Information Technology Security Engineer

About the role

We are seeking an IT Security Engineer to protect mission‑critical systems throughout their lifecycle, from initial project implementation (Day 1) to ongoing production operations (Day 2). You will collaborate with security leads, infrastructure, system and software teams to identify vulnerabilities, monitor the security posture, and ensure compliance with Singapore government security requirements.

Key responsibilities

• Perform vulnerability assessments, security reviews and risk analysis across applications and infrastructure.
• Monitor security alerts, vulnerabilities and compliance status, coordinating remediation with technical teams.
• Support security hardening for operating systems, applications, middleware, containers and infrastructure.
• Conduct security testing activities such as VA/PT, SAST/DAST and vulnerability scanning, tracking findings to closure.
• Assist in security incident investigations, log analysis, root‑cause analysis and remediation.
• Support IAM and access‑control processes including RBAC, MFA, PAM and periodic access reviews.
• Prepare security dashboards, vulnerability reports, compliance metrics and management updates.
• Maintain security documentation and support audits, risk assessments and government compliance activities.

Required profile

• Singapore citizen with a Degree or Diploma in Cybersecurity, Computer Science, IT or a related field.
• 2–5 years of experience in cybersecurity, infrastructure security or security operations.
• Hands‑on experience with vulnerability assessment, remediation tracking and security monitoring.
• Good understanding of infrastructure, network, application and access security concepts.
• Experience supporting security compliance, audits and risk assessments.
• Familiarity with Singapore Government security requirements (e.g., IM8) is a plus.
• Exposure to DevSecOps, containers, IAM, SIEM or CI/CD security is beneficial.
• Relevant certifications such as Security+, CEH, CISSP Associate or GIAC are advantageous.

Required skills

• Vulnerability assessment and penetration testing (VA/PT)
• SAST/DAST and vulnerability scanning
• Security monitoring and SIEM
• IAM, RBAC, MFA, PAM
• Containers and DevSecOps practices
• CI/CD security integration
• Security hardening for OS, middleware and applications
• Security dashboard and reporting tools