Cyber Security Engineer

ST Engineering; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

ST Engineering is seeking a Cyber Security Engineer to lead security operations for classified computers and networks. You will perform log reviews, risk assessments, and incident management, while ensuring adherence to internal policies and external regulatory requirements.

You will conduct internal and external audits, remediate vulnerabilities, apply secure configurations, and support regulatory submissions. Candidate certifications from the listed set are required or preferred.

Qualifications

• Must-have cybersecurity certifications as listed in Job Requirements.
• Experience handling classified computers and systems is a plus.
• Familiarity with IT governance frameworks and compliance controls.

Responsibilities

• Perform log review on classified computers and systems.
• Perform change management and maintain audit records.
• Conduct cyber risk assessments on classified systems.
• Handle cyber security incident management and follow-up.
• Conduct cyber security compliance audits (internal and external).
• Enforce data security and encryption requirements on classified systems.
• Develop SOPs and archive network security processes and flows.
• Implement GPOs for secured configurations.

Skills

Log Review

Change Management

Cyber Risk Assessment

Incident Management

Cyber Security Audits

Vulnerability Remediation

Compliance Knowledge

Security Policies

VA Scanning

GPO Implementation

Education

CSSA+ / CEH / CompTIA Security+

CISA

CISM

ISO 27001 Internal Auditor

ISO 27001 Lead Implementer

CISSP

GCIH

Tools

MS Windows / Linux Admin

Job description

Responsibilities

• Perform Log Review on classified computers and systems.
• Perform Change Management and maintain records for audit purposes.
• Conduct Cyber Risk Assessment on classified computers & systems.
• Handle and follow up on Cyber Security Incident Management.
• Conduct internal and support external Cyber Security Compliance Audits
• Ensuring adherence to internal security policies, IT governance frameworks, and compliance controls.
• Track and remediate vulnerabilities, ensuring computers and system meet security patching and compliance standards.
• Conduct Vulnerability Management (VA Scanning) on classified network computers and systems.
• Enforce Data Security and Encryption requirements on classified computers and systems.
• Formalize and archival of network security processes & flows, develop SOPs for compliance.
• Implement GPOs to maintain Secured Configurations to prevent breaches
• Daily basic cyber security operation and maintenance.
• Conduct security audits and prepared reports, highlighting areas for improvement.
• Coordinate and supporting external audits, risk assessments, and regulatory submissions.
• Assist with implementation of security standards aligned to MSD, GISO, IT and other relevant authorities’ frameworks.

Title: Cyber Security Engineer

Job ID: 22275

Location

Land - 249 Jalan Boon Lay, SG

Description

Job Description

Responsible for the following roles & responsibilities (but not limited to the following), covering primarily all N2 and N3 computers and systems in the company:

• Perform Log Review on classified computers and systems.
• Perform Change Management and maintain records for audit purposes.
• Conduct Cyber Risk Assessment on classified computers & systems.
• Handle and follow up on Cyber Security Incident Management.
• Conduct Cyber hygiene awareness & education for computer users.
• Conduct internal and support external Cyber Security Compliance Audits
• Ensuring adherence to internal security policies, IT governance frameworks, and compliance controls.
• Track and remediate vulnerabilities, ensuring computers and system meet security patching and compliance standards.
• Conduct Vulnerability Management (VA Scanning) on classified network computers and systems.
• Enforce Data Security and Encryption requirements on classified computers and systems.
• Formalize and archival of network security processes & flows, develop SOPs for compliance.
• Implement GPOs to maintain Secured Configurations to prevent breaches
• Daily basic cyber security operation and maintenance.
• Conduct security audits and prepared reports, highlighting areas for improvement.
• Coordinate and supporting external audits, risk assessments, and regulatory submissions.
• Assist with implementation of security standards aligned to MSD, GISO, IT and other relevant authorities’ frameworks.

Job Requirements to have 1 or more of the following certifications:

• CSSA+ — Cyber Security System Administration (cum CEH / ComTia Security+ within 6 months of appointment)
• CISA — Certified Information Systems Auditor
• CISM — Certified Information Security Manager
• ISO 27001 – Internal Audit — ISO/IEC 27001 Information Security Management Systems (ISMS) Internal Auditor.
• ISO 27001 – Lead Implementer — ISO/IEC 27001 Information Security Management Systems (ISMS) Lead Implementer.
• CISSP — Certified Information Systems Security Professional.
• GCIH - GIAC Certified Incident Handler