Security Analyst

Job Description:

We are seeking a skilled Security Analyst to implement and maintain a robust security architecture blueprint, covering DevSecOps, application, infrastructure, and operational security. The ideal candidate will define security processes, provisioning, and interfaces while providing expert recommendations.

Key Responsibilities:

• Develop and implement a security architecture blueprint for secure application interactions.
• Define security processes, provisioning, and interfaces, and provide best-practice recommendations.
• Manage access management and control measures to ensure robust security policies.
• Conduct and execute Security Vulnerability Scanning activities, including:
• Host Configuration Review (HCR)
• Network Vulnerability Assessment (NVA)
• Penetration Testing
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Resolve security findings and implement corrective measures.
• Administer Access Management and Security Information and Event Management (SIEM) tools.
• Facilitate external audits and ensure compliance with security best practices.
• Oversee operational security processes, including:
• OS-level patching
• Application-level patching
• Operational housekeeping and archival
• Server and application hardening procedures
• IM8 security policies compliance
• Vulnerability assessments
• Security incident detection and reporting
• SSL certificate renewal and management

Required Technologies & Skills:

• OS Administration: Linux / Windows
• Security Tools:
• IBM Security Verify Access
• IBM QRadar
• Thales HSM
• OpenSSL
• Tenable Nessus
• Burp Suite Enterprise

Top 3 Must-Have Skills:

• Minimum 2+ years of experience in IT Security.
• CISSP/CCSP/CCSK certification (or equivalent) is preferred.
• Expertise in 1-2 areas of Cyber Security, such as:
• Identity Access Management (IAM)
• Security and Risk Management
• Application and Network Security
• Vulnerability Management
• Broad understanding of other security domains

Good-to-Have Skills (Optional):

• Experience with Singapore Government security standards and compliance frameworks.
• Knowledge of SSAT (Security System Acceptance Testing), Security Compliance Checks, Security Vulnerability Scanning, DAST & SAST.
• Hands-on experience with security tools and environments.