213 Ethical Hacking jobs in Singapore

Key Roles and Responsibilities:

Monitors security alerts and events from various sources, investigates potential threats, and escalates incidents as necessary.

Assists in the implementation and monitoring of security controls, including firewalls, intrusion detection systems, and access controls.

Performs regular vulnerability assessments, analyses scan results, and assists in prioritising and remediating identified vulnerabilities.

Supports the incident response team in investigating security incidents, documenting findings, and participating in remediation efforts.

Assists in ensuring compliance with industry standards (e.g., GDPR, ISO 27001) by conducting assessments and implementing necessary controls.

Installs security measures and operates software to protect systems and information infrastructure, including firewalls and data encryption programmes

Documents security breaches and assess the damage they cause

Works with the security team to perform tests and uncover network vulnerabilities

Fixes detected vulnerabilities to maintain a high-security standard

Develops organisational best practices for IT security

Performs penetration testing

Upgrades systems to unable security software

Installs and upgrades antivirus software

Tests and evaluates new technology

Assists with the installation of security software and understands information security management

Researches security enhancements and makes recommendations to management

Stays abreast of information technology trends and security standards

Contributes to security awareness initiatives by creating training materials, conducting workshops, and educating employees about best security practices.

Maintains accurate records of security incidents, assessments, and actions taken for reporting and audit purposes.

Assists in the management and maintenance of security tools, including antivirus software, encryption tools, and security information and event management (SIEM) systems.

Participates in risk assessments to identify potential security threats, vulnerabilities, and associated risks to the organisation.

Collaborates with cross-functional teams, IT, and other teams to ensure security measures are integrated into the organisation's processes and projects.

Knowledge, Skills and Attributes:

Seasoned, experienced professional; has complete knowledge and understanding of area of specialisation

Uses evaluation, judgment, and interpretation to select right course of action

Excellent communication skills to effectively convey technical information to non-technical stakeholders

Excellent analytical thinking and problem-solving skills to prevent hacking on a network

Strong leadership skills to identify and evaluate potential risks and to develop solutions

Ability to identify and mitigate network vulnerabilities and explain how to avoid them

Proficiency in understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts

Proficiency in understanding of patch management with the ability to deploy patches in a timely manner whilst understanding business impact

Proficiency with MAC and OS

Familiarity with security frameworks, standards, and regulations (e.g., NIST, CIS, GDPR)

Proficiency of understanding in network and system architecture, protocols, and security controls

Strong analytical skills to analyse security incidents and assess potential risks

Ability to work both independently and collaboratively in a fast-paced environment

Academic Qualifications and Certifications:

Bachelor's degree or equivalent in information security, cybersecurity, computer science, or related

Security certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are advantageous

Required Experience:

Seasoned demonstrated experience in information security or cybersecurity, or related roles

Seasoned demonstrated experience working in a global IT organisation

Seasoned demonstrated experience with computer network penetration testing and techniques

Seasoned demonstrated experience with security assessment and vulnerability scanning tools

Key Roles and Responsibilities:

Monitors security alerts and events from various sources, investigates potential threats, and escalates incidents as necessary.

Assists in the implementation and monitoring of security controls, including firewalls, intrusion detection systems, and access controls.

Performs regular vulnerability assessments, analyses scan results, and assists in prioritising and remediating identified vulnerabilities.

Supports the incident response team in investigating security incidents, documenting findings, and participating in remediation efforts.

Assists in ensuring compliance with industry standards (e.g., GDPR, ISO 27001) by conducting assessments and implementing necessary controls.

Installs security measures and operates software to protect systems and information infrastructure, including firewalls and data encryption programmes

Documents security breaches and assess the damage they cause

Works with the security team to perform tests and uncover network vulnerabilities

Fixes detected vulnerabilities to maintain a high-security standard

Develops organisational best practices for IT security

Performs penetration testing

Upgrades systems to unable security software

Installs and upgrades antivirus software

Tests and evaluates new technology

Assists with the installation of security software and understands information security management

Researches security enhancements and makes recommendations to management

Stays abreast of information technology trends and security standards

Contributes to security awareness initiatives by creating training materials, conducting workshops, and educating employees about best security practices.

Maintains accurate records of security incidents, assessments, and actions taken for reporting and audit purposes.

Assists in the management and maintenance of security tools, including antivirus software, encryption tools, and security information and event management (SIEM) systems.

