IT Security Officer (ITSO) - A26185

Activate Interactive Pte Ltd; Singapore; On-site; SGD 70,000 - 90,000; Full time

Benefits offered by this job

Fun working environment

Employee Wellness Program

Growth opportunities

Opportunity to work with government agencies

Job summary

Activate Interactive Pte Ltd in Singapore is seeking a cybersecurity professional for a 12-month fixed-term contract. The role involves monitoring vulnerabilities, managing remediation workflows, and providing insights into exposure management.

The ideal candidate holds a Bachelor's Degree and has over 5 years of experience in cybersecurity. With opportunities for growth, this position supports projects for Singapore Government Agencies.

Qualifications

• 5 years of experience in vulnerability management or related cybersecurity function.
• Familiar with ASM or vulnerability management tools.
• Professional certifications like GWEB, OSCP, or CRISC preferred.

Responsibilities

• Monitor and triage vulnerabilities using ASM and vulnerability management tools.
• Manage remediation workflows and communicate findings to stakeholders.
• Consolidate vulnerability data for reporting and suggest improvements.

Skills

Vulnerability management

Attack surface management

Cybersecurity concepts

Analytical skills

Python programming

Education

Bachelor’s Degree in Computer Science/Information Security

Tools

Tenable

Qualys

Censys

Job description

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency.

We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation.

We are searching for our next team members to join our growing team.

If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

This is a 12 months fixed term contract role.

What will you do?

In this role, you will help ensure that vulnerabilities and exposures across our environment are identified, validated, and remediated in a timely manner. You will work closely with system owners and report findings, helping to keep our risk posture visible and well-managed.

Job Scope

• Attack Surface Monitoring, Vulnerability Scanning, and Triage – monitor and triage findings surfaced by ASM and Vulnerability Management tools, assess each finding for validity, severity, and exploitability, distinguish genuine exposures from false positives, contextualise findings against our asset inventory, prioritize remediation efforts based on risk.
• Remediation Workflow Management – work with system owners to follow up on outstanding findings, track remediation progress and ensure findings are resolved in a timely manner, manage exceptions and risk acceptance where remediation is not immediately feasible, communicate clearly with non-technical stakeholders, translating technical findings into actionable guidance.
• Reporting & Insights – consolidate vulnerability data and remediation metrics for reporting, identify trends and surface systemic issues across the organisation’s attack surface and internal asset landscape, provide recommendations to improve our overall exposure management programme.
• Process Improvement – contribute to the refinement of ASM and vulnerability management processes, tooling configurations, and escalation playbooks over time, support the development and maintenance of vulnerability management policies, standards, and procedures in alignment with industry best practices.

Prerequisites

• Bachelor’s Degree in Computer Science/Information Security or equivalent.
• Professional certifications, including GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred.
• Preferably 5 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk.
• Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (eg CVSS), and external-facing attack surface risks.
• Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar).
• Proficiency in programming languages such as Python will be advantageous.
• Strong analytical and judgement skills, with the ability to think critically and make sound recommendations.
• Good communication and interpersonal skills, with the ability to multitask, prioritise, and translate technical findings.
• Meticulous, with a high degree of integrity, initiative, and energy.

What do we offer in return?

• Fun working environment.
• Employee Wellness Program.
• To work in Singapore Government Agencies projects.
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”).

Why you'll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Equal Opportunity

Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.