Total 173 Legal / Public / Security job vacancies

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

Position Overview:

Squarepoint is seeking a subject matter expert to join our Information Security team as a Senior Information Security Engineer. This senior position plays a pivotal role in strengthening our security posture by providing expert guidance, and driving improvements across key areas such as network, cloud, data, and system security. The successful candidate will act as an escalation point to the Security Operations, ensuring complex security problems are effectively analysed and resolved. This role includes overseeing security in critical IT projects, leading threat modelling for complex systems, auditing key systems for security gaps, and building automated capabilities to continuously validate controls’ effectiveness and system resilience. This position offers an opportunity to lead security initiatives and shape the security roadmap. A high degree of self-motivation and proactivity is mandatory for success in this role.

• Strengthen security across core areas, including network and system security, email security, cloud security, and data protection.
• Serve as a security advisor for IT projects, ensuring security requirements are met and risks are mitigated.
• Manage and optimize security tools, ensuring they are effectively deployed and maintained.
• Lead the design and development of security solutions and architectures to protect critical assets.
• Provide second-line support to Security Operations.
• Conduct threat modelling and risk assessments to identify vulnerabilities and drive proactive mitigation strategies.
• Oversee relationships with the Managed Detection and Response (MDR) provider, ensuring service effectiveness and continuous improvement.
• Execute security roadmap’s initiatives, aligning with business objectives and emerging threats.
• Collaborate with cross-functional teams to enhance security awareness and integrate security into business processes.

Required Qualifications:

• Minimum 5 years of hands-on experience in an information security role, such as security engineering, security architecture, security operations, or application security.
• Thorough understanding of security best-practices, principles, and system hardening techniques.
• Hands-on experience with threat modelling, security testing, including penetration testing, and automated security validation.
• Solid knowledge of cloud, network, and systems security concepts.
• Experience with scripting with one or more languages – Python and PowerShell experience is a plus.
• Familiarity with security tools such as EDR software, DLP solutions, vulnerability scanners, firewalls and email gateways.
• Strong analytical skills and problem-solving skills, with the ability to investigate complex problems and design pragmatic solutions.
• Effective communication skills to work with technical and non-technical teams.
• Degree in Engineering, Computer Science, or STEM related field.

Nice to have:

• Strong knowledge of risk assessment methodologies.
• Familiarity with security best practices, configurations, and threat management in Azure, AWS, and GCP.
• Ability to analyse software for security risks, including reviewing source code, performing static and dynamic analysis, and identifying vulnerabilities in application design and implementation.
• Familiarity with regulatory frameworks and security standards (e.g., SEC Cybersecurity rules, MAS TRM Guidelines, NFA Cybersecurity Guidance, GDPR etc.)
• Relevant security certifications.

Working Hours: Monday – Thursday (8.30am –6pm), Friday (8.30am – 5.30pm) (Hybrid working arrangement) 

Working Location: North East

Salary Package: Up to SGD 11,000 + AWS 

Employment Type: Contract (1 year renewable with chances of conversion)

We are looking for a Cloud Security & DevSecOps Engineer to design, develop, and maintain secure, scalable, and automated solutions across cloud and endpoint environments. You will be responsible for software development, cloud engineering, DevSecOps automation, endpoint security, Zero Trust implementation, and Site Reliability Engineering (SRE) practices. This role requires a strong technical foundation across software engineering, cloud platforms, security technologies, and infrastructure automation.

Key Responsibilities

Software Development

• Design, develop, and maintain secure, scalable, and well-documented software solutions.
• Develop applications and automation tools using Python, Java, Node.js, JavaScript/TypeScript, or similar technologies.
• Design and integrate RESTful APIs and web services.
• Work with databases such as AWS DynamoDB and SQL-based databases.
• Collaborate with stakeholders to develop frontend and backend solutions, ensuring seamless system integration.
• Implement software testing and quality assurance best practices.
• Manage source code and development workflows using Git and version control tools.

Endpoint Security, Zero Trust & Identity Management

• Develop and implement solutions to secure and manage endpoint devices across Windows and macOS environments.
• Work with security platforms such as Microsoft Intune, CrowdStrike, CyberArk, and Tanium.
• Automate threat detection, remediation, reporting, and security operations processes.
• Design and implement Zero Trust security architectures and secure access solutions.
• Configure and manage identity and access management (IAM) solutions using Azure Entra ID, Okta, AWS IAM, SAML, and related technologies.
• Administer Cloudflare services including Access, Gateway, and Web Application Firewall (WAF).
• Implement secure authentication, authorisation, and access control frameworks.

Cloud Engineering, DevOps & Automation

• Design, develop, and maintain cloud-native solutions on AWS and Azure platforms.
• Build automation solutions leveraging AWS services such as Lambda, ECS Fargate, DynamoDB, SQS, S3, EC2, CloudWatch, IAM, VPC, WAF, and Step Functions.
• Develop Infrastructure-as-Code (IaC) solutions using Terraform and cloud-native tooling.
• Build and maintain CI/CD pipelines using GitLab CI and other DevOps tools.
• Implement and manage containerised environments using Docker and Kubernetes.
• Support Agile delivery practices through Scrum and Kanban methodologies.
• Conduct proof-of-concepts (PoCs) and evaluate emerging technologies to improve operational efficiency and security.

