Total 68 Legal / Public / Security job vacancies

IT Security Engineer (Governance, Incident Response& Vulnerability Management)

Mon to Fri Office hours/ Outram Work Location
Cat2B security clearance for this 1 year project renewable

Salary Package:
• Up to S$5,000 Basic
• 1 Month Performance Bonus
• S$50 Monthly Mobile Phone Claim
• Additional S$100 Staff Amenities Claim given for Night Deployment or Weekend Patching Activities

Join a growing cybersecurity team responsible for protecting critical enterprise IT systems, applications, and infrastructure. We are seeking a hands-on IT Security Officer who enjoys security operations, incident response, vulnerability management, and compliance activities. You will be under Agency payroll for this 1 Yr project renewable assignment.

Key Responsibilities

Security Governance
• Develop, review and maintain information security policies, standards and procedures
• Support security risk assessments and risk register management
• Ensure compliance with security frameworks and regulatory requirements

Threat Detection & Incident Response
• Monitor and investigate security incidents using SIEM and EDR platforms
• Perform incident triage, root cause analysis and risk assessment
• Coordinate incident escalation and remediation activities
• Maintain incident response plans and playbooks

Vulnerability Management
• Perform vulnerability assessments and coordinate remediation activities
• Work closely with infrastructure, application and system owners to address security findings
• Prioritize vulnerabilities based on risk and business impact
• Track remediation progress and reporting

Compliance & Auditing
• Support internal and external security audits
• Prepare security documentation and evidence collection
• Assist in compliance reporting and governance reviews

Good to Have Exposure
• Cloud Security (AWS, Azure, GCP)
• IAM, SSO, MFA and PAM solutions
• Data Loss Prevention (DLP)
• Security Awareness Training
• Third-Party Risk Management
• Application Security and Secure SDLC
• OT / ICS / SCADA Security

Requirements
• Minimum 3 years of IT Security or Cybersecurity experience
• Hands-on experience in Security Operations, Incident Response or Vulnerability Management
• Experience using SIEM, EDR and Vulnerability Scanning tools
• Familiarity with security frameworks such as ISO27001, NIST or CIS Controls
• Strong stakeholder management and communication skills
• Ability to work independently and coordinate with multiple technical teams

Preferred Certifications
• Security+
• CEH
• GSEC
• CySA+
• SSCP
• CISSP (Advantageous)
• ISO27001 Lead Implementer/Auditor (Advantageous)

If you enjoy investigating security incidents, managing vulnerabilities and strengthening enterprise security posture, we would like to hear from you.

EA LicenseNo: 09C4235 I EA Reg: R1103307 (Hong Mei Lin)

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

Client introduction

Our client is an established financial institution, and regulated by the Monetary Authority of Singapore.

As part of strengthening its technology governance and security function, the firm is looking to hire an IT Security Analyst (Governance, Risk & Compliance) to join its infrastructure and security team. This role is well suited for someone with a foundation in IT risk, governance, assurance or security compliance, who is looking to build broader exposure across cyber governance, audit, vulnerability management, vendor due diligence and security operations within a regulated financial services environment.

Job responsibilities

• Support the review and overhaul of the firm's IT and security governance framework, drafting policies, standards and procedures for senior review and refinement.
• Help embed clear, well-understood policies and procedures across the organisation, aligned with regulatory expectations.
• Support compliance against MAS guidelines, including Technology Risk Management, Cyber Hygiene and Outsourcing, and assist with related risk assessments.
• Coordinate internal and external audit activity, including collating responses, gathering supporting artefacts and following up on findings with internal stakeholders through to closure.
• Track vulnerability assessment findings and remediation progress (assessments are run through an external vendor), working with the infrastructure and application teams to close gaps in good time.
• Conduct third-party and vendor due diligence in line with MAS outsourcing requirements, and respond to client and counterparty due diligence queries on the firm's security controls and governance practices.
• Support user access reviews, joiner-mover-leaver processes and identity access governance.
• Assist with business continuity, disaster recovery and related assurance exercises.
• Provide support on security operations and incident response coordination where required, with guidance from the team lead.

Job requirements

• At least 4 years of experience in IT risk, IT governance, technology assurance, IT audit or IT compliance, gained within a regulated financial institution such as a bank, securities or brokerage firm, asset manager or insurer.
• Working familiarity with the MAS Technology Risk Management Guidelines, Cyber Hygiene Notice and Outsourcing Guidelines.
• Exposure to audit coordination, evidence gathering, policy documentation, risk assessment or remediation tracking.
• A genuine interest in cyber security and a willingness to learn the hands-on operational side of the role. Deep SOC or security engineering experience is not required.
• Exposure to vulnerability management, access reviews, SIEM or IAM tooling is an advantage rather than a requirement.
• Strong written and verbal communication, with the ability to engage auditors, vendors, infrastructure and application teams, and business stakeholders clearly.
• A detail-oriented, proactive working style and a readiness to learn across both governance and operational security.
• Relevant certifications such as CISA, or progress toward them, are advantageous but not mandatory.

