IT Security Engineer
About the role
The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment. This role covers both Day 1 Security (Build / Project Implementation) and Day 2 Security (Operations / Production Support). The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.
Key responsibilities
Implement security architecture and controls as designed by Security Leads/Architects
Support system, application, and infrastructure security configurations
Assist in threat modelling and risk assessment activities
Translate security requirements into technical implementation across platforms
Support compliance with IM8 / Government security policies, Whole of Government (WOG) security requirements, and PDPA (where applicable)
Assist in preparation and documentation for Security Risk Assessments (SRA), Vulnerability Assessments (VA), and Penetration Testing (PT)
Implement and maintain security tools in CI/CD pipelines (SAST, DAST, SCA, container scanning)
Support investigation, containment, and remediation of security incidents
Perform regular vulnerability scans and monitoring
Monitor alerts from SIEM and security tools
About you
Degree in Computer Science / Cybersecurity / Information Security or equivalent
3–7 years of IT experience in cybersecurity or infrastructure security
Experience supporting security in projects or production environments
Familiarity with Singapore Government security policies (IM8 preferred)
Hands-on experience with Kubernetes / Docker security, IAM and access control, security tools (SAST, DAST, SIEM, vulnerability scanners), and CI/CD and DevSecOps practices
Basic knowledge of network security, application security, and cloud security
Strong technical troubleshooting and problem-solving skills
Ability to follow security standards and implement controls effectively
Good communication skills with technical and non-technical teams
Detail-oriented with strong documentation skills