Cybersecurity Engineer (Tenable, Trellix), Financial Services

Kerry Consulting; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Kerry Consulting partners with a well-established financial services client in Singapore to recruit a Principal Security Engineer. This role leads design, implementation, and lifecycle management of enterprise security platforms across on-prem, cloud, and hybrid environments.

You will drive vulnerability management with Nessus Professional and Trellix endpoints, oversee SIEM, SOAR, IAM, WAF, DLP, and related technologies, and mentor engineers while coordinating with vendors and stakeholders to

Qualifications

• 10+ years of hands-on security engineering in complex enterprise environments.
• Strong expertise in Nessus Professional vulnerability management lifecycle.
• Hands-on experience managing Trellix endpoint security and related tools (EDR/XDR, SIEM, SOAR).
• 5+ years of cloud security experience, AWS preferred, with networking and hardening knowledge.
• Security certifications would be advantageous.

Responsibilities

• Design, implement, optimise, and lifecycle-manage enterprise security technologies across on-prem, cloud, and hybrid environments.
• Lead security solution deployments, remediation, and platform upgrades.
• Support critical incident response and security investigations.
• Work with vendors and internal stakeholders; provide technical guidance to engineers.
• Ensure audits, risk, and regulatory requirements are met.

Skills

Vulnerability management

Security architecture

Cloud security

Networking

Unix/Linux scripting

Tools

Nessus Professional

Trellix

EDR/XDR

SIEM

SOAR

DLP

PAM

IAM

WAF

IDS/IPS

Job description

Our client is a well-established organisation within the Financial Services sector, operating a large-scale, technology-driven environment with a strong focus on security, resilience, and regulatory compliance. They are seeking an experienced Principal Security Engineer to strengthen their cybersecurity capabilities and support the ongoing enhancement of enterprise security platforms.

Role

This is a senior hands-on engineering position responsible for the design, implementation, optimisation, and lifecycle management of enterprise security technologies across on-premises, cloud, and hybrid environments. A key focus will be on vulnerability management using Nessus Professional and enterprise anti-virus / endpoint protection using Trellix, alongside broader security technologies such as SIEM, SOAR, EDR/XDR, DLP, PAM, IAM, WAF, and IDS/IPS. The successful candidate will lead security solution deployments, manage remediation and platform upgrades, support critical incident response, conduct implementation testing, work closely with vendors and internal stakeholders, and provide technical guidance to other engineers.

Requirements

• At least 10 years of hands-on security engineering experience within complex enterprise environments, with strong experience implementing and operating cybersecurity platforms.
• Strong practical expertise in vulnerability management, particularly Nessus Professional, including vulnerability identification, remediation coordination, platform administration, and ongoing operational management.
• Hands-on experience managing enterprise anti-virus / endpoint security solutions, particularly Trellix, together with broader exposure to technologies such as EDR/XDR, SIEM, SOAR, dlp, PAM, IAM, WAF, and IDS/IPS.
• Minimum 5 years of cloud security experience, including security design and management of cloud-native services, preferably within AWS environments, complemented by solid networking, system hardening, Unix/Linux, and scripting knowledge.
• Proven ability to independently lead security technology implementations from POC through production rollout, troubleshoot complex issues, engage vendors and cross-functional teams, and support security incidents, audit, risk, and regulatory requirements. Relevant security and cloud certifications would be advantageous.