Cybersecurity Engineer (Solutioning and Architecture) - Multiple Headcounts

Assurity Trusted Solutions Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Assurity Trusted Solutions is seeking a Cybersecurity Engineer (Architecture & Solutioning) to lead SME efforts in security across cloud and on-prem environments. The role involves threat modelling, risk assessments, and implementing secure SDLC practices in collaboration with GovTech and partners.

You will guide multi-disciplinary teams, evaluate new technologies, and write technical security requirements for tenders. Senior incumbents may be considered based on interview outcomes.

Qualifications

• Minimum 5 years in cybersecurity with hands-on experience in threat modelling and security assessments.
• Experience in deploying and maintaining security infrastructure and working across cross-functional teams.
• Familiarity with modern IT approaches (DevOps, cloud, zero trust) and security standards (OWASP/MITRE ATT&CK).

Responsibilities

• Serve as SME on cybersecurity matters and guide risk-based decisions.
• Conduct Threat Risk Assessments across apps, cloud, and on-premise systems.
• Perform Threat Modelling using STRIDE with MITRE ATT&CK integration.
• Lead multi-disciplinary teams to implement cyber security controls for cloud and on-prem environments.
• Recommend security tool configurations (SIEM, DLP, EDR, XDR) to improve detection and response.
• Evaluate new technologies and validate security through PoCs and lab setups.
• Draft security clauses in project tender specifications and vendor contracts.
• Document and present findings to stakeholders and collaborate with government agencies.

Skills

Threat modelling

Security assessments

SIEM

Cloud security

DevOps familiarity

Tools

MITRE ATT&CK

STRIDE

Job description

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are looking for individuals to join us as Cybersecurity Engineer (Architecture & Solutioning). This person should be familiar with the cybersecurity domains, including Network Security or Device/Endpoint Management. This will be offered as a contract employment till 30 November 2028.

Senior role may be offered, subjected to the interview outcomes.

Responsibilities

• Serves as the subject matter expert (SME) on Cybersecurity matters.
• Conduct comprehensive Threat Risk Assessments across applications, cloud infrastructure, and enterprise systems.
• Perform Threat Modelling using structured methodologies (e.g., STRIDE), with strong integration of MITRE ATT&CK.
• Lead and influence multi-disciplinary teams in implementing and operating cyber security controls for cloud and on-premises environment; micro-services, containers, applications, operating systems, databases, and networks.
• Provide recommendations for the configuration and improvement of security detection and response tools (e.g. SIEM, VA, NDR, XDR, EDR, etc) to enhance operational effectiveness.
• Evaluates new technologies and validate the security of the technology including lab setup and proof of concepts (PoC).
• Specify and write technical security clauses within project tender specifications.
• Analyse, document and present security findings and recommendations to stakeholders.
• Collaborate with government agencies to define security requirements and work closely with industry partners to implement functional capabilities.
• Ensure adherence to secure software development lifecycle practices, maintaining high coding standards and delivering high-quality products.

Requirements

• 5 years' experience in cybersecurity domain.
• Experience in management, deployment and maintenance of security infrastructure.
• Experience in managing contractors and working in cross functional teams.
• Experience in conducting security assessments, including threat modelling, vulnerability assessments, and penetration testing.
• Maintaining current knowledge on cybersecurity tools, technologies and standards (e.g., OWASP and MITRE ATT&CK).
• Possess good communication skills and interpersonal skills.
• Motivated and self-directed. Clear and logical thinking.
• Demonstrate strong technical foundation and willingness to learn new technology and approaches.
• Possessing these skills and qualities can be advantageous:
  • Experience with modern IT approaches such as DevOps, Software Defined Network & Platform, Infrastructure as Code, Commercial cloud services and zero trust network.
  • Possess security certifications such as OSCP, CISSP, AWS or any cloud service security specialty is an added advantage.
  • Knowledge in applied cryptography, including cryptographic primitives, post-quantum cryptography, security protocols, and network security protocols (e.g., TLS, IPSec).
  • Familiarity with public key infrastructure (PKI), key management, hardware security modules (HSMs), and smart card technologies.

Benefits

• A wholly-owned subsidiary of GovTech.
• We promote a learning culture and encourage you to grow and learn.
• Contract Staff enjoys the same benefits as Permanent Employees.

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience.

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS's privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.