Cyber Security Engineer

We are looking for a Cyber Security Engineer to protect the department's IT infrastructure, applications and project systems. You will be the main contact for cybersecurity matters within the department and on projects. You will work closely with Group IT, the Security Operations Centre (SOC) and business owners to keep systems secure and compliant throughout their lifecycle.

Key Responsibilities:

Security Governance & Compliance

• Act as the department and project point of contact for all cybersecurity queries, reviews and audits.
• Conduct Security Acceptance Tests (SAT) to verify compliance with IT security policies, and work with business owners to close any gaps.
• Support the preparation of security documentation, including risk assessments, security controls and audit evidence.

Security Operations & Engineering

• Review, implement and maintain rules and configurations on security appliances, for example:
• Firewall
• Intrusion Prevention System (IPS)
• Proxy
• Web Application Firewall (WAF)
• Network Access Control (NAC)
• Antivirus / Endpoint Protection
• Data Loss Prevention (DLP)
• Make sure these rules stay relevant and effective as systems change.
• Carry out periodic vulnerability assessments, track findings, and coordinate fixes with Group IT and the SOC through to closure.

Threat Awareness & Advisory

• Keep up to date with emerging cybersecurity threats and with current threat detection and protection techniques and use this knowledge to strengthen existing systems.
• Give technical advice and consultancy on secure design and implementation for new and existing projects.
• Develop and deliver cybersecurity awareness training for staff.

Requirements:

• At least 3 years of hands-on experience in infrastructure and application security.
• Sound knowledge of security principles, policies, frameworks and industry best practices.
• Practical experience configuring and managing network security appliances.
• Strong written and verbal communication skills, with the ability to explain technical risks to non-technical stakeholders.
• Able to work independently, manage several tasks at once, and follow issues through to resolution.

Good-to-Have

• One or more of these certifications:
• Systems Security Certified Practitioner (SSCP)
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Familiarity with ISO/IEC 27001 or similar information security management frameworks.
• Experience with vulnerability scanning tools and remediation tracking.

Work Location: 540 Airport Road

About Company

ST Engineering is a global technology, defence and engineering group with a diverse portfolio of businesses across the aerospace, smart city, defence and public security segments. The Group harnesses technology and innovation to solve real-world problems, enabling a more secure and sustainable world. Headquartered in Singapore, it has operations spanning Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. ST Engineering reported revenue of over $12b in 2025 and ranks among the largest companies listed on the Singapore Exchange. It is a component stock of MSCI Singapore, FTSE Straits Times Index and Dow Jones Best-in-Class Asia Pacific Index.

About Commercial Aerospace

ST Engineering’s Commercial Aerospace business is a world-class Original Equipment Manufacturer (OEM) and Maintenance, Repair and Overhaul (MRO) service provider with proven solutions for practically every stage of an aircraft life cycle. With 50 years of reputable track record in aviation, backed by a highly experienced team of engineers and technicians across facilities in Asia Pacific, the U.S. and Europe, we know what it takes to keep the world flying safely.