Cyber Security Engineer

SGCM PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

SGCM PTE. LTD. in Singapore is seeking a cybersecurity professional to perform hands-on vulnerability assessment and penetration testing across network, web apps, cloud and mobile. You will manage WAF, Qualys scanner and privileged access management, and help draft security policies and playbooks.

The role requires at least 3 years of cybersecurity experience, strong analytical and communication skills, and the ability to work independently and in a team. Certifications would be an advantage.

Qualifications

• At least 3 years of experience in cybersecurity or related field.
• Independent and able to work with minimal supervision.
• Strong analytical and problem-solving skills.
• Solid understanding of cybersecurity principles and practices.
• Detail-oriented and organised.
• Good communication and interpersonal skills.
• Willing to learn and keep up with cybersecurity trends.
• Able to work both independently and in a team.
• Relevant cybersecurity certifications would be an advantage.

Responsibilities

• Perform hands-on vulnerability assessment and penetration testing across network, web apps, cloud and mobile.
• Scan and test web apps and networks; follow up remediation and closures.
• Manage WAF, Qualys, and Privileged Access Management, including onboarding.
• Draft and maintain cybersecurity policies, standards, and governance documentation.
• Participate in cybersecurity drills and exercises.
• Prepare playbooks, procedures, checklists and frameworks documentation.
• Assist with ad-hoc tasks

Skills

Independent work

Analytical thinking

Problem solving

Cybersecurity principles

Detail-oriented

Communication skills

Team collaboration

Willingness to learn

Self-motivation

Education

Relevant cybersecurity certifications (advantage)

Job description

Key responsibilities

• Perform hands-on vulnerability assessment, review and penetration testing (Network, Web applications, Cloud, mobile applications)

• Web Application and network vulnerability scanning, penetration testing and follow up for remediation and closures

• Administer various security systems such as WAF, Qualys scanner and Privileged Access Management which includes onboarding of new systems and accounts

• Draft, review, and maintain cybersecurity policies, standards, and documentation (e.g., Business Continuity Plan (BCP), vendor risk management policy, security procedures, and governance frameworks), ensuring alignment with regulatory requirements and industry best practices

• Participate in cybersecurity drills and exercises

• Assist with documentation for playbooks, procedures, checklists and frameworks

• Other ad-hoc tasks

About You

• At least 3 years of experience in cybersecurity or a related field

• Independent and able to work with minimal supervision

• Good analytical and problem-solving skills

• Good understanding of cybersecurity principles and practices

• Detail-oriented and organised

• Good communication and interpersonal skills

• Willing to learn and keep up with new cybersecurity trends

• Able to work well independently and as part of a team

• Relevant cybersecurity certifications would be an advantage