Total 2,887 job vacancies in Singapore

Reachfield Security (Grade “A” agency) specializes in supplyingsecurity manpower to Schools, Factories, Shopping Centres, Museums, libraries,etc

Security Officer, Night @ Outram

Salary : up to $3130 gross a month (5666days work arrangement)

////////////////////////////////////

1. Works in Commercial (Factory / Warehouse / Condo / Mall /Polytechnic) environment.

2. Good customer service skills; able to communicate with peopleof all levels

3. 12hrs-shift (Fixed shift)

4. PC literate

5. Job duties include issue visitors/ contractor passes, clocking,patrolling, protecting clients’ premise and access control, etc.

6. Possess valid security license, completed 4 mandatory WSQmodule for PWM-SO

Reachfield Security & Safety Management Pte Ltd

10 Anson Road #26-09

International Plaza, Singapore 079903

(Tanjong Pagar MRT)

For more information, please call office at 6324 2925 (Andrew)

Successful candidates need to be comfortable with working on weekends, and rotation shifts as and when required.

Key Responsibilities

• Work with infra and app teams on requirement gathering to implementation, for all the BAU activities.
• Review and analyze infrastructure changes and identify the gaps, for all the BAU activities.
• Perform all infra change activities (BAU and non-BAU). These include routers, switches, load balancers, firewalls, proxy, DNS and etc.
• Perform Network and Firewall patching and other administration tasks.
• Guide app team to troubleshoot infra related issues.
• Be the SME for Network and Firewall administration and automation.
• Any other ad-hoc duties as assigned by supervisors

Operation& Process:

• Collaborates with Application teams and other infra teams to develop technical solutions and enhancements.
• Drive the onboarding of new applications on to the production environment.
• Assist to deploy, maintain, and enhance the security of all infrastructure systems through administrative, preventive, detective, and reactive controls, such as change and configuration management, anti-virus measures, patch management, and system scans.

Requirements:

• Bachelor's degree in relevant field (e.g., Computer Science, Information Technology, Engineering).
• Around 8 years’ experience providing network operational and administration support for Cisco, Arista, F5, Huawei, Checkpoint, Infoblox, Fortinet (firewall & proxy) products.
• Knowledge in network routing and switching protocols, and its related technologies.
• Knowledge in network security, load balancing and optimization technologies.
• Able to work extended hours and perform standby duty after office hours when required.
• Possess good technical problem-solving and troubleshooting skills.
• Attention to detail and well-versed in documentation.
• Hands on experience in Cloud computing, Microsoft Dynamics CRM, Office365 is an added advantage.
• Minimum CCNA/CCNP certification or equivalent is essential.
• Other network/firewall/DNS/F5/proxy certification will be an added advantage.
• Able to work as a team player, as well as independently.

Interested applicants, please email your resume to Douglas Tan Yu Feng

Email: douglastan@recruitexpress.com.sg

CEI Reg No: R26160004

EA Licence No: 99C4599

Recruit Express Pte Ltd

[Order Number: 1093116]

Responsibilities:

• Provide pre-sales technical support on assigned cybersecurity products to customers and partners.
• Collaborate with the Sales team to develop and position solutions for market selling and customer proposals.
• Understand customer IT/Security infrastructure and business requirements.
• Perform strategic cybersecurity solution selling.
• Demonstrate cybersecurity solutions.
• Conduct proof of concept for proposed cybersecurity solutions and network performance solutions.
• Work with solution vendors on business solution proposals and attend to RFI/RFP design, compliance, and clarifications.
• Develop design guidelines and recommend improvements to customers on assigned cybersecurity products.
• Perform in-house lab tests to validate customer proof-of-concept setups, endpoint/network designs, and endpoint/network deployments using new products and features.
• Stay updated on competitive solutions, products, and services.
• Provide enablement training for partners' internal post-sales engineers on product/technology knowledge.
• Conduct routine updates on new products/technologies to internal sales staff.
• Maintain good rapport with customers and vendors.

