Total 1,589 computer security job vacancies

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Job Overview

We are looking for a proactive Information Security professional to support enterprise IT security operations and infrastructureinitiatives across regional environments. This role will focus on strengthening cybersecurity operations, monitoring security threats, supporting incident response activities, and maintaining secure network infrastructure within a multinational environment.

The ideal candidate should possess hands-on experience in networking and cybersecurity administration, with the ability to work independently while supporting regional security initiatives.

Key Responsibilities

Cybersecurity Operations & Monitoring

• Monitor security alerts and events through SIEM and security monitoring platforms
• Investigate and respond to cybersecurity incidents and security breaches
• Support vulnerability assessment and remediation activities
• Assist in implementing endpoint and network security solutions across regional offices

Infrastructure & Network Support

• Support daily administration of enterprise IT and network infrastructure
• Maintain network and security configurations to ensure system reliability and compliance
• Troubleshoot infrastructure and connectivity issues across corporate environments
• Participate in infrastructure enhancement and security improvement projects

Project & Regional Support

• Support regional IT security initiatives and deployment activities
• Work closely with internal stakeholders across different countries and teams
• Assist with documentation, operational support, and other assigned tasks
• Occasional regional travel may be required for project implementation or support activities

Requirements

• Diploma or Degree in Information Technology, Cyber Security, Networking, or related discipline
• Minimum 3 to 5 years of experience in network administration or cybersecurity operations
• Familiarity with SIEM monitoring, incident response, and vulnerability management
• Good troubleshooting and problem-solving skills in network and security environments
• Able to work effectively both independently and within a team environment
• Comfortable communicating with users and stakeholders across different backgrounds and regions
• Strong sense of responsibility with the ability to work in a fast-paced environment
• Good verbal and written communication skills in English

Please send your detailed resume in MS Word format to resume@goldtecHRs.com with

• Education Level
• Working experiences
• Each employment background
• Reason for leaving each employment
• Last drawn salary
• Expected salary
• Date of availability

Job Description:

• Control of internal & external team of security manpower to ensure smooth daily operations
• Instill operational discipline to security operations/personnel
• Handle security related issues at deployment sites
• Client Management for security related matters
• Conduct recruitment interview for security officers
• Preparation of operational reports

Requirements:

• Fluent in spoken & written English
• Good interpersonal & communication skills
• Minimum Security Supervisor PWM
• Minimum 3years of related experience in security

**Salary Up to $3600

Email or whatsapp to enquire : 80379071

Role Overview

This role focuses on building, integrating, and automating security systems to strengthen detection and response capabilities across on-premise, cloud, and network environments.

Core Responsibilities:

1.    Design, implement, and integrate security tools across enterprise environments

2.    Build and maintain telemetry pipelines into SIEM and detection platforms

3.    Support onboarding of systems into security monitoring

4.    Implement and manage vulnerability scanning and remediation workflows

5.    Work with SOC teams to translate operational gaps into engineering improvements

6.    Support incident response and post-incident remediation

Core Requirements:

1.    Degree in Cybersecurity, IT, Computer Engineering or related field

2.    At least 4 years of experience in Security Engineering, DevOps, or platform engineering

3.    Experience with enterprise security technologies (e.g. SIEM, SOAR, EDR, cloud security)

4.    Proficiency in scripting or automation (e.g. Python, PowerShell)

5.    Strong understanding of networking and security telemetry

6.    Experience implementing or integrating security platforms (e.g. SIEM, telemetry, cloud security tools)

7.    Experience working in multinational or large enterprise environments

8.    Ability to deliver engineering outcomes independently

Working Location : West Central

**We regret to inform that only shortlisted candidates will be notified. Personal data collected will be used for recruitment purposes**

Major Duties & Responsibilities:

· Protect property and safety by maintaining a safe and secure environment; Maintain a high visibility presence and prevent illegal or inappropriate actions that will/ may cause harm to the premise and the people within the premise

· Welcome guests of the organization, ensure contact tracing is done accordingly via electronic and/ or manual means; Ensure all visitors and/ or contractors to the premise fill up their particulars reflectively within the record.

