Overview
On behalf of our client, we are looking for a qualified Cybersecurity Engineer/ Consultant to join their team.
The successful hire will lead security monitoring, vulnerability management, and incident response, and supports governance, risk assessments, audits, and regulatory compliance by ensuring policies, controls, and evidence are properly maintained.
Responsibilities
- Conduct security assessments, identify risks and gaps, and propose practical improvement plans.
- Support design, evaluation, and implementation of cybersecurity solutions
- Coordinate with various stakeholders and vendors to deliver cybersecurity projects on time and within scope.
- Stay updated on cybersecurity technologies, threats, and best practices to improve service quality.
- Lead security incident response, including escalation, investigation, containment, root‑cause analysis, and remediation, and produce clear post‑incident and audit‑ready reports.
- Provide security advisory and technical guidance to infrastructure, application, and business teams to ensure security is embedded into system design and operations.
Requirements
- Min. Bachelor's degree in Cybersecurity/ Computer Science/ IT related field.
- Around 4 years and above of experience in Cybersecurity engineering, IT Security Assessment or consulting
- Cybersecurity consulting background will be an advantageous
- Good knowledge on security frameworks (e.g ISO/IEC 27001, NIST Cybersecurity framework), risk management methodologies and latest top 10 OWASP vulnerabilities
- Experience in areas such as EDR, SASE, Zero Trust, endpoint security, network security, cloud security, vulnerability management, or security governance.
- Hands‑on knowledge of cybersecurity technologies, including EDR and NDR solutions, firewalls, vulnerability scanning tools (e.g. Nessus), email security, DLP, Microsoft Purview, IPS, web security controls, endpoint security, and secure network protocols.
- A strong team player with the ability to collaborate effectively with various stakeholders
- Advantageous to hold relevant certs ie. CRISC, CISM, CISSP, CISA, Security+, CySA+, GIAC, Microsoft Security, AWS Security, AzureSecurity etc.
