Jobs at Assurity Trusted Solutions Pte Ltd

Manage government bug bounty, vulnerability rewards, and vulnerability disclosure programmes. Responsibilities include planning programme runs, coordinating government agencies and security researchers, managing vendors and contracts, supporting vulnerability triage, procurement, reporting, stakeholder communications, and outreach. The role also drives process improvements and workflow automation using AI-assisted development and GovTech platforms.

Plan and execute risk-based IT, process, policy, and technical audits across government agencies. Lead stakeholder engagements through planning, fieldwork, reporting, response review, and follow-up. Evaluate ICT governance, cybersecurity, risk management, and controls against recognized frameworks. Develop risk-based remediation recommendations, assess root causes, validate corrective actions, and maintain audit findings in a central repository.

Manage end-to-end procurement and contract lifecycles for government technology and cybersecurity programs. Advise technical and business stakeholders, develop data-driven sourcing strategies, lead tenders and evaluations under government policies, and manage supplier relationships and contractual performance. The role requires strong communication, analytical, organizational, and problem-solving skills, along with technology interest and the ability to work independently in a fast-paced environment.

Leads governance, risk, and compliance as a second-line cybersecurity function across products and platforms. Owns Security Plan standards, evidence review, automated assurance checks, ICT audit workflows, policy lifecycles, audit coordination, and management reporting. Leads security education and awareness campaigns, including phishing simulations. Partners with product teams and senior stakeholders to improve controls, documentation, issue tracking, remediation, and risk-aware delivery practices.

Lead cybersecurity incident response across triage, investigation, containment, eradication, recovery, root cause analysis, log analysis, and digital forensics. Analyze endpoint, network, application, cloud, and mobile artifacts; perform malware analysis; develop incident response playbooks; support SOAR automation; monitor emerging threats; and communicate findings and recommendations to stakeholders through comprehensive post-incident reporting.

Design, build, secure, and operate highly available data centre networks, including leaf-spine fabrics, routing, switching, firewalls, load balancers, segmentation, and inter-data-centre connectivity. Troubleshoot mission-critical network issues, improve reliability, and manage capacity and performance. Develop Network-as-Code automation for provisioning, validation, testing, compliance, and drift detection. Apply telemetry, AI, and AIOps techniques while collaborating with cloud, compute, storage, cybersecurity, and application teams.

The role involves designing, implementing, managing cloud network infrastructures, configuring network devices, performing maintenance, and participating in procurement and audit processes.

Develop and maintain secure IAM backend services, APIs and automation integrating Microsoft Entra ID, Microsoft Graph and SailPoint. Build automated tests, CI/CD pipelines, and Java-based utilities when needed. Implement SSO/MFA/OAuth/OpenID Connect/SAML, produce technical documentation, and support access governance and identity lifecycle workflows.

Lead the automation and orchestration of cybersecurity operations through developing workflows, maintaining scripts, and collaborating with teams to enhance security processes.

This role involves designing and maintaining data pipelines, managing APIs, collaborating with teams, and ensuring data quality and governance.

Implement and automate CI/CD practices, provision and manage cloud and on-prem infrastructure, harden systems for security and compliance, manage production cloud services, develop deployment scripts, and maintain technical documentation.

Perform security-by-design assessments, risk assessments, and security architecture reviews. Scope and review security tests/audits, advise stakeholders on remediation, research emerging technology risks (5G, IoT, AI, Quantum), and help integrate and validate security tools and controls in line with Singapore government ICT policies and standards.

Provide GRC-focused cybersecurity consultancy and assurance: develop and operationalise security frameworks, review security architecture and policies, manage compliance audits and gap analyses against Singapore Government standards, produce security reporting, and support cybersecurity training and stakeholder engagement.

Maintain and optimize Nutanix HCI clusters and RHEL platforms for Day 2 operations: monitoring, patching, automation (Ansible/Bash), incident RCA, DR testing, capacity tuning, and collaboration with developers and security teams to ensure secure, stable enterprise infrastructure.

Manage ICT procurement and contract activities for government engagements: develop procurement strategies, draft and evaluate tenders, manage supplier performance and contract variations, advise customers on compliance and procurement risks, and ensure timely delivery of procurement projects with stakeholder communications and audit support.

Design, integrate, deploy, and maintain secure OT/IoT systems spanning hardware, software, cloud platforms, and connected devices. Develop web and backend applications, integrate OT protocols and hardware interfaces, optimize cloud-native services, implement CI/CD and monitoring, protect data, support machine learning integration, improve user workflows, and maintain technical documentation. Collaborate with stakeholders on architecture, product roadmaps, governance, and tender evaluations.

Perform SecOps tasks including developing/maintaining security standards and rulesets, conducting exercises and incident triage, IOC scanning, vulnerability assessments and patch monitoring, risk assessment and remediation recommendations, and stakeholder reporting on security posture.

Build and automate AWS-based platform capabilities, CI/CD pipelines, and release automation to enable internal product teams. Collaborate with developers and security teams to improve deployment workflows, monitoring, and platform adoption; provide standby/production support as needed.

The Audit Manager oversees audits, applying threat intelligence, managing data quality, and developing audit methodologies while ensuring compliance and effectiveness in risk management and security measures.

Lead vulnerability assessment and penetration testing initiatives, manage customer engagements, produce documentation, mentor junior engineers, and enhance security practices.