Total 30 it analyst job vacancies in Legal / Public / Security category in d12 balestier serangoon toa payoh

RESPONSIBILITIES:

• Responsible for Samsung Security Solution. Technical Support for Samsung Electronic.
• Responsible for IT Security Check

REQUIREMENTS:

• Diploma or Degree in Information Security or Information System or Computer engineering or equivalent
• Good knowledge about IT system
• Good interpersonal skills
• Passion in IT security and technology

PREFERENCE:

• Keen interest and experienced in managing enterprise-level cybersecurity solutions.
• Strong IT Technical understanding and aptitude for analytical problem solving
• Enthusiasm for problem-solving and able to work in fast-pace environment.
• Team player with high initiative, self-motivation and results-oriented mind-set
• Experienced in complex secured network design, VPN and WLAN implementation.
• Good communication, documentation, organizational and interpersonal skills
• Experience with networking, system administration and infrastructure architecture

Work location: 61 TAI SENG AVENUE PRINT MEDIA HUB @ PAYA LEBAR IPARK

Please only apply via direct application on this MyCareersFuture website.

Or, email your CV and indicate Job Title as email subject to the following: [email protected]

Only shortlisted candidates will be notified.

• Handle overall security operations and work with partner IT vendors and internal departments.
• Maintain infrastructure tools implemented in the company
• Monitor and assess the IT security aspects and impact
• Handle cyber incident response and perform vulnerability assessment on platform and implement countermeasure

Job Requirements

• Bachelor degree in computer science, information systems or equivalent
• Min 3 years of experience in cyber security and infrastructure fields
• Experience in security tool implementation and operational experience
• Certified Information Systems Security Professional Certifications (CISSP) will be preferred

For interested applicant, click 'apply'

EA Reg no: R1328476
EA License No: 16C8443
EA Personnel Name: Melody
EA Personnel No: R2095899

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14625704/a714138f-b047-1edf-8286-5760531052b8

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Work with key stakeholders to ensure high cybersecurity posture of HDB applications through activities such as the following:

i. Develop and promote Secure Coding Practices.
ii. Collaborate with project teams to ensure compliance with Vulnerability Assessment & Penetration Testing requirements.
iii. Review security test reports and provide recommendations on remediation measures to application project teams, where necessary.
iv. Procure and maintain security testing tools to support Static Application Security, Dynamic Application Security Testing and Vulnerability Assessment & Penetration Testing.
v. Study and propose CI/CD pipeline to support DevSecOps.
vi. Perform Software Composition Analysis.

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Manage and promote IT security awareness and outreach programme.

You are also to:
• Keep abreast of the latest industry Software security practices and technologies to manage emerging threats and vulnerabilities.
• Recommend and implement appropriate measures to improve the HDB Applications security posture.
• Lead and/or participate in the research and adoption of new technological advances and best practices in software security to mitigate future security threats.

You will be a Great Fit if you:

• Possess a strong background in software development with popular web/mobile technologies such as HTML, Javascript, Node.js, Angular, Java, ASP.NET, C#, PHP, Ruby, etc with knowledge on ICT Security, Information Security and Secure Coding.

• Have at least 2 year of relevant ICT security work experience.

• Possess one or more appropriate IT security certifications, such as CSSLP, CISSP, CRISC, CISM, CISA, CEH, OSCP, CREST etc.

• Have strong knowledge and experience in Information and Cybersecurity Risks, Vulnerability Assessment & Penetration Testing, Cloud Security, Container Security, Mobile Security, DevSecOps, Cryptography and other industry IT/cyber security best-practices.

Good to Have:

• Able to drive new initiatives for Cloud Security.
• Possess good interpersonal and communication skills.
• Proactive to troubleshoot with excellent problem-solving skills.
• Fluent in written and spoken English.
• Meticulous attention to details
• Work beyond business hours including weekend when necessary.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14625709/a714138f-b047-1edf-8286-63d52ecd92b8

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

· ICT Security Governance:
Develop and implement enterprise-wide ICT security programmes as follows:
i. Establish the cybersecurity governance structure for HDB to ensure that the security posture is robust, resilient, and pragmatic
ii. Enhance and update the IT security policy, standards, procedures so that they are always current against the evolving cyber security landscape
iii. Manage the compliance with the GovTech ICT/SS Security Policies, Initiatives, Measures and the relevant Government Instruction Manual to further strengthen the WOG and HDB ICT security posture.
iv. Establish the governance and administer the Third-Party Management Policy and Procedure