Why you should join them

• Breadth of exposure that is rare at this level, spanning governance, risk, compliance, audit and security operations in a single role, giving the right person a strong foundation early in their career.
• Direct mentorship from an experienced infrastructure and security team lead, who will actively coach the successful candidate on the technical and operational aspects of the role.
• A genuine opportunity to help rebuild and mature the firm's IT governance framework, with visible impact in a lean team.
• Regular interaction with auditors, vendors and counterparties, building a clear path toward a career in IT risk and security governance.

JL
Reg. No. R1766249
BeathChapman Pte Ltd
Licence no. 16S8112

Company Overview

JusConnect Services (JCS) delivers document production services using traditional and modern technologies to provide effective solutions tailored to client needs.

Job Summary

You will produce high-quality electronic and hard copy documents to support legal professionals by working independently and collaboratively using various software and office equipment.

Responsibilities

• Handle confidential documents with care to ensure security and accuracy during document production
• Quickly learn and apply new tasks and technologies to maintain an efficient workflow
• Collaborate with team members to complete document-related tasks accurately and on time
• Take ownership of assigned jobs by ensuring accuracy and meeting deadlines consistently
• Maintain a professional and positive attitude when interacting with clients and team members
• Independently manage routine document production tasks while demonstrating patience under pressure
• Use software, equipment and AI tools proficiently to create, edit, and manage documents effectively
• Analyze client requirements to develop and deliver high-quality documents that meet their needs

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

We are looking for a hands-on and experienced IT Infrastructure & Security professional to manage network, system, and cybersecurity operations within a 24x7 manufacturing environment.

Key Responsibilities

• Manage IT infrastructure, network security, and system availability

• Lead infrastructure and cybersecurity improvement projects

• Ensure high availability, performance, backup, and disaster recovery readiness

• Support network, server, virtualization, and security operations

• Lead and supervise Infra/Security/OA support team

• Maintain IT compliance, governance, and security standards

• Coordinate with HQ IT teams and external vendors

Requirements

• Degree in Computer Science, IT, Engineering, or related field

• Minimum 5 years of experience in IT Infrastructure & Security

• Strong hands-on experience in:

• Windows/Linux servers

• AD, SCCM, virtualization

• WAN/LAN/VPN, routing & switching

• Backup, security, SIEM, EDR/MDR

• Experience in manufacturing environment preferred

• Good troubleshooting, communication, and leadership skills

• Certifications such as CCNP, CISSP, RHCSA, ISO27001 are a plus

Interested candidate who wish to apply for the advertised position, please click “Apply”. We regret that only shortlisted candidates will be notified 

EA License No.: 01C4394 (PERSOL Singapore Pte Ltd) 

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolsingapore.com/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy. 

Information Security Operations (Security Response & Incident Management)

Job Overview

• Operate Computer Security Incident Response Team (CSIRT)
• Manage Attack Surface Management (ASM); conduct security vulnerability assessments and remediation support
• Plan and execute security training and exercises; manage IT assets and patches; collect and leverage threat intelligence
• Operate cloud service application approval system; provide technical support and information dissemination to domestic and overseas group companies
• Analyze, investigate, and recover from security incidents, and develop recurrence prevention measures.

Required Skills & Experience

• Japanese (business) and English (business) to communicate with HQ in Japan
• 3+ years of experience in network, server, and cloud service (AWS, Azure, etc.) infrastructure design, deployment, and operations
• Experience with security incident response and CSIRT operations
• Hands-on experience with IT asset management and patch management
• Experience collecting and leveraging threat intelligence
• Experience with security vulnerability assessment and handling (discovery, validation, remediation recommendations)
• Experience planning and conducting security training and exercises
• Experience coordinating across departments and driving projects in large organizations
• Information security certifications (CISSP, CISM, Registered Information Security Specialist, CompTIA Security+, etc.)

Preferred Skills & Experience

• Experience with security operations in multinational/global organizations
• Cloud and endpoint management skills (SaaS/IaaS log operations, etc.)
• Work experience in the IT industry (SI vendors, technology vendors, etc.)
• Experience developing internal policies and guidelines
• Desired Qualities

Soft Skills

• Ability to explain and persuade based on the audience's perspective and knowledge level
• Proactive attitude and self-starter mindset
• Strong collaboration skills with ability to value teamwork and project harmony, and build balanced relationships

We’re Hiring: Assistant Manager, Digital Transformation Office

Join a dynamic team driving digital transformation and cybersecurity initiatives across enterprise ICT operations. This role offers the opportunity to strengthen ICT governance, improve cyber resilience, and lead impactful process enhancement initiatives within a collaborative and fast-paced environment.

