Assistant Lead Engineer - Cybersecurity Operations (Cyber Defence & Resilience)

Synapxe; Otago; On-site; NZD 90,000 - 130,000; Full time

Job summary

Synapxe is seeking a cybersecurity professional to manage technical risks, security operations, and SOC tasks while collaborating with stakeholders. The role covers cyber assessments, PAM, databases, WAF, firewalls, and EPP/EDR with hands-on risk assessment, mitigation planning, threat detection, and IOCs usage.

You will drive compliance, improvements, issue remediation, and regular management updates. Successful candidates will be placed at an level based on experience.

Qualifications

• Diploma or degree in Computer Science, Digital Forensic or Engineering preferred.
• Minimum 6 years of relevant IT security auditing or security operations experience.
• Strong knowledge of internet infrastructure, networking technology and security (DNS, DHCP, Firewall, WAF, IDS/IPS, VPN, TCP/IP).
• Working experience with major SIEM will be advantage
• Strong practical experience in Cyber security: Cyber kill chain, TTP, threat intelligence, malware triages.
• Demonstrated ability to multitask and is detail-oriented with inquisitive mind during case investigation.
• Good team player with strong communication skills with project teams, stakeholders, senior management, and contractors including both technical and non-technical personnel.
• Professional security related qualification (e.g. CEH, ECIH/GCIH, and ITIL) will be favorable although not mandatory technical skills.

Responsibilities

• Work closely with internal and external stakeholders to manage the technical risk, security operation and SOC.
• Act as IT security expert for department in the areas of cyber security assessments, PAM, Database, WAF, Firewall and EPP/EDR.
• Perform risk assessment and identify mitigation controls for the risk area identified.
• Enhance and build cyber threat detection user cases and assist in analysing and reducing false positive.
• Identify infection/compromise in the company utilizing threat intelligence and indicators of compromise (IOCs) from different threat Intel sources and regulators
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Track, monitor and valid security-related and risk issues, provide an action plan to rectify the issues and prevent recurrence.
• Generate security reports and metrics as required.
• Provide timely and periodic update to managements on its security matters.
• Stay current on the latest Cyber threats, Attacks and vulnerabilities etc.

Skills

Cybersecurity

Risk assessment

Threat intelligence

Incident reporting

SOC operations

PAM

WAF

EPP/EDR

Networking fundamentals

Communication skills

Education

Diploma or degree in Computer Science, Digital Forensic or Engineering

Tools

SIEM

Firewall

Threat intelligence platforms

Job description

Company description

Synapxe is the national HealthTech agency inspiring tomorrow's health. The nexus of HealthTech, we connect people and systems to power a healthier Singapore.

Together with partners, we create intelligent technological solutions to improve the health of millions of people every day, everywhere. Reimagine the future of health together with us at www.synapxe.sg

Job description

Role & Responsibilities

The successful candidate will have to work on technical risk management. Handle day-to-day incident reporting and support investigation to healthcare IT platform, includes:

• Work closely with internal and external stakeholders to manage the technical risk, security operation and SOC.
• Act as IT security expert for department in the areas of cyber security assessments, PAM, Database, WAF, Firewall and EPP/EDR.
• Perform risk assessment and identify mitigation controls for the risk area identified.
• Enhance and build cyber threat detection user cases and assist in analysing and reducing false positive.
• Identify infection/compromise in the company utilizing threat intelligence and indicators of compromise (IOCs) from different threat Intel sources and regulators
• Ensure all compliance and security control functions are performed timely and orderly.
• Drive continuous improvement of procedures and processes related to cybersecurity process and operations monitoring.
• Track, monitor and valid security-related and risk issues, provide an action plan to rectify the issues and prevent recurrence.
• Generate security reports and metrics as required.
• Provide timely and periodic update to managements on its security matters.
• Stay current on the latest Cyber threats, Attacks and vulnerabilities etc.

Requirements

• Diploma or degree in Computer Science, Digital Forensic or Engineering preferred.
• Preferred minimum of 6 years of relevant work experience in IT security auditing or security operation role.
• Strong knowledge in internet infrastructure, networking technology and security (i.e. DNS, DHCP, Firewall, WAF, IDS, IPS, VPN, APT and TCP/IP protocols)
• Working experience with major SIEM will be advantage
• Strong practical experience in Cyber security: Cyber kill chain, TTP, threat intelligence, malware triages.
• Demonstrated ability to multitask and is detail-oriented with inquisitive mind during case investigation.
• Good team player with strong communication skills with project teams, stakeholders, senior management, and contractors including both technical and non-technical personnel.
• Professional security related qualification (e.g. CEH, ECIH/GCIH, and ITIL) will be favorable although not mandatory technical skills.

Synapxe presents an open and collaborative environment suitable for candidates with less experience in the required domains, but who have an open and learning mindset.

Successful candidates will be emplaced at level based on experience.

Profile description

Position Overview

Cybersecurity professional experienced in managing technical risks, security operations, and SOC activities while collaborating with internal and external stakeholders. Serves as a security SME across cyber assessments, PAM, databases, WAF, firewalls, and EPP/EDR, with hands‑on experience in risk assessment, mitigation planning, threat detection, false‑positive reduction, and compromise identification using threat intelligence and IOCs. Also drives compliance, operational improvements, issue remediation, security reporting, and regular management updates on cybersecurity risks and performance.