IT Security Officer

Astek Group; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Astek Group in Singapore is seeking an IT Security Officer to strengthen security across software, cloud, and infrastructure. You will review architectures, perform risk assessments, and drive remediation for vulnerabilities and incidents.

The role requires hands-on expertise with SAST tools and DevSecOps practices to embed security in CI/CD pipelines. The ideal candidate has 5+ years in software security, cloud (AWS), and security operations, with a proactive, collaborative mindset to promote

Qualifications

• At least 5 years combined work experience in software development, application security and cloud computing (e.g. AWS).
• Experience using SAST code scanning tools such as Fortify-on-Demand, SonarQube, etc.
• Review system architecture, data flows, interfaces, APIs, and security controls to identify risks.
• Conduct cybersecurity risk assessments for IT systems, apps, infra and cloud services.
• Review remediation plans and evidence to verify risk mitigation.
• Track and address security vulnerabilities with timely remediation and patching.
• Monitor and investigate cybersecurity alerts and incidents, including data breaches and account compromise.
• Perform cybersecurity incident response and post-incident review.

Responsibilities

• Review system architecture, data flows, interfaces and APIs to identify potential security risks.
• Conduct risk assessments for IT systems, apps, infra and cloud services.
• Verify remediation plans and evidence to ensure risk mitigation.
• Track security vulnerabilities and ensure timely remediation and patching.
• Monitor cybersecurity alerts and investigate incidents, including breaches.
• Lead incident response: triage, containment, remediation and recovery.
• Deliver security awareness training to promote best practices.

Skills

Software development

Application security

Cloud (AWS)

Tools

Fortify-on-Demand

SonarQube

Job description

ASTEK has been providing IT and Engineering solutions for some of the world’s largest industrial and services groups for more than 35 years with 10,000 passionate experts in 22 countries throughout Europe, APAC, Middle East and the Americas

Currently, we are looking for IT Security Officer which would be based in Singapore

Responsibilities and Requirements

• At least 5 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Review system architecture, data flows, interfaces, APIs, internet-facing entry points and security controls to identify potential security risks.
• Conduct cybersecurity risk assessments for new and existing IT systems, applications, infrastructure and cloud services.
• Review remediation plans and supporting evidence to verify that security risks have been adequately addressed.
• Track and address security vulnerabilities with timely remediation and patching and closure in accordance with established requirements.
• Monitor and investigate cybersecurity alerts and incidents, including malware, phishing, account compromise, data breaches, unauthorised access, and cloud security incidents.
• Perform cybersecurity incident response and management, including incident triage, investigation, containment, remediation, recovery, and post-incident review.
• Conduct security awareness training sessions to promote security awareness and good cybersecurity practices.

Good to have:

• Good understanding of mobile and web application architectures, including APIs and related technologies and protocols such as REST, SOAP and SSL/TLS.
• Familiar with Agile development, CI/CD and DevSecOps practices, including tools such as GitLab, GitHub and Ansible, and the integration of automated security testing into CI/CD pipelines.