Principal Security Engineer

About the role

The NETS Group, a payments services group behind Singapore's national debit scheme, is hiring a Principal Security Engineer in Braddell. The role helps design, implement and maintain security tools that form a layered defence against cyber threats, working closely with security operations, IT and risk teams to deploy and optimise tools, develop policies and improve detection and response.

Key responsibilities

• Design, implement and maintain enterprise security technologies such as SIEM, SOAR, EDR/XDR, anti-virus, vulnerability management, DLP, PAM, IAM, WAF and IDS/IPS.
• Lead security solution design and implementation across on-premises, cloud and hybrid environments, aligned with security architecture and compliance requirements.
• Manage and harden security platforms, keeping them compliant with organisational standards and regulations.
• Own the lifecycle of security tools, including upgrades, patching and vulnerability remediation.
• Lead incident response for critical incidents such as zero-day vulnerabilities, misconfigurations and breaches.
• Troubleshoot complex issues with vendors and service providers, and define and run UAT/SIT tests before production.
• Drive end-to-end implementation from proof-of-concept to full deployment, and run BAU and managed changes under ITSM processes.
• Maintain technical documentation (standards, runbooks, KOPs, architecture diagrams) and mentor engineers.
• Support audits, compliance and risk management, including evidence gathering and control validation.

Required profile

• Bachelor's degree in Computer Science, Computer Engineering, Information Security or a related field.
• At least 10 years of hands-on security engineering experience.
• At least 5 years of hands-on cloud security, including native security services on platforms such as AWS.
• Experience in complex enterprise environments and with cross-functional teams and vendors.
• Relevant certifications such as CISSP, GIAC, CEH, or cloud security certifications like AWS Security Specialty.

Required skills

• Strong knowledge of TCP/IP, firewalls, system hardening and secure architecture.
• Proficiency in Unix/Linux and scripting (Shell, Python).
• Experience rolling out security solutions and familiarity with APIs, scripting and orchestration.