Site Reliability Engineering (SRE)

• Develop and maintain observability, monitoring, and alerting solutions using the ELK Stack (Elasticsearch, Logstash, Kibana).
• Define and track SLI, SLO, and SLA metrics to ensure service reliability and performance.
• Build dashboards, alerts, and predictive monitoring capabilities.
• Manage ELK clusters, agents, fleet policies, and log ingestion pipelines.
• Design and implement automated recovery and self-healing mechanisms for critical systems.
• Continuously improve platform reliability, scalability, and operational excellence.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related discipline.
• Experience in software development using Python, Java, Node.js, JavaScript/TypeScript, or similar languages.
• Hands-on experience with AWS and/or Azure cloud platforms.
• Strong knowledge of DevOps, CI/CD, Infrastructure-as-Code, and automation practices.
• Experience with endpoint security, Zero Trust architecture, IAM, and security technologies.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

If you are a cheerful, self-initiated, holds strong integrity values and who likes to meet new people and are able to contribute by fulfilling clients’ needs, join us!

Job Description:

• To manage and ensure that the systems, servers and infrastructure is installed in accordance to the prescribed design document and/or requirements
• Understanding the scope of works and the needs of the clients and implement the appropriate output to the best of your ability or to the requirements
• To design the network architecture and configure in accordance to the requirements
• Configure, Test and Hand over the required systems and provide Training to client
• Ensure the highest standard of system and infrastructure availability
• To liaise with various parties such as system manufacturers or cybersecurity vendors to resolve issues and problems
• Attend new product trainings

Requirements:

• Applicants need to be able to work overtime/Night Shift.
• Required Skill(s): Communication skills, Analytical skills, Decision making, Organizational skills, Attention to details, Patience and Knowledge of Systems engineering software tools
• Min 3 years of relevant hands-on experiences
• Familiar with Security Systems such as ISMS, CCTV, ACS and VA systems will be advantageous
• Familiar with Networking systems (eg. Routing, VLAN, VPN, Wireless AP) will be advantageous
• Familiar with IT Security (eg. firewall, IPSEC, SSL, hardening) will be advantageous
• Able to work independently with minimum guidance, monitoring and a good team player
• Valid Class 3 driving license has an added advantage

Other Information:

• Location: Kaki Bukit or as needed
• Working hours: 9am to 6pm
• Salary (commensurate with experience): Basic Salary + Variable Bonus

Resumes please INCLUDE:

• Personal particulars
• Education background
• Work experiences in point forms
• All reasons for leaving
• Current and expected salary
• Date of availability / Notice Period

Interested applicants are invited to send your updated resume in MS Word format via Apply Now. We regret that only shortlisted applicants will be notified.

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

The SOC Lead is a hands-on operational role with team oversight responsibilities. As a player-coach, the SOC Lead works alongside SOC Operators during shift operations — monitoring, responding to, and escalating security incidents — while also providing day-to-day guidance, coaching, and light management of the team. This role is suited for an experienced SOC professional who is ready to step up into a lead position without moving fully away from frontline operations.

Responsibilities:

1.  Frontline Operations 

▪     Perform monitoring, response, and escalation for security incidents across Singapore, including campus ACS alarms and CCTV systems.

▪     Act as a senior point of contact for staff, travellers, and agencies during security incidents.

▪     Execute event protection monitoring and movement tracking; coordinate emergency evacuations as required.

▪     Investigate, document, and close incidents in accordance with SOPs and KOPs.

▪     Report missing, damaged, or non-operational equipment, alarms, CCTV, or security systems promptly.

▪     Conduct daily and breaking news monitoring and provide timely reports to stakeholders.

2.  Team Oversight 

▪     Provide day-to-day guidance and oversight to SOC Operators during shift operations.

▪     Act as the first escalation point for the team on operational matters, complex incidents, and procedural queries.

▪     Support onboarding and continual training of SOC Operators, including competency checks and knowledge transfers.

▪     Conduct regular informal feedback and coaching conversations to support team development.

▪     Flag performance concerns or training gaps to the Security Operations Manager for further action.

▪     Assist with shift scheduling and coverage planning to ensure no operational gaps.

3.  Reporting & Standards

▪     Maintain accurate and timely records of incidents, communications, and shift activities.

▪     Contribute to shift handover briefings, ensuring continuity of situational awareness across the team.

▪     Uphold and enforce adherence to all SOC systems, SOPs, KOPs, and operational standards.

▪     Support participation in AARs, tabletop exercises (TTX), and drills as required.

*Office hours (Stand in may be required)

We are hiring and the details of this position are:

Job title: Cyber Security Engineer (Perm role, CREST CRT certificate, VAPT experience, up to $9000)

Job Description:

Technical Delivery & Penetration Testing

• Perform penetration testing (VAPT) across web, mobile, cloud, and infrastructure environments, ensuring CREST standards are met.
• Generate detailed technical and executive-level reports with risk analysis and actionable remediation guidance.
• Collaborate with pen-testers and technical teams to deliver client engagements and integrate findings into tailored solutions.
• Apply knowledge of OWASP Top 10, MITRE ATT&CK, and secure coding practices to assess and improve client environments.

