IT Security Officer (ITSO)

Rapsys Technologies Pte Ltd.; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

Rapsys Technologies Pte Ltd. is seeking an experienced IT Security Officer to support cybersecurity operations, threat monitoring, incident management, and infrastructure security across the enterprise.

The role includes PAM administration, SIEM/DAM monitoring, and DLP management, with responsibilities spanning cloud and on-premises environments. You will maintain security systems, coordinate with IT teams and external partners, and contribute to awareness programs, runbooks, and risk reporting.

Qualifications

• Hands-on experience in IT security operations and administration of enterprise security platforms.
• Experience in privileged access management, security monitoring, DLP and vulnerability management.
• Knowledge of security incident handling, investigation, escalation and reporting.
• Experience supporting Windows/Linux infrastructure and cloud environments.
• Strong documentation, communication, coordination and troubleshooting skills.

Responsibilities

• Administer and provide operational support for Privileged Access Management (PAM) solutions, including CyberArk.
• Manage and support security monitoring platforms, including SIEM, DAM, network device log monitoring and insider threat monitoring.
• Administer Data Loss Prevention (DLP) solutions, including Forcepoint, covering policy management, alert handling and reporting.
• Support web application and infrastructure security technologies, including Imperva Web Application Firewall (WAF).
• Monitor and manage security-related communications, including vulnerability advisories, threat intelligence notifications, phishing reports and security alerts.
• Maintain and support security infrastructure, including Syslog-NG, log management services, Windows and Linux servers, virtual machines and cloud environments.
• Support cybersecurity awareness programmes, phishing simulation exercises and employee security awareness activities.
• Maintain asset inventories and coordinate onboarding of servers, network devices, databases, cloud assets and internet-facing services into central security monitoring platforms.
• Develop, maintain and review IT security procedures, operational runbooks, action plans and technical documentation.
• Perform daily, weekly and monthly security system health checks, preventive maintenance, monitoring and operational support.
• Provide Level 1 and Level 2 technical support, including initial investigation, alert triage, troubleshooting and incident escalation.
• Monitor security alerts, emerging threats, vulnerabilities and advisories, and recommend appropriate remediation actions.
• Support security incident management activities, including evidence collection, investigation, containment, recovery and post-incident reporting.
• Conduct user onboarding and offboarding, access reviews, privileged account administration and access entitlement validation.
• Coordinate with internal IT teams, government technology teams, managed service providers, vendors and external security partners.
• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk reports and vulnerability reports.
• Track software licences, subscriptions, certificate expirations, maintenance schedules and contract renewals.
• Plan and conduct phishing simulations and cybersecurity awareness exercises, including reporting and follow-up actions.
• Participate in security assessments, audits, vulnerability remediation activities, security exercises and tabletop exercises.
• Assist with authorised forensic acquisition and analysis activities while maintaining proper chain of custody and secure evidence handling.

Tools

CyberArk PAM

SIEM

DAM

DLP Forcepoint

WAF Imperva

Security Monitoring

Log Management

Syslog-NG

Windows Server

Linux Server

Azure

AWS

GCP

IAM

Cybersecurity Operations

Job description

We\'re Hiring: IT Security Officer (ITSO)!

Job Description

We are looking for an experienced IT Security Officer (ITSO) to support cybersecurity operations, security monitoring, privileged access management, incident management and infrastructure security. The successful candidate will be responsible for maintaining security systems, monitoring threats, handling security incidents and ensuring the effective operation of enterprise security platforms.

Key Responsibilities

• Administer and provide operational support for Privileged Access Management (PAM) solutions, including CyberArk.
• Manage and support security monitoring platforms, including SIEM, Database Activity Monitoring (DAM), network device log monitoring and insider threat monitoring.
• Administer Data Loss Prevention (DLP) solutions, including Forcepoint, covering policy management, alert handling and reporting.
• Support web application and infrastructure security technologies, including Imperva Web Application Firewall (WAF).
• Monitor and manage security-related communications, including vulnerability advisories, threat intelligence notifications, phishing reports and security alerts.
• Maintain and support security infrastructure, including Syslog-NG, log management services, Windows and Linux servers, virtual machines and cloud environments.
• Support cybersecurity awareness programmes, phishing simulation exercises and employee security awareness activities.
• Maintain asset inventories and coordinate onboarding of servers, network devices, databases, cloud assets and internet-facing services into central security monitoring platforms.
• Develop, maintain and review IT security procedures, operational runbooks, action plans and technical documentation.
• Perform daily, weekly and monthly security system health checks, preventive maintenance, monitoring and operational support.
• Provide Level 1 and Level 2 technical support, including initial investigation, alert triage, troubleshooting and incident escalation.
• Monitor security alerts, emerging threats, vulnerabilities and advisories, and recommend appropriate remediation actions.
• Support security incident management activities, including evidence collection, investigation, containment, recovery and post-incident reporting.
• Conduct user onboarding and offboarding, access reviews, privileged account administration and access entitlement validation.
• Coordinate with internal IT teams, government technology teams, managed service providers, vendors and external security partners.
• Prepare bi-weekly operational updates, monthly service reports, management summaries, risk reports and vulnerability reports.
• Track software licences, subscriptions, certificate expirations, maintenance schedules and contract renewals.
• Plan and conduct phishing simulations and cybersecurity awareness exercises, including reporting and follow-up actions.
• Participate in security assessments, audits, vulnerability remediation activities, security exercises and tabletop exercises.
• Assist with authorised forensic acquisition and analysis activities while maintaining proper chain of custody and secure evidence handling.

Technical Skills

• Privileged Access Management (PAM) – CyberArk
• Security Information and Event Management (SIEM)
• Database Activity Monitoring (DAM)
• Data Loss Prevention (DLP) – Forcepoint
• Web Application Firewall (WAF) – Imperva
• Security Monitoring and Log Management
• Syslog-NG
• Windows and Linux Server Administration
• Vulnerability Management and Security Incident Response
• Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP)
• Identity and Access Management (IAM)
• Cybersecurity Operations and Threat Monitoring

Preferred Experience

• Hands-on experience in IT security operations and administration of enterprise security platforms.
• Experience in privileged access management, security monitoring, DLP and vulnerability management.
• Knowledge of security incident handling, investigation, escalation and reporting.
• Experience supporting Windows/Linux infrastructure and cloud environments.
• Strong documentation, communication, coordination and troubleshooting skills.