Jobs at Assurity Trusted Solutions Pte Ltd

Provides cybersecurity expertise for enterprise infrastructure, designing secure architectures, conducting penetration tests and vulnerability assessments, managing monitoring and access controls, responding to incidents, securing cloud environments, and ensuring compliance with CIS, NIST, and ISO 27001 standards. Advises infrastructure teams and stakeholders on security risks, remediation, and best practices.

Develop, document, test, and tune security detection rules and playbooks across SIEM, EDR, network, endpoint, and cloud environments. Analyze logs and alerts, reduce false positives, research government-targeting threats, and translate attacker TTPs into detection logic. Collaborate with analysts, incident responders, and security engineers to operationalize detections, integrate security tools, improve workflows, and automate detection processes.

Manage government bug bounty, vulnerability rewards, and vulnerability disclosure programmes. Responsibilities include planning programme runs, coordinating government agencies and security researchers, managing vendors and contracts, supporting vulnerability triage, procurement, reporting, stakeholder communications, and outreach. The role also drives process improvements and workflow automation using AI-assisted development and GovTech platforms.

Plan and execute risk-based IT, process, policy, and technical audits across government agencies. Lead stakeholder engagements through planning, fieldwork, reporting, response review, and follow-up. Evaluate ICT governance, cybersecurity, risk management, and controls against recognized frameworks. Develop risk-based remediation recommendations, assess root causes, validate corrective actions, and maintain audit findings in a central repository.

Manage end-to-end procurement and contract lifecycles for government technology and cybersecurity programs. Advise technical and business stakeholders, develop data-driven sourcing strategies, lead tenders and evaluations under government policies, and manage supplier relationships and contractual performance. The role requires strong communication, analytical, organizational, and problem-solving skills, along with technology interest and the ability to work independently in a fast-paced environment.

Leads governance, risk, and compliance as a second-line cybersecurity function across products and platforms. Owns Security Plan standards, evidence review, automated assurance checks, ICT audit workflows, policy lifecycles, audit coordination, and management reporting. Leads security education and awareness campaigns, including phishing simulations. Partners with product teams and senior stakeholders to improve controls, documentation, issue tracking, remediation, and risk-aware delivery practices.

Lead cybersecurity incident response across triage, investigation, containment, eradication, recovery, root cause analysis, log analysis, and digital forensics. Analyze endpoint, network, application, cloud, and mobile artifacts; perform malware analysis; develop incident response playbooks; support SOAR automation; monitor emerging threats; and communicate findings and recommendations to stakeholders through comprehensive post-incident reporting.

Design, build, secure, and operate highly available data centre networks, including leaf-spine fabrics, routing, switching, firewalls, load balancers, segmentation, and inter-data-centre connectivity. Troubleshoot mission-critical network issues, improve reliability, and manage capacity and performance. Develop Network-as-Code automation for provisioning, validation, testing, compliance, and drift detection. Apply telemetry, AI, and AIOps techniques while collaborating with cloud, compute, storage, cybersecurity, and application teams.

The role involves designing, implementing, managing cloud network infrastructures, configuring network devices, performing maintenance, and participating in procurement and audit processes.

Develop and maintain secure IAM backend services, APIs and automation integrating Microsoft Entra ID, Microsoft Graph and SailPoint. Build automated tests, CI/CD pipelines, and Java-based utilities when needed. Implement SSO/MFA/OAuth/OpenID Connect/SAML, produce technical documentation, and support access governance and identity lifecycle workflows.

This role involves designing and maintaining data pipelines, managing APIs, collaborating with teams, and ensuring data quality and governance.

Implement and automate CI/CD practices, provision and manage cloud and on-prem infrastructure, harden systems for security and compliance, manage production cloud services, develop deployment scripts, and maintain technical documentation.

Perform security-by-design assessments, risk assessments, and security architecture reviews. Scope and review security tests/audits, advise stakeholders on remediation, research emerging technology risks (5G, IoT, AI, Quantum), and help integrate and validate security tools and controls in line with Singapore government ICT policies and standards.

Provide GRC-focused cybersecurity consultancy and assurance: develop and operationalise security frameworks, review security architecture and policies, manage compliance audits and gap analyses against Singapore Government standards, produce security reporting, and support cybersecurity training and stakeholder engagement.

Maintain and optimize Nutanix HCI clusters and RHEL platforms for Day 2 operations: monitoring, patching, automation (Ansible/Bash), incident RCA, DR testing, capacity tuning, and collaboration with developers and security teams to ensure secure, stable enterprise infrastructure.

Design, integrate, deploy, and maintain secure OT/IoT systems spanning hardware, software, cloud platforms, and connected devices. Develop web and backend applications, integrate OT protocols and hardware interfaces, optimize cloud-native services, implement CI/CD and monitoring, protect data, support machine learning integration, improve user workflows, and maintain technical documentation. Collaborate with stakeholders on architecture, product roadmaps, governance, and tender evaluations.

Perform SecOps tasks including developing/maintaining security standards and rulesets, conducting exercises and incident triage, IOC scanning, vulnerability assessments and patch monitoring, risk assessment and remediation recommendations, and stakeholder reporting on security posture.

Build and automate AWS-based platform capabilities, CI/CD pipelines, and release automation to enable internal product teams. Collaborate with developers and security teams to improve deployment workflows, monitoring, and platform adoption; provide standby/production support as needed.

The Audit Manager oversees audits, applying threat intelligence, managing data quality, and developing audit methodologies while ensuring compliance and effectiveness in risk management and security measures.

Lead vulnerability assessment and penetration testing initiatives, manage customer engagements, produce documentation, mentor junior engineers, and enhance security practices.