IT Security Officer

Sedha Consulting; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Sedha Consulting is seeking a security-focused engineer to apply foundational security principles to real-world engineering challenges. You will work with security and product teams to support threat modelling, implement controls, and secure government systems.

Responsibilities include automated reporting, reviewing VAPT findings, validating vulnerabilities, and refining incident response playbooks while contributing to compliance and evidence collection.

Qualifications

• Degree in Infocomm Security, Computer Science, Computer/Electronics Engineering, or IT.
• Demonstrated potential or relevant experience is desirable.
• Certifications such as OSCP, CISSP are a plus.

Responsibilities

• Perform routine security reporting and dashboards with automation.
• Review VAPT findings and assist remediation planning.
• Validate vulnerabilities and findings from assessment reports.
• Refine incident response playbooks and runbooks.
• Support threat modelling and identify security requirements from policies.
• Assist in implementing security controls across CI/CD and cloud.
• Triage alerts and help investigations on security monitoring tools.
• Collaborate with security and product teams to secure government systems.

Skills

Security architecture

Threat modelling

Vulnerability validation

CI/CD security

Kubernetes security

Cloud security monitoring

Automation scripting

Zero trust

IAM & secrets

Education

Infocomm Security degree

Computer Science

Information Technology

Tools

Python

Bash

Kubernetes

SIEM

EDR

Job description

In this role, you will apply foundational security principles to real-world engineering challenges while executing security tasks with increasing independence. Depending on your area of focus, you may contribute to improving security implementations, automating security processes, reviewing secure code and design patterns, and evaluating new cybersecurity tools.

You will work closely with security and product teams to support threat modelling, implement security controls, and perform security-related operations to secure government systems.

What You Will Be Working On

Cybersecurity Operational Work

• Perform routine reporting and dashboarding activities, leveraging automation to improve efficiency
• Support the review of VAPT findings and contribute to remediation planning
• Validate security vulnerabilities and findings from various assessment reports
• Refine incident response playbooks
• Contribute to compliance-related documentation and evidence collection
• Assist in implementing security controls and operational security tasks
• Participate in threat modelling exercises and identify security requirements from policies
• Perform periodic IAM role reviews to ensure least privilege access principles

Security Architecture & Engineering

• Apply security standards and controls across CI/CD pipelines, Kubernetes platforms, and cloud environments

Cyber Defence & Incident Response

• Support incident response activities and escalated complex issues appropriately
• Perform alert triage and assist in investigations across security monitoring platforms
• Contribute to refining detection rules, playbooks, and response runbooks
• Support guided threat hunting activities to identify potential indicators of compromise
• Deliver POCs or features spanning multiple components while balancing security, performance, and maintainability
• Utilise code and cloud security analysis tools and remediate findings appropriately
• Recommend improvements to enhance product security, performance, and team efficiency
• Conduct testing of new tools in lab environments and summarise findings
• Contribute to POC initiatives with defined objectives and outcomes
• Collaborate with peers and stakeholders to ensure tasks are executed effectively
• Share knowledge, resources, and lessons learnt openly to support team success
• Suggest improvements that enhance team effectiveness

What We Are Looking For

Technical Skills

• Foundational knowledge in security architecture, secure system design, and threat modelling
• Ability to perform guided vulnerability validation and support remediation
• Familiarity with securing CI/CD platforms, Kubernetes environments, and cross-cutting platform products
• Exposure to developer-centric tools including agentic AI workflows and coding assistants
• Familiarity with SIEM platforms, EDR tools, and cloud-native security monitoring
• Ability to follow and contribute to detection logic, incident response playbooks, and threat hunting processes
• Scripting or automation skills (e.g. Python, Bash) for security tooling and workflow automation
• Understanding of identity and access management, secrets management, and zero trust principles

Education & Experience

• Degree in Infocomm Security, Computer Science, Computer/Electronics Engineering, or Information Technology
• Relevant experience or demonstrated potential backed by a strong track record is desirable

Certifications (Desirable)

• OSCP, CISSP, or other relevant cybersecurity certifications