Top Tech Jobs & Startup Jobs in Singapore

Provides cybersecurity expertise for enterprise infrastructure, designing secure architectures, conducting penetration tests and vulnerability assessments, managing monitoring and access controls, responding to incidents, securing cloud environments, and ensuring compliance with CIS, NIST, and ISO 27001 standards. Advises infrastructure teams and stakeholders on security risks, remediation, and best practices.

Develop, document, test, and tune security detection rules and playbooks across SIEM, EDR, network, endpoint, and cloud environments. Analyze logs and alerts, reduce false positives, research government-targeting threats, and translate attacker TTPs into detection logic. Collaborate with analysts, incident responders, and security engineers to operationalize detections, integrate security tools, improve workflows, and automate detection processes.

Manage government bug bounty, vulnerability rewards, and vulnerability disclosure programmes. Responsibilities include planning programme runs, coordinating government agencies and security researchers, managing vendors and contracts, supporting vulnerability triage, procurement, reporting, stakeholder communications, and outreach. The role also drives process improvements and workflow automation using AI-assisted development and GovTech platforms.

Plan and execute risk-based IT, process, policy, and technical audits across government agencies. Lead stakeholder engagements through planning, fieldwork, reporting, response review, and follow-up. Evaluate ICT governance, cybersecurity, risk management, and controls against recognized frameworks. Develop risk-based remediation recommendations, assess root causes, validate corrective actions, and maintain audit findings in a central repository.

Manage end-to-end procurement and contract lifecycles for government technology and cybersecurity programs. Advise technical and business stakeholders, develop data-driven sourcing strategies, lead tenders and evaluations under government policies, and manage supplier relationships and contractual performance. The role requires strong communication, analytical, organizational, and problem-solving skills, along with technology interest and the ability to work independently in a fast-paced environment.

Leads governance, risk, and compliance as a second-line cybersecurity function across products and platforms. Owns Security Plan standards, evidence review, automated assurance checks, ICT audit workflows, policy lifecycles, audit coordination, and management reporting. Leads security education and awareness campaigns, including phishing simulations. Partners with product teams and senior stakeholders to improve controls, documentation, issue tracking, remediation, and risk-aware delivery practices.

Lead cybersecurity incident response across triage, investigation, containment, eradication, recovery, root cause analysis, log analysis, and digital forensics. Analyze endpoint, network, application, cloud, and mobile artifacts; perform malware analysis; develop incident response playbooks; support SOAR automation; monitor emerging threats; and communicate findings and recommendations to stakeholders through comprehensive post-incident reporting.

Design, build, secure, and operate highly available data centre networks, including leaf-spine fabrics, routing, switching, firewalls, load balancers, segmentation, and inter-data-centre connectivity. Troubleshoot mission-critical network issues, improve reliability, and manage capacity and performance. Develop Network-as-Code automation for provisioning, validation, testing, compliance, and drift detection. Apply telemetry, AI, and AIOps techniques while collaborating with cloud, compute, storage, cybersecurity, and application teams.

The role involves designing, implementing, managing cloud network infrastructures, configuring network devices, performing maintenance, and participating in procurement and audit processes.

Develop and maintain secure IAM backend services, APIs and automation integrating Microsoft Entra ID, Microsoft Graph and SailPoint. Build automated tests, CI/CD pipelines, and Java-based utilities when needed. Implement SSO/MFA/OAuth/OpenID Connect/SAML, produce technical documentation, and support access governance and identity lifecycle workflows.