Total 439 security job vacancies

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred

Role: ITSO - Application Security

JD:
Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred.

Role: ITSO Application Security Consultant

JD:
Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred.

Location: Islandwide
Salary: $2,700 – $3,300 per month
Working days: 4 days work followed by 1 day off and then 3 day work followed by 1 day off

Description

Responsibilities

• Patrolling and carry out enforcement duties such as illegal parking on public roads or public health
• Attend to public feedback
• Possess minimum class 2B license

Benefits
• Full-time: Attractive salary package – Up to SGD3,300*
• 12hrs shift work (can be rotating or perm)
• Joining bonus up to $3500*
• Yearly Increment*
• Fully sponsored WSQ certified security training
• Comprehensive medical and dental benefits, etc

Salary Range: $2,000 - $2,500 
Working Days: 5 days, Monday - Friday
Working Hours: 8.30am to 5.30pm
Location: Toh Guan Road

Responsibilities

• To process all customers’ request & enquiries pertaining to card programming and logger transactions.
• To assists Project Engineer in testing & commissioning of card access programming.
•  Be responsible in processing report according to customers’ request or schedule.
•  To perform downloading of data from site’s card access panel to Control Center.
•  Conduct periodic backup & archive customers’ history transactions and database.

Requirements

• At least Nitec with basic computer knowledge.

The Supreme HR Advisory Pte. Ltd || 14C7279

Chua Jie Ying (Cai Jie Ying), Evelynn || EA Personnel License R24120580

Location: Islandwide
Salary: $2,700 – $3,300 per month
Working days: 4 days work followed by 1 day off and then 3 day work followed by 1 day off

Description

Responsibilities

• Patrolling and carry out enforcement duties such as illegal parking on public roads or public health
• Attend to public feedback
• Possess minimum class 2B license

Benefits
• Full-time: Attractive salary package – Up to SGD3,300*
• 12hrs shift work (can be rotating or perm)
• Joining bonus up to $3500*
• Yearly Increment*
• Fully sponsored WSQ certified security training
• Comprehensive medical and dental benefits, etc

Location: Central Region
Salary: $2,800 – $3,100 per month (Gross salary up to 4k-5k)
Working days: 5 Days work week (Off day not fixed at weekend)

Responsibilities
• Manning of static/access control points
• Checking of passes and other documents at static/access points
• Screening and checking of all personnel and vehicles entering and exiting the premises
• Patrolling and guarding client’s personnel and properties
• Operating metal/explosive detectors/x-ray machines at checkpoints
• Issuing of visitor/contractor pass in exchange for their identification cards
• Attending to alarm activation
• CCTV Monitoring
• Responding to incidents such as unattended bags, etc.
• Maintaining records of all incidents
• Checking of boarding, staff, and valid entry passes

Benefits
• Full-time: Attractive salary package – Up to SGD3,600*
• 12hrs shift work (can be rotating or perm)
• Joining bonus up to $3500*
• Yearly Increment*
• Fully sponsored WSQ certified security training
• Comprehensive medical and dental benefits, etc

[Job ID: 1600983]

Responsibilities

• Deliver professional services, including deployment, implementation, and upgrades of cybersecurity products distributed by Netpoleon. This may occasionally involve customer coordination and project timeline management.
• Provide practical and effective technical solutions or alternatives based on customer requirements.
• Conduct product training for customers, partners, and internal teams.
• Perform installation, configuration, and basic troubleshooting independently using product documentation.
• Continuously upskill and obtain relevant technical certifications for assigned technologies.
• Develop into a subject matter expert over time and support knowledge transfer to internal teams for enhanced customer support.
• Provide technical support to sales and support teams, including product clarification, solution design input, tender compliance, and ad-hoc technical assistance.
• Perform any other duties as assigned.

Requirements

• 2 years of experience in IT, Information Security, or Cybersecurity preferred
• Strong knowledge of cybersecurity and IT infrastructure, including:
  Firewalls, VPN, DLP, IDS/IPS, Web Proxy, DNS, Email Security, SIEM, log management, virtualization, containers, cloud platforms (AWS, Azure, Google Cloud), DevOps/DevSecOps, IAM, PAM, endpoint security, CyberArk Conjur.
• Solid troubleshooting skills in networking and systems, including:
  TCP/IP, routing, NAT, VLAN, multicast, OSPF, BGP, Active Directory, LDAP, RADIUS, SNMP, Syslog, SMTP, TLS, SSH.
• Strong interest in cybersecurity trends and attack techniques.
• Relevant certifications are an advantage:
  Cisco CCNA/CCNP, Check Point CCSE/CCSM, CyberArk CDE, CISSP, CREST, OSCP, and other security-related certifications.

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771

·  At least 4 years combined work experience in software development, application security, and cloud computing (e.g., AWS)

· Familiar with mobile and web application programming interfaces (API) architecture (e.g., REST, SOAP, SSL/TLS)

· Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks

· Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard

· Familiar with Agile development processes, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CD pipelines

·  Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc.

· Track and address security vulnerabilities with timely remediation and patching processes.

· Conduct security awareness training sessions

·Good verbal/written communication, collaboration skills and experience interactingwith various stakeholders

· Strong analytical, problem-solving, and troubleshooting skills; ability to workindependently

· Relevant certifications preferred (e.g., CISSP, OSCP, AWS security, AWS DevOps Engineer, or equivalent, etc.)

· Experience in working with Government Commercial Cloud (GCC) preferred.

Job Tasks and Responsibilities

Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure

Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms

Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks

Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities

Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management

Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption

Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities

Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes

Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure

Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards

Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle

Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency

Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs

Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation

Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage

Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage

Experience in agile development environment will be an added advantage

Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage

Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage

Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage

Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage

Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage

Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage

Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage

Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage

Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage

Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage

Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage

Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

Job description

• Location will be discussed during interview
• Required to perform 12-hour shift duty (6 days per week)
• Patrol and static guarding of the estate
• Perform other ad-hoc duties as assigned
• Maintain relation with clients and address any security issues
• Maintain access control at the estate
• Any educational background
• Able to read, write & speak English
• Possess valid security license is a MUST
• Walk in for Interview @ 60 Paya Lebar Road #09-06 Paya Lebar Square Singapore 409051

Job Types: Full-time, Part-time, Permanent, Contract, Temporary

Schedule:

• Day shift
• Night shift

Supplemental Pay:

• Overtime pay

Willingness to travel:

• 100% (Preferred)

Work Location: In person

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

Reachfield Security (Grade “A” agency) specializes in supplyingsecurity manpower to Schools, Factories, Shopping Centres, Museums, libraries,etc

Security Officer, Night @ Outram

Salary : up to $3130 gross a month (5666days work arrangement)

////////////////////////////////////

1. Works in Commercial (Factory / Warehouse / Condo / Mall /Polytechnic) environment.

2. Good customer service skills; able to communicate with peopleof all levels

3. 12hrs-shift (Fixed shift)

4. PC literate

5. Job duties include issue visitors/ contractor passes, clocking,patrolling, protecting clients’ premise and access control, etc.

6. Possess valid security license, completed 4 mandatory WSQmodule for PWM-SO

Reachfield Security & Safety Management Pte Ltd

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

For more information, please call office at 6324 2925 (Andrew)