Full Time Senior IT Security Engineer (1-Year Renewable Contract) Jobs, in Evolution Singapore - Maukerja

Role Overview

We are looking for an experienced IT Security Engineer to strengthen enterprise cybersecurity across security operations, governance, infrastructure protection, and risk management. This role will be responsible for maintaining security controls, investigating potential threats, managing vulnerabilities, and working with internal teams and external partners to improve the organisation’s overall security posture.

Key Responsibilities

1. Security Governance & Compliance

• Develop and maintain information security policies, technical standards, procedures, and security baselines in line with industry best practices and regulatory requirements.
• Conduct regular security reviews and ensure compliance with security controls, system hardening standards, and CIS benchmarks.
• Support cybersecurity risk assessments, audits, third-party reviews, and remediation activities.
• Advise IT, application, infrastructure, and cloud teams on security best practices and security-by-design principles.
• Support personal data protection initiatives and security requirements relating to data privacy.

2. Security Operations & Incident Response

• Monitor security events, emerging threats, and the organisation’s overall cybersecurity posture.
• Investigate alerts using SIEM and other security monitoring platforms, conduct initial triage, and escalate critical incidents when necessary.
• Coordinate security incident response from investigation through containment, remediation, and closure.
• Monitor threat intelligence and vulnerability developments, providing relevant security advisories and patching recommendations.
• Improve security monitoring capabilities, detection rules, alert accuracy, and incident response procedures.

3. Vulnerability Management & Security Testing

• Coordinate vulnerability assessments, penetration testing, and security reviews across applications, networks, servers, endpoints, and cloud environments.
• Analyse findings, recommend remediation measures, and track corrective actions against agreed timelines.
• Conduct security and compliance checks on computing devices before they are connected to corporate networks.

4. Infrastructure, Endpoint & Access Security

• Configure, maintain, and optimise security tools to ensure effective integration with enterprise IT infrastructure.
• Implement and manage security controls across on-premises and cloud environments, covering networks, systems, endpoints, identities, and runtime environments.
• Manage endpoint protection solutions, including antivirus and EDR/XDR, as well as privileged access management (PAM) platforms such as CyberArk.
• Conduct periodic reviews of user accounts, privileged accounts, access permissions, access logs, and third-party service provider reports.
• Support secure network architecture, system hardening, access control, and infrastructure security monitoring.

5. Security Solutions & Vendor Management

• Identify opportunities to enhance security capabilities and collaborate with external vendors on the design, testing, deployment, and handover of cybersecurity solutions.
• Oversee third-party security service providers, review service performance and security reports, and ensure adherence to agreed security standards and SLAs.
• Coordinate the implementation, maintenance, testing, and monitoring of security technologies, including WAF, DDoS protection, SIEM, EDR/XDR, PAM, and vulnerability management tools.

6. Security Awareness & Reporting

• Deliver security awareness initiatives and training for employees and external service providers.
• Maintain documentation covering security policies, procedures, incidents, vulnerability assessments, and control reviews.
• Prepare regular reports on security incidents, vulnerability remediation, compliance, risk exposure, and mitigation progress.
• Work closely with internal IT teams, business stakeholders, cloud providers, and external partners on security initiatives.

Requirements

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related discipline.
• At least 5 years of relevant experience in cybersecurity, IT security operations, security controls, IT infrastructure security, or security auditing.
• Practical experience in security operations, vulnerability management, incident response, access control, and enterprise security technologies.

Technical Skills

• Hands-on experience with security technologies such as SIEM, WAF, antivirus, EDR/XDR, PAM, and vulnerability assessment tools.
• Strong understanding of threat analysis, incident response, vulnerability remediation, endpoint security, identity and access management, secure network design, and system hardening.
• Good knowledge of enterprise IT infrastructure, on-premises and cloud security, security logging, monitoring, and secure configuration standards.
• Familiarity with security frameworks such as ISO 27001, NIST CSF, and CIS benchmarks.
• Exposure to Microsoft Azure, AWS, or other cloud security environments is an advantage.
• Knowledge of scripting, automation, Infrastructure as Code (IaC) security, CI/CD security, or security orchestration is a plus.

Certifications

• CISSP, CISM, CISA, or equivalent cybersecurity certifications are preferred.
• Additional certifications such as CCSP, Microsoft Security/Azure Security, AWS Certified Security, or GIAC are advantageous.