- Contribute to the design and implementation of an API security framework for international operations, creating models for abnormal behavior detection and access control to prevent unauthorized data access and API abuse
Collect and maintain technical control evidence for ISO 27001, SOC 2, MAS TRM-aligned reviews and other regulatory reviews, including access records, change records and vulnerability remediation records.
Identify suspicious behaviours, attack patterns, lateral movement indicators, privilege misuse, exposed services, anomalous access, and other signs of compromise.
Assist application teams in integrating application security testing into automated DevSecOps workflows (i.e., IDEs, code repositories, image registries, and CI/CD pipelines), including deployment and troubleshooting support.
In-house Team Leadership – Recruit, lead and develop in-house security and cleaning teams, fostering accountability, service excellence and continuous improvement.