Cybersecurity Engineer (Tenable, Trellix), Financial Services

Overview

Our client is a well-established organisation within the Financial Services sector, operating a large-scale, technology-driven environment with a strong focus on security, resilience, and regulatory compliance. They are seeking an experienced Principal Security Engineer to strengthen their cybersecurity capabilities and support the ongoing enhancement of enterprise security platforms.

Role

This is a senior hands-on engineering position responsible for the design, implementation, optimisation, and lifecycle management of enterprise security technologies across on-premises, cloud, and hybrid environments. A key focus will be on vulnerability management using Nessus Professional and enterprise anti-virus / endpoint protection using Trellix, alongside broader security technologies such as SIEM, SOAR, EDR/XDR, DLP, PAM, IAM, WAF, and IDS/IPS. The successful candidate will lead security solution deployments, manage remediation and platform upgrades, support critical incident response, conduct implementation testing, work closely with vendors and internal stakeholders, and provide technical guidance to other engineers.

Requirements

• At least 10 years of hands-on security engineering experience within complex enterprise environments, with strong experience implementing and operating cybersecurity platforms.
• Strong practical expertise in vulnerability management, particularly Nessus Professional, including vulnerability identification, remediation coordination, platform administration, and ongoing operational management.
• Hands-on experience managing enterprise anti-virus / endpoint security solutions, particularly Trellix, together with broader exposure to technologies such as EDR/XDR, SIEM, SOAR, DLP, PAM, IAM, WAF, and IDS/IPS.
• Minimum 5 years of cloud security experience, including security design and management of cloud-native services, preferably within AWS environments, complemented by solid networking, system hardening, Unix/Linux, and scripting knowledge.
• Proven ability to independently lead security technology implementations from POC through production rollout, troubleshoot complex issues, engage vendors and cross-functional teams, and support security incidents, audit, risk, and regulatory requirements. Relevant security and cloud certifications would be advantageous.

To Apply

Interested candidates, please submit your resume to Grace Lim at [Confidential Information]. We regret to inform that only successful shortlisted candidates will be notified. License No: 16S8060 Registration no: R1988923