Job Highlights

• Work Location: Pasir Panjang
• Employment Type: 12-Month Contract
• Salary: Up to SGD 5,300
• Working Environment: Collaborative and Transformation-Driven Team

Roles & Responsibilities

• Cybersecurity Specialist (Tier 3 SOC Analyst) will be responsible for cybersecurity monitoring and incident response.
• Monitoring network traffic, system logs, and security alerts to identify potential security incidents and unauthorized activities in a timely manner.
• Managing Security Operation team on daily monitoring alarms to respond on the incidents.
• Enhancing the SOC situational awareness posture by researching the latest Tactics, Techniques, and Procedures (TTPs), proactively identifying organizational blind spots.
• Monitors and stay aware of cybersecurity industry trends, tools, and techniques.

Requirements

• Bachelor’s Degree in Information Security/ Computer Science/ Information Technology or any other relevant courses.
• Hands on experience in SIEM tools such as Splunk, Microsoft Sentinel, Securonix, etc.
• Hands on experience in security operations, incident response, or a related cybersecurity field, with a track record of leading complex investigations.
• Experience with security technologies such as firewalls, intrusion detection/prevention systems, and data encryption.
• Advanced understanding of cyber threat intelligence and TTPs (tactics, techniques, procedures).
• ⁠Expert-level knowledge of security monitoring tools, threat analysis, and digital forensics.
• Hands on experience in security monitoring tools, threat analysis, and digital forensics.
• Has experience in security technologies such as Antivirus/Endpoint Detection and Response (EDR), Privilege Access Management (PAM), and Web Application Firewall (WAF).
• Security Related certifications such as GIAC, GCIA, GCFA, or CISSP are Mandatory.
• Experience with security technologies such as firewalls, intrusion detection/prevention systems, and data encryption.

Job Description

• Industry/ Organization Type: Security Solutions Provider
• Position Title: Security System IT Technician
• Working Location: Islandwide (office at Woodlands)
• Working Hours: 5.5 days (Mon – Fri: 9am - 6pm, Sat: 9am – 1pm)
• Salary Package: Basic + OT
• Duration: Permanent

Key Responsibilities

• Install, manage, and troubleshoot security systems: Access Control, Intercom, CCTV, NAS, VMS, and related network equipment.
• Handle copper, fibre cabling, electrical work, and installation of data/power cables, conduits, and metal trunking.
• Support testing, commissioning, and regular maintenance of security systems.
• Carry out onsite troubleshooting.
• Provide technical support, training, and engineering assistance.
• Deliver equipment and samples to project sites when needed.
• Set up and design network solutions for security systems.
• Assist Project Managers and Engineers with other tasks as needed.
• Able to standby at night or over weekends when required.

APPLY NOW!!!

• ITE/Diploma/Degree in IT, Computer, Electrical, or Electronics Engineering.
• Minimum 2 years of experience with ELV systems such as Access Control, Intercom, and CCTV.
• Strong knowledge of computer networking and troubleshooting.
• Familiar with Microsoft Windows.
• Class 3A/3 driving license is an advantage.

Kindly apply through ANY of the following methods:

• Submit your application by clicking the APPLY button;
• Email your resume to Job@anradus.com.sg. Please indicate #78602 on the email subject.

Anradus Application Policy: We value each application and ensure every resume is reviewed. Our process is efficient, typically concluding within 3 working days. If you do not receive communication from us within this timeframe, it's likely that your application has not been shortlisted by our client. In such cases, we recommend continuing your job search to maximize your opportunities.

Anradus Pte Ltd | EA License No. 20C0161 | Angel Lim | EA Reg No.: R1769781

We are seeking an experienced ITSO Security Officer to join our team. In this role, you will act as the security advisor throughout the software development lifecycle, partnering closely with developers, architects, DevOps engineers, and project stakeholders to ensure applications are designed, built, and deployed securely.

Why Join Us:

• Salary up to $9,000 + AWS
• Hybrid Work Arrangement
• Government Projects

Responsibilities:

• Conduct threat modelling exercises to identify, assess, and mitigate application security risk
• Perform and review security assessments using SAST, DAST, and other application security tools
• Review security controls for cloud-hosted applications, particularly within AWS environments
• Provide ongoing support and troubleshooting for deployed features, maintaining platform stability, performance, and a strong user experience

Requirements:

• Minimum 4 years of experience across software development, application security, DevSecOps, or cloud security
• Working knowledge of: OWASP Top 10, OWASP ASVS
• Experience with security scanning tools such as: Fortify on Demand, SonarQube, Similar SAST/DAST solutions
• Familiarity with AWS cloud environments and cloud security best practices

If you’re passionate about contributing to impactful government projects while advancing your career, we welcome you to explore this opportunity with us

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.

All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Elias Yeo HongJie (Outsourcing Team)
ScienTec Consulting Pte Ltd - 11C5781

Summary:

In this role, you will help ensure that vulnerabilities and exposures across our environment are identified, validated, and remediated in a timely manner. You will work closely with system owners and report findings, helping to keep our risk posture visible and well-managed.

