Cybersecurity Detection Engineer - Security Exposure & Third-Party Risk_ Contract

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Benefits offered by this job

Benefits not listed

Job summary

NTT SINGAPORE PTE. LTD. is seeking a Cybersecurity Detection Engineer to strengthen Security Exposure Management and Third-Party Cyber Assurance initiatives.

You will identify external cyber exposures, assess third-party risks, validate emerging threats and work with stakeholders to drive remediation. Responsibilities include performing EASM across internet-facing assets, prioritising vulnerabilities, conducting vendor security assessments, and developing dashboards and metrics to report on

Qualifications

• Degree in Computer Science, IT, Cybersecurity or related discipline.
• 3–5 years of hands‑on cybersecurity experience.
• Experience in Security Exposure Management, EASM, cyber risk or third‑party risk.
• Experience with vendor cybersecurity assessments or security questionnaires.
• Knowledge of NIST, ISO 27001 and CIS Controls.
• Scripting or automation with Python/PowerShell/Bash.

Responsibilities

• Perform Security Exposure Management and EASM across internet-facing assets and services.
• Identify, assess and prioritise vulnerabilities, misconfigurations and external exposures.
• Conduct third-party vendor cybersecurity assessments and due diligence.
• Review security questionnaires and perform risk assessments and remediation tracking.
• Support continuous cyber assurance and monitoring of critical third parties.
• Assess third-party, fourth-party and nth-party cybersecurity risks.
• Monitor threats and threat intelligence to identify exposures.
• Develop security dashboards and cyber posture metrics for management.
• Automate monitoring, assessment, reporting or data processing with Python/PS/Bash.
• Collaborate with stakeholders to refine security controls and baselines.

Skills

Analytical skills

Communication

Documentation

Stakeholder management

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity or related discipline

Job description

Employment Details

• Employment Type: Contract
• Contract Duration: 12 months, renewable
• Work Location: Singapore

Job Description

We are looking for a Cybersecurity Detection Engineer to support Security Exposure Management and Third-Party Cyber Assurance initiatives. The role will focus on identifying external cyber exposures, assessing third-party security risks, validating emerging threats, and working with stakeholders to drive remediation.

Key Responsibilities

• Perform Security Exposure Management and External Attack Surface Management (EASM) activities across internet-facing assets and services.
• Identify, assess and prioritise vulnerabilities, misconfigurations and external cyber exposures.
• Conduct cybersecurity assessments of third-party vendors and service providers.
• Perform vendor security due diligence, security questionnaire and evidence reviews, risk assessments and remediation tracking.
• Support continuous cyber assurance and monitoring of critical third parties and supply-chain dependencies.
• Assess third-party, fourth-party and nth-party cybersecurity risks.
• Monitor cyber threats, vulnerabilities and threat intelligence to identify potential exposure to the organisation and its third parties.
• Validate high-risk or actively exploited vulnerabilities and support risk-based remediation.
• Develop security dashboards, cyber posture metrics, reports and management updates.
• Use Python, PowerShell or Bash to automate security monitoring, assessment, reporting or data-processing activities.
• Collaborate with security, technology, risk, infrastructure and business stakeholders to manage identified cyber risks.
• Support refinement of security controls, detection logic and cyber-risk baselines.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 3-5 years of relevant hands-on cybersecurity experience.
• Experience in one or more areas such as Security Exposure Management, EASM, cyber risk, third-party cyber risk, vulnerability management, threat intelligence or security operations.
• Practical experience conducting third-party/vendor cybersecurity assessments, security due diligence or security questionnaires.
• Knowledge of cybersecurity frameworks such as NIST, ISO 27001 and CIS Controls.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, internet-facing infrastructure and common security vulnerabilities.
• Exposure to AWS, Azure and/or GCP security environments.
• Experience with vulnerability, attack-surface, threat-intelligence, digital-risk or security monitoring tools.
• Scripting or automation experience using Python, PowerShell and/or Bash.
• Strong analytical, documentation, communication and stakeholder-management skills.

Good to Have

• Experience with SIG, CAIQ or similar third-party security assessment frameworks.
• Experience with EASM, Digital Risk Protection, cyber exposure or threat-intelligence platforms.
• Experience developing cybersecurity dashboards or cyber posture scorecards.
• Security certifications such as Security+, CEH, CySA+, GSEC, GCIH, CISSP or CISM.
• Experience within financial services or other highly regulated environments.