IT Security Engineer

About the role

The IT Security Engineer will design, implement and operate security controls for mission‑critical systems in a secured environment. The role spans both initial build (Day 1) and ongoing production support (Day 2), working closely with Security Leads, infrastructure, system and software teams.

Key responsibilities

• Implement security architecture and controls as defined by security architects.
• Support compliance with IM8, Whole‑of‑Government policies and PDPA, and prepare security risk, vulnerability and penetration‑testing documentation.
• Integrate and maintain SAST, DAST, SCA and container‑scanning tools in CI/CD pipelines, and assist developers with remediation.
• Hardening of operating systems, middleware, databases, Kubernetes clusters and containers (RBAC, secrets, network policies).
• Coordinate and execute vulnerability assessments and penetration tests, track findings and ensure remediation.
• Respond to security incidents, perform log analysis, root‑cause analysis and work with SOC teams.
• Conduct regular vulnerability scans, manage patching and escalation of high‑risk issues.
• Monitor alerts from SIEM, tune detection rules and maintain comprehensive logging.
• Support audit preparation, evidence collection and remediation activities.

Required profile

• Professional‑level experience in implementing and operating security controls for critical systems.
• Proven ability to work with cross‑functional teams to ensure compliance with government security policies.
• Experience in both security project implementation and production security operations.

Required skills

• Security architecture and engineering
• Threat modelling and risk assessment
• IM8, Whole‑of‑Government (WOG) security policies, PDPA compliance
• SAST, DAST, SCA, container scanning tools
• CI/CD pipeline integration
• API security, OAuth2, mTLS
• Kubernetes hardening (RBAC, secrets, network policies)
• Operating system, middleware and database hardening
• Vulnerability assessment, penetration testing
• SIEM monitoring and alert tuning
• Incident response, log analysis, root‑cause analysis
• Patch management and vulnerability remediation
• Audit support and evidence collection