Cybersecurity Engineer – Security Operations & Vulnerability Management

Location: Chai Chee, Singapore
Employment term: 12-month renewable contract
Working arrangement: Five-day work week
Salary: SGD 6,000–8,000 per month, depending on experience
Reporting to: Senior Manager, Cyber Security & IT Governance

About the Role

We are seeking a hands-on Cybersecurity Engineer to strengthen and continuously improve our organisation’s cybersecurity posture.

You will support security monitoring, incident response, vulnerability management and the operation of security controls across on-premises and cloud environments. You will work closely with our MSSP, internal IT teams, technology vendors and business stakeholders to investigate threats, remediate vulnerabilities and protect critical systems and information assets.

Candidates are not expected to have experience with every technology listed. Strong cybersecurity fundamentals and practical experience across security operations, incident response and vulnerability management are most important.

Key Responsibilities

• Monitor, investigate and respond to cybersecurity alerts and incidents using SIEM, EDR and other security platforms.
• Perform threat analysis and coordinate incident containment, remediation, root-cause analysis and recovery.
• Work with the MSSP, vendors and internal teams throughout the incident lifecycle.
• Manage vulnerability, exposure and attack-surface remediation activities.
• Track identified vulnerabilities and coordinate timely remediation with system owners.
• Support vulnerability assessments, penetration testing and remediation validation.
• Administer and support endpoint, network, identity, application and cloud-security technologies.
• Support security controls across on-premises, AWS, Azure or OCI environments.
• Contribute to endpoint security, identity security, network security and Zero Trust initiatives.
• Review security alerts, threat intelligence and industry trends to recommend control improvements.
• Support cybersecurity governance, risk assessments, compliance reviews and audits.
• Assist with ISO 27001, Cyber Trust Mark, IMDA TCS Code or similar cybersecurity requirements.
• Evaluate new cybersecurity and AI-security technologies where relevant.
• Coordinate security vendors and ensure services and remediation activities are delivered within agreed timelines.
• Prepare incident reports, vulnerability updates, security documentation and management summaries.

Requirements

• Degree or diploma in Cybersecurity, Information Technology, Computer Science or a related discipline.
• Approximately three to five years of relevant experience in cybersecurity operations, security engineering, incident response or a Security Operations Centre.
• Hands-on experience investigating security alerts and coordinating cybersecurity incidents.
• Practical experience with vulnerability scanning, prioritisation and remediation.
• Good understanding of endpoint, network, identity and cloud-security principles.
• Familiarity with cybersecurity frameworks, risk management and incident-response processes.
• Experience working with an MSSP, technology vendors or cross-functional IT teams.
• Ability to communicate technical risks and recommendations clearly to technical and non-technical stakeholders.
• Strong analytical, troubleshooting and documentation skills.

Relevant Technical Experience

Candidates should have hands-on experience with several of the following technologies or comparable enterprise-security platforms:

SIEM and Endpoint Security

• CrowdStrike Falcon or CrowdStrike Next-Gen SIEM
• Microsoft Defender
• Other enterprise SIEM, EDR or XDR platforms

Vulnerability and Exposure Management

• Tenable One or Tenable Nessus
• Cymulate or other breach-and-attack simulation platforms
• Qualys or comparable vulnerability-management tools

Network and Application Security

• Palo Alto Networks firewalls
• Zscaler
• Vectra NDR
• Forescout NAC
• Imperva WAF

Identity and Data Security

• CyberArk PAM
• Microsoft Entra ID
• IAM, PAM and MFA controls
• Proofpoint, Microsoft Purview, DLP or CASB

Cloud Security

• AWS, Microsoft Azure or Oracle Cloud Infrastructure

Experience with every product is not mandatory. Candidates with strong transferable experience across SIEM, EDR, vulnerability management, incident response and security engineering are encouraged to apply.

Preferred Qualifications

• Relevant certifications such as Security+, CEH, GCIH, CISSP, CISM, CCSP or equivalent.
• Experience supporting ISO 27001, Cyber Trust Mark, IMDA TCS Code or similar standards.
• Experience working in a regulated, telecommunications, critical-infrastructure or enterprise environment.
• Experience supporting security automation or continuous control-improvement initiatives.

Core Competencies

• Incident investigation and threat analysis
• Analytical thinking and problem-solving
• Clear communication and stakeholder management
• Vendor and MSSP coordination
• Attention to detail and high integrity
• Ability to work independently and collaboratively
• Commitment to continuous learning and improvement