Cyber Cloud Platform Security Engineer - #1775

JOBSTER PRIVATE LTD.; Singapore; In loco; SGD 90.000 - 120.000; Tempo pieno

Descrizione del lavoro

JOBSTER PRIVATE LTD. in Singapore is seeking a Cyber Operations Engineer to support day-to-day cloud cybersecurity operations with a focus on go-live readiness, CSPM and CloudSCAPE finding assessment, and cloud access administration.

The role collaborates with System Owners, infrastructure teams, vendors and GovTech to resolve configuration and compliance issues. The position emphasizes hands-on operational support while risk acceptance and final authorization remain with the appropriate

Mansioni

• Maintain and monitor the Cybersecurity Go-Live tracker for new systems, tech refresh and migrations.
• Coordinate with System OICs, infrastructure teams, vendors and IT Security Officers to close go-live prerequisites.
• Monitor CSPM and CloudSCAPE findings, categorize by severity, and identify remediation actions.
• Validate findings, document evidence, and escalate blockers to Cybersecurity for review.

Descrizione del lavoro

1. Scope of Work

The Cyber Operations Engineer will support the Board's day-to-day cloud cybersecurity operations, with a primary focus on system go-live readiness, CSPM and CloudSCAPE finding assessment, AWS / Azure security configuration support, controlled cloud access administration, compliance assessments and remediation coordination. The engineer will validate finding applicability and accuracy, recommend corrective actions, maintain auditable registers and provide technical analysis to Cybersecurity. The role works with System Owners, System OICs, infrastructure teams, application vendors, GovTech and service providers to resolve configuration and compliance issues. Cybersecurity alert monitoring, triage, investigation, response and follow-up are excluded from this role.The role is intended to provide hands-on operational support. It does not replace the accountability of System Owners, System OICs, infrastructure teams, application vendors, or cybersecurity approving authorities. Risk acceptance and final cybersecurity clearance remain with the relevant approving authority.

2. Roles and Responsibilities

2.1 System Go-Live Cybersecurity Readiness and Clearance Support

Maintain and monitor the Cybersecurity Go-Live tracker for new systems, tech refresh and migrations, including ownership, outstanding evidence, target go-live date and closure status.Perform first-level completeness checks of go-live artefacts before submission to the Board's Cybersecurity team. Artefacts may include the BIA, Risk Assessment, final system architecture, IT asset inventory, hardening evidence, VA/PT/SCR reports where applicable, System Security Plan, security logging and monitoring onboarding, backup/DR evidence, and cloud security monitoring evidence.Check that cybersecurity assessment reports and supporting evidence are the latest submitted versions and clearly identify unresolved findings, deviations or risk-treatment items requiring further review.Coordinate with System OICs, infrastructure teams, application vendors and IT Security Officers to close outstanding go-live prerequisites and maintain evidence of follow-up.Track pre-go-live and post-go-live actions and verify that temporary access, troubleshooting rules and elevated privileges identified for removal or downgrade are followed up.Prepare a consolidated readiness status for Cybersecurity review and elevate blockers or overdue items that may affect planned go-live.

2.2 Azure / Cloud Access and RBAC Administration

Process approved cloud access and role-assignment requests in accordance with the Board's access-control process and applicable segregation-of-duties requirements.Support assignment, modification and removal of approved Azure role-based access control (RBAC) permissions and relevant cybersecurity administration groups, based on authorised Service Requests or approvals.Maintain auditable records of access assignments, changes, removals and supporting approvals.Perform periodic checks and go-live/post-go-live follow-up for temporary or elevated cloud access, including removal or downgrade when no longer required.Escalate unclear, excessive, conflicting or unsupported access requests to Cybersecurity before implementation.Support user access administration activities where assigned, while observing segregation of duties between request, approval and access administration.

2.3 CSPM, CloudSCAPE and Cloud Security Compliance Operations

Monitor and review Cloud Security Posture Management (CSPM) and CloudSCAPE findings from applicable platforms, including Microsoft Defender for Cloud / Azure CSPM, AWS Security Hub and GovTech CloudSCAPE. This responsibility covers security posture and compliance findings, not cybersecurity alerts.Categorise and prioritise findings using the Board's approved prioritisation criteria, including severity, Internet exposure and applicable compliance requirements.Identify appropriate remediation actions and coordinate with System OICs, application teams and cloud infrastructure teams to implement corrective measures. Track responses, remediation progress and outstanding actions in the central findings and compliance register.Assess security misconfigurations, compliance deviations and potential vulnerabilities. Validate each finding's applicability and accuracy against the affected resource, configuration and available evidence, including identifying and documenting false positives for Cybersecurity review.Maintain records of outstanding findings, technical justifications, false-positive assessments, risk treatment, approved deviations, exception expiry dates, remediation status and documented closure evidence. Validate remediation evidence before recommending closure for review.Escalate overdue, recurring, high-risk or disputed findings to Cybersecurity for assessment and direction.Prepare recurring cloud security posture and compliance updates, highlighting critical fi