· Cybersecurity Awareness Outreach
Manage and implement Cybersecurity Awareness Framework to promote IT security awareness and outreach programme as follows:
i. Raise HDB management and staff’s security awareness and appreciation of ICT Security to ensure HDB’s information assets are protected.
ii. Create good staff cyber security hygiene through regular ICT Security outreach programme such as annual ICT Security Awareness Talk, security advisories, conduct of Phishing exercise, road show.
iii. Keep abreast of key technology and skillset in the industry to maintain ICT Security personnel skills development.
iv. Identify various channels for the conduct of the security program such as cyber range exercises, technical certification, gamification.

· Identity & Access Management
To establish procedures and standards for the Identity and Access management in HDB as follows:
i. To administer and manage the user accounts and privileged access, so as to safeguard the confidentiality of ICT assets and systems in HDB.
j. To maintain and manage the access controls to applications on premises and on Cloud.
k. Digital Certificate Management

· Quality Audit and Security Reviews
a. To serve as an independent party to perform quality auditing and report to Management on the observations and recommendations.
b. To conduct regular security reviews on application systems and infrastructure to ensure the HDB’s systems and infrastructure are secured and reliable.
You are also to:
· keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.
· lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks

You will be a Great Fit if you:

You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Engineering (Computing/Telecommunication), Cybersecurity and/or Digital Forensic or equivalent.
At least 1 years of direct and relevant full-time ICT security work experience
Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc
Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

Added advantage for candidates with knowledge in any of the following:
· Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security
· Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)
· Good understanding of the current IT/Cyber Security landscape

Candidate also need to:
· to work beyond business hours including weekend when necessary
· possess good interpersonal and communication skills
· demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail
· have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14625706/a714138f-b047-1edf-8286-5e09c172d2b8

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542063/2fc68717-fd53-1ede-bce4-a1fb0cb9b29f

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Work with key stakeholders to ensure high cybersecurity posture of application systems through activities such as the following:
i. Promote secure coding practices.
ii. Review of Vulnerability Assessment and Penetration Testing (VAPT) Cases
iii. Facilitate remediation of vulnerabilities arising from application security testing
iv. Setup DevSecOps through CI/CD pipeline
v. Securing Cloud Workloads
vi. Procure & Maintain Security testing Tools/services to support source code review and VAPT.

• Related works include Threat Risk Assessment, project specific cybersecurity specification, cybersecurity proposals evaluation, cybersecurity design review, System Security Acceptance Test and review, Vulnerability Assessment and Penetration Test.

• Manage and promote IT security awareness and outreach programme.

• Keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.

• lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks.

You will be a Great Fit if you:

• You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Cybersecurity or equivalent.

• At least 2 years of experience in ICT works involving the setup, development, and management of web-based systems, with at least 2years of relevant ICT security work experience.

• Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc

• Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

• Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security

• Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)

• Good understanding of the current IT/Cyber Security landscape Great Attitude to bring the best out our team
• work beyond business hours including weekend when necessary.

• possess good interpersonal and communication skills.

• demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542118/2fc68717-fd53-1ede-bce4-ce5277e5329f

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Work with key stakeholders to ensure high cybersecurity posture of HDB applications through activities such as the following:

i. Develop and promote Secure Coding Practices.
ii. Collaborate with project teams to ensure compliance with Vulnerability Assessment & Penetration Testing requirements.
iii. Review security test reports and provide recommendations on remediation measures to application project teams, where necessary.
iv. Procure and maintain security testing tools to support Static Application Security, Dynamic Application Security Testing and Vulnerability Assessment & Penetration Testing.
v. Study and propose CI/CD pipeline to support DevSecOps.
vi. Perform Software Composition Analysis.

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Manage and promote IT security awareness and outreach programme.

You are also to:
• Keep abreast of the latest industry Software security practices and technologies to manage emerging threats and vulnerabilities.
• Recommend and implement appropriate measures to improve the HDB Applications security posture.
• Lead and/or participate in the research and adoption of new technological advances and best practices in software security to mitigate future security threats.

You will be a Great Fit if you:

• Possess a strong background in software development with popular web/mobile technologies such as HTML, Javascript, Node.js, Angular, Java, ASP.NET, C#, PHP, Ruby, etc with knowledge on ICT Security, Information Security and Secure Coding.