Requirements:

• Minimum 1 year of experience in pre-sales activities for large enterprises or government sectors, or related fields. Candidates with several years of experience in delivering and implementing cybersecurity technology and solutions, and open to embarking on a pre-sales consultant role, are welcome to apply.
• Strong knowledge and understanding of the security industry.
• Ready to perform demos and presentations on product expertise in key security technologies.
• Possess good technical knowledge in internet architecture, network infrastructure, software-defined networks, network performance tools and solutions, UNIX, Windows, VMware, and security covering endpoint, email, web, and cloud.
• Ability to design an architecture and write proposals.

To Apply, please kindly email your updated resume to

cv_gary@goodjobcreations.com.sg

Please kindly refer to the Privacy Policy of Good Job Creations for your reference:

https://goodjobcreations.com.sg/en/privacy-policy/

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

EA Personnel Name: Gary Ho Cheng Xuan

EA Personnel Reg. No.: R1549767

EA License No.: 07C5771

• Oversee and expand the portfolio of cybersecurity products and related technical services to drive market growth andprofitability.
• Collaborate with sales and operations teams to enhance service quality, optimize product delivery, and develop competitive pricingstrategies.
• Conduct market research, analyze trends, and provide actionable insights for medium- and long-term business planning.
• Identify and evaluate potential partner relationships tosupport product adoption and maximize market reach.

Requirements:

• Diploma or degree in IT, Computer Science, or related field; candidates without IT qualifications must have 2–3 years of relevant sales experience.
• Fresh graduates with strong motivation and willingness tolearn, or professionals with sales experience in other industries, are encouraged to apply.
• Proven ability to manage products, services, and technical solutions in IT or cybersecurity environments.
• Strong analytical, leadership, and problem-solving skillswith excellent interpersonal and communication abilities.

If you are keen to apply for the position, kindly email yourdetailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will benotified.

For more job opportunities, please visit our websiteat www.recruit-expert.com

EA Licence: 19C9701

Registration: R21100996

Vulnerability Management Operations is responsible for the firm-wide impact analysis, overall risk assessment, and coordination/communication of critical vulnerabilities identified as impacting JPMorgan Chase applications and/or infrastructure components. This function is performed globally and at the scale of which JPMC operates by coordinating a response that could be firm-wide or application specific. The team’s actions are performed using a risk-based approach considering the criticality of the vulnerability and the ability for our Line of Business partners to service their clients and customers globally.

As a Security Operations Vice President in Cybersecurity & Tech Controls, Vulnerabilities Management Team, you will be a key member of the Singapore team, as part of a follow-the-sun global team. You will work directly with Line of Business Application Teams, Subject Matter Experts, Production Management Teams, Product Owners, Senior Technology Management, External Vendors and Risk and Control functions. You’ll be on the front lines of managing vulnerabilities by making critical decisions on the inherent risk to the infrastructure or the application itself and thus the risk to the firm clients & customers. You will be working with a highly-motivated team laser-focused on analyzing, scoping, developing and delivering solutions built to stop adversaries and strengthen our security posture. Your research and work will ensure stability and resiliency of our current technology products, emerging technology and our vast application estate. Working in tandem with various internal teams both in Cyber and various Line of Business partners, as well as technologists and innovators across our global network, by leading the positive actions that will stop adversaries and strengthen customer’s confidence.

Job responsibilities

• Review new vulnerabilities published from multiple sources and identify those that may pose risk to the firm.

• Define an accurate risk rating in line with proprietary and industry standard risk rating methodologies.

• Uses enterprise-authorized AI capabilities within the work environment to accelerate security investigation triage and incident reporting, validating outputs and handling operational data according to sensitivity and security requirements.

• Document impacted assets and/or application(s) providing a detailed write up on the risk and exposure posed by vulnerabilities.

• Assess threat actor intelligence, exploit code, and/or conceptual code to determine attack vectors.

• Recommend any risk mitigation factors and define the remediation activity if known.

