Senior IT Security Officer – Cloud & AppSec

Astek Group; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Astek Group in Singapore is seeking an IT Security Officer to strengthen security across software, cloud, and infrastructure. You will review architectures, perform risk assessments, and drive remediation for vulnerabilities and incidents.

The role requires hands-on expertise with SAST tools and DevSecOps practices to embed security in CI/CD pipelines. The ideal candidate has 5+ years in software security, cloud (AWS), and security operations, with a proactive, collaborative mindset to promote

Qualifications

• At least 5 years combined work experience in software development, application security and cloud computing (e.g. AWS).
• Experience using SAST code scanning tools such as Fortify-on-Demand, SonarQube, etc.
• Review system architecture, data flows, interfaces, APIs, and security controls to identify risks.
• Conduct cybersecurity risk assessments for IT systems, apps, infra and cloud services.
• Review remediation plans and evidence to verify risk mitigation.
• Track and address security vulnerabilities with timely remediation and patching.
• Monitor and investigate cybersecurity alerts and incidents, including data breaches and account compromise.
• Perform cybersecurity incident response and post-incident review.

Responsibilities

• Review system architecture, data flows, interfaces and APIs to identify potential security risks.
• Conduct risk assessments for IT systems, apps, infra and cloud services.
• Verify remediation plans and evidence to ensure risk mitigation.
• Track security vulnerabilities and ensure timely remediation and patching.
• Monitor cybersecurity alerts and investigate incidents, including breaches.
• Lead incident response: triage, containment, remediation and recovery.
• Deliver security awareness training to promote best practices.

Skills

Software development

Application security

Cloud (AWS)

Tools

Fortify-on-Demand

SonarQube

Job description

Astek Group in Singapore is seeking an IT Security Officer to strengthen security across software, cloud, and infrastructure. You will review architectures, perform risk assessments, and drive remediation for vulnerabilities and incidents.

The role requires hands-on expertise with SAST tools and DevSecOps practices to embed security in CI/CD pipelines. The ideal candidate has 5+ years in software security, cloud (AWS), and security operations, with a proactive, collaborative mindset to promote