Job Scope

Attack Surface Monitoring, Vulnerability Scanning, and Triage

• Monitor and triage findings surfaced by our Attack Surface Management (ASM) and Vulnerability Management tools
• Assess each finding for validity, severity, and exploitability before escalating or acting on it
• Distinguish genuine exposures from false positives and contextualise findings against our asset inventory
• Prioritise remediation efforts based on risk
• Remediation Workflow Management
• Work with system owners to follow up on outstanding findings
• Track remediation progress and ensure findings are resolved in a timely manner
• Manage exceptions and risk acceptance where remediation is not immediately feasible
• Communicate clearly with non-technical stakeholders, translating technical findings into actionable guidance

Reporting & Insights

• Consolidate vulnerability data and remediation metrics for reporting
• Identify trends and surface systemic issues across the organisation's attack surface and internal asset landscape
• Provide recommendations to improve our overall exposure management programme

Process Improvement

• Contribute to the refinement of ASM and vulnerability management processes, tooling configurations, and escalation playbooks over time
• Support the development and maintenance of vulnerability management policies, standards, and procedures in alignment with industry best practices

Prerequisites

• Bachelor’s Degree in Computer Science/Information Security or equivalent
• Professional certifications, including GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred
• Preferably 5 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (eg CVSS), and external-facing attack surface risks
• Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar)
• Proficiency in programming languages such as Python will be advantageous
• Strong analytical and judgement skills, with the ability to think critically and make sound recommendations
• Good communication and interpersonal skills, with the ability to multitask, prioritise, and translate technical findings
• Meticulous, with a high degree of integrity, initiative, and energy

Singaporean only

Role Overview

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both:

Day 1 Security (Build / Project Implementation)

Day 2 Security (Operations / Production Support)

The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects

Support system, application, and infrastructure security configurations

Assist in threat modelling and risk assessment activities

Translate security requirements into technical implementation across platforms

2. Compliance Support

Support compliance with:

IM8 / Government security policies

Whole‑of‑Government (WOG) security requirements

PDPA (where applicable)

Assist in preparation and documentation for:

Security Risk Assessments (SRA)

Vulnerability Assessments (VA)

Penetration Testing (PT)

Maintain security documentation and evidence for audits

3. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines:

SAST, DAST, SCA, container scanning

Monitor and triage findings, and work with developers on remediation

Support secure coding practices and DevSecOps adoption

Assist in API security, secrets management, and secure communications setup

4. Security Testing Support

Support coordination and execution of VA/PT activities

Track vulnerabilities and ensure timely remediation

Assist in documenting findings and closure evidence

Support system security certification and go-live requirements

5. System & Platform Hardening

Implement and maintain security hardening for:

Operating systems

Middleware and databases

Kubernetes and containers (RBAC, secrets, network policies)

Support configuration of:

API Gateways

WAF

Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents

Perform log analysis and assist in root cause analysis (RCA)

Work with SOC and internal teams during incidents

Follow and improve incident response playbooks

2. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring

Track and verify patching and remediation activities

Escalate high-risk vulnerabilities and propose mitigation controls

3. Security Monitoring

Monitor alerts from SIEM and security tools

Assist in tuning detection rules and dashboards

Ensure logging and monitoring coverage across systems

4. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking

Maintain security records and documentation

Assist in reporting security posture and issues

5. Access Control Administration

Support implementation of:

RBAC

MFA

Privileged Access Management (PAM)

Perform user access reviews and ensure least privilege

Required Qualifications & Experience

Mandatory

Degree in Computer Science / Cybersecurity / Information Security or equivalent

3–7 years of IT experience in cybersecurity or infrastructure security

Experience supporting security in projects or production environments

Familiarity with Singapore Government security policies (IM8 preferred)

Hands-on experience with:

Kubernetes / Docker security

IAM and access control

Security tools (SAST, DAST, SIEM, vulnerability scanners)

CI/CD and DevSecOps practices

Basic knowledge of network security, application security, and cloud security

Preferred Certifications

CEH, CompTIA Security+, or equivalent

Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) are advantageous

Key Competencies

Strong technical troubleshooting and problem-solving skills

Ability to follow security standards and implement controls effectively

Good communication skills with technical and non-technical teams

Detail-oriented with strong documentation skills

Collaborative team player with willingness to learn

Responsibilities and Requirements

• At least 4 years combined work experience in software development, application security and

cloud computing (e.g. AWS)

• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST,

SOAP, SSL/TLS)

• Experience in threat modelling and able to establish threat profiles for application projects to

identify, quantify and remediate application security risks

• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security

verification standard

• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github,

Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines

• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

• Track and address security vulnerabilities with timely remediation and patching processes.

• Conduct security awareness training sessions

• Good verbal/written communications, collaboration skills and experience interacting with

various stakeholders

• Strong analytical, problem-solving and troubleshooting skills, ability to work independently

• Relevant certifications preferred (eg. CISSP, OSCP, AWS security, AWS DevOps Engineer or

equivalent etc.)

• Experience in working with Government Commercial Cloud (GCC) preferred

• 1-year contract, renewable
• Hybrid work arrangement
• Government project

Key Responsibilities

• Perform threat modelling and establish threat profiles to identify, assess, and remediate application security risks.