• Assess security researcher identified vulnerabilities to provide recommendations on remediation and identify additional risk

• Leverage AI tools to accelerate the triage and assessment of vulnerabilities, as well as improve the process workflow and documentation quality.

• Drive global teams’ daily workflows through case-load analysis and prioritization, while serving as the technical lead and representative on major incidents impacting the Vulnerability Management space.

• Demonstrate the ability to develop and form strong working relationships with the partnering Cybersecurity Operations functions and key technology leaders in the region.

• Drives reuse-first adoption of AI-assisted workflows to enhance threat detection and response processes, ensuring outputs are validated and aligned to security, resiliency, and auditability expectations.

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or related disciplines

• 5+ years’ experience in a Cyber Operations/Vulnerability Management role with a strong knowledge of operational processes supporting Vulnerability Management and the wider Security Operations Center; with the ability to demonstrate comprehension of the end-to-end Vulnerability Management workflow (to include industry standards such as CVE, CPE, CVSS).

• Demonstrated experience coordinating Incident Management and/or cyber incident response, including cross-team alignment and clear stakeholder communications.

• Strong and broad understanding of Cyber Security Controls (Physical, Logical, Processes and Procedures).

• Strong and broad understanding of leading vendor products/applications e.g., Oracle [Java], VMWare, F5, Citrix, Microsoft; to include product lifecycle & release schedules.

• Strong and broad understanding of open-source software deployment in a large technology estate.

• Strong understanding of cloud (public and private) environments, along with familiarity in cyber vulnerability detection and scanning tools.

• Experience working with data sources using SQL, JSON, APIs, and Splunk, alongside Agile practices, including managing remediation actions through an active backlog and Jira.

• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security operations workflows with strong validation habits and awareness of data sensitivity.

• Ability to review and validate AI-assisted investigation findings and recommendations before implementation, escalating when uncertain and ensuring outcomes align to security and auditability expectations.

• Previous 24 x 7 operations experience.

Preferred qualifications, capabilities, and skills

• Have an aptitude for Vulnerability Research and Exploit Development (either from a professional background or by demonstrating an aptitude e.g. through capture the flag challenges).

• Experience with frontier AI models and the ability to conduct AI assisted vulnerability research.

• Be operationally focused and enjoy working in a dynamic environment, with the day-to-day focus on quick and timely risk reduction activities.

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=a3671653f1a8b0d004a36b1479871162

Exceptional Hospitality Starts with You

Picture yourself brightening someone’s day. When you join our Hotels team, that’s exactly what you’ll do every time you come to work! You will oversee the safety and security operations of the hotel, ensuring that all guests, staff, and property are safe and secure. You will develop and implement security policies, conduct risk assessments, and lead the safety team to ensure compliance with local safety regulations and hotel policies. As a Safety & Security Manager, and facilities – you’re spreading the light and warmth of hospitality by delivering memorable experiences that make the stay for every guest.

Here’s what you’ll do during a typical day:

Planning Activities

• Ensure compliance with Fire Safety, Health & Safety regulations, and internal policies, including the Global Security Manual
• Conduct regular building patrols (minimum three per 24 hours) to ensure security, fire prevention, and safe evacuation readiness
• Liaise with Department Heads to ensure staff awareness of security responsibilities; provide guidance and support, including induction training
• Plan and deliver regular safety and security training programmes (e.g. fire safety, first aid, emergency response, active threat awareness)
• Coordinate and monitor key security programmes such as lost & found, key control audits, evacuation drills, and Manager on Duty schedules
• Support event planning with Department Heads by assessing risks and recommending appropriate security measures
• Maintain strong working knowledge of the hotel’s layout and operations to anticipate and address potential risks
• Recruit, train, and develop security personnel to ensure compliance with company standards

