Location: Cluny Road (Near to Botanic Gradens MRT)
Employment Type: Contract
Contract Period: until 31 March 2027 with 1 year renewal potential
Working Hours: Monday – Friday, 9:00 AM – 6:00 PM
Basic Salary: $6,500 – $7,500
Key Responsibilities
1. Vulnerability Management
- Coordinate vulnerability management activities across infrastructure, servers, endpoints, applications and Azure cloud environments.
- Utilize vulnerability management platforms such as TenableOne, VMS, Cloudscape and other relevant security tools to identify and monitor vulnerabilities.
- Review vulnerability assessment and patch compliance reports to identify remediation priorities.
- Coordinate remediation activities and status updates with infrastructure, application and support teams.
- Monitor patching progress and ensure vulnerabilities are addressed within defined timelines.
- Track outstanding vulnerabilities, risk acceptance requests and remediation exceptions.
- Analyze vulnerability data to identify recurring issues, trends and areas requiring further attention.
- Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.
- Support security audits and compliance assessments by providing relevant vulnerability management evidence and documentation.
- Ensure remediation activities align with IM8 requirements, internal policies and cybersecurity standards.
2. Security Incident Response Support
- Support cybersecurity incident response activities in collaboration with the CISO, Infrastructure Team and external security service providers.
- Coordinate incident investigations and facilitate communication between technical and business stakeholders.
- Assist with the identification, escalation, containment, recovery and closure of cybersecurity incidents.
- Maintain accurate incident records, logs and supporting documentation.
- Follow up on remediation activities resulting from security incidents and ensure timely completion.
- Participate in incident review sessions and support the implementation of lessons learned.
- Monitor incident trends and recommend improvements to enhance security operations.
- Ensure incident management activities follow established security procedures and governance requirements.
3. DDoS & Web Application Firewall (WAF) Operations
- Support the operation and administration of DDoS mitigation and Web Application Firewall (WAF) services protecting Internet-facing applications.
- Coordinate with service providers and internal stakeholders to ensure security controls remain effective.
- Review security alerts, attack reports and service performance metrics to identify potential risks.
- Support WAF policy reviews, rule updates and change requests.
- Assist with investigations involving web application attacks, suspicious traffic and DDoS-related events.
- Track service issues and follow up with vendors to ensure timely resolution.
- Assist with service reviews and operational assessments of DDoS and WAF solutions.
4. Security & Infrastructure Operations Coordination
- Coordinate cybersecurity and infrastructure operational activities across application teams, infrastructure teams, FM teams and external security vendors.
- Maintain security risk, remediation and compliance tracking registers.
- Follow up on action items arising from vulnerability assessments, security incidents, audits and service reviews.
- Support security governance activities through effective stakeholder communication and coordination.
- Escalate operational issues, delays and security risks where required.
- Ensure security and infrastructure operational processes are carried out consistently and effectively.
5. Reporting & Compliance Monitoring
- Collect, consolidate and analyze vulnerability, incident, compliance and security operations data.
- Prepare regular operational reports, dashboards and management updates on cybersecurity posture and remediation progress.
- Monitor compliance with prescribed security requirements, policies and standards.
- Prepare metrics and reports covering vulnerability remediation, incident management, patch compliance and security service performance.
- Support management review meetings by providing accurate and timely cybersecurity updates.
- Assist with audit preparation and coordinate the collection of supporting evidence and documentation.
Job RequirementsQualifications
- Masters, Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems or a related discipline.
Experience
- 2–5 years of relevant experience in IT security operations, cybersecurity operations, vulnerability management or related security functions.
- Experience with vulnerability management tools such as Tenable or equivalent solutions.
- Exposure to Microsoft Azure security and cloud environments is an advantage.
- Experience coordinating cybersecurity incidents and remediation activities.
- Familiarity with DDoS protection and WAF technologies is preferred.
- Experience supporting compliance and governance requirements within enterprise or public-sector environments is an advantage.
Technical Knowledge
- Good understanding of cybersecurity, infrastructure operations and security monitoring practices.
- Knowledge of vulnerability and patch management processes.
- Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001 and CIS Controls.
- Basic understanding of network, server, application and cloud security concepts.
- Proficient in Microsoft Office, particularly Excel and PowerPoint, for reporting and analysis.
Soft Skills
- Strong stakeholder coordination and communication skills.
- Good analytical and problem-solving abilities.
- Effective written and verbal communication skills.
- Able to work independently as well as collaboratively within a team.
- Strong organizational skills with good attention to detail.
- Able to manage multiple priorities effectively in a dynamic operational environment.
Preferred Certifications
The following certifications will be an advantage:
- Azure Cloud Certifications
- CompTIA Security+
- Microsoft Security Certifications
- CEH (Certified Ethical Hacker)
- ISC2 CC (Certified in Cybersecurity)
- CISSP or CISM
Pay: $6,500.00 - $7,500.00 per month
Work Location: In person