Information Technology Security Officer

Astek; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Astek in Singapore is seeking a security professional to enhance our security program across operations, incident response, threat modelling, and compliance. You will review VAPT findings, validate vulnerabilities from assessments, refine incident response playbooks, and support security controls across CI/CD pipelines, Kubernetes, and cloud environments.

You will also perform threat hunting support and contribute to detection rule improvements.

Responsibilities

• Perform routine reporting and dashboarding activities, leveraging automation to improve efficiency.
• Support the review of VAPT findings and contribute to remediation planning.
• Validate security vulnerabilities and findings from various assessment reports.
• Refine incident response playbooks.
• Contribute to compliance-related documentation and evidence collection.
• Assist in implementing security controls and operational security tasks.
• Participate in threat modelling exercises and identify security requirements from policies.
• Perform periodic IAM role reviews to ensure least privilege access principles.
• Apply security standards and controls across CI/CD pipelines, Kubernetes platforms, and cloud environments.
• Support incident response activities and escalate complex issues appropriately.
• Perform alert triage and assist in investigations across security monitoring platforms.
• Contribute to refining detection rules, playbooks, and response runbooks.
• Support guided threat hunting activities to identify potential indicators of compromise.
• Deliver POCs or features spanning multiple components while balancing security, performance, and maintainability.
• Utilise code and cloud security analysis tools and remediate findings appropriately.
• Recommend improvements to enhance product security, performance, and team efficiency.

Job description

• Perform routine reporting and dashboarding activities, leveraging automation to improve efficiency
• Support the review of VAPT findings and contribute to remediation planning
• Validate security vulnerabilities and findings from various assessment reports
• Refine incident response playbooks
• Contribute to compliance-related documentation and evidence collection
• Assist in implementing security controls and operational security tasks
• Participate in threat modelling exercises and identify security requirements from policies
• Perform periodic IAM role reviews to ensure least privilege access principles
• Apply security standards and controls across CI/CD pipelines, Kubernetes platforms, and cloud environments
• Support incident response activities and escalate complex issues appropriately
• Perform alert triage and assist in investigations across security monitoring platforms
• Contribute to refining detection rules, playbooks, and response runbooks
• Support guided threat hunting activities to identify potential indicators of compromise
• Deliver POCs or features spanning multiple components while balancing security, performance, and maintainability
• Utilise code and cloud security analysis tools and remediate findings appropriately
• Recommend improvements to enhance product security, performance, and team efficiency