Cybersecurity Engineer (in-house)

TECH GRID ASIA PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

TECH GRID ASIA PTE. LTD. is seeking an in-house Cybersecurity Engineer to protect digital assets, network infrastructure, and data from threats.

You will bridge IT operations with information security by building defenses, monitoring for threats, managing vulnerabilities, and driving incident response. You will lead security operations, perform vulnerability management across on-prem and cloud, and help design secure architectures with Zero Trust principles.

Qualifications

• Bachelor's degree in IT, Computer Science, Cybersecurity, or equivalent.
• Minimum 3 years in Cybersecurity or IT security engineering.
• Hands-on with SIEM, EDR, NDR, vulnerability scanners and security frameworks (NIST/ISO 27001).
• Understanding networking, OS (Windows/Linux), and cloud (AWS, Azure).
• Strong analytical thinking and ability to explain risks to non-technical stakeholders.

Responsibilities

• Monitor network traffic, logs, and security alerts using enterprise tools.
• Lead triage and investigation of security incidents.
• Write and maintain incident response playbooks.
• Perform vulnerability assessments across on-prem and cloud.
• Support penetration testing and security audits.
• Manage security tech incl. firewalls, IAM, DLP; enforce zero trust.

Skills

SIEM

EDR

NDR

Vulnerability scanning

Zero Trust

Cloud security

Incident response

Threat hunting

Networking

Windows

Linux

AWS

Azure

Risk assessment

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

SIEM

EDR

NDR

Vulnerability scanners

IAM

DLP

Job description

Role Overview

As an in-house Cybersecurity Engineer, you will protect our organization's digital assets, network infrastructure, and data from cyber threats. You will bridge the gap between IT operations and information security by building robust defenses, actively monitoring for threats, managing vulnerabilities, and driving our incident response efforts.

Key Responsibilities

Security Operations & Incident Response

• Continuously monitor network traffic, system logs, and security alerts using enterprise SIEM and EDR platforms.
• Lead the triage and investigation of security incidents, coordinating containment, root-cause analysis, and recovery efforts.
• Write and maintain incident response playbooks for diverse threat scenarios (e.g., malware, phishing, data exfiltration).

Vulnerability & Attack Surface Management

• Perform regular vulnerability assessments across on-premises and cloud environments.
• Track identified exposures and collaborate with system owners to prioritize and implement timely remediation.
• Support or conduct routine penetration testing and security audits to proactively identify weaknesses.

Infrastructure Security & Architecture

• Administer, configure, and maintain security technologies including firewalls, endpoint protection, IAM, and DLP solutions.
• Implement Zero Trust security principles and assist in designing secure network and cloud architectures.
• Oversee access controls and encryption implementations to secure data at rest and in transit.

Compliance & Internal Collaboration

• Assist in supporting cybersecurity frameworks, risk assessments, and compliance initiatives.
• Provide security training and awareness programs to educate internal employees on best practices.
• Collaborate with internal departments and IT teams to natively integrate secure practices into system lifecycles.

Qualifications & Skills

• Bachelor's degree in IT, Computer Science, Cybersecurity, IT, or equivalent
• Min. 3 years of experience in Cybersecurity or IT security engineering
• Hands-on experience managing security tools like SIEM, EDR, NDR, vulnerability scanners as well as knowledge on security frameworks e. NIST, ISO/IEC 27001 etc.
• Understanding of networking protocols, operating systems (Windows/Linux), and cloud environments (AWS, Azure) preferred
• Soft Skills: Strong analytical thinking, problem-solving skills, and the ability to translate technical security risks to non-technical stakeholders.

Preferred Certifications

• Certifications such as CISSP, CISM, CRISC, CompTIA Security+ will be advantageous