Cybersecurity Engineer, Financial Services

Kerry Consulting; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

Kerry Consulting is assisting a leading financial services organisation in Singapore seeking a Principal Security Engineer to strengthen its cybersecurity capabilities across on‑prem, cloud and hybrid environments.

You will lead vulnerability management with Nessus Pro and Trellix endpoint protection, guide security deployments, coordinate remediation, and support incident response, audits and regulatory requirements.

Qualifications

• 10+ years of hands-on security engineering in complex enterprise environments.
• Strong vulnerability management expertise, esp. Nessus Pro.
• Experience managing enterprise anti-virus/endpoint security, Trellix.
• 5+ years cloud security experience, AWS preferred; networking and scripting knowledge.
• Proven ability to lead security implementations from POC to production.

Responsibilities

• Design, implement, and lifecycle-manage enterprise security technologies across on-prem, cloud, and hybrid environments.
• Lead deployments, remediation, and platform upgrades; support incident response and audits.
• Collaborate with vendors and internal teams; provide guidance to engineers.
• Address regulatory requirements and ensure security controls across the stack.

Skills

Cloud security

Security engineering leadership

Vulnerability management

Incident response

Security testing

Tools

Nessus Professional

Trellix

SIEM

SOAR

EDR/XDR

PAM

IAM

WAF

IDS/IPS

Job description

Overview

Our client is a well-established organisation within the Financial Services sector, operating a large-scale, technology-driven environment with a strong focus on security, resilience, and regulatory compliance. They are seeking an experienced Principal Security Engineer to strengthen their cybersecurity capabilities and support the ongoing enhancement of enterprise security platforms.

Role

This is a senior hands-on engineering position responsible for the design, implementation, optimisation, and lifecycle management of enterprise security technologies across on-premises, cloud, and hybrid environments. A key focus will be on vulnerability management using Nessus Professional and enterprise anti-virus / endpoint protection using Trellix, alongside broader security technologies such as SIEM, SOAR, EDR/XDR, DLP, PAM, IAM, WAF, and IDS/IPS. The successful candidate will lead security solution deployments, manage remediation and platform upgrades, support critical incident response, conduct implementation testing, work closely with vendors and internal stakeholders, and provide technical guidance to other engineers.

Requirements

• At least 10 years of hands-on security engineering experience within complex enterprise environments, with strong experience implementing and operating cybersecurity platforms.
• Strong practical expertise in vulnerability management, particularly Nessus Professional, including vulnerability identification, remediation coordination, platform administration, and ongoing operational management.
• Hands-on experience managing enterprise anti-virus / endpoint security solutions, particularly Trellix, together with broader exposure to technologies such as EDR/XDR, SIEM, SOAR, DLP, PAM, IAM, WAF, and IDS/IPS.
• Minimum 5 years of cloud security experience, including security design and management of cloud-native services, preferably within AWS environments, complemented by solid networking, system hardening, Unix/Linux, and scripting knowledge.
• Proven ability to independently lead security technology implementations from POC through production rollout, troubleshoot complex issues, engage vendors and cross-functional teams, and support security incidents, audit, risk, and regulatory requirements. Relevant security and cloud certifications would be advantageous.