IT Security Officer

eAspire Technolabs Inc.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

eAspire Technolabs Inc. is seeking an IT Security Officer to strengthen application and cloud security, assess risks and support secure software delivery.

You will review architectures, APIs, data flows and security controls, conduct risk assessments across applications, IT systems, infrastructure and cloud services, and lead remediation of vulnerabilities. The role requires 5+ years in software development, app security and cloud computing, with knowledge of OWASP Top 10/ASVS, DevSecOps, and

Qualifications

• Minimum 5 years combined experience in software development, application security and cloud computing.
• Strong knowledge of web/mobile app architectures, REST/SOAP APIs, and SSL/TLS.
• Familiarity with OWASP Top 10 and OWASP ASVS.
• Experience with Agile, CI/CD, and DevSecOps practices including GitLab, GitHub, and Ansible.
• Experience with SAST tools such as Fortify-on-Demand and SonarQube.
• Exposure to security architecture reviews, vulnerability management and risk assessments.
• Relevant certifications such as CISSP, OSCP, CCSP, CRISC, or AWS Security.

Responsibilities

• Review architectures, APIs, data flows, interfaces, and security controls to identify risks.
• Conduct cybersecurity risk assessments across applications, IT systems, infrastructure, and cloud services.
• Identify, track, and support remediation of security vulnerabilities.
• Review remediation plans and validate supporting evidence.
• Support cybersecurity incident investigation, response, containment, recovery, and post-incident reviews.
• Promote secure development practices and conduct cybersecurity awareness sessions.
• Collaborate with technical teams to strengthen security throughout the SDLC.

Skills

Security risk assessment

Cloud computing

Secure SDLC

OWASP Top 10/ASVS

DevSecOps (GitLab, GitHub, Ansible)

SAST tools (Fortify-on-Demand, SonarQb

Threat modelling

Stakeholder management

Communication skills

Education

Degree in a relevant discipline

CISSP/OSCP/CCSP/CRISC/AWS Security certs

Tools

GitLab

GitHub

Ansible

Fortify-on-Demand

SonarQube

Job description

Are you passionate about application security, cybersecurity risk management, and secure digital transformation? We’re looking for an experienced IT Security Officer to strengthen application and cloud security, assess security risks, and support secure software delivery.

• Review application architectures, APIs, data flows, interfaces, and security controls to identify potential risks.
• Conduct cybersecurity risk assessments across applications, IT systems, infrastructure, and cloud services.
• Identify, track, and support the remediation of security vulnerabilities in line with established requirements.
• Review security remediation plans and validate supporting evidence.
• Support cybersecurity incident investigation, response, containment, recovery, and post-incident reviews.
• Promote secure development practices and conduct cybersecurity awareness sessions.
• Collaborate with technical teams and stakeholders to strengthen security throughout the software development lifecycle.

What We’re Looking For

• At least 5 years of combined experience in software development, application security, and cloud computing.
• Strong understanding of web and mobile application architectures, REST/SOAP APIs, and SSL/TLS.
• Knowledge of OWASP Top 10 and OWASP ASVS.
• Familiarity with Agile, CI/CD, and DevSecOps practices, including GitLab, GitHub, and Ansible.
• Experience with SAST tools such as Fortify-on-Demand and SonarQube.
• Exposure to security architecture reviews, vulnerability management, and cybersecurity risk assessments.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.
• A degree in a relevant discipline or equivalent qualification.
• Experience in threat modelling and Government Commercial Cloud (GCC).
• Relevant certifications such as CISSP, OSCP, CCSP, CRISC, or AWS Security certifications.