AVP, Network Security Engineer (TISO)

ocbc; Singapore; On-site; SGD 110,000 - 180,000; Full time

Job summary

OCBC invites applications for a Network Security Engineer role within the Technology Information Security Office (TISO) in Singapore. You will own and operate enterprise network security platforms, focusing on Palo Alto technologies, with a commitment to security-by-design and regulatory compliance.

You will troubleshoot incidents, implement secure configurations, and contribute to platform modernization through automation and collaboration with cross-functional teams.

Qualifications

• 5–8 years of experience in network security or security engineering within enterprise environments.
• Experience with Palo Alto security platforms in production environments.

Responsibilities

• Provide engineering and operational ownership for enterprise network security platforms (Palo Alto NGFW, Panorama, GlobalProtect).
• Administer, monitor, and troubleshoot network security platforms to ensure service stability and availability.
• Implement and review VPN configurations and network segmentation controls per security standards.
• Act as escalation point for complex network security incidents and perform root cause analysis.
• Manage platform health, upgrades, patching, and lifecycle activities.
• Support new projects and onboarding of applications with firewall and security technologies.
• Develop and maintain standard operating procedures and configuration standards.
• Collaborate with infrastructure, cloud, and cybersecurity teams to ensure effective controls.
• Drive automation opportunities and improvements to reduce manual effort.

Skills

Palo Alto NGFW

Network security

Firewall administration

Incident management

Automation opportunities

Tools

Palo Alto Panorama

GlobalProtect

Job description

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Why Join

Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering - Risk professional, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.

How you succeed

We are seeking an experienced Network Security Engineer to join the Technology Information Security Office (TISO) team. This role is responsible for the operation, engineering, service delivery, and continuous improvement of enterprise network security platforms, with a primary focus on Palo Alto technologies.

The role focuses on maintaining secure and reliable network security services, ensuring platforms are operated in accordance with security-by-design principles, regulatory requirements, and enterprise standards. The successful candidate will play a key role in supporting day-to-day operations, driving platform improvements, troubleshooting complex issues, and contributing to the modernization of network security capabilities through automation and standardization.

What you do

• Provide engineering and operational ownership for enterprise network security platforms, including Palo Alto Next-Generation Firewalls (NGFW), Panorama, GlobalProtect, and associated security services.
• Perform day-to-day administration, monitoring, maintenance, and troubleshooting of network security platforms to ensure service stability and availability.
• Implement and review VPN configurations, network segmentation controls, and security configurations in accordance with security standards.
• Act as an escalation point for complex network security incidents and service issues, performing root cause analysis and implementing sustainable remediation.
• Manage platform health, software upgrades, patching, vulnerability remediation, and lifecycle management activities.
• Support implementation of new projects, application onboarding, infrastructure changes, and security enhancements involving firewall and network security technologies.
• Develop and maintain standard operating procedures, engineering documentation, configuration standards, and knowledge repositories.
• Collaborate with infrastructure, cloud, cybersecurity, and architecture teams to ensure security controls are effective and operationally sustainable.
• Drive service improvements, automation opportunities, and operational efficiency initiatives to reduce manual effort and improve service quality.
• Support audits, risk assessments, regulatory reviews, and compliance activities by providing evidence of effective control implementation and operation.

Who you are

• Minimum 5 to 8 years of experience in network security, firewall administration, or security engineering roles within enterprise environments.
• Strong hands-on experience operating and supporting Palo Alto security platforms.
• Experience troubleshooting enterprise network and security incidents in production environments.
• Experience supporting high-availability network security platforms and critical business services.
• Good understanding of security operations, incident management, change management, and problem management processes.
• Experience working in regulated environments, preferably within financial services or other critical industries.
• Strong analytical, troubleshooting, and root-cause analysis skills.
• Effective communicator with the ability to work across engineering, operations, and project teams.

Who we are

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and