AVP, Network Security Engineer (TISO)

OCBC Group; Singapore; On-site; SGD 90,000 - 150,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits to suit lifestyle

Community initiatives

Professional development opportunities

Job summary

OCBC Group is seeking an experienced Network Security Engineer to join the Technology Information Security Office (TISO). You will own and operate enterprise network security platforms, focusing on Palo Alto technologies to safeguard systems and ensure security-by-design across the bank.

You will support day-to-day operations, drive platform improvements, and contribute to automation and standardization efforts while collaborating with cross-functional teams to ensure compliance and reliability.

Qualifications

• 5–8 years of experience in network security or security engineering in enterprise environments.
• Hands-on experience with Palo Alto security platforms.
• Experience troubleshooting production network security incidents.

Responsibilities

• Provide engineering and operational ownership for enterprise network security platforms (NGFW, Panorama, GlobalProtect).
• Perform day-to-day administration, monitoring, and troubleshooting to ensure service stability.
• Implement and review VPN configurations, network segmentation, and security settings per standards.
• Act as escalation point for complex incidents and perform root-cause analysis.
• Manage platform health, upgrades, patches, and vulnerability remediation.
• Support new projects and infrastructure changes involving firewall and network security technologies.
• Develop and maintain SOPs, engineering docs, and configuration standards.
• Collaborate with infrastructure, cloud, cybersecurity, and architecture teams.
• Drive automation initiatives to improve service quality and reduce manual effort.
• Support audits and compliance activities with evidence of controls.

Skills

Palo Alto NGFW

Panorama

GlobalProtect

Network security

Firewall administration

Incident troubleshooting

Security operations

Regulated environments

Tools

Palo Alto Networks firewalls

VPN configurations

Job description

WHO WE ARE: As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

Why Join Protecting our customers' assets and data is at the heart of everything we do at OCBC.

As a Cyber Engineering - Risk professional, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.

How you succeed

We are seeking an experienced Network Security Engineer to join the Technology Information Security Office (TISO) team. This role is responsible for the operation, engineering, service delivery, and continuous improvement of enterprise network security platforms, with a primary focus on Palo Alto technologies. The role focuses on maintaining secure and reliable network security services, ensuring platforms are operated in accordance with security-by-design principles, regulatory requirements, and enterprise standards. The successful candidate will play a key role in supporting day‑to‑day operations, driving platform improvements, troubleshooting complex issues, and contributing to the modernization of network security capabilities through automation and standardization.

What you do

• Provide engineering and operational ownership for enterprise network security platforms, including Palo Alto Next‑Generation Firewalls (NGFW), Panorama, GlobalProtect, and associated security services.
• Perform day‑to‑day administration, monitoring, maintenance, and troubleshooting of network security platforms to ensure service stability and availability.
• Implement and review VPN configurations, network segmentation controls, and security configurations in accordance with security standards.
• Act as an escalation point for complex network security incidents and service issues, performing root cause analysis and implementing sustainable remediation.
• Manage platform health, software upgrades, patching, vulnerability remediation, and lifecycle management activities.
• Support implementation of new projects, application onboarding, infrastructure changes, and security enhancements involving firewall and network security technologies.
• Develop and maintain standard operating procedures, engineering documentation, configuration standards, and knowledge repositories.
• Collaborate with infrastructure, cloud, cybersecurity, and architecture teams to ensure security controls are effective and operationally sustainable.
• Drive service improvements, automation opportunities, and operational efficiency initiatives to reduce manual effort and improve service quality.
• Support audits, risk assessments, regulatory reviews, and compliance activities by providing evidence of effective control implementation and operation.

Who you are

• Minimum 5 to 8 years of experience in network security, firewall administration, or security engineering roles within enterprise environments.
• Strong hands‑on experience operating and supporting Palo Alto security platforms.
• Experience troubleshooting enterprise network and security incidents in production environments.
• Experience supporting high‑availability network security platforms and critical business services.
• Good understanding of security operations, incident management, change management, and problem management processes.
• Experience working in regulated environments, preferably within financial services or other critical industries.
• Strong analytical, troubleshooting, and root‑cause analysis skills.
• Effective communicator with the ability to work across engineering, operations, and project teams.

What we offer

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry‑leading learning and professional development opportunities.
• Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we're on a journey of transformation. Leveraging technology and creativity to become a future‑ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future‑ready career. Your Opportunity Starts Here.

With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney.

We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P).

We offer private banking services through our wholly-owned subsidiary, Bank of Singapore, which operates on a unique open‑architecture product platform to source for the best‑in‑class products to meet its clients’ goals.

Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.