Cybersecurity Engineer (PKI, Cryptography Experience)

NCS Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

NCS Pte Ltd in Singapore is seeking a security-focused professional to lead cryptographic asset discovery, CBOM/SBOM governance, and PKI management within government or critical infrastructure contexts.

You will develop practical cybersecurity guidance, run workshops, and translate findings into implementable guidance for project teams. This role also requires independence, strong project management, and collaboration with cross-functional teams.

Qualifications

• Bachelor's degree in CS, Cybersecurity, Engineering, or Information Security.
• Minimum 3 years of hands-on PKI management experience.
• Strong knowledge of cryptography and cryptographic asset discovery.
• Experience with security testing, VAPT, scanning, and source code review.

Responsibilities

• Define cryptographic information using SBOM/CBOM standards.
• Develop methodologies to discover and inventory cryptographic assets.
• Develop AI, cloud, and IoT archetypes from a practitioner’s perspective.
• Develop migration strategies with risk-based prioritisation to minimise disruption.
• Conduct POC activities, workshops, and training with clients to validate methodologies.
• Build and maintain a test environment with the necessary tools, licences, and resources.

Skills

PKI management

Cryptography expertise

Stakeholder engagement

Project management

Technical communication

Training facilitation

Independent work

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or Information Security

Job description

Job Description

• Define cryptographic information using established standards such as Software Bill of Materials (SBOM) and Cryptography Bill of Materials (CBOM).
• Develop methodologies to discover and inventory cryptographic assets, practical approaches to capture cryptographic information, and guidance to maintain Cryptography Bill of Materials (CBOM).
• Develop representative AI, cloud, and IoT archetypes from a practitioner’s perspective.
• Develop migration strategies, including risk-based prioritisation to minimise disruption to business continuity, and provide configuration and key management considerations.
• Conduct proof-of-concept activities, workshops, review, training sessions, and surveys with client to validate proposed methodologies, taxonomy, discovery approaches, archetypes, and migration guidance.
• Support methodologies and approaches with relevant research studies and validate them through hands-on activities using the test environment.
• Build and maintain a suitable test environment including the necessary tools, licences, and resources to support the project

Project Management & Client Engagement

• Manage project timelines, deliverables, and milestones independently
• Engage with clients professionally and build strong working relationships
• Collaborate with other teams within NCS to ensure project success
• Translate technical findings into practical guidance suitable for project teams

Qualifications

Essential Qualifications & Experience

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or Information Security
• Minimum 3 years of hands-on experience in managing Public Key Infrastructure (PKI)
• Strong knowledge and practical experience in cryptography
• Experience in cryptographic asset discovery and cryptographic inventory development
• Ability to develop practical cybersecurity guidance and methodologies
• Experience with security testing, VAPT, scanning, and source code review

Soft Skills:

• Ability to work independently with minimal supervision
• Strong project management skills
• Excellent client management and stakeholder engagement abilities
• Ability to collaborate effectively with cross-functional teams within NCS
• Strong communication skills to translate technical findings into practical guidance
• Ability to facilitate training and review sessions

Technical Expertise:

• Experience with cryptography standards or frameworks
• Familiarity with AI security, cloud security architectures, or IoT security
• Experience working with government agencies or critical information infrastructure environments
• Knowledge of specific tools for cryptographic discovery or SBOM/CBOM development
• Experience in cybersecurity architecture, enterprise architecture, and system component mapping
• Understanding of cryptographic management, key management, and configuration management

Industry Experience:

• Experience in government, enterprise, or critical information infrastructure environments
• Track record of delivering cybersecurity projects in complex, regulated environments

Additional Information

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.