Cybersecurity Engineer

Job Summary

The Security Operations Engineer is responsible for managing and maintaining the Authority's cybersecurity infrastructure, including endpoint protection, privileged access management, vulnerability assessment systems, and security monitoring tools. This role ensures the security posture of critical systems through proactive monitoring, incident response, system maintenance, and implementation of security enhancements across the organisation's technology stack.

In addition to core operational responsibilities, the Security Operations Engineer is expected to identify and implement opportunities to leverage AI tools and automation to improve operational effectiveness, reduce manual effort, and strengthen security outcomes. This includes automating repetitive security workflows, developing scripts and integrations to streamline privileged access and monitoring operations, and exploring AI-assisted approaches to alert triage, anomaly detection, and audit reporting.

Key Responsibilities

. Manage and maintain primary security systems including CyberArk PAM, Imperva DAM, Tripwire FIM and Trellix Endpoint DLP solutions.

. Execute security infrastructure projects including CIS hardening implementations, system migrations, and platform consolidations.

. Monitor and respond to security vulnerabilities and zero-day threats, implementing appropriate mitigation measures and patches.

. Support system upgrades and migrations across multiple platforms whilst ensuring minimal disruption to business operations

. Collaborate with cross-functional teams including EDP/USC for endpoint security tool deployments and updates.

. Maintain security compliance through regular system hardening, configuration management, and policy enforcement.

. Participate in disaster recovery planning and contribute to architectural planning for managed security tools in cloud environments.

. Provide technical documentation, standard operating procedures, and knowledge transfer to support team operations

. Respond to security incidents and provide after-hours support as required for critical security systems.

. Identify and implement opportunities to leverage AI tools and automation to streamline workflows, improve operational effectiveness.

Requirements

. Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.

. Minimum 3-5 years of hands-on experience in cybersecurity operations and security tool management.

. Proven experience with CyberArk PAM, Imperva DAM, Tripwire FIM and Trellix DLP is preferred.

. Knowledge of vulnerability management tools and processes (Tenable, Nessus)

. Understanding of enterprise security frameworks and compliance requirements.

. Experience with system administration on Windows and Linux platforms.

. Familiarity with security incident response procedures and methodologies.

. Demonstrated experience in Security Operation including the use of AI or automation tools to drive efficiency or improve outcomes.

Preferred Qualifications

. Master's degree in Cybersecurity or related advanced qualification.

. Professional certifications such as CyberArk Certified Delivery Engineer (CDE), CISSP, or equivalent security certifications.

. Experience with automation tools and scripting (Ansible, Python, PowerShell).

. Knowledge of cloud security platforms and hybrid infrastructure environments.

. Familiarity with SIEM tools and security monitoring platforms.

. Experience with Singapore Government security standards and compliance frameworks (IM8, CSA guidelines).

. Understanding of financial sector security requirements and regulations.

. Project management experience and ability to lead technical initiatives.

Responsibilities

. Security Infrastructure Modernisation: Supporting ongoing platform migrations, system upgrades, and integration projects to maintain current security technology stack.

. GDC Security Tool Setup/Migration: Contributing to the architectural planning and implementation of managed security tools in the Government Data Centre environment.

. Supporting SOC on security incidents investigation, analysis and recommending remediation measures.

. Collaborate with cross-functional teams to ensure security considerations are integrated into all aspects of IT operations and projects.

. Manage and optimise CyberArk Privileged Access Management (PAM) solutions to enhance security controls.

. Utilise Tenable vulnerability management tools to identify, assess, and mitigate security risks across the organisation.

. Drive new initiatives to improve operational efficiency through system integration, automation and enhancement of SOPs for CyberArk management.

. Support the Tripwire upgrade project in collaboration with vendor support teams.

. Spearhead the new datacentre CyberArk setup project, including architecture design and implementation.