Organising Activities

• Deploy and manage security resources to ensure optimal coverage and operational efficiency across all hotel areas
• Supervise, coach, and develop team members, ensuring training and performance standards are met
• Plan and schedule daily security operations, including manpower deployment and patrol duties
• Liaise with operational departments to stay informed of daily activities and potential risks
• Ensure compliance with Hilton’s Global Security Manual and all legal requirements
• Conduct regular internal audits and prepare security reports to identify trends and drive improvements
• Lead and document investigations into incidents (e.g. accidents, theft, loss, unlawful activity) and report findings to management

Directing Activities

• Lead the implementation of all safety and security programmes to protect guests, team members, and assets
• Coordinate with government authorities and law enforcement agencies as required
• Oversee security arrangements for events, including deployment of additional personnel
• Direct routine and ad-hoc patrols across all hotel areas, including public spaces, rooms, and back-of-house areas
• Manage incidents and determine when escalation to authorities is required
• Liaise with corporate and senior management on security policies and best practices
• Conduct inspections (e.g. lockers, personnel checks) in line with company policies
• Provide guidance to team members and departments on security-related matters, ensuring professionalism and alignment with Hilton values

Controlling Activities

• Monitor and report all incidents and accidents through approved systems, ensuring proper documentation and follow-up
• Maintain accurate records, reports, and communication related to security activities
• Monitor team performance and ensure adherence to departmental standards
• Ensure compliance with fire safety, emergency procedures, anti-terrorism measures, and human rights policies (including modern slavery)
• Work with HR and departments to verify proper documentation and identification for all team members and contractors
• Oversee key control processes across departments to ensure accountability and security
   

At Hilton, our core values define what it takes to succeed here and guide the qualities we look for in every team member:

A passion for spreading the light and warmth of Hospitality. Acting with Integrity and always doing the right thing. Inspiring others through Leadership. A belief that Teamwork drives the best outcomes. A sense of Ownership and accountability. And a focus on the Now, bringing urgency and discipline to every moment, knowing it can make a lasting impact.

In addition, this role requires the following minimum qualifications:

• Minimum 5 years of experience in security and fire safety management.
• Valid Security Officer License issued by the Police Licensing & Regulatory Department (PLRD).
• Certified Senior Fire Safety Manager, and certification in bizSAFE Level 4 preferred.
• Certified First Aider with a valid Company Emergency Response Team (CERT) certification.
• Strong knowledge of local safety, fire, and security regulations and compliance requirements.
• Good understanding of hotel security operations and service standards.
• Proven ability to respond effectively to emergencies and security incidents.
• Strong interpersonal skills with the ability to build relationships with authorities and internal stakeholders.
• Good verbal and written communication skills, including report writing.
• Ability to train, coach, and develop team members.

Key Responsibilities

• Design, implement, and manage the Vulnerability Management Program, ensuring execution across all phases of the vulnerability management lifecycle.
• Configure, schedule, and monitor vulnerability scans using enterprise tools (e.g., Tenable/Nessus), ensuring successful execution and investigating/re-running failed scans.
• Perform continuous asset discovery and ensure newly identified assets are onboarded into the vulnerability management platform and properly registered in CMDB.
• Assess and prioritize vulnerabilities using a risk-based approach, considering asset criticality, business impact, and environmental context.
• Partner with infrastructure, network, and application teams (Windows, Unix, databases, etc.) to drive remediation of identified vulnerabilities.
• Provide technical advisory to stakeholders on vulnerability impact, exploitability, and remediation strategies.
• Analyze and validate false positives, identify technical constraints, and facilitate risk acceptance processes, including stakeholder alignment and approvals.
• Lead remediation planning for penetration testing findings in collaboration with cross-functional teams.
• Conduct threat exposure assessments and targeted vulnerability scans, driving mitigation and response actions.
• Maintain and enhance vulnerability dashboards and reporting, delivering insights to both technical teams and senior management.
• Track and report progress against defined KPIs and SLAs, ensuring compliance with organizational standards.
• Escalate critical risks and provide timely updates to leadership and relevant stakeholders.
• Drive continuous service improvements in vulnerability management processes, tools, and methodologies.
• Support global coordination across teams operating in multiple geographical regions.
• Ensure adherence to security policies, regulatory requirements, and compliance frameworks, including financial security and fraud prevention obligations.
• Stay updated on emerging threats, vulnerabilities, and industry best practices, applying insights to improve organizational defenses.

