Total 1,159 security job vacancies

⭐️ ARSLAN SRS SINGAPORE ⭐️

⭐️ARSLAN SRS ⭐️

Job Description: Join the future of enterprise security! At ASIS Technologies, we don't just sell hardware; we design intelligent security ecosystems. We are looking for a motivated individual to join our Singapore HQ as a Solution Engineer.

Whether you are a fresh Engineering graduate or looking to switch into the high-growth Security & AI industry, we provide the blueprint and tools for your success.

Key Responsibilities:

• System Design: Learn to create professional project proposals, system diagrams, and Bill of Quantities (BOQ) for enterprise clients.

• Tech-AI Integration: Utilize advanced AI tools to streamline technical support and design compliance-ready security solutions.

• Customer Collaboration: Work closely with the sales team to address technical enquiries and provide top-tier support.

• Professional Growth: Undergo structured in-house training to become a subject matter expert in Access Control and CCTV systems.

Requirements:

• Education: Diploma or Degree in Engineering (Electrical, Electronics, Computer, or related fields).

• Experience: 0–2 years. We value aptitude over years of service. If you are meticulous and tech-savvy, we want you.

• Mindset: A strong desire to learn the intricacies of Enterprise Security Systems.

• Bonus: Prior experience in ELV/Security systems is a plus, but not mandatory.

Summary:

In this role, you will help ensure that vulnerabilities and exposures across our environment are identified, validated, and remediated in a timely manner. You will work closely with system owners and report findings, helping to keep our risk posture visible and well-managed.

Job Scope

Attack Surface Monitoring, Vulnerability Scanning, and Triage

• Monitor and triage findings surfaced by our Attack Surface Management (ASM) and Vulnerability Management tools
• Assess each finding for validity, severity, and exploitability before escalating or acting on it
• Distinguish genuine exposures from false positives and contextualise findings against our asset inventory
• Prioritise remediation efforts based on risk
• Remediation Workflow Management
• Work with system owners to follow up on outstanding findings
• Track remediation progress and ensure findings are resolved in a timely manner
• Manage exceptions and risk acceptance where remediation is not immediately feasible
• Communicate clearly with non-technical stakeholders, translating technical findings into actionable guidance

Reporting & Insights

• Consolidate vulnerability data and remediation metrics for reporting
• Identify trends and surface systemic issues across the organisation's attack surface and internal asset landscape
• Provide recommendations to improve our overall exposure management programme

Process Improvement

• Contribute to the refinement of ASM and vulnerability management processes, tooling configurations, and escalation playbooks over time
• Support the development and maintenance of vulnerability management policies, standards, and procedures in alignment with industry best practices

Prerequisites

• Bachelor’s Degree in Computer Science/Information Security or equivalent
• Professional certifications, including GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred
• Preferably 5 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (eg CVSS), and external-facing attack surface risks
• Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar)
• Proficiency in programming languages such as Python will be advantageous
• Strong analytical and judgement skills, with the ability to think critically and make sound recommendations
• Good communication and interpersonal skills, with the ability to multitask, prioritise, and translate technical findings
• Meticulous, with a high degree of integrity, initiative, and energy

Job Responsibilities include:

· Desktop, server, network, IT support and security related matters.

· Audit and enforcement of IT assets, security, standards, policies, and compliances.

· Network and Infrastructure:

o general upgrades, changes, maintenance, and relocations.

o network, server, server cluster administrations and security.

· Support and participation in new business-related initiatives as required.

· Ad-hoc tasks as assigned.

Job Requirements

· NITEC/Diploma or equivalent in Information Technology or related fields.

· Practical knowledge in the following areas, preferably with relevant certifications:

o MS Enterprise Solutions, e.g. Office 365, Azure, Network & Server Services.

o Enterprise and Cyber Security, e.g. APT, CIP, mainstream security devices.

· A well-natured and constructive team player with a highly positive attitude that could thrive under pressure.

· At least 6 months internship experience in IT/Cyber security.

· Experience with DNS, WAF, Web Servers operations, VMware and hypervisor would be an added advantage.

· Candidates with internal support experience is preferred.

· As this role involves interaction with colleagues in Taiwan, proficiency in spoken and written Mandarin is beneficial.

Interested and suitable candidate kindly click quick apply. Resume will be forwarded to Stepfan Soon Yit

We regret that only suitable candidate will be notified.

