Cybersecurity Engineer (Architecture & Solutioning)

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of GovTech, is hiring multiple Cybersecurity Engineers (Architecture & Solutioning) in Singapore. The role suits someone familiar with cybersecurity domains such as Network Security or Device/Endpoint Management. It is a contract position until 30 November 2028, and a senior role may be offered depending on interview outcomes.

Key responsibilities

• Conduct cybersecurity architecture reviews, security design reviews and Threat Risk Assessments (TRAs) for new products, features, technology adoption and major system changes, recommending treatments and documenting residual risks.
• Perform threat modelling using methods such as STRIDE and frameworks such as MITRE ATT&CK to identify threats, attack paths and required controls.
• Act as cybersecurity subject matter expert for assigned products and services, and define security requirements, technical specifications and tender clauses.
• Drive security-by-design practices, including security patterns, guardrails, reference architectures and control requirements.
• Lead product, engineering and infrastructure teams in implementing controls across cloud, on-premises, application, container, microservices, database and network environments.
• Define, review and govern security assessments such as vulnerability assessments, penetration testing, source code reviews, hardening reviews and compliance assessments, and validate remediation plans.
• Evaluate new technologies through cybersecurity reviews, PoCs, lab testing and due diligence, and collaborate with government agencies, vendors and partners on risk-informed recommendations.
• Develop automation, reusable controls, workflows and engineering solutions, and contribute to improving security processes, standards, templates and playbooks.

Required profile

• At least 5 years of experience in the cybersecurity domain, with hands-on experience in architecture, security engineering, assessments or risk management.
• Experience with TRAs, threat modelling, vulnerability assessments, penetration testing and security architecture/design reviews.
• Experience deploying, managing or maintaining security technologies and working with cross-functional teams, vendors and contractors.
• Strong analytical, problem-solving, communication and stakeholder engagement skills, with the ability to turn complex technical issues into actionable recommendations.
• Professional certifications such as CISSP, CCSP, OSCP, AWS Security Specialty or Azure Security Engineer are advantageous.

Required skills

• Cybersecurity frameworks: secure system design, cloud security, Zero Trust, OWASP, MITRE ATT&CK
• DevOps, DevSecOps, Infrastructure as Code (IaC), container platforms, microservices, software-defined networking and public cloud services
• Advantageous: SSDLC, applied cryptography, PKI, HSMs, TLS and IPSec

What we offer

• Remuneration commensurate with qualifications and experience.
• Contract staff enjoy the same benefits as permanent employees.
• A learning culture within a wholly owned GovTech subsidiary.