Automation Integration

• Integrate AI and RPA into cybersecurity operations to enable automated triage, evidence collection, and compliance reporting.
• Lead initiatives to embed hyper automation into cybersecurity workflows, combining PA, AI/ML, and orchestration tools.

Thought Leadership & Brand Building

• Provide thought leadership on emerging cybersecurity risks, automation trends, and regulatory developments.
• Represent the company at industry events, conferences, and networking sessions to build brand visibility and strategic relationships.

Requirement:

• CREST CRT and CPSA certificate preferred
• Penetration testing, vulnerability assessments, security audits
• Exposure to RPA tools (UiPath, Automation Anywhere, Power Automate); familiarity with AI-based security tools (XDR, SOAR, ML-based detection)
• Strong understanding of OWASP Top 10, MITRE ATT&CK, PDPA, MAS TRM, ISO 27001
• Exceptional communication, presentation, and negotiation skills; ability to work independently and collaboratively in a fast-paced, client-facing consulting environment

Interested applicants please send your resume to rita@recruitexpress.com.sg and look for:

Rita Shi Tianhe

Recruit Express Pte Ltd

EA License No: 99C4599

EA Personnel Number: R26162019

We regret that only shortlisted candidates will be contacted.

• MNC Company
• Basic $2500 - $2800 + Incentive + AWS + Variable Bonus
• Excellent Welfare and Benefits + Career progression
• Working location: West
• Working hours: 12 Hours Rotating Shift: 7.30am-7.30pm, 7.30pm-7.30am (16 Shifts a month)

Job Responsibilities:

• Responding to intrusion alarm system activation
• Performing maintenance service, commissioning of alarm systems
• Attending to customer request on alarm and card access systems
• Conducting patrols at night
• Any others ad hoc duties as assigned

Job Requirements:

• Possess minimum Higher Nitec in Electrical Engineering, Electronic & Computer Engineering, Mechanical Engineering, and other related fields
• Possess at least 1- 2 years of relevant experience
• Possess Class 3 Driving License will be an advantage

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

LIONG ZHAO GUAN (R22107632)

EA Recruitment Pte Ltd

EA License No: 21C0492

Role Overview 

This role supports Security Operations Centre (SOC) activities, including monitoring, investigation, threat hunting, and incident response. The resource operates as a second line of defence, translating alerts into actionable findings and improving detection capability. 

Core Responsibilities 

• Perform L2 triage and investigation of security alerts across SIEM, EDR/XDR, email, identity, network, and cloud platforms 
• Correlate events to identify root cause, scope, and impact of security incidents 
• Investigate phishing, malware, account compromise, and unauthorised access cases 
• Conduct proactive threat hunting using threat intelligence and MITRE ATT&CK 
• Support containment, remediation, and recovery activities 
• Contribute to SOC improvements (playbooks, detection tuning, onboarding of new tools) 

Core Requirements 

• Degree or Diploma in Cybersecurity, IT, or related field 
• At least 3 years of experience in SOC operations or incident response (L2 preferred) 
• Experience with SIEM, EDR/XDR, and cloud or identity security tools 
• Strong understanding of attack chains, MITRE ATT&CK, and threat analysis 
• Demonstrated hands-on experience in incident investigation or threat hunting 
• Ability to operate independently in a SOC environment 

YOUR NEW JOB

As a Security Implementation Engineer, you will work alongside senior consultants and project teams to deliver successful implementations of Google SecOps and/or SentinelOne platforms, ensuring customers are onboarded effectively and solutions are configured according to project requirements.
You will support the deployment, configuration, and implementation of modern cybersecurity solutions across enterprise customer environments.
This is a 12-month renewable contract role based with one of the region's leading technology & systems integrators.

WHAT YOU’LL BE DOING

• Support the implementation and deployment of Google SecOps and/or SentinelOne solutions for enterprise customers
• Assist with solution configuration, onboarding, and integration activities
• Participate in customer workshops, requirement gathering, and technical discussions
• Perform testing, validation, and troubleshooting during implementation projects
• Document implementation procedures, technical configurations, and deployment activities
• Work closely with project managers, senior engineers, and customer stakeholders to ensure successful project delivery
• Provide post-implementation support and issue resolution where required
• Stay updated on product features, cybersecurity trends, and vendor best practices

WHAT IS NEEDED FROM YOU

• At least 1 year of hands-on experience with Google SecOps and/or SentinelOne solutions
• 1–3 years of IT infrastructure, cybersecurity, or systems implementation experience
• Basic understanding of SIEM, endpoint security, threat detection, and security operations concepts
• Experience supporting technical deployments, implementations, or system integrations
• Familiarity with Windows, Linux, networking, and cloud environments
• Strong troubleshooting and problem-solving skills
• Diploma or degree in Information Technology, Computer Science, Cybersecurity, or related field
• Good communication skills and ability to work directly with customers and internal teams

WHAT WILL MAKE YOU STAND OUT

• Relevant certifications from Google, SentinelOne, Microsoft, or other cybersecurity vendors
• Exposure to cybersecurity projects within enterprise environments
• Experience working for a systems integrator, managed services provider, or IT services organisation
• Familiarity with scripting or automation tools such as Python, PowerShell, or APIs
• Experience supporting SOC, SIEM, EDR, or threat monitoring environments

Job Summary:

The Application Security Consultants is responsible for auditing and validating the security posture of applications and their supporting infrastructure. This role focuses on reviewing security activities performed by development teams, including static and dynamic code analysis, infrastructure scans, and hardening practices. The analyst ensures that applications meet internal security standards and comply with regulatory requirements.