• Have at least 2 year of relevant ICT security work experience.

• Possess one or more appropriate IT security certifications, such as CSSLP, CISSP, CRISC, CISM, CISA, CEH, OSCP, CREST etc.

• Have strong knowledge and experience in Information and Cybersecurity Risks, Vulnerability Assessment & Penetration Testing, Cloud Security, Container Security, Mobile Security, DevSecOps, Cryptography and other industry IT/cyber security best-practices.

Good to Have:

• Able to drive new initiatives for Cloud Security.
• Possess good interpersonal and communication skills.
• Proactive to troubleshoot with excellent problem-solving skills.
• Fluent in written and spoken English.
• Meticulous attention to details
• Work beyond business hours including weekend when necessary.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542112/2fc68717-fd53-1ede-bce4-bfa2bfcdb29f

About Us!

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

You will be part of the Security Operations Centre (SOC) Team who will be responsible for the following areas Tier 2 SOC Analyst responsible for investigating alerts and incidents escalated by Tier 1 Analysts, Develop and enhance SOC processes and procedures, ensuring effective operations, Coordinate with stakeholders to address, follow up and resolve security alerts. Operate and maintain security monitoring tools such SIEM, EDR and SOAR. Gather and analyse Cyber intel. Conduct Threat hunting. Lead the adoption of new technological advances and best practices in cybersecurity monitoring and response.

You will be a Great Fit if you:

- Demonstrable experience and in-depth knowledge in cyber security operations, cyber intelligence gathering, incident response and investigations.

- Have strong experience in various cyber security technologies such as IDS/IPS, firewalls, SIEM, APT, email security, web security, endpoint security, malware analysis, etc

- Have experience in threat hunting / red teaming will be preferred.

- Have at least 2 years of experience as a Tier 2 analyst in a SOC.

- Have professional certifications would be added advantage: CISSP, GIAC Certified Incident Handler, EC-Council CEH and CSA, or any other relevant qualifications

Good to Have:

- High attention to detail and quality.

- Be able to work under pressure and meet deadlines.

- Must be highly reliable, trustworthy, honest, and commitment oriented.

- Strong written and verbal communication skills

- Autonomous

- Take ownership

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542075/2fc68717-fd53-1ede-bce4-ab8bfed8329f

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

· ICT Security Governance:
Develop and implement enterprise-wide ICT security programmes as follows:
i. Establish the cybersecurity governance structure for HDB to ensure that the security posture is robust, resilient, and pragmatic
ii. Enhance and update the IT security policy, standards, procedures so that they are always current against the evolving cyber security landscape
iii. Manage the compliance with the GovTech ICT/SS Security Policies, Initiatives, Measures and the relevant Government Instruction Manual to further strengthen the WOG and HDB ICT security posture.
iv. Establish the governance and administer the Third-Party Management Policy and Procedure

· Cybersecurity Awareness Outreach
Manage and implement Cybersecurity Awareness Framework to promote IT security awareness and outreach programme as follows:
i. Raise HDB management and staff’s security awareness and appreciation of ICT Security to ensure HDB’s information assets are protected.
ii. Create good staff cyber security hygiene through regular ICT Security outreach programme such as annual ICT Security Awareness Talk, security advisories, conduct of Phishing exercise, road show.
iii. Keep abreast of key technology and skillset in the industry to maintain ICT Security personnel skills development.
iv. Identify various channels for the conduct of the security program such as cyber range exercises, technical certification, gamification.

· Identity & Access Management
To establish procedures and standards for the Identity and Access management in HDB as follows:
i. To administer and manage the user accounts and privileged access, so as to safeguard the confidentiality of ICT assets and systems in HDB.
j. To maintain and manage the access controls to applications on premises and on Cloud.
k. Digital Certificate Management

· Quality Audit and Security Reviews
a. To serve as an independent party to perform quality auditing and report to Management on the observations and recommendations.
b. To conduct regular security reviews on application systems and infrastructure to ensure the HDB’s systems and infrastructure are secured and reliable.
You are also to:
· keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.
· lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks

You will be a Great Fit if you:

You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Engineering (Computing/Telecommunication), Cybersecurity and/or Digital Forensic or equivalent.
At least 1 years of direct and relevant full-time ICT security work experience
Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc
Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

Added advantage for candidates with knowledge in any of the following:
· Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security
· Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)
· Good understanding of the current IT/Cyber Security landscape

Candidate also need to:
· to work beyond business hours including weekend when necessary
· possess good interpersonal and communication skills
· demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail
· have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14542108/2fc68717-fd53-1ede-bce4-b91408ebb29f

Kickstart your career with NTTS’s G.L.O.W Graduate Program, the ultimate launchpad for your tech career!

