IT Security Officer - #1689

JOBSTER PRIVATE LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

JOBSTER PRIVATE LTD. is seeking an experienced cybersecurity leader in Singapore to oversee security across software development, cloud services and IT infrastructure.

You will drive threat modelling, risk assessments and incident response processes, ensuring robust security controls and proactive remediation. The role requires strong knowledge of OWASP Top 10/ASVS, cloud security in AWS, and hands-on experience with CI/CD pipelines and SAST tools.

Qualifications

• 5+ years combined experience across software development, application security and cloud computing (e.g., AWS).
• Strong understanding of mobile and web architectures, APIs, REST, SOAP and SSL/TLS.
• In-depth knowledge of OWASP Top 10 and ASVS.
• Proficient in Agile, CI/CD and DevSecOps with GitLab, GitHub and Ansible.
• Experience with SAST tools such as Fortify on Demand and SonarQube.
• Ability to review architectures, data flows, APIs and security controls.
• Experience in threat modelling and creating threat profiles.
• Experience in incident response and remediation tracking.
• Excellent communication and stakeholder collaboration.
• Degree in a relevant discipline; certifications preferred.
• GCC/Government Cloud experience preferred.

Responsibilities

• Conduct cybersecurity risk assessments for IT systems, applications, infrastructure and cloud services.
• Perform cybersecurity incident response including triage, containment, remediation, recovery and post-incident review.
• Monitor cybersecurity alerts and investigate incidents such as malware, phishing and data breaches.
• Review remediation plans and verify closure of security risks.
• Track vulnerabilities and ensure timely remediation and patching.
• Conduct security awareness training sessions to promote good cybersecurity practices.
• Collaborate with stakeholders across IT and business units.

Skills

Security architecture

Threat modelling

Incident response

CI/CD & DevSecOps

OWASP Top 10/ASVS

Cloud security

Analytical skills

Security testing

Education

Bachelor's degree in a relevant discipline

Certifications (CISSP/ OSCP/ CCSP/ CRISC/ AWS security)

Tools

GitLab

GitHub

Ansible

Job description

Responsibilities and Requirements

• At least 5 years combined work experience in software development, application security and cloud computing (e.g. AWS)
• Good understanding of mobile and web application architectures, including APIs and related technologies and protocols such as REST, SOAP and SSL/TLS.
• Strong knowledge of application security principles and industry best practices, including the OWASP Top 10 and OWASP Application Security Verification Standard (ASVS).
• Familiar with Agile development, CI/CD and DevSecOps practices, including tools such as GitLab, GitHub and Ansible, and the integration of automated security testing into CI/CD pipelines.
• Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc
• Review system architecture, data flows, interfaces, APIs, internet-facing entry points and security controls to identify potential security risks.
• Conduct cybersecurity risk assessments for new and existing IT systems, applications, infrastructure and cloud services.
• Preferably possess experience in threat modelling and develop threat profiles for application projects to identify, quantify and remediate application security risks.
• Review remediation plans and supporting evidence to verify that security risks have been adequately addressed.
• Track and address security vulnerabilities with timely remediation and patching and closure in accordance with established requirements.
• Monitor and investigate cybersecurity alerts and incidents, including malware, phishing, account compromise, data breaches, unauthorised access, and cloud security incidents.
• Perform cybersecurity incident response and management, including incident triage, investigation, containment, remediation, recovery, and post-incident review.
• Conduct security awareness training sessions to promote security awareness and good cybersecurity practices.
• Good verbal/written communications, collaboration skills and experience interacting with various stakeholders
• Strong analytical, problem-solving and troubleshooting skills, ability to work independently
• Degree in a relevant discipline, or an equivalent qualification.
• Relevant professional certifications such asCISSP, OSCP,CCSP, CRISC, AWS security certification or equivalent are preferred
• Experience in working with Government Commercial Cloud (GCC) preferred.