IT Security Engineer

About the role

The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment. This role covers both Day 1 Security (Build / Project Implementation) and Day 2 Security (Operations / Production Support). The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key responsibilities

• Implement security architecture and controls as designed by Security Leads/Architects
• Support system, application, and infrastructure security configurations
• Assist in threat modelling and risk assessment activities
• Translate security requirements into technical implementation across platforms
• Support compliance with IM8 / Government security policies, Whole of Government (WOG) security requirements, and PDPA (where applicable)
• Assist in preparation and documentation for Security Risk Assessments (SRA), Vulnerability Assessments (VA), and Penetration Testing (PT)
• Implement and maintain security tools in CI/CD pipelines (SAST, DAST, SCA, container scanning)
• Support investigation, containment, and remediation of security incidents
• Perform regular vulnerability scans and monitoring
• Monitor alerts from SIEM and security tools

About you

• Degree in Computer Science / Cybersecurity / Information Security or equivalent
• 3–7 years of IT experience in cybersecurity or infrastructure security
• Experience supporting security in projects or production environments
• Familiarity with Singapore Government security policies (IM8 preferred)
• Hands-on experience with Kubernetes / Docker security, IAM and access control, security tools (SAST, DAST, SIEM, vulnerability scanners), and CI/CD and DevSecOps practices
• Basic knowledge of network security, application security, and cloud security
• Strong technical troubleshooting and problem-solving skills
• Ability to follow security standards and implement controls effectively
• Good communication skills with technical and non-technical teams
• Detail-oriented with strong documentation skills