Senior Security Engineer

About the role

We are seeking a highly motivated Senior Security Engineer to join the cybersecurity team of a fully regulated digital wholesale bank in Singapore. The role supports the CISO in daily security operations and helps shape the bank’s security policy framework, ensuring a strong security posture and regulatory compliance.

Key responsibilities

• Monitor and respond to security alerts, incidents and threats across infrastructure, applications and cloud environments.
• Conduct triage, investigation and escalation of incidents in coordination with SOC and IT teams.
• Maintain and tune security tools such as SIEM, EDR, WAF and vulnerability scanners.
• Perform regular security assessments, vulnerability scans and coordinate penetration testing.
• Participate in 24/7 on‑call incident response rotation.
• Develop, review and update cybersecurity policies, standards and procedures aligned with MAS regulations.
• Conduct policy compliance assessments and support audit and regulatory examinations.
• Provide security input on new projects, system changes and cloud deployments, and implement security controls across network, endpoint, identity and application layers.
• Deliver security awareness training and collaborate with IT, DevOps and business teams to embed security into processes.

Required profile

• Bachelor’s degree in Computer Science, Information Security or related field.
• 8+ years of experience in cybersecurity, including at least 2 years in a regulated financial services environment.
• Relevant certifications such as CISSP, CISM, CEH, GSEC, Security+, CCSP or OSCP.
• Hands‑on experience with security operations, incident response and security tooling.
• Strong knowledge of cloud and container security, vulnerability management and network security.

Required skills

• SIEM platforms
• SOAR solutions
• Endpoint Detection and Response (EDR)
• Web Application Firewalls (WAF)
• Vulnerability scanners
• Cloud security (AWS, Azure, GCP) and container security
• Vulnerability assessment and penetration testing coordination
• Network security concepts
• Identity and access management