Cyber Platform Engineer

NSEARCH GLOBAL PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Benefits offered by this job

null

Job summary

NSEARCH GLOBAL PTE. LTD. is seeking a Cyber Platform Engineer to oversee the operational administration, maintenance, and lifecycle management of critical cybersecurity platforms across APAC sites.

You will manage Carbon Black EDR, Palo Alto firewalls, Cloudflare DDoS mitigation, and CyberArk PAM, ensuring security, compliance, and incident readiness through disciplined change control and thorough documentation.

Qualifications

• Strong foundation in enterprise networking and TCP/IP, VLANs, routing, NAT, DNS, and network troubleshooting.
• Hands-on experience with Palo Alto Next-Generation Firewalls, including policy management and maintenance.
• Hands-on experience with Carbon Black EDR, including server administration and sensor health monitoring.
• Experience with Cloudflare DDoS mitigation and Web Application Firewall platforms.
• Experience with CyberArk PAM, including privileged account onboarding and access management.
• Understanding of secured, air-gapped and restricted networks, and data transfer controls.

Responsibilities

• Administer and maintain cybersecurity platforms including EDR, firewalls, DDoS mitigation, and PAM.
• Perform routine and ad-hoc maintenance, asset onboarding/offboarding, and access/log reviews.
• Support security assessments and audits, coordinate with contractors and internal teams.
• Produce maintenance reports for every maintenance cycle and ensure compliance with policies.

Tools

Palo Alto Networks NGFW

Carbon Black EDR

Cloudflare DDoS Mitigation

CyberArk PAM

Job description

Our client, one of Asia-Pacific’s leading organizations is looking for:

Cyber Platform Engineer

Responsibilities:

• The Cyber Platform Engineer will be responsible for the operational administration, maintenance, and lifecycle management of key cybersecurity platforms: Carbon Black EDR, Palo Alto Perimeter Firewalls deployed across the Board's Critical Information Infrastructure (CII) sites, the Cloudflare DDoS Mitigation Services (DMS) protecting the internet-facing web assets, and the CyberArk Privileged Access Management (PAM) platform governing privileged account access across the environment.
• The engineer will execute routine and ad-hoc maintenance activities to ensure the continuous functioning, security compliance, and operational integrity of these platforms. This includes performing scheduled preventive maintenance, managing onboarding and offboarding of assets and accounts, conducting access and log reviews, supporting security assessments and audits, and coordinating with relevant contractors and internal teams. The engineer shall also produce maintenance reports according to requirements for every maintenance cycle.
• This role requires strong discipline around cybersecurity, change management, and documentation, and the engineer shall ensure all activities are compliant with the cybersecurity policies and the Cybersecurity Code of Practice (CCoP).

Requirements:

• Strong foundation in enterprise networking, including TCP/IP, VLANs, routing, NAT, DNS, network segmentation, firewall traffic flow, and network troubleshooting.
• Hands-on experience with Palo Alto Networks Next-Generation Firewalls or equivalent firewall platforms, including firewall policy and rule management, NAT, routing, security profiles, log analysis, patching, firmware upgrades, and configuration backup/restoration.
• Hands-on experience with Carbon Black EDR or equivalent endpoint detection and response platforms, including server administration, sensor health monitoring and troubleshooting, log review, endpoint onboarding, and basic maintenance of supporting OS and application services.
• Experience with Cloudflare or equivalent DDoS mitigation and Web Application Firewall platforms, including WAF/security rules, IP whitelisting and blacklisting, SSL certificate management, log review, and website onboarding/offboarding.
• Experience with CyberArk PAM or equivalent privileged access management solutions, including privileged account onboarding/offboarding, access management, password rotation, session management, and audit log review.
• Understanding of secure network environments, including air-gapped networks, restricted network connectivity, controlled offline transfer of patches/files, and the use of data diodes or unidirectional gateways.

Only shortlisted candidates will be notified.

By submitting your resume and cover letter to apply for our job opening, you confirm that you have read the Data Protection Notice for Job Applicants (https://www.nsearchglobal.com/dp-notice/job-applicants) and you consent to the collection, use, and disclosure of your personal data for the purpose of verifying and evaluating your job application. Additionally, you have to notify and obtain consent from all individuals listed as your references to their data being collected and disclosed for the purposes related to your job application.