Key Responsibilities:

·      Review and validate results from SAST (Static Application Security Testing) and DAST( Dynamic Application Security Testing) tools.

·      Audit OS, container, and database scans for vulnerabilities and misconfigurations looking at reports a

·      Assess the effectiveness of hardening measures across application components (e.g., webservers, APIs, containers, databases).

·      Collaborate with application development and DevSecOps teams to ensure remediation of identified issues.

·      Maintain audit documentation, including findings, remediation tracking, and compliance status.

·      Evaluate adherence to secure coding practices and application security policies.

·      Support internal security audits related to application & underlying infrastructure security.

·      Stay updated on emerging threats, vulnerabilities, and secure development trends.

Required Qualifications:

·      Bachelor’s degree in computer science, Cybersecurity, or related field.

·      4+ years of experience in application security, security auditing, or secure software development.

·      Hands-on experience on one or more tools like SonarQube, Fortify SAST/DAST, Burp Suite,OWASP ZAP etc.

·      Strong understanding of OWASP Top 10, secure coding principles, and CI/CD pipelines.

·      Familiarity with container technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).

Certifications:

·      CRESTCertified Pen Tester

·      CISSP or CCSP 

·      Preferred Certified AWS DevSecOps Professional or equivalent

Key Competencies:

·      Analytical mindset with attention to detail

·      Ability to interpret scan results and prioritize remediation

·      Strong communication and collaboration skills

·      Knowledge of regulatory frameworks (e.g., ISO 27001, PCI-DSS, GDPR)

·      Experience working in Agile and DevOps environments'

Interested applicants please send your resume in MS Wordsformat to pooja.yadav@ambition.com.sg andattention to Pooja (R1551322)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1551322

Data provided is for recruitment purposes only

Business Registration Number: 200611680D.

License Number: 10C5117

Employment Type: Contract (1 year renewable, with potential for conversion)

Working Hours: Monday toThursday (8.30am – 6.00pm), Friday (8.30am – 5.30pm) (Hybrid WorkingArrangement)

Location: One North

Salary: Up to SGD 5,300

We are looking for an experienced IT Systems Governance & Project Management professional who can oversee enterprise systems from both an operational and governance perspective. The ideal candidate should have strong experience in IT governance, risk management, audit compliance, and system lifecycle management, while also being capable of coordinating system enhancements, security assessments, and change initiatives across multiple stakeholders.

Responsibilities:

• Conduct system criticality and risk assessments for enterprise systems.
• Manage system governance, compliance, and audit readiness activities.
• Coordinate system changes, enhancements, and remediation efforts.
• Track and manage security risks, vulnerabilities, and remediation actions.
• Support disaster recovery and cyber incident recovery planning.
• Perform access reviews and ensure timely user deprovisioning.
• Manage certificates, API keys, and system integration credentials.
• Maintain accurate system documentation and governance records.
• Collaborate with system owners, vendors, and internal stakeholders to drive system improvements.
• Provide regular reporting on system risks, issues, changes, and compliance status.

Requirements:

• Degree/Diploma in IT, Computer Science, Information Systems, or related field.
• At least 5 years of experience in IT governance, systems support, project management, or security-related roles.
• Strong understanding of IT governance, risk management, compliance, and audit processes.
• Experience managing system changes, vendors, and stakeholder engagements.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781

Endpoint Security Engineer – Singapore (SingaporeansOnly)

We are hiring an experienced and hands-on Endpoint SecurityEngineer to manage, operate, and enhance enterprise endpoint protectioncapabilities across our organization. The ideal candidate will have strongexperience in endpoint security operations, incident management, and enterprisesecurity tools such as Symantec Endpoint Protection Manager (SEPM) and/orMicrosoft Defender.

This role requires close collaboration with IToperations, security teams, and end users to ensure enterprise endpoints remainsecure against evolving cyber threats.

Key Responsibilities

Endpoint Protection & Security Operations

• Administer, maintain, and support Symantec Endpoint Protection Manager (SEPM), Microsoft Defender, or equivalent endpoint security platforms
• Deploy, configure, and manage endpoint protection policies including:
• Anti-malware
• Intrusion Prevention Systems (IPS)
• Firewall policies
• Device control
• Monitor endpoint security alerts and investigate incidents
• Perform root cause analysis and remediation activities
• Generate regular security posture and compliance reports
• Manage the complete lifecycle of endpoint security agents
• Execute upgrades, patching, and rollout activities during maintenance windows

User Support & Incident Management

• Provide Level 2 / Level 3 support for endpoint security-related incidents and requests
• Troubleshoot endpoint protection issues across Windows and/or Linux environments
• Work closely with internal IT and security teams to resolve operational issues efficiently

IT Service Management

• Follow ITIL processes for Incident, Problem, and Change Management
• Maintain accurate ticket documentation and resolution records
• Ensure SLA compliance and timely issue resolution

Required Skills & Qualifications

• Singaporeans only
• Degree in Computer Science, Information Technology, Cyber Security, or related discipline
• 4–6 years of relevant experience in endpoint security operations
• Minimum 1 year of hands-on experience with SEPM and/or Microsoft Defender
• Experience with HIPS/HIDS technologies
• Strong knowledge of Windows and/or Linux (RedHat) administration
• Ability to manage multiple priorities in a fast-paced environment
• Strong communication and interpersonal skills

Preferred Skills

• Knowledge of Microsoft Defender ecosystem
• Experience with scripting and automation using:
• Powershell
• Python

Feeling stuck in your career? It’s time for a change.

