Cyber Security Engineer (Crowdstrike | CCFA) - Based in Singapore

Salary: $8,000 – $10,000 per month

About the Role

We're looking for a cybersecurity professional to lead a comprehensive assessment and remediation of our CrowdStrike Falcon platform. You'll dive deep into our existing security controls, Host-Based Firewall, Custom IOA rules, Asset Discovery, and Configuration Baselines, identify gaps, and deliver a tuned, validated, and well-documented security posture. This is a hands-on, high-visibility project where your findings and recommendations will directly shape how we protect our infrastructure.

What You'll Be Doing

Assessment & Planning
You'll start by reviewing our current security detection scope across five key areas: Host-Based Firewall, Custom IOAs, Asset Discovery, Configuration Baselines, and Network Equipment Vulnerability detection. This includes digging into configurations and logs, documenting findings and gaps, and validating what's working and what isn't. From there, you'll build a prioritised remediation and tuning plan covering configuration updates, false-positive tuning, and rule corrections.

Host-Based Firewall Optimisation
You'll evaluate our firewall policy design, validate workstation configurations across institutions and clusters, and map rules to host groups. Part of your job will be spotting duplicate or disabled rules, recommending which policies should be merged or retired, and reviewing blocked traffic to catch configuration gaps. You'll end up delivering a clean, finalised firewall policy baseline.

Custom IOA Tuning
You'll review our Indicator of Attack (IOA) rule groups and policy assignments, validate alerts against approved use cases, and recommend false-positive tuning. This includes refining exclusions, flagging redundant or unused rules, and adjusting rule logic or regex where needed, ultimately producing a finalised Custom IOA baseline.

Asset Discovery & Visibility
You'll compile a full asset inventory, cross-check it against CMDB and MDOTS records, and map assets by cluster and institution. You'll identify unmanaged, duplicate, inactive, or decommissioned assets, flag unsupported operating systems, confirm ownership, and recommend follow-up actions to close visibility gaps.

Configuration Baseline Governance
You'll document exported configurations, policy assignments and statuses, host group mappings, and exclusions (with clear justifications). You'll identify configuration gaps, recommend remediation, and help establish a review cadence, resulting in a final, approved CrowdStrike configuration baseline.

Network Equipment Vulnerability Detection
You'll help stand up a repeatable process for detecting network equipment vulnerabilities through CrowdStrike, validating findings against CMDB and asset ownership, and running sample checks to weed out false positives. You'll also deliver periodic reporting and build out the governance documentation needed to keep this running smoothly long-term.

Wrapping It Up
To close out the engagement, you'll provide testing and validation evidence (screenshots, test cases, and closure status), write an operational handover guide covering troubleshooting, change handling, and escalation paths, and run a knowledge transfer session with the Day 2 Operations team to walk them through everything you've built.

What You'll Bring

• At least 3 years of experience in cybersecurity, IT infrastructure, or a related technical field

• Solid understanding of network protocols, firewalls, and security architectures

• Strong communication skills and a collaborative, team-oriented approach

• Comfort working in fast-paced, evolving project environments

• CrowdStrike Certified Falcon Administrator (CCFA) certification preferred