Associate IT Security Officer

USER EXPERIENCE RESEARCHERS PTE. LTD.; Singapore; Vor Ort; SGD 60.000 - 90.000; Vollzeit

Zusammenfassung

USER EXPERIENCE RESEARCHERS PTE. LTD. in Singapore is seeking a cybersecurity professional to develop and review security procedures and runbooks, perform health checks, and provide Level 1/2 incident support.

You will monitor alerts, coordinate with partners, manage access and privileged accounts, and contribute to audits and awareness initiatives. The role requires hands-on experience in cybersecurity operations, strong knowledge of security principles, and the ability to work with both

Qualifikationen

• Bachelor's degree or diploma in Computer Science, IT, Cybersecurity or related discipline.
• 2-4 years of relevant cybersecurity operations experience.
• Hands-on experience in incident handling and vulnerability management.
• Knowledge of security principles, logging, data protection and secure administration.
• Ability to work independently and document work clearly for technical and non-technical stakeholders.
• Experience coordinating with external providers, security organizations, auditors and government stakeholders is advantageous.

Aufgaben

• Develop, maintain, and review IT security procedures and runbooks.
• Perform health checks, preventive maintenance, monitoring, and operational support for cybersecurity systems.
• Provide Level 1 and 2 support, triage, and track incidents to closure.
• Monitor security alerts, assess threats, and provide impact analyses and actions.
• Support incident management, evidence collection, containment, and post-incident reporting.
• Manage onboarding/offboarding, access reviews, and privileged account administration.
• Coordinate with internal teams, MSPs, vendors, and external partners on security matters.
• Maintain inventories of assets and support onboarding, configuration validation, and decommissioning.
• Prepare bi-weekly updates, monthly service reports, risk and vulnerability reports, and ad hoc reports.
• Track licenses, certificate expiry, maintenance and renewal dates, and billing verification.
• Plan phishing simulations and security awareness exercises with communications and follow-ups.
• Participate in security exercises, audits, and vulnerability remediation activities.
• Assist with forensic acquisition and analysis with proper chain-of-custody.
• Perform other cybersecurity duties to protect information systems.

Kenntnisse

Cybersecurity operations

Incident handling

Vulnerability management

Security monitoring

Access control

Documentation

Stakeholder communication

Ausbildung

Bachelor's degree or diploma in Computer Science / IT / Cybersecurity

Tools

CyberArk Privileged Access Management

SIEM

Forcepoint DLP

Imperva WAF

Windows Server

Linux

PowerShell

Bash

Azure

AWS

GCP

Jobbeschreibung

Key Responsibilities:

• Develop, maintain, and review IT security procedures, action plans, runbooks, and operational documentation as required.
• Perform daily, weekly, and monthly health checks, preventive maintenance, monitoring, administration, and operational support for assigned cybersecurity systems.
• Provide Level 1 and Level 2 support, perform initial investigation and triage, coordinate escalation, and track incidents through closure.
• Monitor and analyze security alerts, emerging threats, vulnerabilities, and advisories, and provide timely impact assessments and recommended actions.
• Support IT security incident management, evidence collection, investigation, containment, recovery, and post-incident reporting in accordance with established procedures.
• Conduct user onboarding, offboarding, access reviews, privileged account administration, and entitlement validation as authorized.
• Coordinate with internal teams, government technology agencies, managed service providers, vendors, and external security partners on operational and incident matters.
• Maintain inventories of assets monitored by central security tools and support onboarding, configuration validation, troubleshooting, and decommissioning.
• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk and vulnerability reports, and ad hoc reports as requested.
• Track licenses, subscriptions, certificate expiry, maintenance and contract renewal dates, and support billing or service verification activities where required.
• Plan and conduct phishing simulations and security awareness exercises, including preparation of communications, reports, lessons learned, and follow-up actions.
• Participate in security exercises, technical assessments, audits, vulnerability remediation activities, and tabletop exercises when required.
• Assist with forensic acquisition and analysis activities when required and authorized, while maintaining chain of custody and secure evidence handling.
• Perform other reasonable cybersecurity duties necessary to protect information systems and infrastructure.

Experience and Qualifications:

• Bachelor's degree or diploma in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.
• Relevant experience aligned to the proposed skill level: Associate Consultant, 2-4 Years
• Proven hands-on experience in cybersecurity operations, infrastructure security, security platform administration, incident handling, and vulnerability management.
• Strong understanding of information security principles, security operations, access control, logging and monitoring, data protection, and secure administration.
• Ability to work independently, priorities operational tasks, document work clearly, and communicate with technical and non-technical stakeholders.
• Experience coordinating with external service providers, security organizations, auditors, and government stakeholders is advantageous.

Preferred Technical Skills:

• CyberArk Privileged Access Management.
• Insider Security Dashboard, SIEM, Syslog-NG, database activity monitoring, insider security monitoring, and security log analysis.
• Forcepoint Data Loss Prevention and Imperva Web Application Firewall.
• Windows Server and Linux administration, PowerShell, Bash, and command-line troubleshooting.
• Microsoft Azure, Amazon Web Services, and Google Cloud Platform security operations.
• Vulnerability management, security hardening, incident response, phishing simulation, and awareness campaign management.
• Relevant certifications such as CISSP, CISM, GCIH, CEH, Security+, CyberArk, Microsoft Azure, AWS, or equivalent are preferred.