Security Engineer

Job: Security Engineer

Duration:12 months (extendable)

We are seeking a Senior ICT Infrastructure Engineer (Cyber Security Tools) to join our Cyber Security Operations team. The role focuses on managing and enhancing the organisation's security technology stack, with a strong emphasis on Tenable Vulnerability & Compliance Management, security, automation, AI, and operational excellence.

Key Responsibilities

• Lead vulnerability and compliance management for assigned security tools.
• Administer and continuously improve Tenable One, Tenable Security Center, Nessus Scanners and Agents.
• Manage CIS Benchmark compliance, including Tenable Audit File development and maintenance.
• Lead system hardening, configuration management, upgrades, migrations and lifecycle management.
• Support audits, remediation, DR exercises and cloud security architecture.
• Manage vendors and provide operational support across multi-vendor and CII environments.
• Develop SOPs, technical documentation and knowledge-management materials.
• Use AI, Python, PowerShell, Ansible and Tenable APIs to automate repetitive tasks.
• Provide occasional after-hours/weekend support.

Requirements

• Bachelor's degree in Cybersecurity, IT, Computer Science or related field.
• 5+ years of cybersecurity operations/security tool management experience.
• 3+ years administering Tenable platforms, including Tenable One, Security Center and Nessus.
• 3+ years managing Nessus scans, agents, plugins, policies and vulnerability assessments.
• 3+ years developing and maintaining Tenable Audit Files for CIS Benchmark compliance.
• Hands-on experience with PAM tools such as CyberArk.
• Strong vendor management and communication skills.
• Experience working in fast-paced, heterogeneous and cloud environments, including CII.
• Mandatory: Tenable Security Center Specialist or equivalent certification.

Preferred

• Experience with Tenable Nessus and Palo Alto Prisma Cloud.
• Automation/scripting skills in Python, PowerShell and Ansible.
• Knowledge of Singapore Government standards such as IM8 and CSA guidelines.
• Understanding of financial-sector security requirements.
• Experience using AI responsibly to improve cybersecurity operations.
• Tenable Security Center Expert or equivalent certification.

Key AI & Automation Deliverables

• Develop AI-assisted processes for Tenable Audit File engineering, validation, testing and lifecycle management.
• Use AI to map CIS Benchmark changes and identify required compliance updates.
• Automate Tenable administration using APIs, Python, PowerShell and Ansible.
• Automate asset management, scanner health checks, scan configuration, compliance management, housekeeping and reporting.
• Develop proactive monitoring, diagnostics and troubleshooting automation.
• Maintain source control, documentation and testing for all automation.

Reduce manual effort, improve the reliability and consistency of Tenable operations, accelerate CIS compliance updates, and strengthen the organisation's overall cybersecurity engineering capability.