GEMS Recruit/EA License : 23C1459

EA Personnel No : R24120893 (Stepfan Soon Yit)

• Co-ordinate and work closely with the external parties and customers to plan, organize and execute the project related activities.
• Assist the manager in engineering works such as system designing, documentation, testing & commissioning (T&C) for ELV and security systems.
• Plan and develop the project schedules in compliance with customer requirements, deadlines, and/or milestones; develop efficient mechanisms to track the project progression in the field and update the schedules regularly to ensure that the activities are progressed within the schedule’s timelines.
• Responsible for all work site activities such as coordination and supervision works related to engineering works and systems design.
• Ensure timely completion of all the assigned projects particularly the T&C schedules.
• Responsible for project management related activities which include attend work site meetings, job coordination, system designs etc.

Requirements:

• At least a Diploma in relevant fields.
• Minimum 2 years of relevant experience.
• Knowledge in Security System and ELV Systems e.g. PA system, Fire Alarm System, CCTV system, Card Access, Structure Cabling & etc.
• Familiar with BIM (Navisworks) and/or AutoCAD.
• Able to manage project cycle independently with minimum supervision.
• Knowledge in underground cabling work will be an added advantage.

Please submit your updated and comprehensive CV to: gracehrsolutions.patriciapoh@gmail.com for a P&C discussion. Your CV should be updated and in MS WORD FORMAT ONLY (NOT PDF) with full career details, stating current or last drawn salary with full breakdown such as base, incentives, AWS, etc. and expected salary, contact details, educational qualifications, working experiences, reasons for leaving each past employment(s) and availability date.

For quicker processing, please indicate the position applied for on the subject header. We regret to inform that only shortlisted candidates will be notified. However, if you are not selected, we will explore other positions for you, in the near future. All applications will be treated with the strictest confidence.

What our client offers

Our client offers an attractive remuneration package, a fast-paced and exciting working environment and provides challenging opportunities for career advancement. They care about their employees. They are not just an employer. They are a Team. They do not just offer you a job, they offer you a career. By joining their team, you will find a strong purpose and deep meaning in everything you do. You will have the chance to make a real difference for customers, working alongside a passionate team of like-minded colleagues, while building your knowledge/skills and developing your career in a fun, dynamic and fast-growing organization.

Our client advocates fair employment practices, recruits talents based on merit and fit with their corporate values and complies with the Tripartite Guidelines on Fair Employment Practices (TGFEP), including the prevailing guidelines on recruitment. They are committed to achieving diversity and creating an inclusive working environment. They welcome all applications irrespective of social and cultural background, race, gender, age, religious belief or nationality.

Personal Data Protection Statement for Job Applicants

Please be informed that the personal data you provided by way of your job application to Grace HR Solutions will be collected, used and disclosed by or on behalf of Grace HR Solutions to determine or investigate your suitability, eligibility or qualifications for employment with Grace HR Solutions and/or its clients and manage your application for employment with Grace HR Solutions and/or its clients including identifying you as potential candidate for future suitable positions and/or notifying you of any such positions, either existing or in the future.

Company Overview

Grace HR Solutions is a boutique professional recruitment consultancy involved in the recruitment of permanent, contract, and temporary positions. We are fully committed to achieving excellence in every assignment through leveraging our vast candidate pool, industry connections, and strategic insights. As the total recruitment and staffing solutions partner, our goal is to provide our Clients the best staffing solutions through an integrated database network supported by localized content and services. We strive to be efficient and effective in matching the right candidate to the right job. Reach out to us to discover even more about how we can help you with all your staffing needs or your own career.

The Drafter is responsible for preparing, updating, and maintaining drawing documentation for ELV and security system projects, including CCTV, Access Control, Intercom, Smart Home, Public Address, and related systems. This role focuses primarily on drawing production and documentation support for the Sales and project teams.

Key Responsibilities

·      Prepare and update technical drawings based on Sales and Project engineer instructions and approved designs

·      Produce and maintain layout plans, shop drawings, schematic drawings, single-line diagrams, riser diagrams, and wiring diagrams

·      Ensure drawing documentation is properly organized and maintained

·      Update drawings according to revisions and consultant comments

·      Maintain drawing revision records and version control

·      Organize and maintain project drawing files and documentation

·      Ensure latest drawing revisions are properly saved and issued internally

·      Assist in preparation of submission drawings, as-built drawings, and O&M drawing documentation

·      Ensure drawing formats and documentation comply with company standards

Requirements

·      Proficient in AutoCAD

·      Knowledge of BIM/Revit will bean advantage

·      Detail-oriented and organized

·      Able to manage multiple drawing revisions and deadlines

·      Good understanding of ELV/security systems will be an advantage

Preferred Experience

·      Experience in drafting or drawing documentation for ELV, M&E, or construction projects

