Cyber Security Engineer

RiDiK (a Subsidiary of CLPS. Nasdaq: CLPS); Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

RiDiK is seeking an experienced Cyber Platform Engineer to manage operations, maintenance, security, and lifecycle management of critical cybersecurity platforms across secure enterprise environments in Singapore. Key focus areas include Palo Alto Firewall operations, Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM.

The role covers preventive maintenance, patching, incident support, access management, backup, restoration, and compliance with cybersecurity policies.

Qualifications

• Experience in managing cybersecurity platforms and secure enterprise environments.
• Knowledge of Palo Alto Firewall operations and Carbon Black EDR.
• Experience with Cloudflare DDoS/WAF and CyberArk PAM.
• Familiarity with policy compliance and incident response.

Responsibilities

• Perform quarterly preventive maintenance, health checks, patching, and diagnostics for Palo Alto firewalls.
• Administer Carbon Black EDR servers and perform health-checks and patching.
• Manage CyberArk PAM onboarding/offboarding and privileged access reviews.
• Maintain backup and restoration plans for platforms and verify backups.
• Review logs, perform security assessments, and support incident response.

Skills

Networking

Firewall management

Security monitoring

Incident response

Log analysis

Tools

Palo Alto NGFW

Carbon Black EDR

Cloudflare DMS/WAF

CyberArk PAM

PostgreSQL

Solr

Job description

We are looking for an experienced Cyber Platform Engineer to manage the operations, maintenance, troubleshooting, security, and lifecycle management of critical cybersecurity platforms across secure enterprise environments. The role will primarily focus on Palo Alto Firewalls, Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM.

The engineer will be responsible for preventive maintenance, platform administration, security reviews, patching, incident support, access management, backup and restoration, change management, and compliance with cybersecurity policies and regulatory requirements.

Key Responsibilities

Palo Alto Firewall Operations

Perform quarterly preventive maintenance, health checks, patching, firmware upgrades, and diagnostics.

Manage firewall policies, rules, NAT, routing, security profiles, and configurations.

Perform log and account reviews and investigate anomalies.

Execute vulnerability patching and CVE remediation according to defined timelines.

Perform firewall configuration, rule whitelisting, log extraction, configuration backup, and restoration.

Support firewall-related security assessments and audits.

Raise and manage change requests for maintenance and configuration changes.

Carbon Black EDR

Administer Carbon Black EDR servers hosted on RHEL 8.

Perform OS, database, application, backup, health-check, and patching activities.

Troubleshoot PostgreSQL/Solr, log forwarding, indexing, and queue-related issues.

Monitor endpoint sensor health, connectivity, and deployment status.

Support endpoint onboarding, sensor recovery, redeployment, and diagnostics.

Coordinate with OEM/vendor teams for advanced troubleshooting and support.

Act as the primary technical contact for Cloudflare DMS-related requests.

Perform access, log, and report reviews.

Manage website onboarding/offboarding.

Maintain WAF/DDoS security rules and configurations.

Handle IP whitelisting/blacklisting, log extraction, alerts, and security policy changes.

Manage SSL certificate renewals and website maintenance activities.

Review and optimise DMS rules and notifications with relevant stakeholders and vendors.

CyberArk PAM

Administer CyberArk Privileged Access Management infrastructure.

Manage privileged account onboarding and offboarding.

Perform periodic privileged access reviews.

Handle password expiry/rotation and privileged access management activities.

Process PAM-related service and change requests.

Support investigations and incident response activities.

Security, Compliance & Incident Response

Ensure cybersecurity platforms comply with organisational security policies and applicable cybersecurity requirements.

Support cybersecurity assessments, audits, vulnerability management, and security hardening.

Immediately report security incidents, vulnerabilities, unauthorised access, and security compromises.

Retrieve and analyse logs, configurations, and platform data during investigations.

Prepare incident investigation reports and implement preventive measures.

Backup & Restoration

Maintain backup and restoration plans for all supported cybersecurity platforms.

Ensure configuration backups are completed before and after changes.

Verify scheduled backups and maintain appropriate backup evidence.

Coordinate annual restoration testing and track remediation activities.

Maintain backup records for audits and cybersecurity assessments.

Documentation & Reporting

Prepare maintenance reports after each maintenance cycle.

Maintain health-check records, log review findings, patch status, backup evidence, license expiry tracking, and outstanding action items.

Maintain SOPs, asset inventories, configuration documentation, and troubleshooting guides.

Maintain security dashboards and trackers for vulnerabilities, access reviews, deviations, and audit items.

Mandatory Technical Skills

Strong enterprise networking knowledge: TCP/IP, VLAN, Routing, NAT, DNS, Network Segmentation and Firewall Traffic Flow.

Hands-on experience with Palo Alto NGFW or equivalent firewall platforms.

Strong knowledge of firewall policy/rule management, NAT, routing, security profiles, log analysis, patching, firmware upgrades, and backup/restoration.

Hands-on experience with Carbon Black EDR or equivalent EDR platforms.

Experience with Cloudflare DMS/WAF or equivalent DDoS mitigation and WAF solutions.

Experience with CyberArk PAM or equivalent Privileged Access Management platforms.

Understanding of air-gapped networks, restricted connectivity, offline patch/file transfer, data diodes, and unidirectional gateways.