Kerja Sepenuh Masa, IT Security Officer di Astek - Maukerja

ASTEK has been providing IT and Engineering solutions for some of the world’s largest industrial and services groups for more than 35 years with 10,000 passionate experts in 22 countries throughout Europe, APAC, Middle East and the Americas

Currently, we are looking for IT Security Officer which would be based in Singapore

Responsibilities and Requirements

•At least 5 years combined work experience in software development, application security and cloud computing (e.g. AWS)

•Experience on using SAST code scanning tools such as Fortify-on-Demand, Sonarqube, etc

•Review system architecture, data flows, interfaces, APIs, internet-facing entry points and security controls to identify potential security risks.

•Conduct cybersecurity risk assessments for new and existing IT systems, applications, infrastructure and cloud services.

•Review remediation plans and supporting evidence to verify that security risks have been adequately addressed.

•Track and address security vulnerabilities with timely remediation and patching and closure in accordance with established requirements.

•Monitor and investigate cybersecurity alerts and incidents, including malware, phishing, account compromise, data breaches, unauthorised access, and cloud security incidents.

•Perform cybersecurity incident response and management, including incident triage, investigation, containment, remediation, recovery, and post-incident review.

•Conduct security awareness training sessions to promote security awareness and good cybersecurity practices.

Good to have:

•Good understanding of mobile and web application architectures, including APIs and related technologies and protocols such as REST, SOAP and SSL/TLS.

•Familiar with Agile development, CI/CD and DevSecOps practices, including tools such as GitLab, GitHub and Ansible, and the integration of automated security testing into CI/CD pipelines.