Cyber Security Engineer

Thales Avionics, Inc. (AGS); Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Thales in Singapore is seeking a Cybersecurity Engineer to coordinate VAPT activities, analyze security logs, review firewall configurations, manage remediation, and support security incident investigations. The role requires hands-on support for network and security infrastructure and compliance with security policies.

The successful candidate will monitor SIEM platforms, manage SEPM, and contribute to patching, hardening, and risk assessment efforts to maintain operational readiness and 99.9%

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 3+ years of proven experience in cybersecurity or information security roles, with a focus on L2 support or similar responsibilities.
• Minimally 1-2 years of experience in supporting mission critical systems with a stringent SLA of 99.9%.

Responsibilities

• Provide Level 2 operational support, maintenance and troubleshooting for network and cybersecurity infrastructure to ensure system availability, security compliance and operational stability.
• Perform preventive maintenance, health checks and operational monitoring of network and security equipment.
• Manage firewall operations, including rule administration, configuration changes, troubleshooting and verification in accordance with established security policies.
• Provide operational support and maintenance for Hardware Security Modules (HSM), ensuring availability and proper functioning.
• Monitor SIEM platforms, investigate security alerts, analyse events, identify potential threats and elevate incidents to the relevant teams.
• Administer and maintain SEPM, including monitoring endpoint security status and supporting security policy enforcement.
• Monitor ClearPass and PAAM platforms, investigate operational issues and coordinate remediation to maintain service availability and access security.
• Support VAPT remediation activities, including tracking findings, coordinating corrective actions and performing remediation verification.
• Conduct quarterly security and compliance checks and support IM8 compliance governance to ensure adherence to applicable security standards, policies and requirements.
• Perform incident, problem and change management activities, including incident investigation, escalation, root cause analysis and implementation of corrective and preventive actions.
• Support patch management, configuration management and security hardening activities to maintain infrastructure integrity and reduce security risks.
• Conduct testing and verification of infrastructure changes, patches, configurations and security remediation activities to ensure operational readiness and minimise service disruptions.
• Coordinate incident response and resolution with relevant stakeholders, technical teams and service providers in accordance with established procedures and service-level agreements (SLAs).
• Maintain accurate operational documentation, incident records, configuration baselines, SOPs and knowledge base articles.
• Support day-to-day cybersecurity BAU operations, ensuring timely resolution of operational issues and adherence to established security policies, operational procedures and service-level requirements.

Skills

Cybersecurity knowledge

Analytical thinking

Communication

Education

Bachelor's degree in Information Security or Computer Science

Tools

SIEM

Firewalls

Vulnerability scanners (Tenable)

Job description

Location: Singapore, Singapore

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we're driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we're shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

The Cybersecurity Engineer will be responsible for coordinating VAPT activities, analyzing security logs and alerts, reviewing firewall configurations and access rules, managing remediation of security findings, supporting security incident investigation, and maintaining the necessary security documentation and compliance evidence. The role will also support security patching, configuration hardening, risk assessment and audit requirements.

Responsibilities

• Provide Level 2 operational support, maintenance and troubleshooting for network and cybersecurity infrastructure to ensure system availability, security compliance and operational stability.
• Perform preventive maintenance, health checks and operational monitoring of network and security equipment.
• Manage firewall operations, including rule administration, configuration changes, troubleshooting and verification in accordance with established security policies.
• Provide operational support and maintenance for Hardware Security Modules (HSM), ensuring availability and proper functioning.
• Monitor Security Information and Event Management (SIEM) platforms, investigate security alerts, analyse events, identify potential threats and elevate incidents to the relevant teams.
• Administer and maintain Symantec Endpoint Protection Manager (SEPM), including monitoring endpoint security status and supporting security policy enforcement.
• Monitor Aruba ClearPass and PAAM platforms, investigate operational issues and coordinate remediation to maintain service availability and access security.
• Support Vulnerability Assessment and Penetration Testing (VAPT) remediation activities, including tracking findings, coordinating corrective actions and performing remediation verification.
• Conduct quarterly security and compliance checks and support IM8 compliance governance to ensure adherence to applicable security standards, policies and requirements.
• Perform incident, problem and change management activities, including incident investigation, escalation, root cause analysis and implementation of corrective and preventive actions.
• Support patch management, configuration management and security hardening activities to maintain infrastructure integrity and reduce security risks.
• Conduct testing and verification of infrastructure changes, patches, configurations and security remediation activities to ensure operational readiness and minimise service disruptions.
• Coordinate incident response and resolution with relevant stakeholders, technical teams and service providers in accordance with established procedures and service-level agreements (SLAs).
• Maintain accurate operational documentation, incident records, configuration baselines, standard operating procedures (SOPs) and knowledge base articles.
• Support day-to-day cybersecurity Business-as-Usual (BAU) operations, ensuring timely resolution of operational issues and adherence to established security policies, operational procedures and service-level requirements.

Requirements

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent work experience.
• 3+ years of proven experience in cybersecurity or information security roles, with a focus on L2 support or similar responsibilities.
• Minimally 1-2 years of experience in supporting mission critical systems with a stringent SLA of 99.9%
• Strong understanding of security protocols, TCP/IP, network security, operating systems (Linux, Windows), and cloud security concepts.
• Well-versed in IT Service Management (ITSM) standards, processes, guidelines and best practices is an advantage.
• Hands-on experience with security tools such as SIEM, firewalls, vulnerability scanners (e.g., Tenable), and incident response platforms.
• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or CISSP are highly valued.
• Strong analytical thinking, problem-solving skills, attention to detail, and excellent communication and collaboration skills.

At Thales, we're committed to fostering a workplace where respect, trust