Participates in risk assessments to identify potential security threats, vulnerabilities, and associated risks to the organisation.

Collaborates with cross-functional teams, IT, and other teams to ensure security measures are integrated into the organisation's processes and projects.

Knowledge, Skills and Attributes:

Seasoned, experienced professional; has complete knowledge and understanding of area of specialisation

Uses evaluation, judgment, and interpretation to select right course of action

Excellent communication skills to effectively convey technical information to non-technical stakeholders

Excellent analytical thinking and problem-solving skills to prevent hacking on a network

Strong leadership skills to identify and evaluate potential risks and to develop solutions

Ability to identify and mitigate network vulnerabilities and explain how to avoid them

Proficiency in understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts

Proficiency in understanding of patch management with the ability to deploy patches in a timely manner whilst understanding business impact

Proficiency with MAC and OS

Familiarity with security frameworks, standards, and regulations (e.g., NIST, CIS, GDPR)

Proficiency of understanding in network and system architecture, protocols, and security controls

Strong analytical skills to analyse security incidents and assess potential risks

Ability to work both independently and collaboratively in a fast-paced environment

Academic Qualifications and Certifications:

Bachelor's degree or equivalent in information security, cybersecurity, computer science, or related

Security certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are advantageous

Required Experience:

Seasoned demonstrated experience in information security or cybersecurity, or related roles

Seasoned demonstrated experience working in a global IT organisation

Seasoned demonstrated experience with computer network penetration testing and techniques

Seasoned demonstrated experience with security assessment and vulnerability scanning tools

Join to apply for the Information Security Analyst (CSOC) role at TD

Join to apply for the Information Security Analyst (CSOC) role at TD

Get AI-powered advice on this job and more exclusive features.

Job Role/Responsibilities

The Information Security Analyst is responsible for tier 1/tier 2 triage, investigation, and incident response for Cyber security incidents.

• Conduct Real-time analysis on identified cyber incidents currently impacting the bank’s operations.
• Analyze, triage and remediate security incidents internally and/or escalate to Cyber Security Incident Response team (CSIRT) for further investigation, treatment or support if needed.
• Manage intake of incidents and reports from internal customers through internal ticketing system in a timely accurate manner in order to resolve a multitude of information security related situations.
• The ability to identify and triage and remediate security incidents such as Malware, Phishing and Web Attacks is required.
• The CSOC Security Analyst is responsible for supporting the event log monitoring, analysis needs of customers.
• The personnel in this role will work as part of a cyber security operations team responsible for carrying out 24x7 on-site security monitoring operations. Operations which are carried out in Singapore shifts that run from 7am-3pm, 12pm-8pm or 7pm-7am on a rotating basis.
• Accountable to respond to, investigate and remediate cyber threats to the bank. Escalate to internal and Cyber Security Incident Response team if required.
• This job contributes to Technology and Operations through first line management and identifications of electronic threats to TDBG’s infrastructure.
• The Information Security Analyst will be responsible for managing information between multiple technical teams, the CSOC, CSIRT and ITS, LOB TS when appropriate.

Job Requirements

• Min 3 years of Information Security Operations or similar working experience
• Understanding of security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application and networking environments.
• Excellent written and oral communication skills.
• Organizational and self-directing skills – ability to initiate, coordinate and prioritize responsibilities and follow through on tasks to completion.
• An approach to work that includes initiative, sound judgment, diplomacy and Discretion.
• Ability to work independently on a variety of assignments with minimal supervision.
• Ability to work without supervision with senior managers, supervisors, VIPs and Users.
• Advanced knowledge of security incident and event management, log analysis, Network traffic analysis, Malware investigation and remediation, SIEM correlation logic and alert generation.
• Ability to perform analysis and reporting on information from multiple data sources using data mining technique for the purpose of documenting analysis results, produce report and present to a technical and executive stakeholders.
• Understanding of Security principles, techniques and technologies such as SANS Top 20 Critical Security Controls and OWASP Top 10.
• A background with Cloud Security Monitoring is highly desired, preferably with Azure Security Center, Microsoft MCAS, AWS.
• Basic programming skills in various disciplines including scripting languages.
• Candidate should possess strong hands-on experience with traditional incidents response detection tools such as SIEM, EDR, XDR, Firewall, WAF, NIDS and equivalent.
• Experience with Security Orchestration, Automation and Response tools (SOAR).
• Demonstrate expert knowledge in Enterprise IT operations, incident management, change management, Access/Identity Management, Security Operations, vulnerability and compliance management, ticketing system, incident ticket life cycle and SLA terms

