Network Security Engineer
Summary
Maintains and secures corporate networks by managing firewalls, VPNs, and incident response; troubleshoots LAN/WAN issues and remediates vulnerabilities using Cisco, Fortinet, F5, and related tools.
The Cyber-Security Engineer (Level 2) is responsible for delivering day-to-day cybersecurity operational support and maintaining the organization’s network security infrastructure.
In this role, you will support LANs, WANs, and VPNs while handling operational activities such as incident response, firewall flow management, proxy management, remote access support, IP/VPN support, and vulnerability remediation. You will continuously evaluate the efficacy and efficiency of routers, firewalls, IPS, proxies, and load balancers to ensure optimal system functionality and security posture.
Key Responsibilities
Operations & Incident Management
Provide Level 2 production support for network and security infrastructure.
Manage Incidents, Requests, and Change Management processes effectively.
Respond immediately to security-related incidents (e.g., data breaches, viruses, phishing scams).
Provide technical guidance and supervision to Level 1 security support teams.
Participate in DNS/DHCP management.
Infrastructure Maintenance & Project Support
Execute vulnerability remediation, infrastructure hardening, and knowledge management.
Prepare, configure, and install firewalls, VPNs, routers, servers, and IDS scanning technologies.
Support the implementation of network security projects.
Manage Network Security IT assets and the CMDB (including routers, firewalls, LANs, WANs, VPNs, and related network devices).
Upgrade and update security systems as required.
Governance, Documentation & Awareness
Maintain comprehensive documentation for security SOPs and operational procedures.
Gain a thorough understanding of the organization’s overall technology and information systems environment.
Lead security awareness programs and educational initiatives for non-IT personnel.
Legal & Regulatory Responsibilities
Comply with all applicable legal, regulatory, and internal Compliance requirements, including the Singapore Compliance manual, policies, and procedures issued periodically.
Comply with applicable regulatory, information security, financial crime prevention and internal compliance requirements, including escalation and reporting obligations to the relevant Compliance Officer and/or MLRO where applicable.
Maintain appropriate knowledge and qualifications required to execute the role competently.
Complete all mandatory compliance and operational training within specified timelines.
Work Environment & Schedule
Shift Pattern: Rotating shifts primarily covering Europe business hours.
On-Call Support: Rotational on-call support expected on weekdays and weekends.
Job Requirements
Experience & Background
Minimum 6 years of experience managing IT systems environments, including at least 2 years in a security-focused role; OR
Minimum 3 years of dedicated work experience as a Cybersecurity Support Engineer.
Industry Preference: Experience in regulated industries (e.g., Financial Services, Government, Healthcare) is highly preferred but not mandatory. Candidates with strong operational security skills from other sectors are welcome to apply.
Essential Skills & Competencies
Solid understanding of network topology (LAN, WAN, MAN, VPN).
Strong understanding of core network security concepts (Encryption, Certificates, Kerberos, etc.).
Practical exposure to emerging security technologies.
Proven incident-handling skills with the ability to prioritize and resolve critical technical issues under pressure.
Strong customer-service orientation with excellent communication, interpersonal, and analytical skills.
Technical Product Experience
Hands-on experience with the core technologies in our environment:
Cisco: ACI, Nexus, Catalyst, DNAC, ISE, IOS, NX-OS
Arista: Switches, EOS
Fortinet: FortiGate Firewalls, FortiIPS
F5: LTM, ASM, APM, TMOS
Infoblox: DNS, DHCP
Skyhigh Security: Secure Web Gateway / Proxy
Ivanti: Connect Secure / Remote Access
Check Point: Firewalls, Multi-Domain Security Management (MDS)
Trend Micro: IPS / IDS
Tools & Automation Skills
Scripting & Automation: Python, Bash, Ansible
Diagnostics & Monitoring: Wireshark, Tshark, NetFlow
If you believe you fit the requirements for the role, please submit your application below or drop us an email directly quoting the job title.
Due to an anticipated high volume of applicants, we regret that only shortlisted candidates will be notified. The information provided is for recruitment purposes only.
Cornerstone Global Partners (EA License Number: 19C9859) is an affirmative equal-opportunity employer and recruitment firm. We evaluate qualified applicants without regard to race, colour, religion, creed, gender, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.
Scarlett Zhang Jifan
[email protected]
EA Registration Number: R26159541.
Cornerstone Global Partners Pte Ltd (EA License: 19C9859)