Cybersecurity Engineer, BCA

GovTech Singapore; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

GovTech Singapore is seeking a cybersecurity analyst to join its Security Operations team in Singapore under a 2-year contract, focusing on security testing, incident response, and policy compliance.

You will manage vendors, review reports, implement mitigations, and provide consultancy across cloud and on‑prem environments, requiring 3–5 years' experience, CISSP/CISM preferred, and strong scripting and communication skills.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3-5 years of experience in cybersecurity analyst or similar role.
• Strong understanding of network protocols, operating systems (Windows, Linux), and cloud security concepts (AWS, Azure, GCP).
• Proficiency with security tools such as vulnerability scanners, penetration testing tools, and SIEM platforms.
• Experience with scripting languages (e.g., Python, PowerShell) for automation.
• Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
• Understanding of the OWASP Top 10 vulnerabilities.
• Excellent analytical and problem-solving skills with attention to detail.
• Ability to work independently and as part of a team in a fast-paced environment.
• Strong written and verbal communication skills, to convey technical information to non-technical audiences.
• Proven ability to manage multiple tasks and prioritize effectively.
• Require CISSP and/or CISM certification.

Responsibilities

• Manage security vendors and deliverables.
• Manage periodic security testing.
• Assess mitigation/remediation for adequacy and effectiveness.
• Manage timely and effective mitigation/remediation.
• Review security reports.
• Review security policies, standards, procedures and guidelines.
• Provide cybersecurity consultancy.
• Respond to security alerts/advisories.
• Handling incidents.
• Conduct security awareness training.
• Broadcast email security advisories.

Skills

Analytical thinking

Communication skills

Independent work

Attention to detail

Time management

Teamwork

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Vulnerability scanners

Penetration testing tools

SIEM platforms

Python scripting

PowerShell scripting

Job description

GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.

At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round.

Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!

Learn more about GovTech at tech.gov.sg.

What you will be working on

• Manage security vendors and deliverables.
• Manage periodic security testing.
• Assess mitigation/remediation for adequacy and effectiveness.
• Manage timely and effective mitigation/remediation.
• Review security reports.
• Review security policies, standards, procedures and guidelines.
• Provide cybersecurity consultancy.
• Respond to security alerts/advisories.
• Handling incidents.
• Conduct security awareness training.
• Broadcast email security advisories.

What we are looking for

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3-5 years of experience in cybersecurity analyst or similar role.
• Strong understanding of network protocols, operating systems (Windows, Linux), and cloud security concepts (AWS, Azure, GCP).
• Proficiency with security tools such as vulnerability scanners, penetration testing tools, and SIEM platforms.
• Experience with scripting languages (e.g., Python, PowerShell) for automation.
• Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
• Understanding of the vulnerabilities listed in the Open Web Application Security Project (OWASP) Top 10.
• Excellent analytical and problem-solving skills with a strong attention to detail.
• Ability to work independently and as part of a team in a fast-paced environment.
• Strong written and verbal communication skills, with the ability to articulate technical information to non-technical audiences.
• Proven ability to manage multiple tasks and prioritize effectively.
• Require CISSP and/or CISM certification.

The Following Certifications Are Advantageous But Not Mandatory

• GIAC Certified Incident Handler (GCIH)
• CompTIA Security+
• CompTIA CySA+
• EC-Council Certified Security Analyst (ECSA)
• EC-Council Certified Ethical Hacker (CEH)
• (ISC)2 Systems Security Certified Practitioner (SSCP)
• Offensive Security Certified Professional (OSCP)

This role will start on a 2 year contract.

What we offer you

GovTech is an equal opportunity employer committed to fostering an inclusive workplace that values diverse voices and perspectives, as we believe that diversity is the foundation to innovation.

Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programs.

We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you.

Learn more about life inside GovTech at go.gov.sg/GovTechCareers.

Stay connected with us on social media at go.gov.sg/ConnectWithGovTech