SICD’s 12-month Place-and-Train program equips you with the skills and confidence to launch a successful career as a Cyber Security Engineer.

Benefit from personalized 1:1 mentorship, a guaranteed SGD 3,000 monthly salary, and industry-recognized certifications — all designed to position you for long-term success.

Visit sicd.sg for more information, and join our upcoming webinar to learn more and ask questions about our career development program.

About the Role:

We are seeking a hands-on Cyber Security Firewall Engineer to provide operational support and security platforms. The ideal candidate will be experienced in managing Fortinet FortiGate and Palo Alto Networks firewalls, with foundation in network security, policy management, and incident response.

Key Responsibilities:

Firewall Operations (Fortinet & Palo Alto)

• Manage firewall rules creation, change requests, rule optimization, NAT/VPN configuration and firmware upgrades.

• Monitor traffic, identify anomalies, and remediate security events.

• Maintain HA configurations, routing and logging integrations.

• Support audits and evidence collection for regulatory/compliance requirements.

Tripwire

• Administer policies, baselines, agents, alerts, and remediation workflows.

• Investigate integrity violations; tune rules to reduce false positives.

Imperva (DB Security/DAM)

• Configure security policies, signatures, profiles, and exceptions.

• Monitor application-layer attacks; tune rules to balance protection and usability.

• Support database activity monitoring policies and reporting where applicable.

• Security Monitoring & Incident Response

• Triage alerts conduct root-cause analysis, and coordinate remediation.

Required Qualifications:

Hands-on expertise with:

• Fortinet FortiGate (policies, VPN, routing, HA, SD-WAN, logging).

• Palo Alto Networks firewalls (policies, NAT, App-ID, User-ID, Panorama).

• Tripwire (Hice to Have).

• Imperva (Hice to Have).

• Strong understanding of networking fundamentals (TCP/IP, VLANs, routing, NAT, SSL/TLS, DNS ).

• Experience in incident response, change management, and documentation.

• Ability to work independently with a focus on accuracy, speed, and risk reduction.

Preferred Certifications (Nice to Have)

Fortinet NSE 4–7, Palo Alto PCNSA/PCNSE, Imperva Certified Professional.

Soft Skills

• Clear communication with stakeholders and change advisory boards.

• Structured problem-solving and risk-based decision-making.

• Ownership mindset with strong time management for a contract environment.

Deliverables & KPIs

• Firewall rules changes are accordance to requests.

• Successful completion of firmware upgrades and config backups with rollback plans.

• Updated Tickets, network diagrams, and change records.

• Handover documentation and knowledge transfer at contract end.

Tools & Environment

• FortiGate / FortiManager / FortiAnalyzer

• Palo Alto NGFW / Panorama

• Tripwire Enter

Working hours :

8:30am to 6pm (Monday to Friday) onsite, no hybrid option.

The Managed Services Cross Technology Engineer (L2/L3) –Network / Security is a developing or seasoned engineering role,responsible for providing a managed service to clients to ensure that their ITinfrastructure and systems remain operational.

Through the proactive monitoring, identifying,investigating, and resolving of technical incidents and problems, the ManagedServices Cross Technology Engineer (L2/L3) is able to restore service toclients.

The primary objective of this role is to proactively work onautomation aspects of work focusing on Network / Security relating to theoperations. Also to work on client requests or tickets and applytechnical/process knowledge to resolve them without breaching service levelagreement (SLA).

The Managed Services Cross Technology Engineer (L2/L3)focuses on second-line support for incidents and requests with a medium levelof complexity and focusses across two or more technology domains - Cloud,Security, Networking, Applications and / or Collaboration etc.

This role may also contribute to / support on project workas and when required.

Key Responsibilities:

·       Network - Automate the provisioning, configuration, and testing of network infrastructure(routers, switches, firewalls, load balancers).

·       Develop and maintain CI/CD pipelines specifically for networkcode and configurations.

·       Utilize Infrastructure as Code (IaC) tools like Terraform orAnsible for network deployment.

·       Implement network monitoring and logging solutions to ensure highavailability and performance.

·       Maintain Git repositories for all network configurations andautomation scripts.

·       Collaborate with traditional Network and Software Engineering teams todesign scalable and reliable networks.

·       Focus on continuous improvement, pushing for a code-centric approachto network operations.

·       Security – Automate - Embed security testing and compliance checks earlyinto the CI/CD pipeline (Shift Left).

·       Implement automated security tools for SAST, DAST, SCA, andinfrastructure vulnerability scanning.