G – Grow in accelerated development path
L – Lead yourself with purpose & commitment
O – Own your career journey
W – Way Forward

Our comprehensive one-year program is tailored to empower talented and driven graduates like you with valuable hands-on experience, exposure to industry experts, and a diverse range of projects that will sharpen your skills and broaden your understanding to the ICT industry.

Associate IT Security Officer is responsible for securing the organization’s cloud and on-premises application and infrastructure by filtering out suspicious activity and mitigating security risks before any breaches can occur.

The Associate IT Security Officer works across business areas or disciplines to identify and correct any flaws in the organization’s security systems. Successful candidate will undergo intensive training and receive multiple globally recognized certifications.

Working at NTT

• Perform analysis of vulnerability results & work with principal vendor to ensure remediation.
• Work with Patch Manager to ensure system patches are applied.
• Review security hardening guidelines based on best practices and monitor for compliance.
• Participate in security assessments with auditors and respective stakeholders to meet audit compliance.
• Enforce mitigation measures for failing security controls or vulnerabilities.
• Ensure security policies and procedures are adequately implemented for information systems protection.
• Educate the operations/project team on security policies and procedures.
• Verify the effectiveness security measures continue to be effective after implementation.
• Maintain good operational security documentation.
• Stay up-to-date with the latest security news, threats, and vulnerabilities.

Requirements:

• Bachelor’s Degree, preferably in Computer Science, Information Technology Engineering or related field
• Fresh graduate or less than 3 years of working experience
• Able to build and maintain cross-functional relationships with a variety of stakeholders
• Has excellent verbal/written communication and presentation skills
• Team player, resourcefulness, strong analytical skills is an advantage

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14414670/91f7c252-23c8-1ede-b5f2-dfee8c305275

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Work with key stakeholders to ensure high cybersecurity posture of HDB applications through activities such as the following:
i. Develop and promote Secure Coding Practices.
ii. Collaborate with project teams to ensure compliance with Vulnerability Assessment & Penetration Testing requirements.
iii. Review security test reports and provide recommendations on remediation measures to application project teams, where necessary.
iv. Procure and maintain security testing tools to support Static Application Security, Dynamic Application Security Testing and Vulnerability Assessment & Penetration Testing.
v. Study and propose CI/CD pipeline to support DevSecOps.
vi. Perform Software Composition Analysis.

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Manage and promote IT security awareness and outreach programme.

You are also to:
• Keep abreast of the latest industry Software security practices and technologies to manage emerging threats and vulnerabilities.
• Recommend and implement appropriate measures to improve the HDB Applications security posture.
• Lead and/or participate in the research and adoption of new technological advances and best practices in software security to mitigate future security threats.

You will be a Great Fit if you:

• Possess a strong background in software development with popular web/mobile technologies such as HTML, Javascript, Node.js, Angular, Java, ASP.NET, C#, PHP, Ruby, etc with knowledge on ICT Security, Information Security and Secure Coding.

• Have at least 2 year of relevant ICT security work experience.

• Possess one or more appropriate IT security certifications, such as CSSLP, CISSP, CRISC, CISM, CISA, CEH, OSCP, CREST etc.

• Have strong knowledge and experience in Information and Cybersecurity Risks, Vulnerability Assessment & Penetration Testing, Cloud Security, Container Security, Mobile Security, DevSecOps, Cryptography and other industry IT/cyber security best-practices.

Good to Have:

• Able to drive new initiatives for Cloud Security.
• Possess good interpersonal and communication skills.
• Proactive to troubleshoot with excellent problem-solving skills.
• Fluent in written and spoken English.
• Meticulous attention to details
• Willing to work beyond business hours including weekend when necessary.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14414808/91f7c252-23c8-1ede-b5f3-387aa11e3275

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Work with key stakeholders to ensure high cybersecurity posture of application systems through activities such as the following:
i. Promote secure coding practices.
ii. Review of Vulnerability Assessment and Penetration Testing (VAPT) Cases
iii. Facilitate remediation of vulnerabilities arising from application security testing
iv. Setup DevSecOps through CI/CD pipeline
v. Securing Cloud Workloads
vi. Procure & Maintain Security testing Tools/services to support source code review and VAPT.

