Cybersecurity Engineer

Data Connect Technologies Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Data Connect Technologies Pte Ltd is seeking a Cybersecurity Engineer to implement and manage security controls across networks and cloud environments. You will lead VAPT efforts, configure security tools, and collaborate with the SOC to respond to incidents.

Expect hands-on work with firewalls, SIEM, and Microsoft security products. The role requires CREST CPSA/CRT or equivalent certification, and strong experience with common VAPT tools and cloud security principles.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Proven work experience as Cybersecurity Engineer, Network Security Engineer, or Penetration Tester.
• CREST CRT or CPSA or OSCP/CEH certification is required.
• Strong VAPT experience including Burp Suite, Metasploit, Nmap, Nessus, Qualys, Kali Linux, OWASP ZAP.
• Hands-on with firewalls, IDS/IPS, endpoint protection, logs, authentication systems.
• Proficiency with SIEM and threat analytics platforms.
• Knowledge of ISO 27001, NIST, MITRE ATT&CK, OWASP Top 10, CIS Controls.
• Excellent written and verbal communication; able to present findings.

Responsibilities

• Implement, manage, and monitor security controls and defensive measures to protect systems and assets.
• Identify, define, and continuously improve system and network security requirements.
• Configure, maintain, and troubleshoot security infrastructure devices (firewalls, IDS/IPS, endpoint protection, SIEM).
• Configure and enhance Microsoft security solutions (Defender for Endpoint, Intune, CA, Defender for Office 365).
• Perform Vulnerability Assessments and Penetration Testing (VAPT) on networks, apps, and cloud.
• Develop scripts and use automated tools to identify vulnerabilities and mitigation.
• Conduct risk assessments, threat modeling, security audits, and incident response simulations.
• Prepare SOPs and security documentation including IR plans and post-engagement reports.
• Collaborate with SOC to investigate incidents, alerts, and escalations.
• Perform patch management and coordinate remediation with stakeholders.
• Develop and deliver security awareness trainings for clients and internal teams.
• Research emerging threats and best practices to improve security posture.
• Handle ad-hoc cybersecurity tasks as required.

Skills

Analytical thinking

Problem solving

Communication

Education

Bachelor's degree in CS/InfoSec

Tools

Burp Suite

Metasploit

Nmap

Nessus

Qualys

Kali Linux

OWASP ZAP

Job description

Key Responsibilities

• Implement, manage, and monitor security controls and defensive measures to protect computer systems, networks, and information assets.

• Identify, define, and continuously improve system and network security requirements.

• Configure, maintain, and troubleshoot security infrastructure devices (e.g., firewalls, IDS/IPS, endpoint protection, SIEM systems).

• Configure and enhance Microsoft Security solutions such as Defender for Endpoint, Intune, Conditional Access, and Defender for Office 365.

• Perform Vulnerability Assessments and Penetration Testing (VAPT) on networks, applications, and cloud environments to identify and remediate potential security risks.

• Utilize automated tools and develop custom scripts to identify and exploit security vulnerabilities, and recommend effective mitigations.

• Conduct risk assessments, threat modeling, security audits, and incident response simulations (e.g., tabletop exercises).

• Prepare and maintain Standard Operating Procedures (SOPs) and security documentation, including incident response plans and post-engagement reports.

• Collaborate with the SOC team to investigate and respond to security incidents, alerts, and escalations.

• Perform patch management and coordinate remediation activities with relevant stakeholders.

• Develop and deliver security awareness trainings and technical sessions for clients and internal teams.

• Research emerging cybersecurity threats, tools, and best practices to continuously enhance the organization's security framework.

• Any other ad-hoc cybersecurity-related tasks as required.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent professional experience).

• Proven work experience as a Cybersecurity Engineer, Network Security Engineer, or Penetration Tester.

• CREST Registered Penetration Tester (CRT) or equivalent professional certification (CREST Practitioner Security Analyst - CPSA, OSCP, CEH, etc.) is required.

• Strong experience in VAPT, including use of tools such as Burp Suite, Metasploit, Nmap, Nessus, Qualys, Kali Linux, and OWASP ZAP.

• Hands-on experience with security systems including firewalls, intrusion detection/prevention systems, endpoint protection, authentication systems, log management, and content filtering.

• Proficiency in security monitoring tools and threat analytics platforms (e.g., SIEM, EDR).

• Solid understanding of network security, cloud security (Azure, AWS), and identity access management principles.

• Strong knowledge of security frameworks and standards such as ISO 27001, NIST, MITRE ATT&CK, OWASP Top 10, and CIS Controls.

• Excellent analytical and problem-solving skills, with the ability to work effectively under pressure.

• Strong report writing and communication skills, with experience presenting technical findings to both technical and non-technical audiences.

• Continuous learner with a proactive approach to researching emerging threats and improving cybersecurity posture.

• Trainings will be provided for further professional development and certifications.