· Observe signs of possible crime or disorder, investigate disturbances, take action of unusual occurrences and report any suspicious incidents in a timely manner; stay visible

· Carry out traffic control/ management to ensure vehicles and people are safe and are aware of the possible traffic hazard(s) within the premise

· Follow emergency response guidelines, protocols, hierarchy/ reporting structure as indicated by SWM ERT procedure, take specific and appropriate actions as a security guard in the event of any emergency, remain vigilant and ready for next steps, maintaining communication with the emergency response team, the management team and/ or SCDF (where appropriate and assigned by a SWM management team member)

· Any other reasonable guard duties (in relation to safety) assigned by superior

· Monitoring of the CCTV cameras and reporting any suspicious activity

· Ensuring that the Transportation trucks are allowed inside / outside facility after verifying relevant documents and/ or activities as follows:

• Prior to entrance:

· Absence of leakage from vehicle

· The vehicle is fit to transport and not over-loaded (fitness of delivery trucks to transit materials)

· Driver’s license

· Essential information as required by SWM’s VMS, including container number

• Prior to exit:

· Checking out the driver

- Traffic Control

Knowledge, Experience or Behavior Required to Perform Job Well

· This is an in-house position, 5 working days
· Qualified with the right certification/ credentials

· Integrity and professionalism – surveillance skills and detail orientation

· Trained in emergency response procedures/crisis management and proven hands-on experience in fire-fighting within reasonableness

· Proven work experience as a senior security guard or relevant position; Prior SCDF experience is highly advantageous

· Working knowledge of public safety and security procedures/ protocols

· Basic IT literacy and willingness to learn new software/ system

· Ability to maintain confidentiality of information shared

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

If you are a cheerful, initiative and strong integrity person who likes to meet new people and are able to contribute by fulfilling clients’ needs, join us.

Job Description:

· To manage and ensure that the systems, servers and infrastructure is installed in accordance to the prescribed design document and/or requirements

. Understanding the scope of works and the needs of the clients and implement the appropriate output to the best of your ability or to the requirements

. To design the network architecture and configure in accordance to the requirements

· Configure, Test and Hand over the required systems and provide Training to client

· Ensure the highest standard of system and infrastructure availability

· To liaise with various parties such as system manufacturers or cybersecurity vendors to resolve issues and problems

· Attend new product trainings

Requirements:

. Applicants need to be able to work overtime/Night Shift.

· Required Skill(s): Communication skills, Analytical skills, Decision making, Organizational skills, Attention to details, Patience and Knowledge of Systems engineering software tools

.Min 3 years of relevant hands-on experiences

. Familiar with Security Systems such as ISMS, CCTV, ACS and VA systems will be advantageous

. Familiar with Networking systems (eg. Routing, VLAN, VPN, Wireless AP) will be advantageous

. Familiar with IT Security (eg. firewall, IPSEC, SSL, hardening) will be advantageous

. Able to work independently with minimum guidance, monitoring and a good team player

. Valid Class 3 driving license has an added advantage

Other Information:

· Location: Kaki Bukit or as needed

· Working hours: 44 hours per week (Follow Company’s Arrangement)

· Salary (commensurate with experience): Basic salary + OT allowances + Variable Bonus

Resumes please INCLUDE:

· Personal particulars

· Education background

· Work experiences in point forms

· All reasons for leaving

· Current and expected salary

· Date of availability / Notice Period

Interested applicants are invited to send your updated resume in MS Word format via Apply Now.

We regret that only shortlisted applicants will be notified.

If you are a cheerful, self-initiated, holds strong integrity values and who likes to meet new people and are able to contribute by fulfilling clients’ needs, join us!

Job Description:

• To manage and ensure that the systems, servers and infrastructure is installed in accordance to the prescribed design document and/or requirements
• Understanding the scope of works and the needs of the clients and implement the appropriate output to the best of your ability or to the requirements
• To design the network architecture and configure in accordance to the requirements
• Configure, Test and Hand over the required systems and provide Training to client
• Ensure the highest standard of system and infrastructure availability
• To liaise with various parties such as system manufacturers or cybersecurity vendors to resolve issues and problems
• Attend new product trainings

Requirements:

• Applicants need to be able to work overtime/Night Shift.
• Required Skill(s): Communication skills, Analytical skills, Decision making, Organizational skills, Attention to details, Patience and Knowledge of Systems engineering software tools
• Min 3 years of relevant hands-on experiences
• Familiar with Security Systems such as ISMS, CCTV, ACS and VA systems will be advantageous
• Familiar with Networking systems (eg. Routing, VLAN, VPN, Wireless AP) will be advantageous
• Familiar with IT Security (eg. firewall, IPSEC, SSL, hardening) will be advantageous
• Able to work independently with minimum guidance, monitoring and a good team player
• Valid Class 3 driving license has an added advantage

Other Information:

• Location: Kaki Bukit or as needed
• Working hours: 9am to 6pm
• Salary (commensurate with experience): Basic Salary + Variable Bonus

Resumes please INCLUDE:

• Personal particulars
• Education background
• Work experiences in point forms
• All reasons for leaving
• Current and expected salary
• Date of availability / Notice Period

Interested applicants are invited to send your updated resume in MS Word format via Apply Now. We regret that only shortlisted applicants will be notified.