• Review application architectures, APIs, and cloud environments to ensure compliance with security best practices.

• Conduct security testing using SAST tools such as Fortify-on-Demand, SonarQube, and similar solutions.

• Track, manage, and remediate security vulnerabilities through timely patching and mitigation activities.

• Work closely with development, DevOps, and infrastructure teams to integrate security controls into CI/CD pipelines.

• Conduct security awareness training and provide security advisory support to project teams.

• Ensure adherence to security standards and frameworks such as OWASP Top 10 and OWASP ASVS.

Requirements

• Minimum 4 years of experience in software development, application security, and/or cloud computing (AWS preferred).

• Strong understanding of web and mobile application security, API security, and related technologies (REST, SOAP, SSL/TLS).

• Experience in threat modelling and application security risk assessment.

• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.

• Hands-on experience with security scanning tools such as Fortify-on-Demand, SonarQube, or equivalent.

• Good knowledge of security best practices and secure software development lifecycle (SSDLC).

• Strong analytical, troubleshooting, communication, and stakeholder management skills.

• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Relevant certifications such as CISSP, OSCP, AWS Security Specialty, AWS DevOps Engineer, or equivalent.

• Experience working in Government environments.

• Experience with Government Commercial Cloud (GCC) environments.

Job Summary

The IT Security Lead manages end-to-end security governance, compliance, and operations for mission-critical systems, collaborating with cross-functional teams and external auditors to ensure adherence to government security policies.

Responsibilities

Day 1 – Project / Implementation Security

• Define and implement system security architecture aligned with Singapore Government policies
• Review application, middleware, infrastructure, and platform designs for security compliance
• Conduct threat modeling and risk assessments, mapping risks to mitigating controls
• Translate policy requirements into actionable technical controls across technology stacks
• Ensure compliance with IM8, Whole-of-Government security requirements, and PDPA where applicable
• Establish and oversee cybersecurity governance across infrastructure, application, and project teams
• Prepare and maintain documentation including Security Risk Assessments, Vulnerability Assessments, Penetration Testing reports, and security hardening baselines
• Partner with software teams to enforce secure coding standards and DevSecOps practices
• Integrate and govern SAST/DAST, dependency/SCA scanning, and container image scanning within CI/CD pipelines
• Review and triage security tool findings, driving remediation and risk acceptance decisions
• Provide guidance on API security, token/secret management, and secure service-to-service communication
• Plan, coordinate, and manage vulnerability and penetration testing engagements and vendors
• Track remediation progress to closure and document residual risks and risk acceptance
• Support security clearances and go-live certifications
• Review and approve OS, middleware, database, Kubernetes/container security, API gateway, WAF, rate-limiting, and authentication configurations

Day 2 – Operations / Production Security

• Lead security incident investigations, containment, and recovery efforts
• Perform root cause analysis and define corrective and preventive actions
• Coordinate with Government SOC and stakeholders; contribute to and refine incident response playbooks
• Communicate security incidents clearly to technical and non-technical audiences
• Oversee continuous vulnerability monitoring and posture management
• Track patch and configuration compliance across infrastructure, middleware, applications, and containers
• Provide risk assessments and compensating controls for deferred patches
• Review and tune alerts, detections, and dashboards in SIEM and related tools
• Ensure monitoring coverage for critical systems and high-value assets
• Support internal and external audits, evidence collection, and closure of audit findings
• Prepare and present security posture, metrics, and trend reports to management
• Maintain risk registers and mitigation plans with up-to-date security documentation
• Communicate security assessments and findings effectively to varied stakeholders
• Oversee and periodically review RBAC, MFA, Privileged Access Management, and joiner/mover/leaver processes
• Ensure least privilege access, segregation of duties, and periodic access recertifications
• Support incident response handling, log analysis, and activity reviews
• Drive continuous improvement across identify, protect, detect, respond, and recover functions

Required competencies and certifications

• Degree in Computer Science, Cybersecurity, Information Security, or equivalent
• 8–12 years of IT experience including at least 5 years as a Security Lead or Security Architect
• Proven experience in Singapore Government IT projects and IM8/government security compliance
• Hands-on experience with Kubernetes/Docker security, API security, Identity & Access Management (IAM), and security tools (SAST/DAST/SIEM) integrated with CI/CD

Preferred competencies and qualifications

• Certifications such as CISSP, CISM, CISA, CEH, GIAC (e.g., GSEC, GCIA, GCIH, GCSA)
• AWS or Azure Security certifications

5 day week @ AMK area

Maestro HR
damien lee tian hong
R1106726
16C8462

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

This is a 12 months fixed term contract role.

What will you do?

