Responsibilities
• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with). Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
• OS level patching o Application-level patching
• Operational housekeeping and archival.
• Server and application hardening procedure & steps
• IM8 policy o Vulnerability Assessment
• Security Incident detection and reporting
• SSL certificate renewal
Requirements
• Degree in Information Security Studies or related discipline
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.
Good to have skills (Optional) :
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.
Licence no: 12C6060
Technology Architecture Senior Analyst (Cyber Security) (Ref 26341) • Islandwide, SG