SYSTEM MIGRATION ANALYST

OPUS IT Services Pte Ltd; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

OPUS IT SERVICES PTE LTD is seeking a security operations professional to manage security tooling, vulnerability remediation, and compliance across cloud and on-prem environments. You will coordinate patch cycles, perform hardening, and support IAM reviews to ensure least-privilege access.

The role requires hands-on experience with Trend Micro, Tenable, and SIEM tools, and collaboration with SOC and infra teams.

Qualifications

• Diploma or Bachelor's degree in Cybersecurity or related field (or equivalent experience)
• 3-5 years in security operations, security administration, or infrastructure security
• Hands-on experience administering endpoint, XDR, or vulnerability management tools (Trend Micro and Tenable preferred)
• Experience with patch management and configuration hardening on Linux (RHEL preferred) and Windows
• Working knowledge of AWS security services and shared responsibility model
• Preferred certifications: CompTIA Security+, CISSP (associate or full), Microsoft SC-200, AWS Security Specialty
• Nice to have: CISM, CISA, ISO 27001 Lead Implementer, Tenable certifications

Responsibilities

• Administer and maintain security platforms such as Trend Micro, Tenable, Microsoft Sentinel, and DLP tools
• Deploy and upgrade agents, manage policies, and monitor tool health, licensing, and coverage
• Onboard new servers, applications, and log sources into security tooling and SIEM
• Tune policies, detection rules, and exclusions in coordination with SOC and apps teams
• Schedule and review vulnerability scans, validate findings by CVSS and asset criticality
• Raise remediation tickets, track closures, and escalate overdue items
• Coordinate patch cycles with infrastructure and application teams
• Manage risk acceptance and exception requests with justification
• Apply and verify security baselines (e.g., CIS for RHEL, Windows, cloud) across servers
• Assess application impact of hardening controls before rollout
• Monitor configuration drift and remediation of non-compliant assets
• Support periodic access reviews, privileged audits, and user recertification
• Review IAM roles/policies (e.g., AWS) against least-privilege
• Monitor certificate expiry, key management, and secrets hygiene
• Assist SOC and IR teams with investigation data and containment actions
• Contribute to post-incident reviews and implement improvements
• Prepare reports on patch compliance and vulnerability trends
• Maintain evidence for audits (ISO 27001, government standards)
• Maintain security SOPs/runbooks and change management logs
• Track change requests and participate in change advisory discussions

Skills

Security operations

Security administration

Vulnerability management

Patch management

AWS security

ISO 27001 knowledge

Compliance & governance

Scripting (Bash/PowerShell/Python)

Education

Bachelor's degree in Cybersecurity

Diploma in Cybersecurity or related field

Tools

Trend Micro

Tenable

Microsoft Sentinel

DLP tools

SIEM

AWS security services

Job description

Responsible for the day-to-day operation, administration,and hardening of the system's security tools and controls. Complements the SOCby owning security tooling health, vulnerability and patch remediation,configuration compliance, and audit readiness, so that security controls stayeffective, current, and evidenced.

Key Responsibilities:

Security Tooling Administration

• Administer and maintain security platforms such as TrendMicro (Vision One, Deep Security, Apex One), Tenable, Microsoft Sentinel, and DLP tools
• Deploy and upgrade agents, manage policies, and monitor toolhealth, licensing, and coverage
• Onboard new servers, applications, and log sources intosecurity tooling and SIEM
• Tune policies, detection rules, and exclusions incoordination with the SOC and application teams

Vulnerability & Patch Operations

• Schedule and review vulnerability scans, and validate andprioritise findings by CVSS, exploitability, and asset criticality
• Raise remediation tickets, track them to closure, andescalate overdue items
• Coordinate patch cycles with infrastructure and applicationteams, including emergency patching
• Manage risk acceptance and exception requests withsupporting justification

Hardening & Configuration Compliance

• Apply and verify security baselines (e.g. CIS benchmarks forRHEL, Windows, and cloud) across servers and cloud workloads
• Assess the application impact of hardening controls withapplication teams before rollout
• Monitor configuration drift and track remediation ofnon-compliant assets

Access & Identity Security

• Support periodic access reviews, privileged account audits,and user access recertification
• Review IAM roles and policies (e.g. AWS) againstleast-privilege principles
• Monitor certificate expiry, key management, and secretshygiene

Incident Support

• Support the SOC and incident response team withinvestigation data, tool queries, and containment actions
• Contribute to post-incident reviews and implement resultingcontrol improvements

Governance, Reporting & Audit

• Prepare regular reports on patch compliance, vulnerabilitytrends, hardening status, and tool coverage
• Collect and maintain evidence for audits and compliancechecks (e.g. ISO 27001, government security standards)
• Maintain security SOPs, runbooks, and the security riskregister
• Track security-related change requests and participate inchange advisory discussions

Qualifications:

• Diploma or Bachelor's degree in Cybersecurity, IT, ComputerScience, or a related field (or equivalent experience)
• 3-5 years in security operations, security administration,or infrastructure security
• Hands-on experience administering endpoint, XDR, orvulnerability management tools (Trend Micro and Tenable preferred)
• Experience with patch management and configuration hardeningon Linux (RHEL preferred) and Windows
• Working knowledge of AWS security services and sharedresponsibility model
• Preferred certifications: CompTIA Security+, CISSP(associate or full), Microsoft SC-200, AWS Security Specialty
• Nice to have: CISM, CISA, ISO 27001 Lead Implementer,Tenable certifications

Skills:

• Strong understanding of security frameworks and standards(CIS, NIST, ISO 27001, MITRE ATT&CK)
• Familiarity with SIEM, EDR/XDR, DLP, WAF, firewalls, andvulnerability scanners
• Scripting and automation (Bash, PowerShell, Python, Ansible)for compliance checks and reporting
• Working knowledge of ITSM tools (e.g. ServiceNow) and changemanagement processes
• Strong analytical and documentation skills, with the abilityto explain risk to technical and non-technical stakeholders
• Ability to drive remediation across multiple teams andvendors