search Browse Jobs
Senior Security EngineerWebot · Singapore, Singapore
Webot logo

Webot

company page ↗

Senior Security Engineer

🗓️ Posted 2026-09-08 Singapore, Singapore Full-time Hybrid ICT
💰 Salary Not shared 📊 Market S$9,000–S$15,000/mo

About the Company

We are looking for a Workplace Security Engineer to design, implement, and continuously improve corporate security controls across identity, endpoint, network access (VPN/ZTNA), and data protection. You will be the technical owner for key security platforms and work with IT, Cloud, and Compliance teams to meet financial industry security requirements.

Responsibilities

  • ● Own secure identity architecture across Google Workspace and AWS IAM Identity Center :
  • ● Design group/role models, least privilege, and access governance processes.
  • ● Improve SSO posture (SAML/OAuth), session policies, MFA enforcement, conditional access patterns where applicable.
  • ● Lead onboarding of new SaaS apps into SSO and define standard patterns (SAML attributes, role mapping, break-glass access).
  • ● Own and optimize enterprise remote access and ZTNA/SASE through: Prisma Access / GlobalProtect; Prisma ZTNA / Prisma SASE; Google BeyondCorp (where applicable)
  • ● Work with network teams on policy design, segmentation, and logging requirements.
  • ● Define and enforce endpoint security baselines and compliance through: Jamf Pro + Apple Business Manager; Google Endpoint Management; Palo Alto Cortex XDR
  • ● Drive improvements in device posture: encryption, OS baseline, EDR coverage, hardening, local admin controls.
  • ● Design and tune data protection controls through: Google Workspace DLP, Prisma Cloud DLP
  • ● Define data classification patterns, DLP rules/exception workflows, and measurable reduction in risky exfiltration events.
  • ● Own vulnerability scanning results triage, risk rating, remediation tracking, and verification.
  • ● Define patch SLAs, exception workflows, and reporting; coordinate with IT/Ops/R&D teams (execution may be performed by owning teams).
  • ● Improve alerting quality and detection coverage across IAM/endpoint/network/DLP telemetry.
  • ● Lead investigations for escalated incidents, produce incident reports and post-incident improvements (runbooks, control changes).
  • ● Design, develop, and maintain custom security tools, scripts, and API integrations to bridge gaps between disparate security platforms.
  • ● Automate routine engineering tasks, compliance checks, and incident response workflows using SOAR tools or custom code (Python/Go).
  • ● Build security standards, runbooks, and audit evidence pipelines for access control, remote access, endpoint protection, and DLP.

Requirements

  • ● 5+ years in security engineering / IT security with strong hands-on implementation experience.
  • ● - Proficient in at least one programming/scripting language (Python, Go, or PowerShell/Bash) with a track record of building tools or automation.
  • ● Solid understanding of RESTful APIs, JSON/YAML processing, and version control systems (Git).
  • ● Experience with Infrastructure as Code (Terraform) applied to security architecture is a strong plus.
  • ● Deep experience in at least two of the following:
  • ● Scripting/automation (Python, Bash), IaC mindset, good operational excellence.
  • ● Relevant certs: Palo Alto (PCNSA/PCNSE), Jamf certs, Google Workspace admin, AWS security.