IT Security Officer

USER EXPERIENCE RESEARCHERS PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

USER EXPERIENCE RESEARCHERS PTE. LTD. in Singapore seeks an experienced Cybersecurity Analyst to oversee security operations, conduct testing, review reports, and provide consultancy to internal teams.

You will respond to alerts, handle incidents, and help improve policies and practices across the organization. The ideal candidate has a Bachelor's degree in CS/IT/Cybersecurity, 4–7 years of experience, strong network and OS knowledge, cloud security expertise, and hands-on tooling with SIEM,

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity or related field.
• 4–7 years of experience in cybersecurity analyst or similar role.
• Strong understanding of networks, OS (Windows, Linux) and cloud security concepts.
• Proficiency with security tools: vulnerability scanners, pentesting tools, SIEM.
• Experience with scripting for automation (Python, PowerShell).
• Familiarity with cybersecurity frameworks and standards (NIST, ISO 27001).
• Excellent analytical and problem-solving skills with attention to detail.
• Ability to work independently and in a fast-paced team environment.
• Strong written and verbal communication; ability to explain technical info to non-technical audiences.
• Experience in software development or security operations is preferred.

Responsibilities

• Manage security vendors and deliverables.
• Manage periodic security testing.
• Assess mitigation/remediation for adequacy and effectiveness.
• Manage timely and effective mitigation/remediation.
• Review security reports.
• Review security policies, standards, procedures and guidelines.
• Provide cybersecurity consultancy.
• Respond to security alerts/advisories.
• Handle incidents.
• Conduct security awareness training.
• Broadcast email security advisories.

Skills

Network protocols

Windows OS

Linux OS

Cloud security (AWS/Azure/GCP)

Security tools (vuln scanners, pentest

SIEM platforms

Scripting (Python, PowerShell)

Cybersecurity frameworks (NIST, ISO 27

Analytical thinking

Communication

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity

Tools

Vulnerability scanners

Penetration testing tools

SIEM platforms

Python

PowerShell

NIST

ISO 27001

Cloud security (AWS/Azure/GCP)

Networking knowledge

Job description

Key Responsibilities:

• Manage security vendors and deliverables.
• Manage periodic security testing.
• Assess mitigation/remediation for adequacy and effectiveness.
• Manage timely and effective mitigation/remediation.
• Review security reports.
• Review security policies, standards, procedures and guidelines.
• Provide cybersecurity consultancy.
• Respond to security alerts/advisories.
• Handle incidents.
• Conduct security awareness training.
• Broadcast email security advisories.

Job Requirement:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 4-7 years of experience in cybersecurity analyst or similar role.
• Strong understanding of network protocols, operating systems (Windows, Linux), and cloud security concepts (AWS, Azure, GCP).
• Proficiency with security tools such as vulnerability scanners, penetration testing tools, and SIEM platforms.
• Experience with scripting languages (e.g., Python, PowerShell) for automation.
• Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
• Excellent analytical and problem-solving skills with a strong attention to detail.
• Ability to work independently and as part of a team in a fast-paced environment.
• Strong written and verbal communication skills, with the ability to articulate technical information to non-technical audiences.
• Proven ability to manage multiple tasks and prioritize effectively.
• Require CISSP and/or CISM certification.

What Are We Looking For:

• Enthusiasm for learning and development of skills in cybersecurity.
• Strong analytical capability.
• Understanding of the vulnerabilities listed in the Open Web Application Security Project (OWASP) Top 10.
• Understanding of incident management and handling.
• Experience in software development or security operations is preferred.
• The following certifications are advantageous but not mandatory:
• GIAC Certified Incident Handler (GCIH)
• CompTIA Security+
• CompTIA CySA+
• EC-Council Certified Security Analyst (ECSA)
• EC-Council Certified Ethical Hacker (CEH)
• (ISC)2 Systems Security Certified Practitioner (SSCP)
• Offensive Security Certified Professional (OSCP)