IT Security Engineer - #1161280

Role:

• The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both the following:

• Day 1 Security (Build / Project Implementation)

• Day 2 Security (Operations / Production Support)

• This role will work closely with security leads, infra, system, and software teams to ensure compliance with government security policies and standards.

Responsibilities:

• Support the implementation of security controls based on approved security designs and standards.

• Assist with security hardening for operating systems, servers, middleware, databases, containers and platform components.

• Help identify, track and close vulnerabilities across project and production environments.

• Support vulnerability assessments, penetration testing activities and remediation follow-up.

• Assist with security compliance activities, including documentation, audit evidence and security readiness checks.

• Monitor security alerts and logs, and support investigation of security issues.

• Support access control activities, including RBAC, MFA, privileged access and user access reviews.

Required Skills:

• 2 years of experience in cybersecurity, infrastructure security, security operations, system security, DevSecOps or related areas.

• Practical exposure to security implementation, security operations or production support environments.

• Experience in at least some of the following areas: security hardening, vulnerability management, patch remediation, IAM or access control, RBAC, MFA or privileged access, SIEM monitoring or log analysis, incident investigation support, and security documentation or audit evidence.

• Familiarity with Singapore government security policies such as IM8 or WOG security requirements will be highly preferred.

• Exposure to Kubernetes, Docker, CI/CD security, SAST, DAST, SCA, container scanning, API security or cloud security would be useful.