Cybersecurity and Network Engineer (IT), A*STAR BII

A*STAR Research Entities (A*STAR); Singapore; On-site; SGD 50,000 - 80,000; Full time

Job summary

A research organization in Singapore is looking for a Cybersecurity and Network Engineer to enhance their security posture and oversee network solutions. You'll ensure network infrastructure operates securely and efficiently, manage vendors for solution deployment, and maintain cybersecurity compliance. The ideal candidate should have a bachelor's degree in a related field and 3 to 5 years of experience in a cybersecurity/network engineering role, along with strong analytical skills and a solid understanding of network technologies.

Qualifications

• 3 to 5 years in cybersecurity and/or network engineering required.
• Proficiency in configuring firewalls and IDS/IPS.
• Familiarity with scripting languages like Python or PowerShell.

Responsibilities

• Oversee vendor management throughout solution deployment.
• Perform ongoing maintenance of network devices and security systems.
• Develop and enforce cybersecurity policies and procedures.

Skills

Network device management

Cybersecurity frameworks understanding

Vendor management

Proactive threat detection

Analytical skills

Education

Bachelor degree in Computer Science or related field

Tools

Cisco

Fortinet

Palo Alto

Linux

Windows

Job description

JOB DESCRIPTIONS:

The Cybersecurity and Network Engineer will be pivotal in identifying, evaluating, and sourcing new network and cybersecurity solutions. This role will then focus on overseeing the deployment of these solutions by external vendors, followed by their ongoing maintenance and operational management. You will ensure the secure and efficient functioning of our network infrastructure and systems, taking responsibility for proactive threat detection, incident response, vulnerability management, and ensuring compliance with security policies and industry best practices. A strong understanding of networking principles, cybersecurity frameworks, and a passion for staying ahead of emerging threats are essential.

KEY RESPONSIBILITIES:

Solution Sourcing and Strategy

• Research, evaluate, and recommend new cybersecurity and network solutions to enhance our security posture and network capabilities.
• Conduct market analysis to identify emerging technologies, vendors, and best practices relevant to our infrastructure and security needs.
• Develop business cases and justifications for new solution procurements.

Vendor Management & Solution Deployment Oversight

• Manage and coordinate with external vendors throughout the lifecycle of solution deployment, from selection to post implementation review.
• Review and validate vendor provided designs, configurations, and implementation plans to ensure alignment with organizational security policies and network architecture standards.
• Oversee the successful integration of new solutions into the existing infrastructure.

Post Deployment Maintenance & Operations

• Perform ongoing maintenance, configuration, and optimization of network devices (routers, switches, firewalls, load balancers) and security systems (IDS/IPS, SIEM, EDR, antimalware, vulnerability scanners).
• Monitor network and system activity for suspicious behavior, security incidents, and unauthorized access, taking prompt action as needed.
• Conduct regular vulnerability assessments, penetration testing, and security audits to identify and address weaknesses post deployment.
• Develop and implement incident response plans, leading efforts to contain, eradicate, and recover from cyberattacks.
• Manage and maintain identity and access management (IAM) solutions.

Security Policy and Compliance

• Develop, implement, and enforce cybersecurity policies, standards, and procedures.
• Ensure compliance with relevant industry regulations and frameworks (e.g., GDPR, HIPAA, ISO 27001).
• Conduct regular security awareness training for employees.

Troubleshooting and Documentation

• Diagnose and resolve complex network and security issues efficiently.
• Perform regular system updates, patching, and configuration management for network and security devices.
• Maintain detailed documentation of network configurations, security policies, and incident response procedures.

Collaboration and Continuous Improvement

• Collaborate with IT teams, developers, and other stakeholders to integrate security into all aspects of the infrastructure and software development lifecycle.
• Stay up to date with the latest cybersecurity threats, technologies, and best practices.

JOB REQUIREMENTS:

• Bachelor degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related field.
• Proven experience (3 to 5 years) in a cybersecurity and/or network engineering role, with a strong emphasis on solution sourcing, vendor management, and post deployment operational maintenance.
• Hands on experience with network devices (e.g., Cisco, Juniper, Fortinet, Palo Alto) and various security tools.
• Strong understanding of TCP/IP, routing protocols (BGP, ISIS, OSPF), VLANs, VPNs, and wireless technologies.
• Proficiency in configuring and managing firewalls, IDS/IPS, and other security appliances.
• Knowledge of common attack vectors, security vulnerabilities, and defensive strategies.
• Familiarity with scripting languages (e.g., Python, PowerShell) for automation and security tasks.
• Experience with operating systems (Windows, Linux, UNIX).
• Understanding of cryptography and secure communication protocols.
• Excellent analytical and problem solving skills.
• Strong communication and interpersonal skills, with the ability to explain complex technical concepts to non technical stakeholders, and effectively liaise with and manage external vendors.
• Ability to work independently and as part of a team in a fast paced environment.
• Detail oriented and highly organized.
• Proactive and eager to learn new technologies.

Certifications (Highly Valued):

• CompTIA Security+
• CompTIA CySA+
• (ISC)² CISSP (Certified Information Systems Security Professional)
• Cisco CCNA, CCNP Security, or CCIE Security
• Certified Ethical Hacker (CEH)

The above eligibility criteria are not exhaustive. A*STAR may include additional selection criteria based on its prevailing recruitment policies. These policies may be amended from time to time without notice. We regret that only shortlisted candidates will be notified.