Cybersecurity Engineer (VMS and Governance) - Multiple Headcounts

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of the Government Technology Agency (GovTech), is hiring multiple Cybersecurity Engineers who are familiar with Vulnerability Management Systems and Governance. Selected candidates will be offered direct contract employment until 30 November 2028.

Key responsibilities

• Develop and maintain cybersecurity standards, procedures, configurations and rulesets, identify security gaps and work with teams to implement improvements.
• Analyse and prioritise vulnerability findings from VMS and other scans, and work with system and service owners to remediate or mitigate them based on risk.
• Scope and manage cybersecurity assessments such as security hardening reviews, penetration testing, source code reviews and compliance assessments, and drive remediation of findings.
• Monitor vulnerabilities, advisories and patch releases, assess their risk using factors such as CVSS and exploitability, and recommend remediation.
• Assess threat intelligence and Indicators of Compromise (IOCs), coordinate IOC scanning and recommend follow-up actions.
• Validate operational readiness through security exercises and support incident response through triage, impact assessment, containment, remediation and escalation.
• Ensure cybersecurity logs and telemetry are onboarded to the Government Cybersecurity Operations Center (GCSOC) in a timely manner, and troubleshoot logging gaps.
• Engage stakeholders on findings and incidents, translating technical results into clear risks, priorities and recommendations.

Required profile

• More than 5 years of cybersecurity experience in one or more domains such as network security design, secure application development, cryptography, mobile management, cloud hosting, DevSecOps, etc.
• Knowledge of cyber security principles, operational security management, architecture and design, and security measures such as authentication and authorisation.
• Experience in risk assessment of system, network, application and cloud vulnerabilities and misconfigurations, and in conducting vulnerability assessments, penetration testing and remediation.
• Experience triaging alerts and potential threats before escalating to a higher-level responder.
• Good stakeholder management, presentation and writing skills, and experience working with cross-functional teams or contractors on security policies and standards.

Required skills

• Certifications such as SANS GCIH, CISSP, CISM or AWS cloud security are an added advantage.
• Knowledge of SIEM, VMS, CTEM, VA, GRC and cloud security toolsets.

What we offer

• A yearly training budget and an annual performance bonus.
• Contract staff enjoy the same benefits as permanent employees.