Job Description

About the team: The Infrastructure & Security team is the backbone of our platforms and services. Our Infrastructure & Security team is responsible for ensuring day to day operations, supporting and securing our large scale and highly critical applications and availability of our platform and services.
About the role:

• Be responsible for the building and day-to-day running of the Cyber Defense team.
• Conduct security source code reviews and VA/PT (mobile, web, network).
• Implement and manage DevSecOps in DA CI/CD pipeline.
• Ensure timely remediation of vulnerabilities based on SLA.
• Lead security solutioning as part of DA\xe2\x80\x99s product development lifecycle, including threat modelling.
• Manage independent penetration testing activities conducted by external vendors.
• Drive DA\xe2\x80\x99s vulnerability disclosure program and ensure timely remediation of the findings.
• Lead Secure Coding Training for the technology group in DA.
• Conduct technical application security reviews, where required.
• Perform cyber security exercises across the DA group (e.g., red teaming)
• Able to communicate effectively with stakeholders (e.g., developers, wider tech team, partners).

About you:

• Degree or Cyber Security related qualifications.
• IT security related certifications such as OSCP, OSCE and CREST will be an advantage.
• 5+ years of experience in IT VAPT type work.
• Experience in conducting VAPT work with multi-cloud platforms (e.g., AWS, Azure, GCP)
• Experience working in a healthtech environment is an advantage.
• Strong interpersonal skills with good command of English, both written and spoken.
• Able to confidently lead technical discussions in assisting developers to remediate vulnerabilities.
• Strong desire to build a safe and secure environment for DA\xe2\x80\x99s staff, patients and partners while balancing the needs of the business.
• Good problem skills and ability to work in a fast-paced environment.
• A start-up attitude \xe2\x80\x93 highly collaborative with an entrepreneurial, roll-up-your sleeves attitude, pragmatic and able to work independently when required.
• Genuine curiosity and strong desire to continuously learn and grow
• Comfortable with ambiguity \xe2\x80\x93 we\xe2\x80\x99re a fast-growing business, and there\xe2\x80\x99s always unchartered territories, which is part of the fun. You should be comfortable with it and understand that not everything is 100% defined all the time.

About Doctor Anywhere Doctor Anywhere (DA) is on a mission to be the largest tech-enabled, omnichannel healthcare provider in Southeast Asia. First launched in Singapore in 2017, DA aims to bridge gaps in the healthcare ecosystem through developing innovative solutions and technologies. In 2021, DA raised SGD$88 million in Series C fundraising (August 2021) and acquired Doctor Raksa, the biggest telemedicine platform in Thailand which further strengthened our foundation for telehealth and healthcare offerings. Today, DA is present in Malaysia, Thailand, Philippines, Vietnam, Indonesia and India, serving more than 2.5 million (and growing) users across the region.
At DA, we believe in the value of innovation and collaboration. Grounded in our motto of \xe2\x80\x9cKeep Going, Keep Growing\xe2\x80\x9d, our team strives towards excellence every day, and values diversity in perspectives brought by every member. Together, we bring quality healthcare to your doorstep!