• Related works include Threat Risk Assessment, project specific cybersecurity specification, cybersecurity proposals evaluation, cybersecurity design review, System Security Acceptance Test and review, Vulnerability Assessment and Penetration Test.

• Manage and promote IT security awareness and outreach programme.

• Keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.

• lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks.

You will be a Great Fit if you:

• You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Cybersecurity or equivalent.

• At least 2 years of experience in ICT works involving the setup, development, and management of web-based systems, with at least 2years of relevant ICT security work experience.

• Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc

• Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

• Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security

• Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)

• Good understanding of the current IT/Cyber Security landscape Great Attitude to bring the best out our team
• work beyond business hours including weekend when necessary.

• possess good interpersonal and communication skills.

• demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14414758/91f7c252-23c8-1ede-b5f3-141f99353275

About Us!

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

You will be part of the Security Operations Centre (SOC) Team who will be responsible for the following areas Tier 2 SOC Analyst responsible for investigating alerts and incidents escalated by Tier 1 Analysts, Develop and enhance SOC processes and procedures, ensuring effective operations, Coordinate with stakeholders to address, follow up and resolve security alerts. Operate and maintain security monitoring tools such SIEM, EDR and SOAR. Gather and analyse Cyber intel. Conduct Threat hunting. Lead the adoption of new technological advances and best practices in cybersecurity monitoring and response.

You will be a Great Fit if you:

- Demonstrable experience and in-depth knowledge in cyber security operations, cyber intelligence gathering, incident response and investigations.

- Have strong experience in various cyber security technologies such as IDS/IPS, firewalls, SIEM, APT, email security, web security, endpoint security, malware analysis, etc

- Have experience in threat hunting / red teaming will be preferred.

- Have at least 2 years of experience as a Tier 2 analyst in a SOC.

- Have professional certifications would be added advantage: CISSP, GIAC Certified Incident Handler, EC-Council CEH and CSA, or any other relevant qualifications

Good to Have:

- High attention to detail and quality.

- Be able to work under pressure and meet deadlines.

- Must be highly reliable, trustworthy, honest, and commitment oriented.

- Strong written and verbal communication skills

- Autonomous

- Take ownership

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14414711/91f7c252-23c8-1ede-b5f2-ff5ae5a19275

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

About Us!

The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

• Develop, maintain, and operationalise a Threat Risk Assessment framework for HDB to identify and mitigate the threats and risks in its IT systems and programmes.

• Work with key stakeholders to ensure high cybersecurity posture of application systems through activities such as the following:
i. Promote secure coding practices.
ii. Review of Vulnerability Assessment and Penetration Testing (VAPT) Cases
iii. Facilitate remediation of vulnerabilities arising from application security testing
iv. Setup DevSecOps through CI/CD pipeline
v. Securing Cloud Workloads
vi. Procure & Maintain Security testing Tools/services to support source code review and VAPT.

• Related works include Threat Risk Assessment, project specific cybersecurity specification, cybersecurity proposals evaluation, cybersecurity design review, System Security Acceptance Test and review, Vulnerability Assessment and Penetration Test.

• Manage and promote IT security awareness and outreach programme.

• Keep abreast of the latest industry ICT security practices and technologies as well as emerging threats and vulnerabilities and recommend appropriate controls for implementation to improve the enterprise security posture.

• lead and/or participate in the adoption of new technological advances and best practices in infrastructure security systems to mitigate security risks.

You will be a Great Fit if you:

You should possess a strong background in ICT Security, Information Security, Information Technology, Computer Science, Cybersecurity or equivalent.

• At least 2 years of experience in ICT works involving the setup, development, and management of web-based systems, with at least 2years of relevant ICT security work experience.

• Preferably possess one or more appropriate IT security certifications, such as CISSP, CRISC, CISM, CISA, CEH, etc

• Preferably with strong knowledge and experience in information and cybersecurity risks, controls, vulnerability assessment/penetration testing, compliance, and industry IT/cyber security best-practices.

