Responsibilities

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations. 
• Access management and control. 
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings. 
• Manage Access management and SIEM tools in the environment. 
• Facilitate auditing processes conducted by external parties. 
• Familiar with operational security processes 
  • OS level patching o Application-level patching 
  • Operational housekeeping and archival. 
  • Server and application hardening procedure & steps 
  • IM8 policy o Vulnerability Assessment 
  • Security Incident detection and reporting 
  • SSL certificate renewal

Requirements

• Degree in Information Security Studies or related discipline
• Minimum 2+ years of experience with IT Security. 
• CISSP/CCSP/CCSK certification or its equivalent is preferred 
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.

• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST. 
• Work with security tools & environment.