Responsibilities:

1.      To protect the properties of the Club.

2.      To patrol designated locations within the Club compound at regular intervals.

3.      To conduct investigations if breach of security is suspected.

4.      All incidences to be updated in the incident report form for further actions or for record purpose.

5.      Issuing of the keys when requested by staff and maintaining proper records when issuing and returning of keys.

6.      Monitoring of the club premises via CCTV and to conduct simple investigations when necessary.

7.      Conduct random checks on vehicles parked at the club to make sure non-members park at the designated lots.

8.       To perform wheel clamp on unauthorized parking within the club.

9.      To issue warning notices to drivers when they do not follow parking guidelines at the club.

10.  To exchange visitor, pass for part timer to access with-in club premises.

11.   To check proper recording of working hours is maintained by part-timers when they commence and finish work at the club.

12.  To maintain records of lost & found items and to make sure those items are kept safely under key and lock.

13.  Covering duties with extended hours when other security officer is away on leave/medical leave. (Perm Night 2200H to 0700H / Supporting from 1900h to 0700H)

14.  Cordoning of carpark lots for events or management meetings.

15.  To assist maintenance team when there is a fire alarm activation.

16.  To participate and assist during the annual fire alarm drill involving all club staff.

17.  Notwithstanding the above, you are expected to undertake any other duties that are assigned to you by the Management.

Requirements:

·        WSQ Recognize Terrorist Threats

·        WSQ Manage Disorderly Conduct and Threatening

·        WSQ Operate Basic Security Equipment

·        WSQ Perform Remote Surveillance Function (PRSF)

·        WSQ Crowd and Traffic Control Management

·        PWM Rank SSO

·        Basic Computer Knowledge

Staff transport available at Khatib and Seng Kang.

Job Description

• Industry/ Organization Type: Security
• Position Title: Senior Security Officer
• Working Location: Island Wide
• Working Hours: 6days (8.00am-8.00pm, off on weekdays)
• Salary Package: Basic Salary $3,170
• Duration: Permanent Role

Key Responsibilities

• Respond to and report on complex or large-scale safety and security incidents; assist in evacuations when needed.
• Manage security systems, including the Central Alarm Monitoring, fire control, lift control, and car park systems.
• Regulate traffic according to the Road Traffic Act, ensuring smooth and safe flow.
• Monitor CCTV and the centralized alarm system, maintaining CCTV storage and preserving evidence.
• Assist state or auxiliary police in law enforcement and issue summons as required.

APPLY NOW!!!

• Valid PLRD license.
• Minimum of 3-5 years of experience in a security role.
• Strong leadership and team management skills.
• Excellent communication and interpersonal skills.
• Ability to handle emergencies and stressful situations calmly and effectively.
• Strong observational and analytical skills.
• Proficient in using security systems and technology.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #71348 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 6 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

Role Overview

This role supports Security Operations Centre (SOC) activities, including monitoring, investigation, threat hunting, and incident response. The resource operates as a second line of defence, translating alerts into actionable findings and improving detection capability.

Core Responsibilities

1. Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms

2. Correlate events to identify root cause, scope, and impact of security incidents

3. Investigate phishing, malware, account compromise, and unauthorised access cases

4. Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK

5. Support containment, remediation, and recovery activities

6. Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools)

Core Requirements

1. Degree or Diploma in Cybersecurity, IT, or related field

2. At least 4 years of experience in SOC operations or incident response (L2 preferred)

3. Experience with SIEM, EDR/XDR, and cloud or identity security tools

4. Strong understanding of attack chains, MITRE ATT&CK, and threat analysis

5. Demonstrated hands-on experience in incident investigation or threat hunting

6. Ability to operate independently in a SOC environment
   

   Working Location : West Central
   

   **We regret to inform that only shortlisted candidates will be notified. Personal data collected will be used for recruitment purposes**

·  At least 4 years combined work experience in software development, application security, and cloud computing (e.g., AWS)

· Familiar with mobile and web application programming interfaces (API) architecture (e.g., REST, SOAP, SSL/TLS)

· Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks

· Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard

· Familiar with Agile development processes, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CD pipelines

·  Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc.

· Track and address security vulnerabilities with timely remediation and patching processes.

· Conduct security awareness training sessions

·Good verbal/written communication, collaboration skills and experience interactingwith various stakeholders

· Strong analytical, problem-solving, and troubleshooting skills; ability to workindependently

· Relevant certifications preferred (e.g., CISSP, OSCP, AWS security, AWS DevOps Engineer, or equivalent, etc.)

· Experience in working with Government Commercial Cloud (GCC) preferred.

Job Tasks and Responsibilities

Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure

Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms

Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks

Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities

Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management

Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption

Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities

Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes

Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure

Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards

Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle

Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency

Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs

Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation

Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage

Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage

Experience in agile development environment will be an added advantage

Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage

Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage

Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage

Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage

Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage

Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage

Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage

Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage

Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage

Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage

Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage

Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.