Cybersecurity Engineer

Role Overview

We are seeking a hands-on Cybersecurity Engineer to strengthen enterprise security controls, manage security risks and enhance incident response capabilities across IT infrastructure, endpoints, identities and business applications.

The successful candidate will be responsible for identifying security vulnerabilities, investigating incidents, coordinating remediation activities and ensuring that security controls are effectively implemented and maintained.

Working closely with infrastructure, application, business and external technology teams, the role will also support secure system integrations, data protection initiatives and the safe adoption of emerging technologies, including AI-enabled business applications.

Key Responsibilities

1. Security Operations & Incident Response

·     Maintain and monitor endpoint, identity and network security controls, ensuring appropriate coverage, configurations and protection measures.

·     Investigate security alerts, assess potential threats, preserve relevant evidence and coordinate containment and recovery activities.

·     Maintain incident response procedures, escalation contacts and investigation records.

·     Conduct incident response exercises and ensure corrective actions are implemented.

·     Coordinate with external security monitoring providers and specialists to support threat detection and incident resolution.

2. Vulnerability & Security Configuration Management

·     Maintain an inventory of IT assets, system vulnerabilities and security exposures in collaboration with relevant system owners.

·     Conduct vulnerability assessments and coordinate external Vulnerability Assessment and Penetration Testing (VAPT) exercises.

·     Evaluate security findings, prioritise remediation activities and monitor closure through validation and retesting.

·     Review access permissions, privileged accounts, remote administration, network segmentation and firewall configurations.

·     Maintain records of approved security exceptions and alternative risk mitigation measures.

3. Application & Integration Security

·     Review system changes and application integrations to ensure appropriate authentication, authorisation, data protection, logging and secure deployment practices.

·     Work with ERP and application teams to address legacy system vulnerabilities and improve application security.

·     Review service accounts, third-party connectivity, sensitive data transfers and API security configurations.

·     Support developers and application owners in implementing practical security improvements.

4. IT Governance, Risk & Compliance

·     Maintain security documentation, risk registers, remediation trackers and control evidence for management reporting and audit purposes.

·     Support the implementation of personal data protection requirements in collaboration with relevant internal stakeholders.

·     Assist with technical assessments of supplier security arrangements, access controls and data handling practices.

·     Coordinate security awareness initiatives and phishing simulations to strengthen employee awareness.

·     Support improvements to payment verification and protection against impersonation or fraudulent requests.

·     Assess security risks associated with AI applications and integrations, including data exposure, access permissions, third-party risks and human approval controls.

·     Work with infrastructure teams to review backup protection, recovery procedures and disaster recovery readiness.

5. Stakeholder & Supplier Coordination

·     Collaborate with IT infrastructure, ERP, application development and business teams to implement security improvements.

·     Coordinate with external security vendors, managed service providers and technology partners.

·     Provide technical recommendations and escalate significant security risks to IT leadership.

·     Prepare clear incident reports, security updates and remediation progress reports for management review.

Key Requirements

Education & Experience

·     Degree or Diploma in Cybersecurity, Information Technology, Computer Science, Information Systems or a related discipline.

·     Approximately 5 years of relevant experience in cybersecurity, information security or security engineering, or equivalent demonstrated practical capability.

·     Hands-on experience managing security controls within a corporate or enterprise IT environment.

·     Experience investigating security incidents, managing vulnerabilities and implementing security remediation.

·     Ability to work independently while coordinating effectively with regional teams, suppliers and internal stakeholders.

Technical Skills

·     Practical knowledge of Windows and Linux security administration.

·     Understanding of TCP/IP networking, firewalls, VPNs and remote access security.

·     Experience with identity and access management, privileged access management and endpoint protection.

·     Familiarity with centralised logging, security monitoring and incident response processes.

·     Knowledge of web application security, API integrations, authentication, authorisation and secure credential management.

Preferred Experience

·     Experience in distribution, logistics, manufacturing or other transaction-intensive business environments.

·     Familiarity with enterprise applications such as SAP, warehouse management systems and customer-facing platforms.

·     Experience managing application security during system upgrades and technology transformation projects.

·     Exposure to Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), managed security services and vulnerability management tools.

·     Basic scripting knowledge in PowerShell or Python.

·     Exposure to cloud security and secure AI application integrations.

·     Relevant certifications such as Security+, GSEC, GCIH, SSCP or equivalent vendor security certifications.

·     Experience coordinating vulnerability assessments, penetration testing and remediation activities.

·     Understanding of backup security, recovery controls and business continuity requirements.

·     Familiarity with Singapore's Personal Data Protection Act (PDPA) and enterprise IT governance requirements.

Personal Attributes

·     Strong analytical and problem-solving capabilities with a practical approach to cybersecurity challenges.

·     Hands-on and proactive, with a strong sense of ownership and accountability.

·     Able to communicate technical security matters clearly to both technical and non-technical stakeholders.

·     Organised and detail-oriented, particularly in maintaining documentation and audit evidence.

·     Comfortable working across multiple teams, business functions and external service providers.

·     Able to balance security requirements with operational and business needs.