Qualifications and Profile

• 8–10 years of overall IT experience with 4–7 years in Information Security and minimum 4+ years in enterprise Vulnerability Management.
• Proven hands-on experience managing end-to-end Vulnerability Management programs in large enterprise environments.
• Strong technical knowledge of vulnerability assessment and remediation across:
• Operating systems (Windows, Unix/Linux)
• Networks and infrastructure
• Databases and application servers
• Ability to analyze vulnerabilities, assess risk exposure, and prioritize remediation using a risk-based approach.
• Hands-on experience with Tenable (Nessus) SecurityCenter or equivalent vulnerability scanning tools in large-scale environments.
• Familiarity with threat and vulnerability intelligence and its application to enterprise security operations.
• Strong understanding of security reporting requirements at both technical and management levels.
• Hands-on experience creating reports, dashboards, and trend analysis using:
• Excel, PowerPoint, Word
• BI tools such as Power BI or similar
• Ability to present insights in a clear, structured, and business-relevant manner.

Interested applicants please send your resume in MS Words format toprasant.sirohi@ambition.com.sg and attention to Prasant Sirohi (R22106307)

Shortlisted candidates will be notified

www.ambition.com.sg

EA Registration Number: R22106307

Data provided is for recruitment purposes only

Business Registration Number: 200611680D. License Number: 10C5117

Job Tasks and Responsibilities

Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure

Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms

Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks

Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities

Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management

Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption

Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities

Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes

Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure

Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards

Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle

Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency

Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs

Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation

Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage

Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage

Experience in agile development environment will be an added advantage

Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage

Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage

Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage

Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage

Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage

Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage

Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage

Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage

Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage

Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage

Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage

Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

The Security Manager is responsible for leading and overseeing all aspects of security and safety for Sports Excellence Singapore. This role ensures the security and safety of staff, student-athletes, residents, visitors, physical assets, and operations through robust security strategies, operational excellence, and regulatory compliance.

The incumbent will drive a proactive and risk-informed security posture by strengthening governance, improving operational readiness, leveraging security technologies, and working closely with internal and external stakeholders to maintain a safe and secure environment.

Key Responsibilities

Security Strategy & Risk Management

·       Lead site security framework aligned with organisational priorities

·       Conduct risk assessments and implement mitigation plans

·       Set and monitor KPIs for prevention, response, and improvement

Operations & Incident Management

·       Oversee daily security operations and environment safety

·       Lead incident response, investigation, and documentation

·       Ensure effective surveillance, access control, and asset protection

·       Use technology to enhance efficiency and resilience

Compliance& Governance

·       Ensure compliance with relevant laws and regulations

·       Maintain audit readiness and data confidentiality

Emergency Preparedness & Business Continuity

·       Lead emergency planning and response(fire, security threats)

·       Conduct drills and continuous improvement reviews

·       Coordinate with relevant government agencies

Team & Vendor Management

·       Oversee outsourced vendors and service performance

Financial Management

·       Manage budget and ensure cost-effective security investment

Stakeholder Engagement

·       Collaborate with internal and external stakeholders on security matters

·       Build trust and promote awareness across community

·       Maintain professional, balanced conduct in all situations

Any other matters, as assigned by Management Team.

