Cyber Security Development Engineer (Day1, Experience in Tenable platforms)

NCS Group; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NCS, a leading AI tech services company, seeks an experienced Vulnerability Management System Engineer to join its Cyber team. This Day 1 role focuses on designing and deploying enterprise-grade vulnerability management solutions using Tenable and Rapid7 across cloud, hybrid, and on-premises environments.

You will define scanning strategies, integrate with SIEM and CI/CD pipelines, and create comprehensive documentation.

Qualifications

• 5+ years hands-on experience implementing enterprise vulnerability management solutions.
• Deep expertise with Tenable and Rapid7 platforms.
• Strong understanding of CVE/CVSS and threat intelligence.
• Experience with cloud platforms (AWS, Azure, GCP) and cloud-native security tools.
• Proficiency in scripting for automation (Python/PowerShell/Bash).

Responsibilities

• Design vulnerability management architectures aligned with client needs.
• Lead end-to-end deployment of Tenable and Rapid7 platforms.
• Configure scanners, agents, and sensors across environments.
• Integrate VM platforms with CI/CD pipelines (DevSecOps).
• Develop runbooks and training for client teams.

Skills

Vulnerability management

Scripting

Agile teamwork

Communication

Tools

Tenable.io / Tenable.sc

Nessus

Rapid7 InsightVM/Nexpose

AWS

Azure

GCP

Job description

NCS is a leading AI Tech Services company. With a 15,000-strong team across the Asia Pacific, NCS scales its platforms and capabilities to provide clients with greater agility and AI expertise across a range of Industries. Embracing a strong ecosystem of global partners, NCS transforms technology services delivery combining AI with digital resilience to drive real business impact. NCS is a subsidiary of the Singtel Group.

Primary Purpose

We are seeking an experienced Vulnerability Management System Engineer to join our Cyber team. This is a specialist Day 1 role focused exclusively on the design, architecture, and implementation of enterprise-grade vulnerability management solutions. You will work with cutting-edge platforms such as Tenable and Rapid7 to deliver robust security solutions for our clients.

Solution Design & Architecture

• Design comprehensive vulnerability management architectures aligned with client requirements and industry best practices
• Develop technical solution blueprints for enterprise-scale deployments across cloud, hybrid, and on-premises environments
• Create integration strategies with existing security infrastructure and SIEM platforms
• Define scanning strategies, policies, and compliance frameworks (CIS, NIST, PCI-DSS, HIPAA, ISO 27001)

Implementation & Deployment

• Lead end-to-end implementation of Tenable (Nessus, Tenable.io, Tenable.sc), Rapid7 (InsightVM, Nexpose) platforms or equivalent
• Configure vulnerability scanners, agents, and sensors across diverse infrastructure environments
• Implement Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) capabilities
• Deploy container security and Kubernetes Security Posture Management (KSPM) solutions
• Configure automated scanning schedules, credential management, and network segmentation strategies

Integration & Configuration

• Integrate vulnerability management platforms with CI/CD pipelines for DevSecOps workflows
• Implement Infrastructure as Code (IaC) scanning capabilities
• Configure API integrations with ticketing systems, SIEM, and security orchestration platforms
• Develop automation scripts for reporting, remediation workflows, and compliance tracking

Technical Documentation & Knowledge Transfer

• Produce comprehensive technical documentation including architecture diagrams, configuration guides, and runbooks
• Develop standard operating procedures and best practice guidelines
• Conduct knowledge transfer sessions and training for client teams
• Create handover documentation for Day 2 operations teams

Qualifications

Technical Expertise

• Due to project sensitivity, we can only consider Singapore Citizen
• 5+ years of hands-on experience implementing enterprise vulnerability management solutions
• Deep expertise with Tenable platforms (Tenable.io, Tenable.sc, Nessus Professional, Rapid7 solutions (InsightVM, Nexpose) or equivalent.
• Strong understanding of vulnerability assessment methodologies, CVE/CVSS frameworks, and threat intelligence
• Experience with cloud platforms (AWS, Azure, GCP) and cloud-native security tools
• Proficiency in scripting languages (Python, PowerShell, Bash) for automation
• Knowledge of network protocols, security architectures, and enterprise infrastructure

Security & Compliance Knowledge

• Understanding of security frameworks and compliance standards (CIS Benchmarks, NIST CSF, PCI-DSS, HIPAA, ISO 27001)
• Familiarity with MITRE ATT&CK framework and threat modelling
• Knowledge of Software Composition Analysis (SCA) and container security principles
• Experience with Identity and Access Management (IAM) and Cloud Infrastructure Entitlement Management (CIEM)

Professional Skills

• Proven track record of delivering complex security implementation projects on time and within scope
• Strong analytical and problem-solving capabilities
• Excellent communication skills with ability to articulate technical concepts to diverse audiences
• Experience working in Agile environments and collaborating with cross-functional teams

Additional Information

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.