Infrastructure & Security Engineer

About the role

This role covers the design and implementation of security architecture and operational security for technology environments, including DevSecOps, application and infrastructure security, access controls and application integration. It also involves managing IAM and SIEM capabilities, supporting security audits and leading the security setup of AI models and their infrastructure.

Key responsibilities

• Define security architecture blueprints covering DevSecOps, application security, infrastructure security, operational security, access controls and application integration, aligned with security policies and standards
• Plan and run vulnerability activities such as assessments, penetration testing, SAST, DAST, compliance checks and remediation
• Manage and support IAM and SIEM capabilities
• Drive remediation of security findings and support operational security tasks such as OS and application patching, hardening, housekeeping, archival, incident detection and reporting, and SSL certificate renewal
• Facilitate external security audits and assessments, coordinating evidence, technical inputs, remediation and stakeholder responses
• Lead the integration, setup, configuration and hardening of AI models and supporting infrastructure for project-wide AI use cases
• Collaborate with technical teams to maintain security controls across the application and infrastructure lifecycle

Required profile

• Strong knowledge of 3-tier technical architecture and enterprise application environments
• Hands-on experience in at least one or two security domains (IAM, risk management, application security, network security or vulnerability management)
• Experience administering Linux and/or Windows environments; Solaris familiarity is advantageous
• Preferred: familiarity with IM8 policy and Singapore Government security requirements, and experience with vulnerability management, SIEM, IAM, HSM, application testing and security monitoring tools

Required skills

• Knowledge of Singapore Government security requirements and assessments (SSAT, compliance checks, vulnerability scanning, SAST, DAST)
• Operational security processes: patching, hardening, vulnerability assessment, incident reporting, certificate management
• Enterprise security tools: IBM Security Verify Access, IBM QRadar, Thales HSM, OpenSSL, Tenable Nessus, Burp Suite Enterprise, Splunk