IT Security Consultant

OPTIMUM SOLUTIONS (SINGAPORE) PTE LTD; Singapore; Presencial; SGD 90.000 - 120.000; Jornada completa

Descripción de la vacante

OPTIMUM SOLUTIONS (SINGAPORE) PTE LTD is hiring for a Vulnerability Management and Security Operations role in Singapore. You will coordinate vulnerability management across on-prem and cloud environments, leveraging VMS and Tenable tools to identify and monitor threats, and drive patch remediation with cross-functional teams.

You will also support security incident response, DDoS and WAF operations, and reporting for governance and audits, ensuring compliance with IM8 and security standards.

Formación

• Diploma or degree in IT, cybersecurity, CS, IS, or related field.
• 4–5 years in IT security operations, vulnerability management, or related functions.
• Experience with vulnerability management tools (e.g., Tenable).
• Exposure to Microsoft Azure security and cloud environments is advantageous.
• Experience coordinating cybersecurity incidents and remediation activities.
• Familiarity with DDoS protection and WAF technologies.
• Experience supporting compliance and governance in enterprise or public-sector environments.
• Strong coordination and stakeholder management skills.

Responsabilidades

• Coordinate vulnerability management across on-prem, servers, endpoints, apps and Azure cloud.
• Utilize VMS, TenableOne, Cloudscape to identify and monitor vulnerabilities.
• Review assessment results and patch compliance to set remediation priorities.
• Track remediation progress with infrastructure and app teams; ensure timelines.
• Support incident response activities and coordinate investigations with stakeholders.
• Assist in DDoS and WAF operations and vulnerability-related service reviews.
• Compile reports and evidence for audits, governance, and regulatory compliance.

Conocimientos

Coordination

Analytical skills

Communication

Teamwork

Organization

Multitasking

Educación

Diploma or Degree in IT / Cybersecurity or related field

Herramientas

Tenable

Azure

DDoS protection

Descripción del empleo

Vulnerability Management

• Coordinate vulnerability management activities across on-premises infrastructure, servers, endpoints, applications, and Azure cloud environments.
• Utilize security tools such as Vulnerability Management Systems (VMS), TenableOne, Cloudscape, and related platforms to identify, assess, and monitor security vulnerabilities.
• Conduct regular reviews of vulnerability assessment results and patch compliance reports to identify remediation priorities.
• Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams.
• Monitor patching progress and ensure vulnerabilities are remediated within defined timelines and compliance requirements.
• Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.
• Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention.
• Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.
• Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.
• Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.

Security Incident Response Support

• Support cybersecurity incident response activities in collaboration with the CISO, Infrastructure Team, and security service providers.
• Coordinate incident investigations and facilitate communications among relevant technical and business stakeholders.
• Assist in the identification, escalation, containment, recovery, and closure of cybersecurity incidents.
• Maintain accurate incident records, logs, and supporting documentation.
• Follow up on remediation activities arising from security incidents and ensure completion within agreed timelines.
• Participate in incident review sessions and support the implementation of lessons learned and process improvements.
• Monitor incident trends and recommend operational improvements to enhance security effectiveness.
• Ensure incident management processes are executed in accordance with established security procedures and governance requirements.

DDoS and Web Application Firewall (WAF) Operations

• Support the operation and administration of DDoS mitigation and Web Application Firewall (WAF) services protecting the organization's Internet-facing applications.
• Coordinate with service providers and internal stakeholders to ensure the effectiveness of deployed security controls.
• Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities.
• Facilitate WAF policy reviews, rule updates, and change requests in accordance with operational requirements.
• Support investigations involving web application attacks, suspicious traffic, and DDoS-related events.
• Track service issues and follow up with vendors to ensure timely resolution.
• Assist in service reviews and operational assessments of DDoS and WAF solutions.

4.Security and Infra Operations Coordination

• Coordinate cybersecurity and infra operational activities across application teams, infrastructure teams, Onsite FM teams, GCC FM teams, and external security vendors.
• Maintain security risk, remediation, and compliance tracking registers.
• Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews.
• Support security governance activities through effective communication and collaboration with stakeholders.
• Escalate operational issues, delays, and security risks where required.
• Ensure cybersecurity and infra operational processes are executed consistently and effectively.

Reporting and Compliance Monitoring

• Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data.
• Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress.
• Monitor compliance against prescribed security requirements, policies, and standards.
• Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance.
• Support management review meetings by providing timely and accurate cybersecurity status updates.
• Assist in audit preparation activities and coordinate the collection of supporting evidence and documentation.

Requirements

Qualifications

• Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.

Experience

• Minimum 4-5 years of experience in IT security operations, cybersecurity operations, vulnerability management, or related IT security functions.
• Experience working with vulnerability management tools such as Tenable, or equivalent solutions.
• Exposure to Microsoft Azure security and cloud environments is advantageous.
• Experience coordinating cybersecurity incidents and remediation activities.
• Familiarity with DDoS protection and WAF technologies is preferred.
• Experience supporting compliance and governance requirements within enterprise or public-sector environments is advantageous.

TechnicalKnowledge

• Understanding of cybersecurity, infra operations and security monitoring practices.
• Knowledge of vulnerability management and patch management processes.
• Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent.
• Basic understanding of network, server, application, and cloud security concepts.
• Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis.

SoftSkills

• Strong coordination and stakeholder management skills.
• Good analytical and problem-solving capabilities.
• Effective verbal and written communication skills.
• Ability to work independently and collaboratively within a team environment.
• Strong organizational skills with attention to detail.
• Ability to manage multiple tasks and priorities in a dynamic operational environment.

Preferred Certifications

• Azure Cloud Certifications
• CompTIA Security+
• Microsoft Security Certifications
• CEH (Certified Ethical Hacker)
• ISC2 CC (Certified in Cybersecurity)
• CISSP or CISM (advantageous but not mandatory)