Apply Job

IT Security Officer

Goldtech Resources Pte. Ltd.

Role Description

We are looking for an IT Security Operations Specialist to support day-to-day cybersecurity and infrastructure security operations across on-premises and cloud environments.

The role will focus on vulnerability management, security incident response, DDoS/WAF operations, security compliance and remediation tracking. You will work closely with infrastructure, application teams and external security providers to identify and address security risks and maintain a secure IT environment.

Key Responsibilities

Vulnerability & Security Management

• Coordinate vulnerability management activities across servers, endpoints, applications and Azure cloud environments.
• Use tools such as TenableOne, VMS, Cloudscape or equivalent platforms to identify and monitor vulnerabilities.
• Review vulnerability assessment results and patch compliance reports to determine remediation priorities.
• Track outstanding vulnerabilities, remediation actions, security exceptions and risk acceptance requests.
• Follow up with technical teams to ensure vulnerabilities are addressed within required timelines.
• Escalate overdue or high-risk security issues to relevant stakeholders.

Security Incident & Infrastructure Operations

• Support cybersecurity incident investigation, containment, recovery and closure activities.
• Coordinate incident and remediation activities with infrastructure, application and security teams.
• Maintain incident records and follow up on corrective actions.
• Support DDoS protection and Web Application Firewall (WAF) operations.
• Review security alerts, attack reports and service performance.
• Coordinate WAF rule changes and support investigations involving suspicious traffic or web application attacks.
• Work with external security vendors and service providers to resolve operational issues.

Compliance & Reporting

• Maintain security risk, remediation and compliance tracking records.
• Monitor compliance with cybersecurity policies, standards and requirements.
• Prepare operational reports and management updates covering vulnerabilities, incidents, patch compliance and remediation progress.
• Support cybersecurity audits and compliance assessments by preparing the required documentation and evidence.
• Identify recurring security issues and support improvements to security processes and controls.

Requirement

• Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems or related discipline.
• 2 to 5 years of experience in cybersecurity operations, IT security operations, vulnerability management or related functions.
• Experience with vulnerability management tools such as Tenable or equivalent solutions.
• Good understanding of vulnerability management and patch management processes.
• Experience supporting cybersecurity incidents and remediation activities.
• Familiarity with DDoS protection and WAF technologies is preferred.
• Exposure to Microsoft Azure security and cloud environments would be advantageous.
• Familiarity with security frameworks and standards such as IM8, NIST, ISO 27001 or CIS Controls.
• Basic knowledge of network, server, application and cloud security.
• Strong analytical, communication, coordination and stakeholder management skills.
• Able to manage multiple priorities and work effectively with internal teams and external vendors.
• Preferred Certifications: Azure Cloud Certifications, CompTIA Security+, Microsoft Security Certifications, CEH, ISC2 CC, CISSP or CISM.

Skills