Cybersecurity Platform Engineer

OPTIMUM SOLUTIONS (SINGAPORE) PTE LTD; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

OPTIMUM SOLUTIONS (SINGAPORE) PTE LTD is seeking an experienced cybersecurity engineer to operate and maintain firewall, EDR, and cloud security platforms in Singapore. You will manage Palo Alto NGFW, Carbon Black EDR, Cloudflare DDoS/WAF, and CyberArk PAM, performing patching, log reviews, on-boarding, and incident support.

You will ensure compliance with security policies, conduct vulnerability remediation, change management, and maintain backups and SOPs, while coordinating with teams to keep

Qualifications

• Strong enterprise networking fundamentals: TCP/IP, VLAN, routing, NAT, DNS, network segmentation and troubleshooting.
• Hands-on experience with: Palo Alto NGFW or equivalent; Carbon Black EDR or equivalent; Cloudflare DDoS/WAF or equivalent; CyberArk PAM or equivalent.
• Experience with firewall policies, patching, log analysis, endpoint/security platform administration and troubleshooting.
• Understanding of secure/segregated or air-gapped environments, including controlled offline patch/file transfers.

Responsibilities

• Operate and maintain Palo Alto firewalls, including firewall rules/policies, patching, firmware upgrades, health checks, log reviews, configuration changes and troubleshooting.
• Maintain Carbon Black EDR, including RHEL-hosted servers, endpoint sensors, application services, logs, patching, endpoint onboarding and troubleshooting.
• Administer Cloudflare DDoS/WAF, including website onboarding/offboarding, WAF/security rules, IP whitelist/blacklist changes, SSL certificates, access/log reviews and vendor coordination.
• Administer CyberArk PAM, including privileged account onboarding/offboarding, access reviews, password management, service/change requests and audit logs.
• Perform vulnerability remediation, patch management, security reviews and preventive maintenance.
• Support cybersecurity incidents, investigations, assessments and audits.
• Maintain and test platform backup and restoration processes.
• Raise and manage change requests for system/configuration changes.
• Maintain SOPs, asset inventories, configuration records, security trackers and maintenance reports.
• Ensure compliance with organisational cybersecurity policies, CSA Cybersecurity Act requirements and CCoP.

Skills

Networking fundamentals

Firewall policies

Log analysis

Endpoint security administration

Offline environments

Vulnerability remediation

Tools

Palo Alto NGFW

Carbon Black EDR

Cloudflare DDoS/WAF

CyberArk PAM

Job description

Key Responsibilities

• Operate and maintain Palo Alto firewalls, including firewall rules/policies, patching, firmware upgrades, health checks, log reviews, configuration changes and troubleshooting.
• Maintain Carbon Black EDR, including RHEL-hosted servers, endpoint sensors, application services, logs, patching, endpoint onboarding and troubleshooting.
• Administer Cloudflare DDoS/WAF, including website onboarding/offboarding, WAF/security rules, IP whitelist/blacklist changes, SSL certificates, access/log reviews and vendor coordination.
• Administer CyberArk PAM, including privileged account onboarding/offboarding, access reviews, password management, service/change requests and audit logs.
• Perform vulnerability remediation, patch management, security reviews and preventive maintenance.
• Support cybersecurity incidents, investigations, assessments and audits.
• Maintain and test platform backup and restoration processes.
• Raise and manage change requests for system/configuration changes.
• Maintain SOPs, asset inventories, configuration records, security trackers and maintenance reports.
• Ensure compliance with organisational cybersecurity policies, CSA Cybersecurity Act requirements and CCoP.

Mandatory Technical Skills

• Strong enterprise networking fundamentals: TCP/IP, VLAN, routing, NAT, DNS, network segmentation and troubleshooting.
• Hands-on experience with: Palo Alto NGFW or equivalent Carbon Black EDR or equivalent Cloudflare DDoS/WAF or equivalent CyberArk PAM or equivalent
• Experience with firewall policies, patching, log analysis, endpoint/security platform administration and troubleshooting.
• Understanding of secure/segregated or air-gapped environments, including controlled offline patch/file transfers.

Good to Have

• Vulnerability management, security hardening, incident response and change management experience.
• PKI / TLS / SSL certificate management.
• Experience supporting highly secured or CII environments.
• Certifications such as CCNA, Palo Alto, CyberArk Defender/Sentry or Cloudflare-related certification.