·       Manage and maintain security tools like WAFs, IDS/IPS, and CloudSecurity Posture Management (CSPM).

·       Develop and enforce security policies using Policy as Code (PaC).

·       Automate incident response and security monitoring throughlogging and alerting systems.

·       Conduct regular threat modeling and security reviews for newfeatures and infrastructure changes.

·       Educate and collaborate with Development and Operations teams on securecoding practices and security awareness.

·        

• Proactively monitors the work queues.
• Performs operational tasks to resolve all incidents/requests in a timely manner and within the agreed SLA.
• Updates tickets with resolution tasks performed.
• Identifies, investigates, analyses issues and errors prior to or when they occur, and logs all such incidents in a timely manner.
• Captures all required and relevant information for immediate resolution.
• Provides second level support to all incidents, requests and identifies the root cause of incidents and problems.
• Communicates with other teams and clients for extending support.
• Executes changes with clear identification of risks and mitigation plans to be captured into the change record.
• Follows the shift handover process highlighting any key tickets to be focussed on along with a handover of upcoming critical tasks to be carried out in the next shift.
• Escalates all tickets to seek the right focus from CoE and other teams, if needed continue the escalations to management.
• Works with automation teams for effort optimization and automating routine tasks.
• Ability to work across various other resolver group (internal and external) like Service Provider, TAC, etc.
• Identifies problems and errors before they impact a client’s service.
• Provides Assistance to L1 Engineers for better initial triage or troubleshooting.
• Leads and manages all initial client escalation for operational issues.
• Contributes to the change management process by logging all change requests with complete details for standard and non-standard including patching and any other changes to Configuration Items.
• Ensures all changes are carried out with proper change approvals.
• Plans and executes approved maintenance activities.
• Audits and analyses incident and request tickets for quality and recommends improvements with updates to knowledge articles.
• Produces trend analysis reports for identifying tasks for automation, leading to a reduction in tickets and optimization of effort.
• May also contribute to / support on project work as and when required.
• May work on implementing and delivering disaster recovery functions and tests.
• Performs any other related task as required.

Knowledge and Attributes:

• Ability to communicate and work across different cultures and social groups.
• Ability to plan activities and projects well in advance, and takes into account possible changing circumstances.
• Ability to maintain a positive outlook at work.
• Ability to work well in a pressurized environment.
• Ability to work hard and put in longer hours when it is necessary.
• Ability to apply active listening techniques such as paraphrasing the message to confirm understanding, probing for further relevant information, and refraining from interrupting.
• Ability to adapt to changing circumstances.
• Ability to place clients at the forefront of all interactions, understanding their requirements, and creating a positive client experience throughout the total client journey.

Academic Qualifications and Certifications and Tools:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• Certifications relevant to the services provided (certifications carry additional weightage on a candidate’s qualification for the role).
• Relevant certifications include (but not limited to) -
• CCNP or equivalent certification
• CCNA certification in must, CCNP in Security or PCNSE certification is good to have

·       Fortinet

·       RSA

·       Tenable

·       Trend Micro

·       F5

Responsibilities:

·      Monitor security alerts and perform initial analysis

·      Investigate security events using SIEM and related tools

·      Perform log analysis to identify suspicious activities

·      Support incident investigation and response

·      Help improve detection rules and monitoring coverage

·      Work with teams in different regions on security operations tasks

·      Contribute to administrative and routine security-related tasks as needed

·      Provide ad-hoc support to group-wide security projects and initiatives

Requirements:

·      Bachelor’s degree in information security, Computer Science, or related field

·      1–3years of experience in security operations, SOC, or related work

·      Familiar with basic SOC processes (alert handling, incident response)

·      Experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk)

·      Basic log analysis capability (Windows, Linux, network logs)

·      Able to work with teams across regions

·      Experience working with overseas or cross-regional teams is a plus

Responsibility

1. Responsible for drafting and reviewing contracts, including formulating and revising the company's standard contract templates, as well as reviewing various business contracts, correspondence, and related documentation.

2. Participate in handling the company's legal disputes and litigation globally, involving but not limited to commercial disputes and intellectual property disputes, effectively protecting the company's interests.

3. Provide comprehensive legal and compliance support to ensure that the company's operations comply with relevant legal requirements, including but not limited to export control, taxation, intellectual property, and data compliance.

4. Opportunities for rotation in finance, legal, human resources, administration, supply chain, customer service, and after-sales departments.

Requirement

1. Bachelor’s degree or higher, with a background in law; must hold a legal professional qualification certificate.

2. Excellent written communication skills, comprehensive legal risk analysis abilities, and strong communication and negotiation skills.

3. Strong sense of responsibility, adherence to principles, meticulous work ethic, and resilience under pressure.

4. Fluency in English, able to work in English-speaking environment.

Product area

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Qualifications

Job responsibilities

• Identify challenges in customer cyber defense centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
• Conduct real-time analysis using SIEM, endpoint, and network based technologies with a focus on identifying security events and false positives.
• Advise on CDC, CSIRT, and SOC management activities.
• Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operation Center (SOC) incident detection and response capabilities.
• Guide customers on their journey from manual to semi-autonomous to agentic-autonomous SOC.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience with SoC analysis, detection engineering, threat management, or a related role, and working with Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR) or Endpoint Detection and Response (EDR) technologies.
• Experience in leading incident response and Table Top Exercise (TTX).
• Ability to travel up to 20% of the time as required.