Background and Education:

• Completion of a Bachelor’s degree or equivalent program in Computer Science, Management Information Systems or similar field is required.
• Completion of a Master's degree or equivalent program in Computer Science, Management Information Systems or similar field is preferred.
• Preferably to have at least one of the following: GIAC (GSEC, GCIH, GCIA, GCFE, GCFA) CompTIA Security+ / CySA+, SC200, CISSP, CCSP

• Seniority level Associate

• Employment type Full-time

• Job function Information Technology
• Industries Banking

Referrals increase your chances of interviewing at TD by 2x

Get notified about new Information Security Analyst jobs in Singapore, Singapore .

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

Press Tab to Move to Skip to Content Link

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

NCS is a leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 13,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

As a SOC Consultant, you'll be responsible for conducting advanced threat analysis and investigating security incidents to safeguard organizational assets. The role involves close collaboration with Cyber Incident Response Team (CIRT) members, business stakeholders, and executive leadership to coordinate effective response protocols. Key responsibilities include developing detection logic, configuring security platforms such as SIEM, SOAR, EDR, and threat intelligence tools, and creating detailed technical reports documenting forensic procedures and timelines.

What will you do?

• Perform advanced threat analysis and investigate security events.
• Work with CIRT members, business partners, and executive leadership to coordinate response protocols.
• Writing technical reports detailing how the computer evidence was discovered and all the steps taken during the retrieval process (timeline).
• Develop detection logic & security playbooks.
• Configure SIEM, SOAR, EDR and/or threat intelligence platforms.
• Sharing knowledge with SOC Security Analyst and supporting them.
• Conduct sampling check on SOC Security Analyst tickets.
• Be clear of customer's security framework, such as information security policies, processes/procedures, guidelines and etc.

The ideal candidate should possess:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Relevant certifications such as GCIA, GCIH, CEH, CISSP, or Security+ are highly preferred.
• 3–5 years of experience in cybersecurity operations, threat analysis, or incident response.
• Hands-on experience with SIEM, SOAR, EDR, and threat intelligence platforms.
• Proven experience in writing technical reports and conducting forensic investigations.
• Strong understanding of network protocols, malware behavior, and attack vectors.
• Proficiency in configuring and tuning security tools and platforms.
• Ability to develop detection logic and security playbooks.
• Familiarity with scripting languages (e.g., Python, PowerShell) is a plus.
• Excellent communication and report-writing skills.
• Strong analytical and problem-solving abilities.
• Ability to work collaboratively with cross-functional teams including CIRT, SOC, and leadership.
• Detail-oriented with a proactive approach to continuous improvement.
• Solid grasp of information security frameworks, policies, and procedures.
• Understanding of regulatory compliance standards (e.g., ISO 27001, NIST, GDPR).

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity —and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future .

Together, we make the extraordinary happen .

Learn more about us at ncs.co and visit our LinkedIn career site.

Job Overview

We seek a diligent Surveillance Officer to fill a critical role in maintaining game integrity, ensuring guest and team member safety, and protecting company assets.

Key Responsibilities:

• Maintain the integrity of games by monitoring and addressing potential issues.
• Ensure the safety and security of guests and team members by identifying and mitigating risks.
• Protect company assets through vigilant monitoring and reporting.

Requirements:

• Detailed analytical skills for effective issue identification and resolution.
• Excellent communication skills for clear reporting and collaboration.
• Able to work independently with minimal supervision.

Benefits:

• Ongoing training and professional development opportunities.
• A supportive and dynamic work environment.
• A competitive compensation package.

About the Role:

This is an excellent opportunity for a motivated and detail-oriented individual to join our surveillance operations team.

ABOUT THE NATIONAL INSTITUTE OF EDUCATION (NIE)

The National Institute of Education (NIE), Singapore , is Singapore’s national teacher education institute and we are proud to be an integral part of the nation’s education service. We play a key role in the preparation of teachers and in the provision of teacher professional and school leadership development programmes. We are committed to our vision of being An Institute of Distinction: Leading the Future of Education and our mission to Inspire Learning, Transform Teaching and Advance Research .

As part of NIE’s commitment to strengthening cybersecurity resilience, we are seeking a Senior IT Security Analyst to lead our Incident Response (IR) capabilities. This role is central to the Institute’s strategic direction, ensuring timely, effective, and coordinated responses to cyber threats, while continuously enhancing our response playbooks and readiness through automation and structured learning. This is a 3-year contract position.

Key Responsibilities:

Incident Response Leadership

• Oversee the entire incident response lifecycle from detection to resolution.
• Lead investigations of IT security incidents and ensure thorough root cause analysis and remediation.
• Develop and maintain incident response playbooks and procedures.
• Coordinate with internal, external stakeholders, and vendors during incidents.
• Conduct post-incident reviews and report findings to management.

Monitoring and Detection

• Develop and implement advanced threat detection and monitoring strategies.
• Utilize SIEM, EDR, and other security tools for timely incident detection.
• Perform threat hunting and proactive security assessments.
• Collaborate with IT teams to deploy and optimize security solutions.

Threat Statistics and Reporting

• Analyze and compile statistics on threats relevant to the Institute.
• Prepare and present detailed reports on threat statistics to stakeholders.
• Use data visualization tools to communicate threat trends and insights.

Requirements:

Educational Background

• A University Degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Professional Certification(s) in incident handling and security analysis preferred.
• GCIH or its equivalent is preferred.

Professional Experience

• Minimum of 8 years of progressive experience in IT security, with a focus on Incident response.
• Minimum of 4 years of experience in a security operations center, with proven leadership capabilities.
• Intermediate knowledge of security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration.
• Proven experience in managing incident response and performing threat hunting.

Technical Expertise

• Proficiency in Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), traffic and packet analysis, and cloud security.
• Experience in firewall, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF) administration, virtualization, and cloud technologies.
• Experience in monitoring and administering host-based intrusion detection systems.
• Knowledge and experience in Linux/Windows/Database technologies preferred.
• Strong knowledge of industry standards and information security policy frameworks.
• Hands-on experience with scripting and automation tools to enhance security operations.
• Ability to conduct gap analysis of current processes and identify opportunities for improvement.
• Evaluate internal and external environments for threats related to Information Security and act as a subject matter expert to ensure these are properly addressed and controlled.
• Continuously improve event correlation and alerting processes and use cases to detect potential incidents.
• Automate manual processes to enhance security incident response.
• Experience with network security assessment tools.

Leadership and Communication

• Excellent leadership and team management skills, with the ability to inspire and motivate a team.
• Strong communication skills, with the ability to effectively interact with stakeholders at all levels, including University administration.
• Demonstrated ability to drive strategic initiatives and lead a team through change.
• Exceptional problem-solving skills and the ability to think critically under pressure.
• Ability to interview stakeholders to define and document business requirements.
• Provide advice and guidance on response action plans for information risk events and incidents based on incident type and severity.

Other Information

NIE staff can take chartered buses at their own expense from or near their home to the NIE campus. This is subject to the availability of bus routes and seats.

Req ID: R00018131

• Lead in-depth investigations to uncover abuse tactics, product vulnerabilities, and process gaps.
• Analyse large datasets to identify signals and patterns linked to fraud and abuse.
• Reverse-engineer scaled attacks and develop rapid-response mitigation strategies.

We are seeking a skilled and driven professional to join our Business Integrity team, focusing on identifying and mitigating fraud and abuse within business products. This role involves investigative work, data analysis, and cross-functional collaboration to uncover and address complex abuse patterns. If you are passionate about protecting users and businesses from harm and thrive in fast-paced, dynamic environments, this opportunity is for you.

Key Responsibilities:

·Lead in-depth investigations to uncover abuse tactics, product vulnerabilities, and process gaps.

·Analyse large datasets to identify signals and patterns linked to fraud and abuse.

·Reverse-engineer scaled attacks and develop rapid-response mitigation strategies.

·Prototype workflows and enforcement rules to disrupt ongoing abuse.

·Collaborate cross-functionally with Engineering, Product, and Operations teams to develop scalable solutions.

·Investigate networks of malicious actors, including off-platform research.

·Occasionally accommodate flexible working hours to collaborate with global teams.

Qualifications:

·2+ years of experience in investigative analysis or similar roles.

·1+ year of hands-on experience with SQL for data analysis and reporting.

·Experience with scripting languages such as Python, PHP, or R.

·Strong critical thinking and problem-solving skills.

·Ability to manage and own projects independently with minimal supervision.

·Excellent organizational, documentation, and presentation skills.

·Familiarity with trust and safety, online fraud investigations, or cybersecurity is a plus.

·Ability to think like an adversary and anticipate threat actor behaviour.

·Comfortable working across time zones and adapting to a dynamic work environment.

We regret to inform that only shortlisted candidates will be notified.

EA Registration No: 10C4544, Lim Jing Kai, Russell

Allegis Group Singapore Pte Ltd, Company Reg No. 200909448N, EA License No. 10C4544

Join to apply for the Principal Security Analyst role at Oracle

Join to apply for the Principal Security Analyst role at Oracle

Get AI-powered advice on this job and more exclusive features.

Job Description

We are looking for professionals with experience protecting critical infrastructure to help us defend Oracle cloud infrastructure. Our team is skilled in threat hunting, analyzing indicators of compromise (IOCs), investigating adverse security events, security incident management, and digital forensics across laaS, PaaS and SaaS environments. You will be part of a corporate security operations center responsible for defending infrastructure from adversaries and insider threats. This includes using tools to analyze and respond to threats, creating tools/scripts to aid in analysis, and responding in real time to adverse security events. Our team is the last line of defense if security controls are breached. We are expanding the team and working on ambitious new initiatives. The Senior SOC Analyst will leverage advance security tooling and automation to rapidly detect and respond to real-time security alerts and events and conduct detailed root cause investigations. The analyst will work closely with other SOC personnel, forensics, incident response, and engineering partners to mitigate a wide variety of threats and malicious activity.

Job Description

We are looking for professionals with experience protecting critical infrastructure to help us defend Oracle cloud infrastructure. Our team is skilled in threat hunting, analyzing indicators of compromise (IOCs), investigating adverse security events, security incident management, and digital forensics across laaS, PaaS and SaaS environments. You will be part of a corporate security operations center responsible for defending infrastructure from adversaries and insider threats. This includes using tools to analyze and respond to threats, creating tools/scripts to aid in analysis, and responding in real time to adverse security events. Our team is the last line of defense if security controls are breached. We are expanding the team and working on ambitious new initiatives. The Senior SOC Analyst will leverage advance security tooling and automation to rapidly detect and respond to real-time security alerts and events and conduct detailed root cause investigations. The analyst will work closely with other SOC personnel, forensics, incident response, and engineering partners to mitigate a wide variety of threats and malicious activity.

Career Level – IC4

Description

• Support shifts and on call rotations
• Detect and respond to security events and threats from alerting, escalations, and other sources
• Lead complex investigations and conduct deep analysis of security events focused on rapid containment, remediation, and mitigation
• Work closely with security engineering teams to improve monitoring, detection, and tooling
• Understand the threat landscape, emerging trends, and incorporate this understanding into day-to-day security monitoring
• Operate SOC technologies, including but not limited to a Security Information Event Management (SIEM) platform,Intrusion Detection Systems (IDS), SOAR, Firewalls, Anti-Malware solutions, and insider threat tooling
• Assist with security incident response activities
• Prepare assigned reports for the SOC manager
• Provide high quality written and verbal reports as required
• Actively monitor and respond the SIEM alert queue and triage alerts
• Investigate alerts using standard operating procedures
• Monitor several screens, systems, and alerts simultaneously
• This role is open to Singaporeans only
• Must meet eligibility requirements for obtaining and maintaining a Singapore government security clearance.
• This role will involve the successful applicant working on government projects which may require security clearance being obtained and maintained as a condition of employment. Candidates applying for this role must be willing to provide necessary personal details for the application and maintenance of necessary security clearance.
  
  
  

• 8+ years of Incident Response, Security Operations Center, and/or Forensic Analyst experience
• Comfortable working in an ambiguous, fast-paced, unpredictable environment
• Experience working in a highly collaborative, team centric, event driven operations team
• Experience with querying across large data sets to understand complicated and difficult to solve problems
• Strong attention to detail
• Experience in one or more of the following fields of work: National security, military, intelligence, law enforcement, criminology, and/or foreign areas and language
• Experience with variety of operating systems and threats that target them including Windows, UNIX/LINUX, and MacOS
• Experience performing open source research on a variety of topics
• Excellent verbal/non-verbal communication skills with proficient ability to deliver technical information to non-technical staff
  
  
  

• Seniority level Mid-Senior level

• Employment type Full-time

• Job function Information Technology
• Industries IT Services and IT Consulting

Referrals increase your chances of interviewing at Oracle by 2x

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.