·      Familiar with technical drawing standards and documentation practices

Key Responsibilities

• Design, implement, and manage the Vulnerability Management Program, ensuring execution across all phases of the vulnerability management lifecycle.
• Configure, schedule, and monitor vulnerability scans using enterprise tools (e.g., Tenable/Nessus), ensuring successful execution and investigating/re-running failed scans.
• Perform continuous asset discovery and ensure newly identified assets are onboarded into the vulnerability management platform and properly registered in CMDB.
• Assess and prioritize vulnerabilities using a risk-based approach, considering asset criticality, business impact, and environmental context.
• Partner with infrastructure, network, and application teams (Windows, Unix, databases, etc.) to drive remediation of identified vulnerabilities.
• Provide technical advisory to stakeholders on vulnerability impact, exploitability, and remediation strategies.
• Analyze and validate false positives, identify technical constraints, and facilitate risk acceptance processes, including stakeholder alignment and approvals.
• Lead remediation planning for penetration testing findings in collaboration with cross-functional teams.
• Conduct threat exposure assessments and targeted vulnerability scans, driving mitigation and response actions.
• Maintain and enhance vulnerability dashboards and reporting, delivering insights to both technical teams and senior management.
• Track and report progress against defined KPIs and SLAs, ensuring compliance with organizational standards.
• Escalate critical risks and provide timely updates to leadership and relevant stakeholders.
• Drive continuous service improvements in vulnerability management processes, tools, and methodologies.
• Support global coordination across teams operating in multiple geographical regions.
• Ensure adherence to security policies, regulatory requirements, and compliance frameworks, including financial security and fraud prevention obligations.
• Stay updated on emerging threats, vulnerabilities, and industry best practices, applying insights to improve organizational defenses.

Qualifications and Profile

• 8–10 years of overall IT experience with 4–7 years in Information Security and minimum 4+ years in enterprise Vulnerability Management.
• Proven hands-on experience managing end-to-end Vulnerability Management programs in large enterprise environments.
• Strong technical knowledge of vulnerability assessment and remediation across:
• Operating systems (Windows, Unix/Linux)
• Networks and infrastructure
• Databases and application servers
• Ability to analyze vulnerabilities, assess risk exposure, and prioritize remediation using a risk-based approach.
• Hands-on experience with Tenable (Nessus) SecurityCenter or equivalent vulnerability scanning tools in large-scale environments.
• Familiarity with threat and vulnerability intelligence and its application to enterprise security operations.
• Strong understanding of security reporting requirements at both technical and management levels.
• Hands-on experience creating reports, dashboards, and trend analysis using:
• Excel, PowerPoint, Word
• BI tools such as Power BI or similar
• Ability to present insights in a clear, structured, and business-relevant manner.

Interested applicants please send your resume in MS Words format toprasant.sirohi@ambition.com.sg and attention to Prasant Sirohi (R22106307)

Shortlisted candidates will be notified

www.ambition.com.sg

EA Registration Number: R22106307

Data provided is for recruitment purposes only

Business Registration Number: 200611680D. License Number: 10C5117

Job Tasks and Responsibilities

Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure

Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms

Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks

Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities

Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management

Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption

Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities

Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes

Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure

Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards

Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle

Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency

Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs

Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation

Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage

Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage

Experience in agile development environment will be an added advantage

Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage

Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage

Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage

Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage

Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage

Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage

Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage

Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage

Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage

Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage

Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage

Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

The Security Manager is responsible for leading and overseeing all aspects of security and safety for Sports Excellence Singapore. This role ensures the security and safety of staff, student-athletes, residents, visitors, physical assets, and operations through robust security strategies, operational excellence, and regulatory compliance.

The incumbent will drive a proactive and risk-informed security posture by strengthening governance, improving operational readiness, leveraging security technologies, and working closely with internal and external stakeholders to maintain a safe and secure environment.

Key Responsibilities

Security Strategy & Risk Management

·       Lead site security framework aligned with organisational priorities

·       Conduct risk assessments and implement mitigation plans

·       Set and monitor KPIs for prevention, response, and improvement

Operations & Incident Management

·       Oversee daily security operations and environment safety

·       Lead incident response, investigation, and documentation

·       Ensure effective surveillance, access control, and asset protection

·       Use technology to enhance efficiency and resilience

Compliance& Governance

·       Ensure compliance with relevant laws and regulations

·       Maintain audit readiness and data confidentiality

Emergency Preparedness & Business Continuity

·       Lead emergency planning and response(fire, security threats)

·       Conduct drills and continuous improvement reviews

·       Coordinate with relevant government agencies

Team & Vendor Management

·       Oversee outsourced vendors and service performance

Financial Management

·       Manage budget and ensure cost-effective security investment

Stakeholder Engagement

·       Collaborate with internal and external stakeholders on security matters

·       Build trust and promote awareness across community

·       Maintain professional, balanced conduct in all situations

Any other matters, as assigned by Management Team.

