Engineer, IT Security (Fresh Graduate)

Silicon Box Inc; Singapore; On-site; SGD 54,000 - 69,000; Full time

Job summary

Silicon Box Inc. in Singapore is seeking a junior IT security professional to support day-to-day security operations and drive continuous improvement of our cybersecurity environment.

You will work with IT teams on security monitoring, incident response, vulnerability management, access security, and compliance activities, gaining hands-on experience and building a solid foundation in enterprise cybersecurity.

Qualifications

• Bachelor's degree in cybersecurity or related discipline is required.
• Good understanding of the CIA triad, authentication, encryption, phishing, malware and common threats.
• Basic networking concepts including TCP/IP, ports, protocols, firewalls, VPNs and segmentation.
• Internship or project experience in a SOC, IT operations or security team.

Responsibilities

• Monitor and investigate security alerts from SIEM, EDR/antivirus, DLP, firewalls and other security tools.
• Support incident response including evidence collection, containment and documentation.
• Perform vulnerability scans and coordinate patching with system owners.
• Review firewall rules, VPN, web filtering, and endpoint security controls.
• Review user access and MFA and identity security reviews.
• Work with Infra Team to harden servers, network devices and cloud resources against CIS Benchmarks.
• Maintain security documentation and evidence for compliance.
• Assist with security awareness initiatives like phishing simulations.

Skills

Cybersecurity fundamentals

Team collaboration

Independent working

Windows basics

Linux basics

Networking basics

Education

Bachelor’s Degree in Cybersecurity or related field

Job description

The primary responsibility of this role is to support the day-to-day IT security operation and continuous improvement of the company’s cybersecurity environment, helping to protect our systems, infrastructure, users, and data from cybersecurity threats. The successful candidate will work closely with the IT teams on security monitoring, incident response, vulnerability management, access security, security controls, and compliance activities. This is an excellent opportunity to gain hands-on experience and build a strong foundation in enterprise cybersecurity. The ideal candidate should have a strong interest in cybersecurity, a willingness to learn, and the ability to work independently as part of a team.

Key responsibilities

• Monitor and investigate security alerts from SIEM, EDR/antivirus, DLP, firewalls, email security, and other security tools, performing initial triage and escalation where required.
• Support security incident response, including evidence collection, containment, investigation, documentation, and follow-up actions.
• Perform vulnerability scans, track security findings, and coordinate with system owners on patching and remediation.
• Assist in reviewing firewall rules, VPN, web filtering, endpoint security, and other security controls.
• Review and support user access, privileged account, MFA, and identity security reviews.
• Work with Infra Team hardening servers, network devices and cloud resources against security baselines (e.g. CIS Benchmarks).
• Maintain security documentation: policies, procedures, risk register.
• Support ISO 9000 & /IEC 27001 activities, internal audits and evidence collection for compliance.
• Assist with security awareness efforts such as phishing simulations and staff briefings.
• Monitor emerging cybersecurity threats and vulnerabilities and share relevant security advisories and recommendations with the team.

Requirements

• Bachelor’s Degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related discipline.
• Good understanding of cybersecurity fundamentals, including the CIA Triad, authentication, encryption, phishing, malware, ransomware, and common cyber threats.
• Basic networking, Windows and Linux knowledge: TCP/IP, ports and protocols, firewalls, VPN and network segmentation.
• Internship or project experience in a SOC, IT operations or security team.