IT Security Officer (ITSO) - A26185

Activate Interactive; Singapore; On-site; SGD 60,000 - 80,000; Full time

Benefits offered by this job

Fun working environment

Employee Wellness Program

Growth opportunities

Job summary

Activate Interactive in Singapore is looking for a cybersecurity professional to manage vulnerabilities and improve risk posture. You will work on key aspects like vulnerability scanning and exposure management.

The ideal candidate should have a Bachelor's degree in Computer Science or relevant field, with preferences for cybersecurity certifications and about 5 years of experience. Enjoy a dynamic work environment and ample growth opportunities.

Benefits include participation in Singapore Government projects and a wellness program.

Qualifications

• Professional certifications like GWEB, OSCP, CRISC, CISA preferred.
• 5 years of experience in cybersecurity functions such as vulnerability management.
• Strong understanding of cybersecurity concepts, particularly vulnerability management.

Responsibilities

• Identify, validate, and remediate vulnerabilities timely.
• Monitor findings from vulnerability management tools and prioritize remediation efforts.
• Communicate technical findings into actionable guidance for stakeholders.

Skills

Strong analytical and judgement skills

Good communication and interpersonal skills

Meticulous and energetic

Proficiency in programming languages such as Python

Education

Bachelor's Degree in Computer Science/Information Security or equivalent

Tools

Tenable

Qualys

Censys

Job description

Activate Interactive Pte Ltd is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost‑effective, and impactful end‑to‑end application development—including mobile, web applications, and cloud technology—to remove technology roadblocks and increase business efficiency.

We are searching for our next team members to join our growing team.

This is a 12 months fixed term contract role.

What will you do?

In this role, you will help ensure that vulnerabilities and exposures across our environment are identified, validated, and remediated in a timely manner. You will work closely with system owners, report findings, and help keep our risk posture visible and well‑managed.

Job Scope

• Attack Surface Monitoring, Vulnerability Scanning, and Triage
• Monitor and triage findings surfaced by our Attack Surface Management (ASM) and Vulnerability Management tools
• Assess each finding for validity, severity, and exploitability before escalating or acting on it
• Distinguish genuine exposures from false positives and contextualise findings against our asset inventory
• Prioritise remediation efforts based on risk
• Remediation Workflow Management
• Work with system owners to follow up on outstanding findings
• Track remediation progress and ensure findings are resolved in a timely manner
• Manage exceptions and risk acceptance where remediation is not immediately feasible
• Communicate clearly with non‑technical stakeholders, translating technical findings into actionable guidance
• Reporting & Insights
• Consolidate vulnerability data and remediation metrics for reporting
• Identify trends and surface systemic issues across the organisation's attack surface and internal asset landscape
• Provide recommendations to improve our overall exposure management programme
• Process Improvement
• Contribute to the refinement of ASM and vulnerability management processes, tooling configurations, and escalation playbooks over time
• Support the development and maintenance of vulnerability management policies, standards, and procedures in alignment with industry best practices

Requirements

Prerequisites

• Bachelor's Degree in Computer Science/Information Security or equivalent
• Professional certifications, including GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred
• Preferably 5 years of experience in a relevant cybersecurity function such as vulnerability management, attack surface management, security operations, or IT risk
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (e.g., CVSS), and external‑facing attack surface risks
• Familiarity with ASM or vulnerability management tools such as Tenable, Qualys, Censys, or similar
• Proficiency in programming languages such as Python will be advantageous
• Strong analytical and judgement skills, with the ability to think critically and make sound recommendations
• Good communication and interpersonal skills, with the ability to multitask, prioritise, and translate technical findings
• Meticulous, with a high degree of integrity, initiative, and energy

Benefits

What do we offer in return?

• Fun working environment
• Employee Wellness Program
• Opportunity to work on Singapore Government Agencies projects
• Structured development framework and growth opportunities. We are a "SHRI 2025 Gold winner" in "Learning & Development; Coaching & Mentoring"

Why you'll love working with us? If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd. Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd's recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes. Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.