Preferred qualifications

• Certification in one or more of the following: CompTIA (e.g., Security+, CySA+) ISC2 (e.g., CSSP, CISSP); SANS-GIAC certification (e.g., GSEC, GMON, GSOC, GCIA, GCTI, GCIH, GCED, GCDA); CISCO (e.g., CCNA); EC-Council (e.g., CEH, CSA, CTIA).
• Experience with SIEM or SOAR technologies like SecOps, Splunk, QRadar, XSOAR, Phantom, etc.
• Experience in SoC architecture, SoC maturity assessment, and SoC transformations.
• Knowledge of security controls for common platforms and devices, including Linux and network equipment.
• Ability to collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.
• Excellent communication skills.

Cloud Security Engineer

Responsibilities:

• Conduct vulnerability tests on Client's Cloud infrastructure and services for potential threats, misconfigurations and weaknesses.
• Strong in Vulnerability management tools like Tenable.
• Implement best practices in Cloud security, Develop and maintain automated scripts for vulnerability scanning and reporting.
• Stay current with the latest security trends, tools, and AWS features to enhance our security posture.
• Address all findings promptly and effectively and document findings for reporting to management.

Requirements:

• Strong in Tenable AWS services such as EC2, S3, RDS, and Lambda.
• Proficient with security vulnerability tools and platforms
• Deep understanding of security principles, practices, and risk management.
• Certifications in AWS or RHEL are advantageous.

We respect your privacy and all communication will be treated with confidentiality.

Please contact us or apply in-confidence to us with you updated MS Word Resume to : kelvin@starcareerconsulting.com

Kelvin Lee (Reg. No. R1872625)

STAR CAREER CONSULTING PTE LTD (EA License: 20C0353)

Description

Who we are

Employment Hero is on a mission to make employment easier and more valuable for everyone. Our Employment Operating System brings hiring, HR, payroll and benefits into an all-in-one solution. 

Since our inception in 2014, we’ve scaled to a $2 billion valuation and gained a presence in 6 countries globally – Australia, New Zealand, Singapore, Malaysia, the UK and Canada. We now service over 300,000 businesses and more than 2 million employees. 

The EH Way

At Employment Hero, we’re proud of our unique DNA, which we call The EH Way.  

1. We are Mission First – everything we do (from what we work on, to how we allocate capital and where we focus) is driven by our Mission
2. We are Remote First – we champion a remote environment with a preference for asynchronous communication and a high degree of autonomy 
3. We are AI First – we are committed to using AI to accelerate our mission; AI is not just a tool, it’s a fundamental part of how we operate, innovate, and scale
4. We are Apolitical – we do not take a position on political or social topics, unless it relates to our Mission
5. We Live by Our Values – we role model our values 100% of the time
6. We Expect High Performance – we set a high standard and we’re not satisfied with being average

This role 

The Cloud Security Engineer is responsible for securing our AWS environment, with a strong focus on automation, AI-assisted workflows, and scalable security controls.

This role is not just about fixing issues, but about building intelligent systems that continuously detect, prioritise, and remediate cloud risks with minimal manual effort.

As a Cloud Security Engineer, you will be responsible for:

Cloud Security Engineering

• Remediate cloud risks across IAM, network exposure, encryption, and workloads
• Design and implement secure-by-default patterns across AWS (IAM guardrails, network segmentation, least privilege)
• Partner with SRE and Engineering to embed security into infrastructure and deployments

AI-Driven Detection & Response

• Leverage AI tools to triage, prioritise, and investigate cloud security findings
• Build workflows that correlate signals from cloud logs, EDR, and third-party tools into actionable insights
• Continuously improve detection coverage using AI-assisted analysis

DevSecOps & Automation

• Build automated security checks into CI/CD (IaC scanning, dependency risk, secrets detection)
• Use AI to accelerate vulnerability triage and remediation workflows
• Reduce manual security effort through scripting, automation, and intelligent tooling

Security Data & Intelligence

• Integrate and analyse data from sources such as SBOMs, vulnerability feeds, and threat intelligence
• Use AI to identify patterns, emerging risks, and prioritisation signals across large datasets
• Contribute to internal “security data platform” initiatives

Who You Are 

Required

• Strong experience securing AWS environments
• Solid understanding of IAM, networking, logging, and cloud-native architectures
• Experience with infrastructure-as-code (e.g. Terraform) and CI/CD pipelines
• Ability to script and automate (Python, Bash, or similar)
• Familiarity with SBOM, supply chain security, and dependency risk management
• Experience using or integrating AI tools in engineering or security workflows

Preferred

• Experience with tools like AWS Security Hub, GuardDuty, Wiz, or Datadog
• Experience building internal tools or automation platforms

What we can offer

At Employment Hero, we don’t just talk about a better way to work – we live it. Joining Employment Hero means

• You will work remotely, with the flexibility to own your time and impact
• You will access cutting-edge tools to amplify your work, knowledge and outputs 
• You’ll surround yourself with ambitious, outcome-driven colleagues who challenge you to do the best work of your life
• You’ll own ESOP (employee share options) in one of the world’s fastest-growing tech companies 
• You’ll also have access to a wide range of benefits that includes – a very generous parental leave policy, subsidised egg freezing (so you can make the choice that’s right for you, on your terms), a WFH office expense budget, and outstanding learning & development opportunities 

We’re AI-first, so you may meet some of our AI tools early in the process. They help us cut the noise, surface great talent fast and make sure every candidate gets a fair, consistent experience.

