Cybersecurity Engineer – Security Operations & Vulnerability Management

Location: Chai Chee, Singapore

Employment term: 12-month renewable contract

Working arrangement: Five-day work week

Salary: SGD 6,000–8,000 per month, depending on experience

Reporting to: Senior Manager, Cyber Security & IT Governance

About the Role

We are seeking a hands-on Cybersecurity Engineer to strengthen and continuously improve our organisation's cybersecurity posture.

You will support security monitoring, incident response, vulnerability management and the operation of security controls across on-premises and cloud environments. You will work closely with our MSSP, internal IT teams, technology vendors and business stakeholders to investigate threats, remediate vulnerabilities and protect critical systems and information assets.

Candidates are not expected to have experience with every technology listed. Strong cybersecurity fundamentals and practical experience across security operations, incident response and vulnerability management are most important.

Key Responsibilities

Monitor, investigate and respond to cybersecurity alerts and incidents using SIEM, EDR and other security platforms.
Perform threat analysis and coordinate incident containment, remediation, root-cause analysis and recovery.
Work with the MSSP, vendors and internal teams throughout the incident lifecycle.
Manage vulnerability, exposure and attack-surface remediation activities.
Track identified vulnerabilities and coordinate timely remediation with system owners.
Support vulnerability assessments, penetration testing and remediation validation.
Administer and support endpoint, network, identity, application and cloud-security technologies.
Support security controls across on-premises, AWS, Azure or OCI environments.
Contribute to endpoint security, identity security, network security and Zero Trust initiatives.
Review security alerts, threat intelligence and industry trends to recommend control improvements.
Support cybersecurity governance, risk assessments, compliance reviews and audits.
Assist with ISO 27001, Cyber Trust Mark, IMDA TCS Code or similar cybersecurity requirements.
Evaluate new cybersecurity and AI-security technologies where relevant.
Coordinate security vendors and ensure services and remediation activities are delivered within agreed timelines.
Prepare incident reports, vulnerability updates, security documentation and management summaries.

Requirements

Degree or diploma in Cybersecurity, Information Technology, Computer Science or a related discipline.
Approximately three to five years of relevant experience in cybersecurity operations, security engineering, incident response or a Security Operations Centre.
Hands-on experience investigating security alerts and coordinating cybersecurity incidents.
Practical experience with vulnerability scanning, prioritisation and remediation.
Good understanding of endpoint, network, identity and cloud-security principles.
Familiarity with cybersecurity frameworks, risk management and incident-response processes.
Experience working with an MSSP, technology vendors or cross-functional IT teams.
Ability to communicate technical risks and recommendations clearly to technical and non-technical stakeholders.
Strong analytical, troubleshooting and documentation skills.

Relevant Technical Experience

Candidates should have hands-on experience with several of the following technologies or comparable enterprise-security platforms:

SIEM and Endpoint Security

CrowdStrike Falcon or CrowdStrike Next-Gen SIEM
Microsoft Defender
Other enterprise SIEM, EDR or XDR platforms

Vulnerability and Exposure Management

Tenable One or Tenable Nessus
Cymulate or other breach-and-attack simulation platforms
Qualys or comparable vulnerability-management tools

Network and Application Security

Palo Alto Networks firewalls
Zscaler
Vectra NDR
Forescout NAC
Imperva WAF

Identity and Data Security

CyberArk PAM
Microsoft Entra ID
IAM, PAM and MFA controls
Proofpoint, Microsoft Purview, DLP or CASB

Cloud Security

AWS, Microsoft Azure or Oracle Cloud Infrastructure

Experience with every product is not mandatory. Candidates with strong transferable experience across SIEM, EDR, vulnerability management, incident response and security engineering are encouraged to apply.

Preferred Qualifications

Relevant certifications such as Security+, CEH, GCIH, CISSP, CISM, CCSP or equivalent.
Experience supporting ISO 27001, Cyber Trust Mark, IMDA TCS Code or similar standards.
Experience working in a regulated, telecommunications, critical-infrastructure or enterprise environment.
Experience supporting security automation or continuous control-improvement initiatives.

Core Competencies

Incident investigation and threat analysis
Analytical thinking and problem-solving
Clear communication and stakeholder management
Vendor and MSSP coordination
Attention to detail and high integrity
Ability to work independently and collaboratively
Commitment to continuous learning and improvement

Due to hiring quota issue, successful incumbent should be Singapore citizen, or Singapore permanent resident.

Cybersecurity Engineer Security Operations & Vulnerability Management