Implement security architecture blueprints covering DevSecOps, application security, infrastructure security, operational security, access controls, and application integration requirements.
Define security processes, provisioning requirements, technical interfaces, controls, and recommendations aligned with established security policies and standards.
Plan and execute security vulnerability activities, including vulnerability assessments, penetration testing, SAST, DAST, security compliance checks, and related remediation activities.
Manage and support Identity and Access Management (IAM) and Security Information and Event Management (SIEM) capabilities within the technology environment.
Drive remediation of security findings and support operational security activities including OS and application patching, system hardening, housekeeping and archival, security incident detection and reporting, and SSL certificate renewal.
Facilitate security audits and assessments conducted by external parties, coordinating evidence, technical inputs, remediation activities, and stakeholder responses.
Lead the integration, setup, configuration, and security hardening of AI models and supporting infrastructure for project-wide AI use cases.
Collaborate across technical teams to maintain appropriate security controls throughout the application and infrastructure lifecycle.
Strong knowledge and practical experience with 3-tier technical architecture and enterprise application environments.
Hands-on experience in at least one or two cyber security domains, such as Identity and Access Management, Security and Risk Management, Application Security, Network Security, or Vulnerability Management, with a broad understanding of other security areas.
Knowledge and experience in AI model infrastructure setup, integration, security hardening, and fine-tuning.
Familiarity with Singapore Government security requirements and security assessment activities, including SSAT, Security Compliance Checks, vulnerability scanning, SAST, and DAST.
Experience with operational security processes such as OS and application patching, server and application hardening, vulnerability assessment, incident detection and reporting, and certificate management.
Experience administering Linux and/or Windows environments; familiarity with Solaris is advantageous.
Hands-on exposure to enterprise security technologies such as IBM Security Verify Access, IBM QRadar, Thales HSM, OpenSSL, Tenable Nessus, Burp Suite Enterprise, and Splunk.
Preferred Qualifications
Familiarity with IM8 policy and security requirements applicable to Singapore Government technology environments.
Experience working with vulnerability management, SIEM, IAM, HSM, application testing, and security monitoring tools in complex enterprise environments.
Ability to translate security architecture and compliance requirements into practical technical controls and remediation actions.