• Develop and maintain IT security policies and action plans, reviewing them at least annually or as required by the Customer.
• Evaluate and recommend IT security products and solutions for implementation within the Customer's IT infrastructure.
• Implement and manage risk assessment methodologies, ensuring compliance with relevant service management requirements and industry standards.
• Develop and implement security management frameworks and governance structures as specified by the Customer.
• Establish and manage IT Security Incident Management processes, including detection, response, and handling of security incidents according to Customer guidelines.
• Collaborate with external partners and suppliers to resolve IT security incidents effectively.
• Participate in and contribute to industry-wide IT security incident response simulations and technical assessment exercises.
• Conduct forensic investigations when required, including secure disk image acquisition and analysis within specified timeframes.
• Monitor, analyze, and report on emerging security threats, vulnerabilities, and solutions relevant to the Customer's IT infrastructure.
• Conduct regular meetings with key stakeholders to highlight security issues and propose improvements to the Customer's IT infrastructure.
• Liaise and coordinate with external suppliers, security organizations, and the Government on IT security matters related to the Customer's infrastructure.
• Perform additional activities as necessary to secure the Customer's IT infrastructure.
• Review and follow up on security reports generated from central security tools, providing timely updates to the Customer.
• Manage the inventory of IT assets to be monitored by central security tools, ensuring compliance and proper onboarding of servers, networks, and databases.

Requirements

• At least 4 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Familiar with mobile and web application programming interfaces (API) architecture (e.g. REST, SOAP, SSL/TLS)
• Experience in threat modelling and able to establish threat profiles for application projects to identify, quantify and remediate application security risks
• Strong knowledge of security best practices such as OWASP Top 10, OWASP application security verification standard
• Familiar with Agile Development process, CI/CD, DevOps concepts, tools (Gitlab, Github, Ansible etc) and how automated security testing can be incorporated into CI/CI pipelines
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Track and address security vulnerabilities with timely remediation and patching processes.
• Conduct security awareness training sessions
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Relevant certifications preferred (e.g. CISSP, OSCP, AWS security, AWS DevOps Engineer or equivalent etc.)
• Experience in working with Government Commercial Cloud (GCC) preferred

Benefits

What do we offer in return?

• Fun working environment
• Employee Wellness Program
• To work in Singapore Government Agencies projects
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at careers@activate.sg

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd.

Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes.

Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.

Overview

We are seeking an experienced Application Security Consultant to drive secure application development practices, perform security assessments, and support cloud security initiatives. The ideal candidate will have strong expertise in application security, secure SDLC, DevSecOps, threat modelling, and cloud technologies.

Responsibilities

• Perform application security assessments and reviews for web, mobile, and cloud-based applications.
• Conduct threat modelling exercises to identify, assess, and mitigate application security risks.
• Establish threat profiles and recommend security controls for application projects.
• Track, manage, and remediate security vulnerabilities through timely patching and remediation processes.
• Integrate security best practices and automated security testing into CI/CD pipelines.
• Conduct security awareness training and promote secure coding practices across development teams.
• Collaborate with developers, engineers, and stakeholders to strengthen application security posture.
• Support security governance, risk management, and compliance initiatives. 

Requirements

• Minimum 4 years of combined experience in software development, application security, and cloud computing (AWS preferred).
• Strong understanding of web and mobile application architectures and APIs, including REST, SOAP, SSL/TLS.
• Experience in threat modelling and application security risk assessment.
• Strong knowledge of application security standards and frameworks, including:OWASP Top 10OWASP Application Security Verification Standard (ASVS)
• Familiarity with Agile development methodologies, DevOps practices, and CI/CD pipelines.
• Experience integrating security testing into development workflows.
• Hands-on experience with SAST (Static Application Security Testing) tools such as:Fortify on DemandSonarQubeSimilar security scanning platforms
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and stakeholder management skills.
• Ability to work independently and collaboratively within cross-functional teams.

Preferred Qualifications

• Professional certifications such as:CISSPOSCPAWS Security SpecialtyAWS DevOps EngineerEquivalent cybersecurity certifications
• Experience working with Government Commercial Cloud (GCC) environments.

Key Skills

Application Security | DevSecOps | Threat Modelling | OWASP Top 10 | OWASP ASVS | AWS Security | CI/CD | SAST | Fortify | SonarQube | REST API | SOAP | SSL/TLS | GitLab | GitHub | Ansible | Cloud Security | Vulnerability Management | Secure SDLC | Security Awareness Training | GCC Cloud Environment

JOB RESPONSIBILITIES:

• Continuous monitoring of all access control systems, CCTV, and intrusion detection alarms.

• Rapid triage of alerts to determine critically and dispatch the correct personnel.

• Initial contextualization of alerts high priority intelligence briefs.

• Execution of routine and intelligence-driven checking of cameras and access logs.

• Creation of basic incident reports and daily activity logs for a comprehensive audit trail.

• Management of basic personnel access requests, virtual surveillance monitoring and transferring authorities.

• Initial / advance support for crisis events, including alert distribution and activation of business continuity plans.

• Comprehensive audits of access control and intrusion detection systems to ensure optimal performance.

• In-depth analysis of alarm data to correlate events and identify patterns, distinguishing false positives from genuine threats.

• Development and refinement of security procedures based on new threat intelligence.

