Cybersecurity Detection Engineer – Security Exposure & Third-Party Risk_ Contract

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Part time

Job summary

NTT SINGAPORE PTE. LTD. is seeking a Cybersecurity Detection Engineer to support Security Exposure Management and Third-Party Cyber Assurance. This contract role focuses on identifying external cyber exposures, assessing third-party security risks and driving remediation with stakeholders.

Responsibilities include EASM, vendor assessments, risk tracking, and building dashboards. Proficiency in Python/PowerShell/Bash and cloud exposure is preferred; strong communication is essential.

Qualifications

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 3-5 years of relevant hands-on cybersecurity experience.
• Experience in Security Exposure Management, EASM, cyber risk or third-party risk.
• Experience conducting third-party/vendor cybersecurity assessments and security questionnaires.
• Knowledge of frameworks such as NIST, ISO 27001 and CIS Controls.
• Understanding of TCP/IP, DNS, HTTP/HTTPS, and internet-facing infrastructure.
• Exposure to AWS, Azure and/or GCP security environments.
• Scripting or automation using Python, PowerShell and/or Bash.
• Strong analytical, documentation, communication and stakeholder-management skills.

Responsibilities

• Perform Security Exposure Management and EASM across internet-facing assets.
• Identify, assess and prioritise vulnerabilities and external cyber exposures.
• Conduct third-party vendor cybersecurity assessments and due diligence.
• Perform security questionnaires, risk assessments and remediation tracking.
• Support cyber assurance and monitoring of critical third parties and supply chains.
• Assess third-, fourth- and nth-party cybersecurity risks.
• Monitor threats and intelligence to identify exposure to the organisation and its third parties.
• Validate high-risk or exploited vulnerabilities and support remediation.
• Develop security dashboards and cyber posture reports for management.
• Use Python, PowerShell or Bash to automate monitoring and reporting.
• Collaborate with security, technology, risk, and business stakeholders to manage risks.
• Support refinement of security controls and cyber-risk baselines.

Skills

Cybersecurity

Threat intelligence

Vulnerability management

Third-party risk

Python

PowerShell

Bash

Communication

Analytical skills

Documentation

Stakeholder mgmt

Education

Degree in Computer Science / IT / Cybersecurity

Tools

AWS

Azure

GCP

EASM

Threat intelligence platforms

Job description

Cybersecurity Detection Engineer – Security Exposure & Third-Party Risk

Employment Details

• Employment Type: Contract
• Contract Duration: 12 months, renewable
• Work Location: Singapore

We are looking for a Cybersecurity Detection Engineer to support Security Exposure Management and Third-Party Cyber Assurance initiatives. The role will focus on identifying external cyber exposures, assessing third-party security risks, validating emerging threats, and working with stakeholders to drive remediation.

Key Responsibilities

• Perform Security Exposure Management and External Attack Surface Management (EASM) activities across internet-facing assets and services.
• Identify, assess and prioritise vulnerabilities, misconfigurations and external cyber exposures.
• Conduct cybersecurity assessments of third-party vendors and service providers.
• Perform vendor security due diligence, security questionnaire and evidence reviews, risk assessments and remediation tracking.
• Support continuous cyber assurance and monitoring of critical third parties and supply-chain dependencies.
• Assess third-party, fourth-party and nth-party cybersecurity risks.
• Monitor cyber threats, vulnerabilities and threat intelligence to identify potential exposure to the organisation and its third parties.
• Validate high-risk or actively exploited vulnerabilities and support risk-based remediation.
• Develop security dashboards, cyber posture metrics, reports and management updates.
• Use Python, PowerShell or Bash to automate security monitoring, assessment, reporting or data-processing activities.
• Collaborate with security, technology, risk, infrastructure and business stakeholders to manage identified cyber risks.
• Support refinement of security controls, detection logic and cyber-risk baselines.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 3-5 years of relevant hands-on cybersecurity experience.
• Experience in one or more areas such as Security Exposure Management, EASM, cyber risk, third-party cyber risk, vulnerability management, threat intelligence or security operations.
• Practical experience conducting third-party/vendor cybersecurity assessments, security due diligence or security questionnaires.
• Knowledge of cybersecurity frameworks such as NIST, ISO 27001 and CIS Controls.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, internet-facing infrastructure and common security vulnerabilities.
• Exposure to AWS, Azure and/or GCP security environments.
• Experience with vulnerability, attack-surface, threat-intelligence, digital-risk or security monitoring tools.
• Scripting or automation experience using Python, PowerShell and/or Bash.
• Strong analytical, documentation, communication and stakeholder-management skills.

Good to Have

• Experience with SIG, CAIQ or similar third-party security assessment frameworks.
• Experience with EASM, Digital Risk Protection, cyber exposure or threat-intelligence platforms.
• Experience developing cybersecurity dashboards or cyber posture scorecards.
• Security certifications such as Security+, CEH, CySA+, GSEC, GCIH, CISSP or CISM.
• Experience within financial services or other highly regulated environments.