# Cybersecurity Operations Specialist at GovTech Singapore

GovTech Singapore is hiring a Cybersecurity Operations Specialist in Singapore, Singapore. Level rates it Little AI ●○○○; you can [apply on GovTech Singapore](https://jobsbylevel.com/go/92a8dd3b-5d84-4865-acf9-30a481bad05b?utm_medium=ai-agent).

AI Level 1, AI centrality 0 out of 100. Singapore.

## Details

- Company: [GovTech Singapore](https://jobsbylevel.com/companies/govtech-singapore)
- AI level: AI Level 1 (score 0 out of 100)
- Location: Singapore
- Posted: November 11, 2026
- Apply: https://jobsbylevel.com/go/92a8dd3b-5d84-4865-acf9-30a481bad05b?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=cybersecurity-operations-specialist-at-govtech-singapore-dac0a9

## Prepare for this job

The job page lists 5 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/cybersecurity-operations-specialist-at-govtech-singapore-dac0a9

## Description

GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity. At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round. Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today! Learn more about GovTech at tech.gov.sg. This role is intended for a hands-on security operations practitioner. Candidates should be comfortable investigating real technical evidence, working with engineers and service owners, and taking ownership of findings through to closure. Experience in a traditional security operations centre is useful but is not the only relevant background. Job Description Key responsibilities · Monitor and investigate security alerts, suspicious activity, vulnerabilities and incidents across cloud, SaaS, application and infrastructure environments. · Triage security findings, determine their relevance and severity, identify affected systems and coordinate practical remediation with product and platform teams. · Drive findings through the full lifecycle from detection to mitigation, evidence collection, risk acceptance where appropriate and formal closure. Maintain clear ownership, due dates and escalation paths. · Operate and improve attack-surface management, including asset discovery, domain and service exposure, stale or unmanaged assets, ownership tracking and remediation follow-up. · Manage vulnerability information from security scanners, cloud-security platforms and security alerts. Correlate duplicate findings and focus attention on exploitable attack paths and material risk. · Support the onboarding and validation of production security logs to central monitoring, including log-source selection, ingestion checks, parsing, coverage evidence and troubleshooting with product teams. · Operate and improve automated baseline and privileged-activity log review for required monitoring use cases. Tune rules and distinguish meaningful deviations from expected administrative or deployment activity. · Maintain the Datadog security information and event management (SIEM) platform, including log-source health, parsing, dashboards, alerting and coverage. Write and tune customised detection rules for GovTech-specific security use cases. · Develop and maintain detection logic, queries, dashboards and alert workflows for cloud and SaaS platforms. Reduce noise while preserving visibility of high-value security signals. · Support incident response by establishing timelines, collecting relevant evidence, coordinating containment and recovery actions, documenting decisions and confirming that follow-up actions address the underlying cause. · Build and maintain workflow automation for common incidents and recurring operational tasks, including alert enrichment, team notification, ticket creation, evidence gathering and status reporting. · Support insider-risk monitoring and related security investigations with appropriate confidentiality, evidence handling, escalation and coordination with relevant stakeholders. · Maintain operational runbooks, detection documentation, log-source inventories, incident records, lessons learned and metrics for response performance and recurring gaps. · Hands-on experience in security operations, incident response, detection engineering, cloud security, vulnerability management, attack-surface management or a closely related technical security area. Practical experience with Wiz and Tenable is required, or with directly

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/cybersecurity-operations-specialist-at-govtech-singapore-dac0a9

Source: https://jobsbylevel.com/jobs/cybersecurity-operations-specialist-at-govtech-singapore-dac0a9

## Cite this page

Level. https://jobsbylevel.com/jobs/cybersecurity-operations-specialist-at-govtech-singapore-dac0a9.

Get job alerts: https://jobsbylevel.com/newsletter