Cyber Platform Engineer

About the role

This Cyber Platform Engineer position covers the day-to-day operation and administration of enterprise cybersecurity platforms, including firewalls, EDR, PAM, DDoS protection and web application security. The role also supports security compliance, incident response, change management and backup and recovery.

Key responsibilities

• Manage and maintain NGFW, EDR, PAM, DDoS protection and web application security platforms, performing maintenance, health checks, upgrades, patching and configuration reviews.
• Monitor platform health, security events, logs and alerts, and coordinate with vendors and internal teams on troubleshooting and escalations.
• Administer firewall environments, including policy management, access control reviews, rule optimisation, backups and firmware patching.
• Administer EDR platforms, monitor sensor coverage and log collection, and support onboarding of new assets.
• Support DDoS protection and WAF platforms, including IP whitelisting/blacklisting, SSL certificate management and WAF policy administration.
• Administer PAM solutions, covering account onboarding/offboarding, password management, access reviews and session monitoring.
• Ensure compliance with internal policies, regulations and industry best practices, and support audits, assessments and change management (change reviews, risk assessments, implementation planning).
• Support incident investigation and response, including log analysis, forensic data collection, root cause analysis and incident reporting.
• Maintain backup and recovery procedures, verify backup integrity and support restoration testing.

Required profile

• Minimum 5 years of experience in cybersecurity engineering, security operations, infrastructure security or cyber platform administration.
• Minimum 2 years supporting Singapore Government, statutory boards, public sector agencies or highly regulated environments.
• Experience managing enterprise security platforms in production environments.
• Strong analytical, troubleshooting and incident management capabilities, and excellent communication and stakeholder management skills.

Required skills

• Enterprise networking: TCP/IP, VLANs, routing, NAT, DNS, network segmentation, traffic flow analysis.
• Firewall administration: Palo Alto Networks or equivalent NGFW.
• Endpoint security: Carbon Black, CrowdStrike, Microsoft Defender, SentinelOne or equivalent EDR.
• PAM: CyberArk or equivalent.
• DDoS and WAF platforms: Cloudflare, Akamai, F5, Imperva or similar.
• Security operations: log analysis, security monitoring, incident response, vulnerability management, security hardening.
• Linux (Red Hat preferred) and Windows Server.
• Preferred: CII or highly secure environment experience, air-gapped environments, PKI, cybersecurity audits and compliance frameworks.