common Vulnerabilities and Exposures) system and CVSS scoring.
• Knowledge of exploitation techniques and the mechanics of how vulnerabilities are weaponised by threat actors.
• Able to assess the "exploitability" of a vulnerability within the specific context of the environment to prioritise remediation.
• Able to evaluate the relevancy of existing monitoring tools against evolving threats.
• Sound understanding of monitoring and responding to incidents within Government Commercial Cloud (GCC) and native cloud environments.
• Professional certifications such as GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), CHFI, or CISSP advantageous.
• Able to remain calm and provide clear, authoritative guidance during high-stakes security crises.
• Skill in translating operational needs into strategic priorities for CIOs and CISOs.
• Strong interest in emerging security technologies and the ability to proactively adapt monitoring strategies to counter new actor TTPs.

Ethos Search Associates Pte. Ltd.

EA License No: 13C6655

EA Reg No: R1988580 Jacky Chong

Responsibilities

• Owner of the framework for security testing (Vulnerability Assessment and Penetration Testing - VAPT).
• Design and implement Standard Operating Procedures (SOPs) to guide teams on engaging external security vendors and managing internal testing cycles.
• Establish "Quality Rubrics" to evaluate the performance of pen-testers.
• Conduct periodic sampling of testing reports and project involvements to ensure quality and rigour.
• Lead the execution of complex Red Teaming exercises and deep-dive penetration tests on high-impact systems.
• Leverage on the latest Adversary Tactics, Techniques, and Procedures (TTPs) to simulate real-world attacks, helping to identify blind spots in prevention, detection and response capabilities.
• Keeping a keen eye on the global threat landscape to identify emerging threats and evolving actor TTPs.
• Assess impact of current security posture and update testing standards accordingly.
• Owner of secure coding guidelines (based on OWASP, SANS) to ensure developers build security into the application layer from day one.
• Champion of the Static Application Security Testing (SAST) and Software Composition Analysis (SCA).
• Evaluate automation tools that detects vulnerabilities in source code and third-party libraries.
• Review, recommend, and provide guidance on integrating security tools into DevOps pipelines (DevSecOps).
• Evaluate and suggest systems that help to boost code quality, enforcing security to be treated as a core component of "clean code."
• On the forefront of technology changes (Cloud-native security, AI-driven development) and promote systems/technologies that enhance code quality and resilience.
• Advisor to CIOs, CISOs, and Project Owners to educate and inculcate a culture of secure-by-design.
• Promote a platform for knowledge sharing among security practitioners to harmonise security testing efforts.

Requirements

• Possess OSCP certification.
• 8 years of deep technical experience in Cybersecurity, with a strong focus on offensive security and application security.
• Experience in conducting penetration tests for Web Applications, IT Systems (on-premises and cloud environments), and complex Network architectures.
• Experience in performing manual and automated source code reviews to identify logic flaws, injection vulnerabilities, and cryptographic weaknesses.
• Experience in manual and automated testing tools
• Experience with Government Commercial Cloud (GCC) environments.
• In-depth understanding of secure software development lifecycles (SSDLC) and the ability to read/analyze common programming languages (Java, Python, .NET, JavaScript).
• Skilled with enterprise-grade SAST, DAST, SCA and VAPT tools (Checkmarx, Fortify, SonarQube, Snyk, Burp Suite).
• Sound understanding of the MITRE ATT&CK framework and common TTPs.
• Practical knowledge of Jenkins, GitLab CI, or GitHub Actions.
• Able to communicate complex technical risks to non-technical stakeholders
• Able to influence change without direct reporting lines.
• Able to identify patterns in "bad" testing jobs or recurring code vulnerabilities and provide constructive feedback to improve performance.
• Continuously learning and keeping pace with the rapidly evolving cyber threat landscape.

Ethos Search Associates Pte. Ltd.

EA License No: 13C6655

EA Reg No: R1988580 Jacky Chong

Job Description:

We are a licensed security services provider seeking a committed and responsible Operations Executive to support our daily security operations. The successful candidate will play a key role in coordinating site deployments, responding to operational matters, and ensuring smooth service delivery to our clients.

Key Responsibilities:

• Assist in the coordination and deployment of security officers across assigned sites
• Conduct site visits and inspections to ensure compliance with operational and service standards
• Respond to operational issues, incidents, and client requests in a timely manner
• Liaise with security personnel and management on daily operational matters
• Prepare and maintain operational reports and documentation
• Support scheduling, manpower coordination, and incident follow-ups
• Ensure adherence to company policies and regulatory requirements within the security sector

Requirements:

• Diploma or equivalent qualification preferred
• Prior experience in the security industry or operations coordination is an advantage
• Motorcycle licence or car licence is preferable
• Responsible, organised, and able to work independently
• Good communication and coordination skills
• Willing to travel between sites as part of operational duties

Working Hours:

Full-time position. Working hours may vary depending on operational requirements.

Other Information:

Training will be provided. Candidates with relevant operational or security industry experience will have an advantage.

Interested applicants are invited to apply through the MyCareersFuture portal.

• Perform Electrical Works including wiring and assembly work
• Set up and install Surveillance equipment and systems
• Maintain and perform troubleshooting for Surveillance equipment and systems
• Any ad-hoc duties as assigned

Requirements

• Min. Diploma in Electrical/Electronic Engineering
• Min. 2 years relevant experience
• Preferable with Class 3 driving license
• Ability to work independently and as a team-player
• Able to perform shift work and work on weekends and public holidays