Senior Cybersecurity Engineer

About the role

We are seeking a technically‑inclined cybersecurity trailblazer to strengthen our security posture and data governance. You will lead threat‑modelling, incident response, and data‑protection initiatives across the organisation.

Key responsibilities

• Lead threat‑modelling activities (e.g., STRIDE) using the MITRE ATT&CK framework to identify risks.
• Facilitate internal IT security compliance assessments and ensure proper implementation of requirements.
• Deliver security briefings and training for end‑users and administrators.
• Manage IT security projects and implementations.
• Monitor, analyse, investigate and resolve security incidents, including after‑hours response.
• Conduct post‑incident reviews and recommend technical and procedural improvements.
• Ensure timely response to security alerts and appropriate escalation.
• Develop and maintain data‑governance policies, standards and procedures.
• Maintain data classification, ownership, stewardship and accountability frameworks.
• Oversee data lifecycle management, from creation to secure disposal.
• Ensure compliance with organisational policies and data‑privacy regulations such as PDPA.
• Collaborate with business units to identify critical data assets and define governance requirements.

Required profile

• Relevant degree in Computer Science or related discipline.
• Professional certifications such as CISSP, CISA, CISM, CDPSE or CDMP.
• Strong understanding of cybersecurity principles, information‑security frameworks and data‑governance best practices.
• Familiarity with the MITRE ATT&CK framework and ability to map threats to controls.
• Knowledge of data‑privacy regulations, especially Singapore’s PDPA.

Required skills

• Threat modelling (STRIDE)
• MITRE ATT&CK framework
• Incident response
• Security monitoring
• Threat intelligence
• Data governance
• Data classification
• Data lifecycle management
• Compliance assessment