CyberSecurity Analyst [Threat and Incident Response]

NEWBRIDGE ALLIANCE PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

NEWBRIDGE ALLIANCE PTE. LTD. is seeking a seasoned security professional to integrate security into the software development lifecycle and drive robust controls across the organization.

You will design and review security architectures for hybrid cloud and on-prem environments, perform risk assessments and penetration tests, and work with IT auditors, compliance, and SOC teams to ensure regulatory alignment.

Qualifications

• Experience embedding security in the software development lifecycle.
• Familiarity with hybrid cloud and on-prem security design and tools.
• Knowledge of IT audit frameworks and working with external auditors and SOC teams.
• Ability to perform cybersecurity risk assessments and penetration testing.
• Understanding of security frameworks and regulatory requirements.

Responsibilities

• Embed security in the SDLC with development teams.
• Perform security architecture reviews for hybrid environments.
• Conduct cybersecurity risk assessments and penetration tests.
• Coordinate with IT auditors, compliance and SOC teams.
• Stay current with industry security frameworks and best practices.

Skills

Web security

Application security

OWASP Top 10

Secure coding

Code scanning

DevSecOps

Cloud security

On-prem security

Security framework

SOC collaboration

Education

CISSP Certification

CISM Certification

Job description

What You Bring:
4 to 7 years of experience working as in-house security personnel for an MNC which experiences include:

Working with development teams to embed security in the software development lifecycle, conducting secure code reviews, and using automated scanning tools

• familiar with Web and application security, including OWASP Top 10 and secure coding practices
• familiar with code scanning and devsecops

Design, architect, and implement security systems, ensuring alignment with corporate policies and local regulations.

• familiar with cloud and on-perm security design and tools
• familiar with security framework

Able to perform security architecture reviews for hybrid environments, including cloud, on-premises, and third-party integrations

Able to perform cybersecurity risk assessments and/or penetration tests for new systems, applications, and technology implementations

Familiar with IT auditor framework and experience working with external auditor, compliance and SOC team

Relevant professional certifications such as CISSP,CISM