Senior Security Engineer

Responsibilities:

1. Security Monitoring and Incident Response

• Review security alerts generated by the Security Operations Centre (SOC).
• Investigate, triage and follow up on security events and incidents.
• Support the development, tuning and optimisation of security detection use cases.
• Assist in threat hunting activities to identify potential security threats.
• Support incident response activities, including investigation, containment and post-incident reporting.

2.  Vulnerability Assessment and Penetration Testing (VAPT)

• Coordinate with external security vendors on vulnerability assessments, penetration testing and source code review activities.
• Track remediation efforts and ensure timely closure of identified vulnerabilities.
• Maintain vulnerability registers and assist in preparing vulnerability management dashboards.

3.  Security Awareness and User Education

• Support the delivery of cybersecurity awareness programs through the organisation’s e-learning platform.
• Plan, execute and monitor phishing simulation campaigns.
• Promote security best practices and contribute to user awareness initiatives across the organisation.

4.  Cloud Security

• Review Microsoft Azure configurations against security best practices and organisational standards.
• Assist in implementing and validating security controls within the Microsoft Azure environment.
• Support virtual machine (VM) hardening and cloud security configuration reviews.
• Perform cloud security posture assessments and track remediation of identified security gaps.

5.  Governance, Risk and Compliance (ISO27001 / CTM / DPTM)

• Support internal and external audit activities related audit activities related to information security.
• Maintain and update information security risk registers arising from audit findings and risk assessments.
• Monitor the progress of corrective actions and ensure timely remediation.

Requirements:

• Higher NITEC in Cyber & Network Security, Diploma, Bachelor’s Degree or equivalent qualification in Cyber Security, Information Security, Computer Science, Information Technology or a related discipline.

• Minimum 5 years of relevant experience in cybersecurity, IT security operations, security governance or a related information security role.

• Professional security certifications will be an advantage.

• Working knowledge or exposure to one of more of the following areas will be an advantage:

• Security Operations Centre (SOC) monitoring and incident response.

• Vulnerability Assessment and Penetration Testing (VAPT)

• Microsoft 365 and Azure

• Information security standards and regulatory frameworks such as ISO27001, CTM, DPTM, NIST, PDPA and MAS TRM.

• Strong analytical, problem-solving and investigative skills with the ability to assess security risks and recommend practical solutions.

• Excellent written and verbal communication skills with the ability to communicate effectively with both technical and non-technical stakeholders.

• Self-motivated, proactive and able to work independently as well as collaboratively in a team environment.

• Demonstrates ownership, initiative and a continuous improvement mindset, with the confidence to challenge conventional approaches and recommend innovative security solutions.

• Passionate about cybersecurity and committed to continuous learning and keeping abreast of emerging threats, technologies and industry best practices.