AVP Security Engineer

ESPIRE INFOLABS (SINGAPORE) PTE. LTD.; Singapore; Sur place; SGD 90 000 - 150 000; Plein temps

Résumé du poste

ESPIRE INFOLABS (SINGAPORE) PTE. LTD. seeks an experienced security operations professional to own and improve managed security services across enterprise platforms, cloud, and applications. You will oversee incident handling, performance metrics, and documentation while implementing security controls and working with vendors to meet SLAs.

The role encompasses AI security support, post-quantum readiness, and continuous improvement initiatives across the security technology stack.

Qualifications

• Experience in security operations and control implementation.
• {

Responsabilités

• Operate and continuously improve managed security services across the enterprise security technology stack.
• Oversee service delivery, incident handling, operational health, capacity, availability, and performance of security platforms.
• Maintain service documentation, runbooks, escalation paths, SOPs, and operational metrics.
• Implement, configure, tune, troubleshoot, and maintain security controls across infra, cloud, apps and identity environments.
• Support design and deployment of preventive, detective, and responsive security controls aligned to risk and regulatory expectations.
• Validate control effectiveness through monitoring, testing, reporting, and continuous improvement activities.
• Provide hands-on support for security solutions including email security, IDS/IPS, WAF, vulnerability monitoring, and related managed services.
• Maintain platform configuration baselines, access controls, integration points, and operational readiness for tools.
• Work with vendors to resolve issues, track service improvements, and ensure SLAs are met.
• Identify, document, and maintain system security requirements, procedures, and artefacts.
• Support evidence collection, audit responses, control attestation, and compliance reporting.
• Ensure operational documentation remains accurate and usable by internal teams and service providers.
• Assist in implementing security controls for AI and ML environments, including data protection and secure configuration.
• Support AI risk identification and mitigation efforts such as data leakage and adversarial attacks.
• Contribute to readiness for AI security monitoring and incident response.
• Support post-quantum cryptography readiness activities and crypto-agility improvements.
• Track quantum-resistant standards and assess impacts on TLS and encryption services.
• Contribute to migration planning and crypto-agility improvements.
• Support security projects, remediation initiatives, and operational uplift from planning through delivery.
• Track actions, risks, dependencies, and milestones for timely completion.

Connaissances

Security Operations

Incident response

Vulnerability management

Security tooling

Cloud security

AI security

Outils

Email security

IDS/IPS

WAF

Vulnerability monitoring

Certificate management

Monitoring platforms

Description du poste

Purpose of the Role

Responsible for the operational delivery, continuous improvement, and performance oversight of client's Managed Security Services capability under the Cyber Fusion Centre. The role supports the implementation, operation, monitoring, and optimisation of security controls across enterprise platforms, infrastructure, cloud services, applications, and emerging technology environments. The incumbent is expected to provide hands‑on engineering support, maintain effective security operations processes, strengthen preventive and detective controls, and contribute to the organisation's cyber resilience, regulatory readiness, and threat response capabilities.

Role Attributes

Operational ownership and engineering support for client Managed Security Services across the client Group, with focus on reliable service delivery, effective control operations, timely issue resolution, measurable security outcomes, and alignment with Enterprise Information Security priorities.

Key Responsibilities

• Managed Security Services Operations
  • Operate, maintain, and continuously improve managed security services across the enterprise security technology stack.
  • Oversee service delivery, incident handling support, operational health, capacity, availability, and performance of assigned security platforms.
  • Maintain service documentation, runbooks, escalation paths, standard operating procedures, and operational metrics.
• Security Engineering and Control Implementation
  • Implement, configure, tune, troubleshoot, and maintain security controls across infrastructure, endpoint, network, cloud, application, and identity environments.
  • Support design and deployment of preventive, detective, and responsive security controls aligned to enterprise risk and regulatory expectations.
  • Validate control effectiveness through monitoring, testing, reporting, and continuous improvement activities.
• Security Tools and Technology Management
  • Provide hands‑on support for security solutions including email security, intrusion detection and prevention, attack surface monitoring, anti‑malware, web application firewall, certificate management, vulnerability monitoring, and related managed services.
  • Maintain platform configuration baselines, access controls, integration points, and operational readiness for assigned tools.
  • Work with vendors and managed service providers to resolve issues, track service improvements, and ensure agreed service levels are met.
• System Security Requirements and Documentation
  • Identify, document, and maintain system security requirements, operational procedures, configuration standards, and technical artefacts.
  • Support evidence collection, audit responses, control attestation, and compliance reporting where required.
  • Ensure operational documentation remains accurate, current, and usable by internal teams and service providers.
• AI Security Operations Support
  • Assist in implementing security controls for AI and machine learning environments, including data protection, model deployment, inference endpoints, logging, access control, and secure configuration.
  • Support identification and mitigation of AI‑related risks such as data leakage, prompt injection, adversarial attacks, model abuse, and data poisoning.
  • Contribute to operational readiness for AI security monitoring and incident response.
• Post‑Quantum Cryptography and Crypto‑Agility Support
  • Support post‑quantum cryptography readiness activities, including cryptographic inventory, certificate visibility, dependency tracking, and migration planning.
  • Track developments in quantum‑resistant cryptographic standards and assess potential impacts on TLS, digital signatures, encryption services, and certificate management.
  • Contribute to hybrid cryptographic migration planning and crypto‑agility improvements.
• Project Delivery, Risk Reduction, and Continuous Improvement
  • Support security projects, remediation initiatives, service improvements, and operational uplift activities from planning through delivery.
  • Track assigned actions, risks, dependencies, and milestones to ensure timely completion and transparent reporting.
  • Recommend practical improvements to strengthen resilience, reduce operational risk, and improve security outcomes.

Key Decisions within the Role

• Prioritisation of day‑to‑day operational activities, service requests, alert tuning, troubleshooting, and remediation support within agreed scope.
• Recommendation of security configuration improvements, control enhancements, process changes, and service optimisation opportunities.
• Development and maintenance of standard operating procedures, runbooks, operational workflows, and BAU process documentation.
• Escalation of material risks, control gaps, recurring incidents, vendor performance concerns, and unresolved operational issues to the Managed Security Services Lead.

Individual contributor within the Cyber Fusion Centr