Cyber Security Consultant

Job Summary

We are seeking a highly skilled and motivated Senior ICT Infrastructure Engineer (cyber security tools related) to join our cybersecurity operations team. The ideal candidate will play a key rolein maintaining our organisation's technology stack. The role involves focusing on security and compliance, operational efficiency, and service excellence - keeping organisation cyber safe.

Key Responsibilities

This role ensures the security posture of critical systems through proactive monitoring, incident response, system maintenance, and implementation of security enhancements across the organisation's technology stack.

Be part of a team that is responsible for managing and maintaining the cyber security operations of organisation:

. Lead Vulnerability Management (VM) of assigned cyber security tools, including proactive monitoring of vulnerabilities, planning remediation schedules, adhering to vulnerability deadlines and seeking deviations via Risk Assessment (RA).

. Lead security compliance through regular system hardening, configuration management, and policy enforcement.

. Lead IT lifecycle management.

. Ensure timely and successful updates and upgrades whilst ensuring minimal disruption to business operations.

. Plan downtime and collaborate with cross-functional teams for system updates and upgrades.

. Support regular audits and perform remediation actions.

. Work closely with vendors.

. Provide operations support, in a multi-vendor network including Critical Information Infrastructure (CII).

. Participate in Disaster Recovery (DR) exercise and contribute to architectural planning for managed security tools in cloud environments.

. Manage tool setups and migrations.

. Create, maintain and review technical documentation, Standard Operating Procedures (SOP) as part of Knowledge Management (KM).

. Drive efficiencies through automation.

. Proactive documentation as part of Knowledge Management (KM).

. Occasionally provide after-hours support including weekends as required.

What we are looking for

Requirements

. Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.

. Minimum 5 years of hands-on experience in cybersecurity operations and security tool management.

. Excellent knowledge and proven hands-on ability in operating Privileged Access Management (PAM) tools such as CyberArk.

. Good vendor management skills.

. Good written and verbal communication skills with demonstrated ability to influence and communicate effectively with non-technical audiences including management.

. Applicants are expected to manage work in fast-paced environments, across heterogeneous networks including cloud environments, some of which are Critical Information Infrastructure (CII).

. CyberArk CDE is a mandatory requirement for this role. Candidates who do not have the CDE are advised not to apply.

Preferred Qualifications, Knowledge and Experience

. Proven ability to manage and maintain cyber security operations.

. Good fundamental knowledge and familiarity with Security Incident Event Management (SIEM) and Vulnerability Management (VM) tools including Splunk and Nessus (by Tenable), respectively.

. Experience with automation tools and scripting (Ansible, Python, PowerShell) to automate repetitive tasks.

. Experience with Singapore Government security standards and compliance frameworks (IM8, CSA guidelines).

. Experience in harnessing AI solutions to continuously improve cyber security operations efficiency, including processes and service delivery, is advantageous.

. Experience in demonstrating AI literacy with the ability to use AI tools responsibly, ethically, and securely, ensuring compliance with organizational policies, data privacy, confidentiality, and governance requirements.

. Understanding of financial sector security requirements and regulations.

. Understanding in Identity and Access Management (IAM) concepts.