• Systematic reviews of security assets to identify vulnerabilities and recommend hardening measures.

• Compilation of evidence for internal and external audits to support the teams.

• Management of Security Systems Commissioning, including the testing and configuration of new or upgraded systems.

JOB REQUIREMENTS:

• Must be able to start within short notice

• Must hold a valid PRD Grade of Senior Security Officer (SSO) rank.

• Must be first-aid trained

• Must be computer literate

• Have to undergo background checks and security screening.

• Experienced working in Data Center or Security Operation Centre environment is an advantage.

• Independent, well-organized, and good work attitude.

The Cyber Security Specialist will architect, design, review, and implement cybersecurity solutions for large-scale projects and critical infrastructure. The role involves ensuring compliance with cybersecurity standards, monitoring and mitigating security risks, and developing cloud security architectures.

The specialist will also conduct vulnerability assessments, security audits, and provide consultancy on security vulnerabilities and risks.

Requirements:

• Lead and support cybersecurity implementation for large-scale projects and critical infrastructure systems.
• Ensure compliance with critical infrastructure cybersecurity standards (e.g., KINS/CII).
• Develop and implement cloud security architectures and solutions.
• Monitor, research, and analyse security risks to mitigate threats and attacks.
• Conduct vulnerability assessments, penetration testing (VAPT), and provide remediation recommendations.
• Perform system hardening, patch management, and secure configuration practices.
• Prepare and maintain security documentation (e.g., design documents, risk assessments, compliance reports).
• Provide guidelines for coding, key management, hardening, patch management, backup management, and incident management.
• Familiarity with public cloud infrastructures (Azure, AWS, GCP, Huawei).

Qualifications:

• Proven experience in large-scale projects, preferably in government or critical infrastructure environments.
• Strong familiarity with cybersecurity frameworks and standards (e.g., IM8, CIS, NIST).
• Hands-on experience in security architecture, system hardening, vulnerability assessment, and network/system security controls.
• Experience with network security, firewalls, VPNs, and identity and access control.
• Experience in system integration or project delivery environments.
• Strong documentation, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.

Role Overview

• Drive enterprise-wide and group security initiatives, maintaining and strengthening them through PDCA cycles
• Develop and deploy information security policies/standards, plan and execute security strategies
• Design and implement employee training programs (planning, execution, and effectiveness analysis)
• Respond to security consultations from business units, and coordinate with key departments to drive cross- security governance and initiatives.

Required Skills & Experience

• Japanese (business) and English (business) to communicate with HQ in Japan
• 5+ years of experience in information security planning and strategy development
• Experience with ISMS (Information Security Management System) and/or ISO 27001certification acquisition and operations
• Experience conducting gap analysis using NIST CSF and/or CIS Controls
• Hands-on experience with security risk assessment, management, and incident response
• Experience handling information security regulations (e.g., Personal Information Protection Act, GDPR)
• Experience leading cross-functional projects
• Experience planning and conducting security awareness and training programs for executives and operational staff
• Basic knowledge and operational experience with IT infrastructure (network, cloud, servers, etc.)
• Information security certifications (CISSP, CISM, Registered Information Security Specialist, etc.)

Preferred Skills & Experience

• Experience developing internal policies and guidelines
• 3+ years of system operation and deployment experience
• 3+ years of information security-related work experience

Soft Skills

• Ability to explain and persuade based on the audience's perspective and knowledge level
• Proactive attitude and self-starter mindset
• Strong collaboration skills with ability to coordinate and build consensus across departments

Our client is global organisation operating in the travel and services industry, with a strong presence in Singapore. In line with business expansion, they are looking for a Senior IT Executive (IT Security / Infrastructure) to join their team, in hopes of developing the current high performing team. They are located in the East area.

Job Responsibilities:

• Develop, implement, and enforce IT security policies, standards, and procedures in line with regulatory and industry best practices.
• Monitor and manage IT security systems to detect, investigate, and respond to cyber threats, suspicious activities, and security incidents.
• Analyze network traffic, system logs, and security alerts to identify vulnerabilities and potential risks.
• Maintain and optimize security monitoring tools, detection rules, and automated workflows to strengthen threat detection and response capabilities.
• Conduct security reviews, risk assessments, compliance checks, and system hardening activities for IT infrastructure and applications.
• Support incident response, disaster recovery, and business continuity planning, including participation in recovery exercises and simulations.
• Participate in security architecture reviews, vulnerability assessments, and continuous improvement initiatives to enhance overall cybersecurity posture.
• Collaborate with internal stakeholders, project teams, and developers to ensure secure system implementation and compliance requirements are met.
• Support IT security audits, maintain security documentation and risk registers, and prepare periodic security reports for management review.
• Conduct user awareness initiatives and liaise with external auditors, vendors, and relevant parties on cybersecurity and compliance matters.
• Perform ad-hoc coordination tasks as required.

