Company Description
StrongKeep is a Singapore-based cybersecurity startup reinventing how smaller businesses achieve security and compliance. We build an affordable, automated cybersecurity SaaS platform that integrates best-in-class open-source tools, smart defaults, and AI-driven automation so small teams can achieve enterprise-grade protection. We have a very strong team culture, and we are very selective over who gets to join us.
Role Description
This full-time, on-site Cybersecurity Engineer role spans software engineering, open-source tooling, and applied cybersecurity. You will help design, implement, and scale StrongKeep's security automation platform. The ideal candidate is a software engineer with a strong technical grounding in cybersecurity domains and hands-on experience evaluating, integrating, and extending open-source security tools, or a cybersecurity engineer with strong software development experience.
A strong interest in AI (LLMs, GenAI, agentic workflows) is expected, as the role will evolve toward embedding intelligence and automation into our security features.
You will work closely with a locally-based multi-disciplinary team with other engineers, a designer, a PM, taking ownership of assigned modules while being mentored by the senior developer.
Key Responsibilities
Open-Source Tooling & Security Automation
- Identify, evaluate, integrate, and maintain open-source cybersecurity tools (e.g., scanners, log collectors, agents, DAST/SAST tools).
- Automate tool operations and workflows using scripts, APIs, or agentic AI patterns.
- Enhance existing tools with GenAI (e.g., summarisation, correlation, triage assistance).
Software Development
- Design and build secure, scalable backend and frontend components across our stack.
- Develop APIs, services, and integrations with internal systems and external third-party platforms.
- Maintain high code quality through testing, documentation, and secure coding practices.
Collaboration & Delivery
- Work with product managers, designers, and engineers to deliver features in a fast-paced startup environment.
- Participate in code reviews, sprints, and daily standups.
- Troubleshoot issues and improve system reliability and performance.
Learning & Innovation
- Stay current with emerging cyber, AI, and automation technologies.
- Experiment with agentic AI workflows and contribute ideas to improve security outcomes for SMB users.
Qualifications
Technical Skills
- Strong grounding in SOC Development or Operations and at least one other cybersecurity domain (network security, application security, cloud security, incident response, vulnerability management, or security compliance).
- Experience (in a professional or non-work context) identifying, deploying, or integrating open-source cybersecurity tools (e.g., Wazuh, OpenVAS, CloudGrappler, OSINT feeds, etc.).
- Experience with TypeScript/Node.js, React/Next.js, and Python.
- Familiarity with NoSQL databases (e.g., MongoDB) and SQL databases.
- Knowledge of REST API design and integration.
- Experience with cloud platforms (e.g., AWS, Google Cloud and/or Azure.)
- Understanding of secure coding principles and software engineering best practices.
- Bonus: Basic familiarity with LLMs or AI tooling, and willingness to learn fast.
Soft Skills
- Strong analytical, troubleshooting, and communication abilities.
- Comfortable working in a collaborative, iterative startup environment.
- Self-directed learner who enjoys experimenting with new tools and techniques.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience / certifications.
- 35 years of relevant experience.
