AVP Security Engineer

Espire Infolabs (Singapore) Pte Ltd; Região Norte; Presencial; BRL 80 000 - 120 000; Tempo integral

Resumo da oferta

Espire Infolabs (Singapore) Pte Ltd is seeking a security operations and engineering professional to lead the operational delivery, improvement, and performance oversight of the client’s Managed Security Services within the Cyber Fusion Centre.

You will implement and support security controls across enterprise platforms, infrastructure, cloud services, applications, and AI environments, participate in post‑quantum readiness, and help ensure regulatory readiness and rapid threat response.

Qualificações

• Bachelor’s degree in a IT/cybersecurity field or equivalent.
• Relevant professional certifications preferred (e.g., CISSP, CISM).
• Experience in security operations and engineering for managed services.

Responsabilidades

• Operate and improve managed security services across the enterprise security stack.
• Oversee incident handling, service health, and performance metrics.
• Maintain runbooks, SOPs, and documentation for security operations.
• Implement and tune security controls across infrastructure, cloud, and apps.
• Support AI security, data protection, and post-quantum readiness.

Conhecimentos

Cybersecurity operations

Security engineering

SIEM/SOAR

Vulnerability management

Incident response

Python scripting

Stakeholder management

Formação académica

Bachelor’s degree in Computer Science or related

CISSP or equivalent certifications

Ferramentas

Email security

IDS/IPS

WAF

Anti-malware

Cloud security controls

Endpoint security

SIEM/SOAR

Descrição da oferta de emprego

Purpose of the Role

Responsible for the operational delivery, continuous improvement, and performance oversight of client’s Managed Security Services capability under the Cyber Fusion Centre. The role supports the implementation, operation, monitoring, and optimisation of security controls across enterprise platforms, infrastructure, cloud services, applications, and emerging technology environments. The incumbent is expected to provide hands‑on engineering support, maintain effective security operations processes, strengthen preventive and detective controls, and contribute to the organisation’s cyber resilience, regulatory readiness, and threat response capabilities.

Role Attributes

Operational ownership and engineering support for client Managed Security Services across the client Group, with focus on reliable service delivery, effective control operations, timely issue resolution, measurable security outcomes, and alignment with Enterprise Information Security priorities.

Key Responsibilities

Managed Security Services Operations

• Operate, maintain, and continuously improve managed security services across the enterprise security technology stack.
• Oversee service delivery, incident handling support, operational health, capacity, availability, and performance of assigned security platforms.
• Maintain service documentation, runbooks, escalation paths, standard operating procedures, and operational metrics.

Security Engineering and Control Implementation

• Implement, configure, tune, troubleshoot, and maintain security controls across infrastructure, endpoint, network, cloud, application, and identity environments.
• Support design and deployment of preventive, detective, and responsive security controls aligned to enterprise risk and regulatory expectations.
• Validate control effectiveness through monitoring, testing, reporting, and continuous improvement activities.

Security Tools and Technology Management

• Provide hands‑on support for security solutions including email security, intrusion detection and prevention, attack surface monitoring, anti‑malware, web application firewall, certificate management, vulnerability monitoring, and related managed services.
• Maintain platform configuration baselines, access controls, integration points, and operational readiness for assigned tools.
• Work with vendors and managed service providers to resolve issues, track service improvements, and ensure agreed service levels are met.

System Security Requirements and Documentation

• Identify, document, and maintain system security requirements, operational procedures, configuration standards, and technical artefacts.
• Support evidence collection, audit responses, control attestation, and compliance reporting where required.
• Ensure operational documentation remains accurate, current, and usable by internal teams and service providers.

AI Security Operations Support

• Assist in implementing security controls for AI and machine learning environments, including data protection, model deployment, inference endpoints, logging, access control, and secure configuration.
• Support identification and mitigation of AI-related risks such as data leakage, prompt injection, adversarial attacks, model abuse, and data poisoning.
• Contribute to operational readiness for AI security monitoring and incident response.

Post-Quantum Cryptography and Crypto-Agility Support

• Support post-quantum cryptography readiness activities, including cryptographic inventory, certificate visibility, dependency tracking, and migration planning.
• Track developments in quantum-resistant cryptographic standards and assess potential impacts on TLS, digital signatures, encryption services, and certificate management.
• Contribute to hybrid cryptographic migration planning and crypto‑agility improvements.

Project Delivery, Risk Reduction, and Continuous Improvement

• Support security projects, remediation initiatives, service improvements, and operational uplift activities from planning through delivery.
• Track assigned actions, risks, dependencies, and milestones to ensure timely completion and transparent reporting.
• Recommend practical improvements to strengthen resilience, reduce operational risk, and improve security outcomes.

Key Decisions within the Role

• Prioritisation of day-to-day operational activities, service requests, alert tuning, troubleshooting, and remediation support within agreed scope.
• Recommendation of security configuration improvements, control enhancements, process changes, and service optimisation opportunities.
• Development and maintenance of standard operating procedures, runbooks, operational workflows, and BAU process documentation.
• Escalation of material risks, control gaps, recurring incidents, vendor performance concerns, and unresolved operational issues to the Managed Security Services Lead.
• Individual contributor within the Cyber Fusion Centre, with direct operational accountability for assigned Managed Security Services activities and indirect coordination responsibilities across internal technology teams, vendors, and managed service providers.

Requirements

Experience

• Minimum 3years of relevant experience in cybersecurity operations, security engineering, managed security services, infrastructure security, or related technology risk functions.
• Practical experience supporting security technologies such as email security, IDPS, WAF, anti-malware, attack surface monitoring, certificate management, vulnerability management, SIEM/SOAR, endpoint security, or cloud security controls.
• Strong understanding of cybersecurity principles, secure configuration practices, incident response support, threat detection, vulnerability management, access control, logging, and security monitoring.
• Ability to analyse complex security issues, identify root causes, assess risk, propose practical remediation options, and communicate findings clearly.
• Working knowledge of scripting or automation using languages such as Python, PowerShell, Bash, or equivalent is preferred.
• Strong stakeholder management, documentation, problem-solving, and collaboration skills, with the ability to operate effectively in a regulated financial services environment.

Education

• Academic: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline is preferred.
• Professional Certification(s): CISSP, CISM, CCSP, Security+, GIAC, cloud security, network security, or relevant vendor certifications are preferred.