Job Requirements

·       Diploma in Security Management, Risk Management, WSQ security qualifications, Advanced Certificate in Security, management-level security training or a related field is preferred

·       Certification in Fire Safety Manager, First Aid, AED/CPR is preferred

·       At least 5 years of experience in a managerial role leading security teams and site operations

·       Minimum 8 years of security experience, preferably in residential, education, or customer-facing environments

·       Valid Singapore security license and regulatory compliance

·       Strong knowledge of security operations, risk assessment, incident management, investigation, and emergency planning

·       Familiarity with security technologies such as CCTV, access control, various alarm monitoring, incident reporting systems, and related security platforms

·       Knowledge of relevant legislation(WSH, PDPA, security procedures)

·       Experience in liaising with police and external agencies on security matters

·       Experience in budgeting, manpower planning, vendor management, security related improvement works and service partner oversight

·       Able to work shifts, weekends, and respond to incidents beyond working hours

·       Able to stay in provided accommodation will be an advantage

·       Independent, team oriented and able to work under pressure

·       Proficient in MS Office with strong reporting and documentation skills

We regret to inform that only shortlisted candidates will be notified.

Security Operations Engineer

Location: Singapore, CBD
Employment Type: 12 months (renewable Contract)

Key Responsibilities:

• Administer and support security platforms, with a strong focus on CyberArk and Tenable.
• Perform day-to-day BAU activities including troubleshooting, patching, monitoring, and incident resolution.
• Manage privileged access management (PAM) solutions and ensure platform stability and security.
• Support security operations processes, ticket management, and vendor engagements.

Requirements:

• Hands-on experience as a CyberArk Administrator (not just an end user).
• Strong experience supporting CyberArk environments, including troubleshooting and maintenance.
• Experience with vulnerability management tools such as Tenable.
• CyberArk CDE (Certified Delivery Engineer) certification is mandatory.
• Good understanding of security operations, privileged access management, and cybersecurity best practices.

Preferred Skills:

• CyberArk plugin development and automation experience.
• Policy review and optimization expertise.
• Experience in CyberArk migration or upgrade projects.
• Scripting and process automation skills.

Role Overview

We are seeking a motivated and skilled Security Consultant to join our cybersecurity team. The ideal candidate will have hands-on experience in vulnerability assessment and penetration testing (VAPT), and a strong foundation in offensive security practices. This role requires a proactive individual who can assess, identify, and exploit security vulnerabilities across network and web environments, and provide actionable remediation recommendations to strengthen clients’ security posture.

Key Responsibilities

• Conduct network and webapplication vulnerability assessments and penetration tests (VAPT) to identifyand validate security risks.
• Prepare detailed reports outlining findings, risks, and practical remediation strategies.
• Work closely with clients and internal teams to deliver effective security solutions.
• Stay updated with emerging security threats, exploits, and industry best practices.
• Support internal research and development to enhance service offerings.

Requirements

• Nationality: Must be a Singapore Citizen.
• Experience: Minimum 2 years of relevant hands-on security testing experience.
• Certifications (at least one required): OSCP/ OSCP+ / CRT
• Strong knowledge of network protocols, web application architecture, and common vulnerabilities (e.g.,OWASP Top 10).
• Familiarity with industry-standard tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, etc.).
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication and report-writing skills.

Good to Have

• Additional offensive security certifications (e.g., OSWE, OSEP, CRTO, CRTL).
• Exposure to source code review,cloud penetration testing and mobile application testing.
• Experience working with government or regulated industry clients.

Why Join Us?

• Opportunity to work on challenging, real-world security engagements.
• Professional growth through advanced projects and certifications.
• Collaborative and knowledge-sharing environment.

ARSLAN SRS Singapore

JOB RESPONSIBILITIES:

• Continuous monitoring of all access control systems, CCTV, and intrusion detection alarms.

• Rapid triage of alerts to determine critically and dispatch the correct personnel.

• Initial contextualization of alerts high priority intelligence briefs.

• Execution of routine and intelligence-driven checking of cameras and access logs.

• Creation of basic incident reports and daily activity logs for a comprehensive audit trail.

• Management of basic personnel access requests, virtual surveillance monitoring and transferring authorities.

• Initial / advance support for crisis events, including alert distribution and activation of business continuity plans.

• Comprehensive audits of access control and intrusion detection systems to ensure optimal performance.

• In-depth analysis of alarm data to correlate events and identify patterns, distinguishing false positives from genuine threats.

