Cybersecurity Analyst

James Cook University; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

James Cook University Singapore is seeking a skilled Cybersecurity Analyst to join our ICT team. You will design, implement and integrate security systems across on‑premises and cloud environments, aligning with security policies to safeguard data and ensure uninterrupted operations in support of our education and research mission.

The role requires 4–7 years of experience with secure SDLC, vulnerability management, incident response, and cloud security.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related discipline (Master’s preferred).
• 4–7 years of experience embedding security in SDLC and conducting secure code reviews.
• Certifications such as CISSP, CISM, CISA, CompTIA Security+, CEH are desirable.
• Hands-on experience with cloud security (hybrid environments) and SIEM/EDR tools.

Responsibilities

• Design, architect, and implement security systems aligned with policies and regulations.
• Lead vulnerability management across critical assets and applications.
• Coordinate incident response and post‑incident improvements with SOC and stakeholders.
• Promote secure development practices and security awareness across teams.

Skills

Cloud security

SIEM

Vulnerability management

Incident response

Secure coding practices

OWASP Top 10

Security architecture

Threat monitoring

Communication skills

Team collaboration

Education

Bachelor's degree in CS/IT/Cybersecurity

Master's degree preferred

Tools

Cloud platforms (AWS, Azure, GCP)

EDR tools

IDS/IPS

Secure code scanning tools

Job description

Thank you for your interest in employment at the Singapore campus of James Cook University.

We take exceptional pride in recruiting and developing outstanding individuals who share our vision to be the leading Australian provider of higher education in Asia. At the Singapore campus of James Cook University, we believe in the importance of providing a great place for our employees to grow and develop professionally. We have a culture that values mutual respect, integrity, creativity and teamwork.

Join us as we continue our development as a vibrant, multicultural and excellent organisation in education and research.

Job no: 493246
Work type: Permanent Full Time
Location: Singapore
Categories:

We are excited to recruit a Cybersecurity Analyst to be to be part of our dynamic ICT team.

The Cybersecurity Analyst protects the university’s digital environment by designing, implementing and integrating security systems, in alignment with security policies and procedures. He or she also responds to threats across on-premises and cloud systems. By ensuring compliance and safeguarding critical data, this role enables secure, uninterrupted operations that support the university’s mission of delivering quality education and research.

Responsibilities

Security Architecture, Design and Integration

• Design, architect, and implement security systems, ensuring alignment with corporate policies and local regulations.
• Perform security architecture reviews for hybrid environments, including cloud, on-premises, and third-party integrations
• Perform cybersecurity risk assessments and/or penetration tests for new systems, applications, and technology implementations.
• Act as the designated point-of-contact and primary responder to receive alerts from the Security Operations Centre (SOC) team upon detection of potential incidents, ensuring effective coordination and execution of necessary response actions.
• Track remediation efforts for security gaps and audit findings.
• Conduct post-incident reviews and implement lessons learned to strengthen response processes.

Vulnerability Management

• Design and integrate security systems to reduce exposure to threats.
• Perform regular vulnerability scans across critical and high-value assets, including applications.
• Track remediation progress and provide timely status reports to management.
• Work with developers to remediate application-level vulnerabilities promptly.

Risk Management & Security Reporting & Metrics

• Identify, prioritise, and manage cybersecurity risks by assessing their potential impact and coordinating the implementation of appropriate mitigation measures.
• Collect, log, and organise cybersecurity events, incidents, and vulnerability data in a centralised system.
• Analyse data to identify trends and provide actionable insights for management.
• Evaluate the effectiveness of security standards and procedures regularly.
• Review post-incident actions and incorporate improvements into processes.
• Promote secure development practices and security awareness across teams.
• Encourage participation in security initiatives across divisions.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline (Master’sdegree preferred)
• 4-7 years of experience working with development teams to embed security in the software development lifecycle, conducting secure code reviews, and using automated scanning tools
• Relevant professional certifications such asCISSP,CISM, CISA, CompTIA Security+, CEH,
• Certified Ethical Hacker (CEH)
• Global Information Assurance Certificationsuch asGIAC,GSEC,GIACorGCIHpreferred.
• Cloud Security Certifications such as AWS Certified Security – Speciality or Microsoft Certified: Azure Security Engineer Associate
• Additionaldesirable skills: Knowledge of secure coding practices, application security frameworks (e.g., OWASP Top 10), and experience integrating security into the Software Development Lifecycle (SDLC).
• Strong understanding of cybersecurity principles, concepts, threats, and best practices from both defensive and incident response perspectives.

Hands‑on experience in:

• Cloud security (AWS, Azure, GCP) and hybrid environments
• Security monitoring, analytics, and reporting using SIEM and EDR tools
• Vulnerability assessments and management across infrastructure and applications
• Network and infrastructure security, including firewalls and endpoint protection
• Web and application security, including OWASP Top 10 and secure coding practices

Advanced knowledge in:

• Incident response and escalation, including coordination with technical and business stakeholders.
• Vulnerability management frameworks and use of MITRE ATT&CK for threat analysis
• Able to developand improve of security playbooks, post-incident reviews, and lessons learned
• Strong communicationskillsand ableto explain complex technical concepts in clear, simple terms to both technical and non-technical stakeholders.
• Critical thinking and problem-solving, capable of analysing situations,anticipatingrisks, and making sound decisions under pressure.
• Proactivemindset, takesinitiative toidentifyrisks, suggest improvements, and drive security awareness.
• High adaptability and continuous learning, comfortable with change, and committed to staying current with evolving threats and technologies.
• Attention todetail,meticulousin monitoring, analysis, and documentation to ensure accuracy and compliance.
• Able to collaborateand work as a teamand workseffectively with colleagues across different departments to implement security measures.

We thank you for your interest and regret we are only able to notify shortlisted candidates.

The Singapore campus of James Cook University (registered as James Cook University Pte Ltd in Singapore) is a wholly owned company of James Cook University Australia. The University offers Bachelor & Master Programs in Business, Psychology, Information Technology & Education at the Singapore campus of James Cook University.

Advertised: 18 Aug 2026 Singapore Standard Time
Applications close: 18 Sep 2026 Singapore Standard Time