Good to Have:

• Domain knowledge of access control; telecommunications and network security; cloud security; Cybersecurity & information security governance and risk management; software development security; cryptography; security architecture and design; operations security; security incident response and management; business continuity and disaster recovery planning; legal regulations, investigations, and compliance; physical (environmental) security

• Knowledge in IT security principles and IT controls as well as industry best practices and frameworks pertaining to IT Controls (IM8, COBIT, ISO27001/2 etc.)

• Good understanding of the current IT/Cyber Security landscape Great Attitude to bring the best out our team
• work beyond business hours including weekend when necessary.

• possess good interpersonal and communication skills.

• demonstrate a strong sense of urgency and have good troubleshooting and problem-solving skills with good attention to detail.

• conduct research on ICT and cybersecurity technologies where necessary to perform the assigned tasks.

• have good command of written and oral English

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14317734/a94bccfb-172f-1ede-b0fe-e1923775726c

About Us!
The mission of Housing & Development Board (HDB) is to provide affordable, quality housing and a great living environment where communities thrive. To achieve its mission, HDB aims to be data-driven to the core and adopt evidence-based decision making in developing better housing policies service, improving service delivery and optimising operations.

What Will You Do?

We are seeking a highly skilled and motivated Cloud Security Specialist to join our dynamic team and play a pivotal role in ensuring the security, integrity, and compliance of our cloud-based systems and applications. As a Cloud Security Specialist, you will work collaboratively with cross-functional teams to design, implement, and maintain robust security measures that protect our organisation's assets and data in cloud environments.

• Cloud Security Strategy: Develop, implement, and maintain an effective cloud security strategy and architectures that adhere to best practices, industry standards, and regulatory requirements.

• Security Architecture: Collaborate with engineering teams to design and implement common cloud security architectures, ensuring principles of least privilege, zero trust, defense in depth, and security by design.

• Infrastructure Security: Implement and manage security controls for cloud infrastructure components, including networks, virtual machines, containers, and serverless services. Apply security groups, network segmentation, and encryption to safeguard data in transit and at rest.

• Identity and Access Management (IAM): Design and enforce robust IAM policies to manage user access, authentication, authorisation, and privilege escalation within cloud environments.

• Security Monitoring and Incident Response: Set up and manage continuous security monitoring, threat detection, and incident response processes for cloud environments. Respond to security incidents, perform root cause analysis, and implement preventive measures.

• Vulnerability Management: Conduct regular vulnerability assessments to identify and remediate security weaknesses. Know how to apply patches and updates in a timely manner.

• Security Compliance: Ensure and assess cloud environments adhere to relevant government ICT/SS compliance frameworks and regulations.

• Security Automation: Build and maintain security automation scripts and tools to streamline security processes such as provisioning, configuration management, and incident response.

You will be a Great Fit if you:

• Have experience (2+ years) in designing, implementing, and managing security solutions in cloud environments (AWS, Azure, Google Cloud, etc.).

• Understand cloud security principles, including network security, encryption, identity and access management, and security monitoring.

• Are proficient in security tools such as intrusion detection/prevention systems, SIEM, vulnerability scanners, network firewalls, and web application firewalls.

• Have implemented security best practices within Infrastructure-as-Code frameworks (e.g. Terraform, CloudFormation, Ansible) to ensure secure infrastructure provisioning and configuration management.

Good to Have:

• Relevant professional certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, or equivalent.

• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for security automation and orchestration.

• Experience in using containerisation technologies, such as Docker, Kubernetes, AWS ECS, and knowledge in securing containers.

• Proficiency in implementing DevSecOps and CI/CD pipelines, with experience in relevant CI technologies such as Git, Gitlab, and Jenkins. Hands-on experience with security testing tools (e.g., SAST, DAST, SCA) and vulnerability management.

Successful candidates will be offered a 1+1 year contract in the first instance. Conversion to perm is dependent on good performance.

Find out more about a career with HDB at www.hdb.gov.sg/cs/infoweb/about-us/careers

Please apply for the job through the Careers@Gov job portal as linked:

https://www.careers.hrp.gov.sg/sap/bc/ui5_ui5/sap/ZGERCFA004/index.html#/JobDescription/14317657/a94bccfb-172f-1ede-b0fe-a14612ad726c

Objective:

• Be the single point-of-contact for governance related matters.
• Liaise between IT Security Governance and Support Teams on data collection and submission.

