IT Security Operations

U3 INFOTECH PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

U3 INFOTECH PTE. LTD. is seeking a Security Operations professional in Singapore to manage production firewalls, WAFs, and related devices, while leading incident response and vulnerability management with MSSP support.

You will drive API security configurations, monitor threat intelligence, and ensure compliance with PDPA, MAS TRM, and PCI-DSS across IT operations.

Qualifications

• Experience securing enterprise networks with Firewalls and WAFs.
• Strong incident response and vulnerability management.
• Knowledge of region-specific regulations (PDPA, MAS TRM, PCI-DSS).

Responsibilities

• Manage production firewall, WAF, load balancer, and related devices.
• Approve BAU security access requests and changes.
• Maintain security rules and system hardening.
• Monitor security health and coordinate with infra teams.
• Provide operational security reports to management.
• Lead incident response with MSSP and sign-off on SLAs.
• Oversee API security config and threat intelligence feeds.
• Manage vulnerability, pen-test lifecycles and patching schedules.
• Ensure compliance with PDPA, MAS TRM, PCI-DSS and prepare audit docs.

Skills

Firewall config

WAF management

API security

Vendor management

Regulatory knowledge

Security certs

Azure security

Identity & auth

Troubleshooting

Tools

Azure

Job description

JobResponsibilities

• Security Operations & BAU
  • Manage and administer configuration changes on production Firewalls, Web Application Firewalls (WAF), Application Load Balancer, network access controller and related network devices
  • Approve and implement business-as-usual (BAU) security access and modification requests
  • Maintain security rules, firewall policies, and system hardening
  • Monitor security infrastructure health to ensure continuous, optimal performance
  • Collaborate with network and infrastructure teams to resolve engineering issues
• Security Incident Management & Reporting
  • Provide comprehensive security operational reporting to management teams regularly
  • Monitor security reporting dashboards to identify anomalous network and system behavior
  • Ensure security incidents are tracked, investigated, and properly managed to resolution
  • Respond to security incidents as a key technical escalation point
  • Partner with the Managed Security Services Provider (MSSP) to ensure incident follow-up
  • Review security incidents, firewall policies and operational performance with the vendor on a regular basis.
  • Sign-off on vendor security reports, service level agreements (SLAs), and incident closures.
• Vulnerability, Threat & API Management
  • Manage API security configurations, gateways, and authentication controls
  • Analyze threat intelligence feeds to proactively defend against emerging security risks
  • Manage the end-to-end vulnerability assessment and penetration testing (VAPT) lifecycles
  • Track patching schedules across systems to ensure timely remediation of flaws
• Governance, Risk & Compliance
  • Partner hand in hand with the IT Governance team on setup alignment
  • Ensure day-to-day IT operations fully comply with internal corporate IT policies
  • Align IT security standards with strict regional regulatory requirements
  • Maintain continuous compliance for PDPA, MAS TRM, and PCI-DSS frameworks
  • Prepare documentation, evidence, and reports for internal and external audits
  • Update security policies to reflect evolving regional financial regulations
  • Assess third-party vendor risks against corporate security frameworks

Technical Skills & Competencies

• Hands-on expertise configuring enterprise-grade Firewalls, WAF technologies, Application gateway, Application load balancer, switches, Dot1x authentication and IPSec VPN
• Knowledge of Azure API security management principles, OAuth2, OWASP API Top 10, and modern authentication
• Vendor management skills to effectively govern external security partners and MSSPs
• Knowledge of MAS Guidelines, PDPA, and PCI-DSS compliance frameworks
• Certification in CISSP, CISM, CEH, or Azure Security Engineer (AZ-500) is preferred
• Troubleshoot network security anomalies