Job Description
Key Responsibilities - Own day-to-day security operations, monitoring, alert analysis, and incident response to ensure the security, stability, and compliance of company systems. - Operate and maintain core security platforms (NDR, WAF, firewalls, EDR, SIEM, bastion hosts, etc.), continuously tuning detection rules and policies. - Perform initial triage, classification, root-cause analysis, and remediation of security incidents; produce incident analysis reports. - Conduct regular security assessments and penetration testing of web systems, mobile apps, and firmware to identify potential vulnerabilities. - Track emerging threat intelligence, 0-day vulnerabilities, and offensive/defensive techniques; assess business impact. - Support enterprise security planning, compliance assessments (e.g., MLPS), and broader security program initiatives. - Support security awareness initiatives such as phishing simulations and training. Requirements Basic Requirements - Bachelor's degree or above in Computer Science, Information Security, Data Science, or a related field. - 3+ years of experience in security operations or penetration testing. - Strong sense of ownership and readiness for on-call / incident response duties. Technical Skills - Proficient with mainstream penetration testing tools (Burp Suite, Nmap, AWVS, Nessus, etc.). - Familiar with common web vulnerabilities and exploitation techniques (XSS, SQL injection, CSRF, etc.). - Hands-on experience operating security devices — WAF, firewalls, EDR, SIEM, bastion hosts — including deployment, policy tuning, and daily operations. - Familiar with threat intelligence collection and analysis; capable of incident root-cause tracing. - Proficient in Python; able to independently build security tools (scanners, PoCs/exploits, etc.) is a plus. - Familiar with mobile (APP) security testing and reverse engineering is a plus. - Experience securing hybrid cloud environments (AWS, Alibaba Cloud, Tencent Cloud, etc.) is a plus.
Similar jobs
- Associate Security Operation Engineer (Cybersecurity)
Ensign InfoSecurity · Singapore, Singapore
- Senior Specialist, Security Operations (Senior Executive)
Singapore, Singapore
- Manager, Operational Excellence & Quality (Secure Logistic Services)
Certis · Singapore
- Data Centre Security Operations Specialist
Singapore, Singapore
- Markets Operations - Securities Finance Operations Specialist
OCBC · Singapore, Singapore
- Senior Security Operations Engineer, AIDC
Bitdeer (NASDAQ: BTDR) · Singapore, Singapore