• Development and refinement of security procedures based on new threat intelligence.

• Systematic reviews of security assets to identify vulnerabilities and recommend hardening measures.

• Compilation of evidence for internal and external audits to support the teams.

• Management of Security Systems Commissioning, including the testing and configuration of new or upgraded systems.

JOB REQUIREMENTS:

• Must be able to start within short notice

• Must hold a valid PRD Grade of Senior Security Officer (SSO) rank.

• Must be first-aid trained

• Must be computer literate

• Have to undergo background checks and security screening.

• Experienced working in Data Center or Security Operation Centre environment is an advantage.

• Independent, well-organized, and good work attitude.

As a Networking Managed Services Engineer (L2) at NTT DATA, you'll take on a developing engineering role where your main goal is to ensure our clients' IT infrastructure and systems remain operational. You'll achieve this by proactively monitoring, identifying, investigating, and resolving technical incidents and problems. You'll work closely with our clients and internal teams to ensure that services are restored swiftly, in line with our service level agreements (SLAs).

Your day will revolve around reviewing client requests and tickets, applying your technical expertise to resolve them efficiently and effectively. You'll be the go-to person for second-line support, handling incidents and requests of medium complexity. In addition to your daily tasks, you'll have opportunities to contribute to exciting project work from time to time.

You'll proactively monitor work queues, execute operational tasks, and update tickets with the actions you've taken. Identifying, analysing, and logging issues before they escalate will be a key part of your role. You'll communicate with other teams and clients to provide support and ensure that changes are executed with clear risk identification and mitigation plans.

As part of the shift handover process, you'll highlight key tickets and upcoming critical tasks for the next shift. When needed, you'll escalate tickets to ensure the right focus from our Centres of Excellence (CoE) and other teams. Collaborating with our automation teams, you'll work on optimizing efforts and automating routine tasks, all while coaching our Service desk and L1 teams in both technical and behavioural skills.

You'll also establish monitoring for client infrastructure, leading and managing initial client escalations for operational issues. Contributing to the change management process, you'll log change requests, execute approved maintenance activities, and audit incident and request tickets for quality. Your insights will drive trend analysis reports, identifying tasks suitable for automation to reduce tickets and optimize efforts. You might also support disaster recovery functions and other related tasks as needed.

To thrive in this role, you need to have:

• Proficiency in technologies such as Pulse Secure SSL VPN, Palo Alto, Fortinet, Cisco Nexus switches/routers/firewalls, and more familiarity with ticketing tools.

• At least one technical certification in the above-mentioned technologies.

• Strong planning skills, with the ability to anticipate and adapt to changing circumstances.

• Adaptability and resilience in a dynamic work environment.

• Ability to communicate and work effectively across different cultures and social groups.

• Proficiency in active listening and client-centric communication.

• A positive outlook and the ability to work well under pressure.

• A client-first attitude, always seeking to create positive client experiences.

• A bachelor's degree or equivalent qualification in IT/Computing, or equivalent work experience.

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred

Role: ITSO - Application Security

JD:
Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred.

Role: ITSO Application Security Consultant

JD:
Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred.

JOB RESPONSIBILITIES:

• Continuous monitoring of all access control systems, CCTV, and intrusion detection alarms.

• Rapid triage of alerts to determine critically and dispatch the correct personnel.

• Initial contextualization of alerts high priority intelligence briefs.

• Execution of routine and intelligence-driven checking of cameras and access logs.

• Creation of basic incident reports and daily activity logs for a comprehensive audit trail.

• Management of basic personnel access requests, virtual surveillance monitoring and transferring authorities.

• Initial / advance support for crisis events, including alert distribution and activation of business continuity plans.

• Comprehensive audits of access control and intrusion detection systems to ensure optimal performance.

• In-depth analysis of alarm data to correlate events and identify patterns, distinguishing false positives from genuine threats.

• Development and refinement of security procedures based on new threat intelligence.

