Cyber Security Engineer

CloudMile; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

CloudMile seeks an experienced software engineer to build and maintain a portable AI-assisted cybersecurity platform. You will develop backend modules, APIs, dashboards, and reporting, and create data ingestion pipelines integrating vulnerability and security tools.

The role supports cloud and on-prem deployments, with a focus on secure engineering practices and scalable CI/CD workflows. You will work across frontend, backend, infrastructure, and security tooling, ensuring reproducible offline

Qualifications

• 3–5+ years of experience in Software Engineering, DevOps, Platform Engineering, or related fields.
• Proficiency in Python or Node.js/TypeScript and REST API development.
• Experience with modern frontend frameworks and dashboard development.
• Experience with AWS services, containerisation, and CI/CD pipelines.
• Familiarity with application security, container security, vulnerability management, and common security scanning tools.
• Ability to understand legacy setups, refactor existing code, and propose practical improvements.

Responsibilities

• Build and maintain the platform backend, APIs, dashboard, and reporting modules.
• Develop data ingestion pipelines to aggregate and normalise outputs from vulnerability, web application, SBOM, container, compliance, and security scanning tools.
• Integrate cybersecurity tools into guided assessment workflows, including Nessus, Burp Suite, Kali Linux tools, Wireshark, and equivalent platforms.
• Support deployment across cloud-based development environments and on-premise air-gapped laptops.
• Implement logging, audit trails, access controls, and secure engineering practices across the platform.
• Maintain CI/CD pipelines, deployment scripts, and infrastructure configurations.

Skills

Python

Node.js/TypeScript

REST API

Frontend frameworks

Dashboard development

AWS

Containerisation

CI/CD

Security tooling

Legacy refactor

Tools

Nessus

Burp Suite

Kali Linux

Job description

Develop and maintain a portable AI-assisted cybersecurity platform that integrates cybersecurity tools, AI workflows, scan outputs, findings, and reporting into a unified dashboard deployable across both off-premise cloud and on-premise air-gapped environments.

[Please note that this is a contract role and you will be placed in a government related project.]

Key Responsibilities

• Build and maintain the platform backend, APIs, dashboard, and reporting modules.
• Develop data ingestion pipelines to aggregate and normalise outputs from vulnerability, web application, SBOM, container, compliance, and security scanning tools.
• Integrate cybersecurity tools into guided assessment workflows, including Nessus, Burp Suite, Kali Linux tools, Wireshark, and equivalent platforms.
• Support deployment across cloud-based development environments and on-premise air-gapped laptops.
• Implement logging, audit trails, access controls, and secure engineering practices across the platform.
• Maintain CI/CD pipelines, deployment scripts, and infrastructure configurations.

Key Requirements

• 3–5+ years of experience in Software Engineering, DevOps, Platform Engineering, or related fields.
• Proficiency in Python or Node.js/TypeScript and REST API development.
• Experience with modern frontend frameworks and dashboard development.
• Experience with AWS services, containerisation, and CI/CD pipelines.
• Familiarity with application security, container security, vulnerability management, and common security scanning tools.
• Ability to understand legacy setups, refactor existing code, and propose practical improvements.

Preferred Attributes

• Strong focus on Developer Experience and maintainable, scalable engineering practices.
• Comfortable working across frontend, backend, infrastructure, and security tooling.
• Experience designing portable systems that support offline deployment and reproducibility.
• Familiarity with integrating AI workflows or model outputs into backend services.
• Awareness of secure software development practices, including handling sensitive data and access control.