Requirements:

• Min Diploma/Degree in Information Technology, Information Security, Computer Science, or related discipline
• Min 4 years of relevant experience in IT security, cybersecurity, or infrastructure environments
• Good understanding of cybersecurity concepts, network security, system hardening, and security best practices
• Familiarity with security frameworks such as CIS Benchmarks, PCI DSS, NIST, or similar standards
• Hands-on experience with firewalls, IDS/IPS, endpoint security, or security monitoring tools is advantageous
• Strong analytical, troubleshooting, and stakeholder management skills

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.
We regret that only shortlisted candidate will be notified.

Email: job•@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Requirements:

• Bachelor’s degree in computer science/information security or equivalent
• Professional certifications, such as GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred
• Preferably 4 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (e.g. CVSS), and external-facing attack surface risks
• Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar)
• Proficiency in programming languages such as Python will be advantageous

Job Summary:

The Application Security Consultants is responsible for auditing and validating the security posture of applications and their supporting infrastructure. This role focuses on reviewing security activities performed by development teams, including static and dynamic code analysis, infrastructure scans, and hardening practices. The analyst ensures that applications meet internal security standards and comply with regulatory requirements.

Key Responsibilities:

·      Review and validate results from SAST (Static Application Security Testing) and DAST( Dynamic Application Security Testing) tools.

·      Audit OS, container, and database scans for vulnerabilities and misconfigurations looking at reports a

·      Assess the effectiveness of hardening measures across application components (e.g., webservers, APIs, containers, databases).

·      Collaborate with application development and DevSecOps teams to ensure remediation of identified issues.

·      Maintain audit documentation, including findings, remediation tracking, and compliance status.

·      Evaluate adherence to secure coding practices and application security policies.

·      Support internal security audits related to application & underlying infrastructure security.

·      Stay updated on emerging threats, vulnerabilities, and secure development trends.

Required Qualifications:

·      Bachelor’s degree in computer science, Cybersecurity, or related field.

·      4+ years of experience in application security, security auditing, or secure software development.

·      Hands-on experience on one or more tools like SonarQube, Fortify SAST/DAST, Burp Suite,OWASP ZAP etc.

·      Strong understanding of OWASP Top 10, secure coding principles, and CI/CD pipelines.

·      Familiarity with container technologies (e.g., Docker, Kubernetes) and cloud platforms (e.g., AWS, Azure, GCP).

Certifications:

·      CRESTCertified Pen Tester

·      CISSP or CCSP 

·      Preferred Certified AWS DevSecOps Professional or equivalent

Key Competencies:

·      Analytical mindset with attention to detail

·      Ability to interpret scan results and prioritize remediation

·      Strong communication and collaboration skills

·      Knowledge of regulatory frameworks (e.g., ISO 27001, PCI-DSS, GDPR)

·      Experience working in Agile and DevOps environments'

Interested applicants please send your resume in MS Wordsformat to pooja.yadav@ambition.com.sg andattention to Pooja (R1551322)

Short listed candidates will be notified

www.ambition.com.sg

EA Registration Number: R1551322

Data provided is for recruitment purposes only

Business Registration Number: 200611680D.

License Number: 10C5117

Employment Type: Contract (1 year renewable, with potential for conversion)

Working Hours: Monday toThursday (8.30am – 6.00pm), Friday (8.30am – 5.30pm) (Hybrid WorkingArrangement)

Location: One North

Salary: Up to SGD 5,300

We are looking for an experienced IT Systems Governance & Project Management professional who can oversee enterprise systems from both an operational and governance perspective. The ideal candidate should have strong experience in IT governance, risk management, audit compliance, and system lifecycle management, while also being capable of coordinating system enhancements, security assessments, and change initiatives across multiple stakeholders.

Responsibilities:

• Conduct system criticality and risk assessments for enterprise systems.
• Manage system governance, compliance, and audit readiness activities.
• Coordinate system changes, enhancements, and remediation efforts.
• Track and manage security risks, vulnerabilities, and remediation actions.
• Support disaster recovery and cyber incident recovery planning.
• Perform access reviews and ensure timely user deprovisioning.
• Manage certificates, API keys, and system integration credentials.
• Maintain accurate system documentation and governance records.
• Collaborate with system owners, vendors, and internal stakeholders to drive system improvements.
• Provide regular reporting on system risks, issues, changes, and compliance status.

Requirements:

• Degree/Diploma in IT, Computer Science, Information Systems, or related field.
• At least 5 years of experience in IT governance, systems support, project management, or security-related roles.
• Strong understanding of IT governance, risk management, compliance, and audit processes.
• Experience managing system changes, vendors, and stakeholder engagements.

By submitting your resume, you consent to the collection, use, and disclosure of your personal information per ScienTec’s Privacy Policy (scientecconsulting.com/privacy-policy).

This authorizes us to:

• Contact you about potential opportunities.
• Delete personal data as it is not required at this application stage.
• All applications will be processed with strict confidence. Only shortlisted candidates will be contacted.

Wong Siew Ting (Maeve) - R25127375

ScienTec Consulting Pte Ltd - 11C5781