• Systematic reviews of security assets to identify vulnerabilities and recommend hardening measures.

• Compilation of evidence for internal and external audits to support the teams.

• Management of Security Systems Commissioning, including the testing and configuration of new or upgraded systems.

JOB REQUIREMENTS:

• Must be able to start within short notice

• Must hold a valid PRD Grade of Senior Security Officer (SSO) rank.

• Must be first-aid trained

• Must be computer literate

• Have to undergo background checks and security screening.

• Experienced working in Data Center or Security Operation Centre environment is an advantage.

• Independent, well-organized, and good work attitude.

[Job ID: 1600983]

Responsibilities

• Deliver professional services, including deployment, implementation, and upgrades of cybersecurity products distributed by Netpoleon. This may occasionally involve customer coordination and project timeline management.
• Provide practical and effective technical solutions or alternatives based on customer requirements.
• Conduct product training for customers, partners, and internal teams.
• Perform installation, configuration, and basic troubleshooting independently using product documentation.
• Continuously upskill and obtain relevant technical certifications for assigned technologies.
• Develop into a subject matter expert over time and support knowledge transfer to internal teams for enhanced customer support.
• Provide technical support to sales and support teams, including product clarification, solution design input, tender compliance, and ad-hoc technical assistance.
• Perform any other duties as assigned.

Requirements

• 2 years of experience in IT, Information Security, or Cybersecurity preferred
• Strong knowledge of cybersecurity and IT infrastructure, including:
  Firewalls, VPN, DLP, IDS/IPS, Web Proxy, DNS, Email Security, SIEM, log management, virtualization, containers, cloud platforms (AWS, Azure, Google Cloud), DevOps/DevSecOps, IAM, PAM, endpoint security, CyberArk Conjur.
• Solid troubleshooting skills in networking and systems, including:
  TCP/IP, routing, NAT, VLAN, multicast, OSPF, BGP, Active Directory, LDAP, RADIUS, SNMP, Syslog, SMTP, TLS, SSH.
• Strong interest in cybersecurity trends and attack techniques.
• Relevant certifications are an advantage:
  Cisco CCNA/CCNP, Check Point CCSE/CCSM, CyberArk CDE, CISSP, CREST, OSCP, and other security-related certifications.

We regret that only shortlisted candidates will be notified. However, rest assured that all applications will be updated to our resume bank for future opportunities.

Please kindly refer to the Privacy Policy of Good Job Creations for your reference: https://goodjobcreations.com.sg/en/privacy-policy/

EA Personnel Name: Ong Kang Quan Ryan
EA Personnel Registration Number: R23116952
EA License No.: 07C5771

·  At least 4 years combined work experience in software development, application security, and cloud computing (e.g., AWS)

· Familiar with mobile and web application programming interfaces (API) architecture (e.g., REST, SOAP, SSL/TLS)

· Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks

· Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard

· Familiar with Agile development processes, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CD pipelines

·  Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc.

· Track and address security vulnerabilities with timely remediation and patching processes.

· Conduct security awareness training sessions

·Good verbal/written communication, collaboration skills and experience interactingwith various stakeholders

· Strong analytical, problem-solving, and troubleshooting skills; ability to workindependently

· Relevant certifications preferred (e.g., CISSP, OSCP, AWS security, AWS DevOps Engineer, or equivalent, etc.)

· Experience in working with Government Commercial Cloud (GCC) preferred.

Job Tasks and Responsibilities

Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure

Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms

Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks

Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities

Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management

Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption

Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities

Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes

Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure

Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards

Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle

Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency

Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs

Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation

Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage

Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage

Experience in agile development environment will be an added advantage

Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage

Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage

Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage

Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage

Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage

Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage

Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage

Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage

Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage

Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage

Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage

Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines

ITSO - Application Security (Consultant)

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security andcloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects toidentify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application securityverification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting withvarious stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer orequivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred.

⭐️ ARSLAN SRS SINGAPORE ⭐️

⭐️ARSLAN SRS ⭐️