We verify candidate identity and location as part of our hiring process.

At Employment Hero, we are committed to safeguarding the privacy of your application data. To understand how we do so, you can read our Applicant Privacy Policy here employmenthero.com/legals/applicant-policy/

Employment Hero celebrates diverse perspectives and experiences, we invite people of all backgrounds and identities to apply for this position.

Responsibilities:

·      Support daily network security operations, including monitoring and basic security controls

·      Assist in vulnerability management for network devices, servers, and endpoints (scan, track, follow-up)

·      Support security monitoring and alert handling (e.g., firewall, endpoint, network logs)

·      Perform basic log analysis to identify abnormal or suspicious activities

·      Assist in incident investigation and response

·      Work with IT and regional teams to follow up and close security issues

·      Support implementation and improvement of basic security controls (network, end point, server)

·      Contribute to administrative and routine security-related tasks as needed

·      Provide ad-hoc support to group-wide security projects and initiatives

Requirements:

·      Bachelor’s degree in Information Security, Cyber Security, Computer Science, or related field

·      1–3years of experience in information security, IT security, or system/network administration

·      Basic understanding of network fundamentals (TCP/IP, firewall, VPN, etc.)

·      Basic knowledge of operating systems (Windows/Linux) and endpoint security

·      Experience with security tools or platforms (e.g., SIEM, EDR, firewall solutions)

·      Familiar with vulnerability management or basic security operations concepts

·      Able to work with teams across regions

·      Experience working in an international or cross-regional environment is a plus

• Assist in the planning, deployment, and enhancement of cybersecurity products and solutions across client environments.
• Support the implementation, configuration, and upgrade of security platforms, ensuring optimal performance and compliance with security best practices.
• Provide technical guidance and support to both internal teams and external clients on the effective use of the company’s cybersecurity solutions.
• Conduct product training sessions and knowledge sharing for clients and internal stakeholders to ensure proper usage and adoption.

Requirements:

• Diploma in IT or equivalent
• At least 2 years of hands-on experience with CyberArk within the IT, Information Security, or Cybersecurity industry.
• Strong technical troubleshooting and problem-solving skills.
• Ability to work independently as well as collaboratively in a team environment.

If you are keen to apply for the position, kindly email your detailed resume in MS Word to hr@recruit-expert.com

Please note that only shortlisted candidates will be notified.

For more job opportunities, please visit our website at www.recruit-expert.com

EA Licence: 19C9701

Registration: R1326740

About The Company

We have partnered with one of the leading retail groups in Singapore with a strong presence across multiple store formats islandwide. With a portfolio of well-established brands, the business continues to grow and adapt, serving diverse customer segments though its network of over 50 outlets.

Job Summary

The successful candidate will be responsible for implementing, maintaining, and enhancing our organisation’s information security posture. This role requires strong technical expertise and the ability to collaborate closely with cross-functional teams, including End User Support, Network, IT Infrastructure and Application, to ensure security is embedded across all systems and processes.

This role is based in Tampines North.

Key Responsibilities

• Analyse security threats, develop and optimise security policies.
• Proactively detect, investigate, and respond to cyber threats within the M365 ecosystem, which includes email, Teams, SharePoint and OneDrive.
• Collaborate with IT Infrastructure and Network teams to ensure secure configuration of servers, networks and cloud environments.
• Partner with End User Support team to improve endpoint security, user awareness and access controls.
• Monitor, investigate and respond to security incidents, escalating where necessary.
• Perform regular vulnerability assessments, recommending and following up on remediation actions.
• Develop and maintain security documentation, including standards, procedures and technical guidelines.
• Assist in compliance with security frameworks, regulations and industry best practices (e.g., ISO 27001, NIST).
• Continuously evaluate emerging threats and recommend new tools, technologies and processes to mitigate risks.
• Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules.

Qualifications

• 3–5 years of hands-on experience in IT security operations.
• Certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity, or GIAC
• Additional certifications like CISM or CSSP are considered a plus
• Good analytical and problem-solving skills to investigate and resolve security vulnerabilities effectively.
• Excellent written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders.
• Knowledge of cybersecurity threats, vulnerabilities, and exploit methods.
• Familiarity with cloud computing platforms and related security considerations (GCP, Azure, AWS).
• Experience in security configurations, patch management, certification management, firmware updates, firewall rule management, and endpoint security agent administration.
• Ability to work collaboratively in a fast-paced environment while maintaining the confidentiality, integrity, and availability of information assets.
• Hands-on experience with security tools such as SIEM, EDR, XDR, UEBA, and SOAR.
• Knowledge of the MITRE ATT&CK framework will be added advantage.
• Familiarity with ISO27001 standards will be added advantage.
• Understanding of Zero Trust architecture will be added advantage.