Full Time Senior Security Engineer Jobs, in ANEXT Bank - Maukerja

About ANEXT Bank

We’re on a mission to make financial services accessible and effortless for SMEs. As one of Singapore’s digital wholesale banks fully regulated by MAS, we’re committed to continuous innovation to bring about simpler, safer and more rewarding financial services. #bringingaboutwhatsnext

About the Role

The Security Engineer will support the CISO in executing day-to-day cybersecurity operations and contribute to the development, implementation, and governance of the Bank's cybersecurity policy framework. This role plays a critical part in maintaining the Bank's security posture, ensuring regulatory compliance, and enabling secure growth of digital banking services.

This is an individual contributor role who will utilise the experience in a regulator environment to navigate a fast-paced digital bank with evolving priorities.

Job Responsibilities

Security Operations (40%)

• Monitor and respond to security alerts, incidents, and threats across the Bank's infrastructure, applications, and cloud environments
• Conduct triage, investigation, and escalation of security incidents in coordination with the SOC and IT teams
• Maintain and tune security tools (SIEM, EDR, WAF, vulnerability scanners, etc.) for optimal detection and response
• Perform regular security assessments, vulnerability scans, and penetration test coordination
• Support incident response activities as part of the on-call rotation

Policy & Governance (30%)

• Assist in developing, reviewing, and updating cybersecurity policies, standards, and procedures aligned with regulatory requirements (e.g., MAS TRM, PDPA)
• Conduct policy compliance assessments and report gaps to the CISO
• Maintain documentation for audit and regulatory examinations
• Support risk assessment activities and maintain the risk register
• Coordinate with internal audit and external regulators during assessments

Security Architecture & Engineering (20%)

• Review and provide security input on new projects, system changes, and cloud deployments
• Implement security controls across network, endpoint, identity, and application layers
• Support secure configuration management and hardening initiatives (e.g., CIS Benchmarks)
• Evaluate and recommend security technologies to address emerging threats

Awareness & Collaboration (10%)

• Deliver security awareness training to staff on policies, threats, and best practices
• Collaborate with IT, DevOps, and business teams to embed security into processes
• Serve as a security point of contact for operational queries and escalations

Requirements

• Minimum 5 years of experience in cybersecurity with at least 2 years in a critical information infrastructure environment
• Relevant certifications (e.g., CISSP, CISM, CEH, GSEC, Security+, CCSP, OSCP)
• Must have experience in Security Operations and Policy & Governance
• Hands-on experience with security operations (SIEM, SOAR, incident response)
• Familiarity with cloud security and containerised environments
• Experience implementing and maintaining security policies in a regulated industry
• Knowledge of vulnerability management and patching processes
• Understanding of network security, identity & access management, and endpoint protection