Security Engineer

APBA TG HUMAN RESOURCE PTE. LTD.; Lee-on-the-Solent; On-site; GBP 65,000 - 90,000; Full time

Job summary

APBA TG HUMAN RESOURCE PTE. LTD. in the United Kingdom seeks a Security Engineer to cover Day 1 project implementation and Day 2 operations security, ensuring alignment with government security policies and standards.

You will collaborate with Security Leads, Infra, System, and Software teams to translate security requirements into technical implementations, run security tooling in CI/CD pipelines, and participate in risk assessments and audits.

Responsibilities

• Day 1 – Project / Implementation Security: Security Implementation & Engineering, Compliance Support, DevSecOps & Secure Development, Security Testing Support, System & Platform Hardening.
• Day 2 – Operations / Production Security: Incident Response, Vulnerability & Patch Management, Security Monitoring, Audit & Compliance Support, Access Control Administration.

Skills

Threat modelling

Incident response

Security architecture

CI/CD security

RBAC / IAM

Security governance

Tools

SAST

DAST

SCA

Kubernetes

WAF

OAuth2

mTLS

Job description

Role Overview

This role covers both:

• Day 1 Security (Build / Project Implementation)
• Day 2 Security (Operations / Production Support)
• The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Key Responsibilities

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering
   • Implement security architecture and controls as designed by Security Leads/Architects
   • Support system, application, and infrastructure security configurations
   • Assist in threat modelling and risk assessment activities
   • Translate security requirements into technical implementation across platforms
2. Compliance Support
   • Support compliance with:
     • IM8 / Government security policies
     • Whole‑of‑Government (WOG) security requirements
     • PDPA (where applicable)
   • Assist in preparation and documentation for:
     • Security Risk Assessments (SRA)
     • Vulnerability Assessments (VA)
     • Penetration Testing (PT)
   • Maintain security documentation and evidence for audits
3. DevSecOps & Secure Development
   • Implement and maintain security tools in CI/CD pipelines:
     • SAST
     • DAST
     • SCA
     • container scanning
   • Monitor and triage findings, and work with developers on remediation
   • Support secure coding practices and DevSecOps adoption
   • Assist in API security, secrets management, and secure communications setup
4. Security Testing Support
   • Support coordination and execution of VA/PT activities
   • Track vulnerabilities and ensure timely remediation
   • Assist in documenting findings and closure evidence
   • Support system security certification and go-live requirements
5. System & Platform Hardening
   • Implement and maintain security hardening for:
     • Operating systems
     • Middleware and databases
     • Kubernetes and containers (RBAC, secrets, network policies)
   • Support configuration of:
     • API Gateways
     • WAF
     • Authentication and authorization mechanisms (OAuth2, mTLS)

Day 2 – Operations / Production Security

1. Incident Response
   • Support investigation, containment, and remediation of security incidents
   • Perform log analysis and assist in root cause analysis (RCA)
   • Work with SOC and internal teams during incidents
   • Follow and improve incident response playbooks
2. Vulnerability & Patch Management
   • Perform regular vulnerability scans and monitoring
   • Track and verify patching and remediation activities
   • Escalate high-risk vulnerabilities and propose mitigation controls
3. Security Monitoring
   • Monitor alerts from SIEM and security tools
   • Assist in tuning detection rules and dashboards
   • Ensure logging and monitoring coverage across systems
4. Audit & Compliance Support
   • Support audit preparation, evidence collection, and remediation tracking
   • Maintain security records and documentation
   • Assist in reporting security posture and issues
5. Access Control Administration
   • Support implementation of:
     • RBAC
     • MFA
     • Privileged Access Management (PAM)
   • Perform user access reviews and ensure least privilege.

Regret to inform that only shortlisted candidates will be notified.

CEI: R1988671. EA License: 14C7275