Key Responsibilities:

• Be the liaison between the Governance team and supporting teams throughout the audit cycle
• Provide administrative and project management support for audit and governance related engagements.
• Track, manage and monitor the status of critical tasks and deliverables
• Coordinate and submit data / documentation for submission.
• Perform sanity check on internal responses to requests to determine whether it meets the auditor's request in an appropriate manner and level of detail.
• Manage the data gathering required to close out audit engagements.
• Ensure the teams are aware of all upcoming deliverables, deadlines and possible issues/findings.
• Monitor responsiveness and timeliness of requests for information and meetings and follow-up with appropriate levels of management if requests are untimely.
• Maintain a current inventory of audits with a clear understanding of the status of each.

Requirements:

• Must be able to communicate ideas, both in written and verbal, in a clear, concise and professional manner; including technical writing skills.
• Team skills, including ability to establish and maintain effective working relationships with all levels within an organization, fostering collaboration internally/externally with vendors and staff.
• Must demonstrate strong analytical and problem solving skills.
• Must be process oriented and organized.
• Knowledge of clerical and administrative procedures and systems such as filing and record keeping
• Preferably have minimally 2 years experience in Information Technology.
• Preferably have 1 to 2 years experience working in Banking and/or Finance environment.

• Monitor third party security feeds, forums, and mailing lists to gather information related to the client through automated means
• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Review vulnerabilities advisories
• Review and process threat intelligence reports
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assess each event based on factual information and wider contextual information available
• Review, propose and generate reports to automate or reduce low value event escalations
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations through SIEM Rules, DB scripts etc.
• Perform periodic analysis of security events, network traffic, and logs to engineer new detection methods, or create efficiencies when available
• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
• Assist the Security Analysts with the investigative works
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to detection Use Case
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

• Setup and operating Managed Endpoint and Detection Response (MDR) program and proposing enhancement to achieve better efficiency/ effectiveness
• Operating Network Traffic Analytics (NTA) program, identification of abnormalities in client’s environment
• Performs threat hunting within the clients’ technology environments to uncover indicators of threat activities
• Performs digital forensic preservation, legal documentation and electronic discovery for incidents and investigations
• Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
• Supports the identification and documentation of Indicators of Compromise (IoCs)
• Leverages internal and external resources to research threats, vulnerabilities and intelligence on various threat actors and exploitation tools and platforms
• Use an analytics platform to identify threats in the available information repositories
• Perform threat research to identify potential threat vectors and work with multi-disciplines to improve prevention and detection methods
• Identify gaps in an organisation’s measurement metrics, telemetry and logging capabilities and propose enhancement strategies to achieve the intended outcomes
• Work with client’s appointed Incident Response Management team for cyber security incidents such as data security breach, Advanced Persistent Threat (APT)

Requirements

Basic Requirements

• 1 to 3 years of experience with threat hunting
• 1 to 3 years of experience in incident response handling
• 1 to 2 years of experience with digital forensics investigations
• Experience in consulting, including both internal and client facing experiences
• Ability to obtain a security clearance
• Bachelor Degree in Computer Engineering, Computer Science, Cyber Security, Information Security or other equivalents
• Ability to travel 20% of the time

Preferred Skills /Qualities

• 1 to 3 years of experience supporting or providing expert witness testimonials
• 1 to 3 years of experience in data analysis
• 1 to 3 years of experience in log analysis
• 1 to 3 years of experience in reverse malware analysis
• Experience with research, technical and business documentation and analysis.
• Knowledge of the Singapore Law, Singapore Government regulations and policies.
• Ability to demonstrate flexibility, initiative and innovation in dealing with ambiguous, fast-paced situations.
• Ability to show proficiency in one or more regional languages and dialects.
• Ability to show proficiency in Microsoft Office, Power BI and Tableau.
• Ability to show proficiency in Forensic Toolkits, e.g. EnCase Forensics, FTK Forensics, Magnet Forensics and Write Blockers.
• Ability to show proficiency in reverse malware engineering tools, e.g. IDA Pro
• Ability to show proficiency in programming and scripting, e.g. Java, .NET Programming, Python & PERL scripting, etc.
• Possession of excellent presentation and briefing skills.
• Possession of excellent oral and written communication skills.
• Professional certifications, including EnCE, GCIH, GCFE, GCFA, GREM, GNFA, GASF, GCTI, CISSP, or other SANS certifications.

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators