IT Security Officer

SEDHA CONSULTING PTE. LTD.; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

SEDHA CONSULTING PTE. LTD. is seeking an IT Security Officer in Singapore with 5+ years of experience in software development, security and cloud computing. You will assess risks, review architectures, and lead remediation across systems and cloud services.

Responsibilities include threat modelling, incident response, vulnerability tracking and security training, with strong collaboration across stakeholders and a focus on industry best practices and ASVS compliance.

Qualifications

• At least 5 years combined work experience in software development, application security and cloud computing.
• Good understanding of mobile and web application architectures and APIs, REST/SOAP/SSL/TLS.
• Strong knowledge of application security principles and OWASP Top 10/ASVS.
• Familiar with Agile, CI/CD and DevSecOps; experience with GitLab, GitHub and Ansible.
• Experience using SAST tools such as Fortify-on-Demand and SonarQube.
• Review architecture, data flows, interfaces and security controls to identify risks.
• Conduct cybersecurity risk assessments for IT systems and cloud services.
• Preferable experience in threat modelling and creating threat profiles.
• Track remediation and patching; verify security risks are addressed.
• Monitor cybersecurity alerts and incidents; perform incident response and management.
• Conduct security awareness training and promote best practices.
• Excellent verbal/written communications; ability to work with stakeholders.
• Degree in a relevant discipline; relevant certifications preferred.
• Experience with Government Commercial Cloud (GCC) preferred.

Responsibilities

• Review remediation plans and supporting evidence to verify risk remediation.
• Track and address security vulnerabilities with timely remediation and closure.
• Monitor and investigate cybersecurity alerts and incidents, including data breaches and unauthorized access.
• Perform cybersecurity incident response and management, including containment and recovery.
• Conduct security awareness training sessions to promote best practices.
• Collaborate with stakeholders across teams to strengthen security controls.

Skills

Application security

Threat modelling

Incident response

Vulnerability management

Security risk assessment

CI/CD security

SAST tools

Security awareness

Analytical thinking

Communication skills

Problem-solving

Independent work

Education

Degree in a relevant discipline

Security certifications (CISSP/OSCP/CCSP/CRISC/AWS)

Tools

GitLab

GitHub

Ansible

Fortify SCA

SonarQube

Job description

ITSO – IT Security Officer

Responsibilities and Requirements

• At least 5 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Good understanding of mobile and web application architectures, including APIs and related technologies and protocols such as REST, SOAP and SSL/TLS.
• Strong knowledge of application security principles and industry best practices, including the OWASP Top 10 and OWASP Application Security Verification Standard (ASVS).
• Familiar with Agile development, CI/CD and DevSecOps practices, including tools such as GitLab, GitHub and Ansible, and the integration of automated security testing into CI/CD pipelines.
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Review system architecture, data flows, interfaces, APIs, internet-facing entry points and security controls to identify potential security risks.
• Conduct cybersecurity risk assessments for new and existing IT systems, applications, infrastructure and cloud services.
• Preferably possess experience in threat modelling and develop threat profiles for application projects to identify, quantify and remediate application security risks.
• Review remediation plans and supporting evidence to verify that security risks have been adequately addressed.
• Track and address security vulnerabilities with timely remediation and patching and closure in accordance with established requirements.
• Monitor and investigate cybersecurity alerts and incidents, including malware, phishing, account compromise, data breaches, unauthorised access, and cloud security incidents.
• Perform cybersecurity incident response and management, including incident triage, investigation, containment, remediation, recovery, and post-incident review.
• Conduct security awareness training sessions to promote security awareness and good cybersecurity practices.
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Degree in a relevant discipline, or an equivalent qualification.
• Relevant professional certifications such as CISSP, OSCP, CCSP, CRISC, AWS security certification or equivalent are preferred
• Experience in working with Government Commercial Cloud (GCC) preferred