Job Requirements

·       Diploma in Security Management, Risk Management, WSQ security qualifications, Advanced Certificate in Security, management-level security training or a related field is preferred

·       Certification in Fire Safety Manager, First Aid, AED/CPR is preferred

·       At least 5 years of experience in a managerial role leading security teams and site operations

·       Minimum 8 years of security experience, preferably in residential, education, or customer-facing environments

·       Valid Singapore security license and regulatory compliance

·       Strong knowledge of security operations, risk assessment, incident management, investigation, and emergency planning

·       Familiarity with security technologies such as CCTV, access control, various alarm monitoring, incident reporting systems, and related security platforms

·       Knowledge of relevant legislation(WSH, PDPA, security procedures)

·       Experience in liaising with police and external agencies on security matters

·       Experience in budgeting, manpower planning, vendor management, security related improvement works and service partner oversight

·       Able to work shifts, weekends, and respond to incidents beyond working hours

·       Able to stay in provided accommodation will be an advantage

·       Independent, team oriented and able to work under pressure

·       Proficient in MS Office with strong reporting and documentation skills

We regret to inform that only shortlisted candidates will be notified.

Security Operations Engineer

Location: Singapore, CBD
Employment Type: 12 months (renewable Contract)

Key Responsibilities:

• Administer and support security platforms, with a strong focus on CyberArk and Tenable.
• Perform day-to-day BAU activities including troubleshooting, patching, monitoring, and incident resolution.
• Manage privileged access management (PAM) solutions and ensure platform stability and security.
• Support security operations processes, ticket management, and vendor engagements.

Requirements:

• Hands-on experience as a CyberArk Administrator (not just an end user).
• Strong experience supporting CyberArk environments, including troubleshooting and maintenance.
• Experience with vulnerability management tools such as Tenable.
• CyberArk CDE (Certified Delivery Engineer) certification is mandatory.
• Good understanding of security operations, privileged access management, and cybersecurity best practices.

Preferred Skills:

• CyberArk plugin development and automation experience.
• Policy review and optimization expertise.
• Experience in CyberArk migration or upgrade projects.
• Scripting and process automation skills.

As a Networking Managed Services Engineer (L2) at NTT DATA, you'll take on a developing engineering role where your main goal is to ensure our clients' IT infrastructure and systems remain operational. You'll achieve this by proactively monitoring, identifying, investigating, and resolving technical incidents and problems. You'll work closely with our clients and internal teams to ensure that services are restored swiftly, in line with our service level agreements (SLAs).

Your day will revolve around reviewing client requests and tickets, applying your technical expertise to resolve them efficiently and effectively. You'll be the go-to person for second-line support, handling incidents and requests of medium complexity. In addition to your daily tasks, you'll have opportunities to contribute to exciting project work from time to time.

You'll proactively monitor work queues, execute operational tasks, and update tickets with the actions you've taken. Identifying, analysing, and logging issues before they escalate will be a key part of your role. You'll communicate with other teams and clients to provide support and ensure that changes are executed with clear risk identification and mitigation plans.

As part of the shift handover process, you'll highlight key tickets and upcoming critical tasks for the next shift. When needed, you'll escalate tickets to ensure the right focus from our Centres of Excellence (CoE) and other teams. Collaborating with our automation teams, you'll work on optimizing efforts and automating routine tasks, all while coaching our Service desk and L1 teams in both technical and behavioural skills.

You'll also establish monitoring for client infrastructure, leading and managing initial client escalations for operational issues. Contributing to the change management process, you'll log change requests, execute approved maintenance activities, and audit incident and request tickets for quality. Your insights will drive trend analysis reports, identifying tasks suitable for automation to reduce tickets and optimize efforts. You might also support disaster recovery functions and other related tasks as needed.

To thrive in this role, you need to have:

• Proficiency in technologies such as Pulse Secure SSL VPN, Palo Alto, Fortinet, Cisco Nexus switches/routers/firewalls, and more familiarity with ticketing tools.

• At least one technical certification in the above-mentioned technologies.

• Strong planning skills, with the ability to anticipate and adapt to changing circumstances.

• Adaptability and resilience in a dynamic work environment.

• Ability to communicate and work effectively across different cultures and social groups.

• Proficiency in active listening and client-centric communication.

• A positive outlook and the ability to work well under pressure.

• A client-first attitude, always seeking to create positive client experiences.

• A bachelor's degree or equivalent qualification in IT/Computing, or equivalent work experience.

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred

Role: ITSO - Application Security

JD:
Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred.