IT Security Officer (ITSO) - A26185 at Activate Interactive Pte Ltd

Singapore, , Singapore -

Full Time

Start Date

Immediate

Expiry Date

03 Sep, 26

Salary

0.0

Posted On

05 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Attack Surface Management, Vulnerability Scanning, Triage, Risk Prioritization, Remediation Workflow Management, Python, CVSS, Patch Management, Security Operations, IT Risk Management, Tenable, Qualys, Censys, Analytical Skills, Technical Communication, Interpersonal Skills

Industry

IT Services and IT Consulting

Description

Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency. We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation. We are searching for our next team members to join our growing team. If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you. This is a 12 months fixed term contract role. What will you do? In this role, you will help ensure that vulnerabilities and exposures across our environment are identified, validated, and remediated in a timely manner. You will work closely with system owners and report findings, helping to keep our risk posture visible and well-managed. Job Scope Attack Surface Monitoring, Vulnerability Scanning, and Triage Monitor and triage findings surfaced by our Attack Surface Management (ASM) and Vulnerability Management tools Assess each finding for validity, severity, and exploitability before escalating or acting on it Distinguish genuine exposures from false positives and contextualise findings against our asset inventory Prioritize remediation efforts based on risk Remediation Workflow Management Work with system owners to follow up on outstanding findings Track remediation progress and ensure findings are resolved in a timely manner Manage exceptions and risk acceptance where remediation is not immediately feasible Communicate clearly with non-technical stakeholders, translating technical findings into actionable guidance Reporting & Insights Consolidate vulnerability data and remediation metrics for reporting Identify trends and surface systemic issues across the organisation's attack surface and internal asset landscape Provide recommendations to improve our overall exposure management programme Process Improvement Contribute to the refinement of ASM and vulnerability management processes, tooling configurations, and escalation playbooks over time Support the development and maintenance of vulnerability management policies, standards, and procedures in alignment with industry best practices Prerequisites Bachelor’s Degree in Computer Science/Information Security or equivalent Professional certifications, including GWEB, OSCP, CRISC, CISA or other relevant certifications will be preferred Preferably 5 years of experience in a relevant cybersecurity function, such as vulnerability management, attack surface management, security operations, or IT risk Strong understanding of cybersecurity concepts, particularly around vulnerability management, patch management, common vulnerability scoring frameworks (eg CVSS), and external-facing attack surface risks Familiarity with ASM or vulnerability management tools (such as Tenable, Qualys, Censys, or similar) Proficiency in programming languages such as Python will be advantageous Strong analytical and judgement skills, with the ability to think critically and make sound recommendations Good communication and interpersonal skills, with the ability to multitask, prioritise, and translate technical findings Meticulous, with a high degree of integrity, initiative, and energy What do we offer in return? Fun working environment Employee Wellness Program To work in Singapore Government Agencies projects We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”) Why you'll love working with us? If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success. Does it sound like something you are interested in exploring further? Please be in touch with our team for an initial chat at careers@activate.sg Activate Interactive Singapore is an equal opportunity employer. Employment decisions will be based on merit, qualifications and abilities. Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, color, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law. Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd. Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes. Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.

Responsibilities

The role focuses on identifying, validating, and remediating vulnerabilities and exposures across the organization's environment. This includes monitoring attack surfaces, managing remediation workflows with system owners, and providing reporting and insights to improve the exposure management program.