Information Technology Security Engineer

🗓️ Posted 2026-08-14 Singapore Permanent ICT

Company shared salary

NA

Market rate

NA

Based on similar roles (title + domain + location).

About the Company

We are looking for an IT Security Engineer to support cybersecurity across both project implementation (Day 1) and production operations (Day 2) for mission-critical systems. You will work closely with Security Leads, infrastructure, system and software teams to identify vulnerabilities, monitor security posture, support remediation, and ensure compliance with government security requirements.

Responsibilities

  • Perform vulnerability assessments , security reviews and risk analysis across applications and infrastructure.
  • Monitor security alerts, vulnerabilities and compliance status, and coordinate remediation with technical teams.
  • Support security implementation and hardening across operating systems, applications, middleware, containers and infrastructure.
  • Support security testing activities including VA/PT, SAST/DAST and vulnerability scanning , tracking findings through closure.
  • Assist with security incident investigation, log analysis, root cause analysis and remediation.
  • Support IAM and access control activities including RBAC, MFA, PAM and access reviews .
  • Prepare security dashboards, vulnerability reports, compliance metrics and management updates.
  • Maintain security documentation and support audits, risk assessments and government security compliance activities.

Requirements

  • Singapore Citizen with a Degree/Diploma in Cybersecurity, Computer Science, IT or related discipline.
  • -5 years of experience in cybersecurity, infrastructure security or security operations.
  • Hands-on experience with vulnerability assessment, remediation tracking and security monitoring .
  • Good understanding of infrastructure, network, application and access security concepts.
  • Familiarity with Singapore Government security requirements, including IM8 , is advantageous.
  • Exposure to DevSecOps, containers, IAM, SIEM or CI/CD security is beneficial; no specific security tool expertise is required .
  • Strong analytical, reporting and communication skills with the ability to work across technical and business teams. Certifications such as Security+, CEH, CISSP Associate, GIAC or equivalent are advantageous.