Enterprise Security Engineer

Mediacorp Pte. Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Mediacorp Pte. Ltd. is seeking a Security Engineer to design, implement and strengthen enterprise security controls across endpoints, identity, network, email, web, cloud and monitoring domains.

You will collaborate with security operations, IAM, infrastructure and vendors to ensure secure-by-design implementations, scalable logging, and effective incident readiness across corporate and cloud environments.

Qualifications

• Bachelor's degree or equivalent experience in Cybersecurity, Information Technology, Computer Science, Engineering or a related field.
• Relevant certifications such as CISSP, CISM, CCSP, GIAC, Microsoft Security, AWS Security, Azure Security or equivalent will be advantageous.

Responsibilities

• Design, implement and support enterprise security controls across endpoint, identity, network, email, web, cloud and monitoring domains.
• Support integration of security platforms such as SIEM, EDR/XDR, secure web gateway, email security, vulnerability management and related tooling.
• Develop secure integration patterns between security platforms, cloud services and security operations workflows.
• Assist with security solution design reviews and deliver technical designs and handover documentation.
• Coordinate onboarding of security logs into central monitoring platforms.
• Ensure log sources are complete, reliable and aligned with compliance needs.
• Assist with detection use-case testing, alert validation, tuning and incident readiness.
• Track log onboarding gaps and data quality issues.
• Support PAM implementation and operational management.
• Onboard systems, accounts and workflows into PAM platform.
• Provide security advisory support to project teams to ensure secure-by-design.
• Maintain documentation covering architecture decisions, configurations, risks and procedures.

Skills

Security architecture

Security operations

IAM & PAM concepts

Cloud security

Stakeholder management

Education

Bachelor's degree or equivalent in Cybersecurity/IT/CS/Engineering

Tools

SIEM

EDR/XDR

Secure Web Gateway

Email Security

PAM

IAM

Cloud Security

Job description

COMPANY DESCRIPTION

Mediacorp is Singapore’s largest content creator and national media network, operating a suite of TV channels, radio stations, and multiple digital platforms. Its mission is to engage, entertain, and enrich audiences by harnessing the power of creativity.

We are committed to creating an inclusive and diverse workplace where talent thrives. Our hiring decisions are made based on merit and fit-to-role. If you have a disability or special need which requires accommodation to participate in the recruitment process, please inform us when you submit your online application. We will be happy to support as necessary.

Thank you for your interest and application to this role. Please note that only short-listed candidates will be contacted.

RESPONSIBILITIES

Purpose of the role

As the Security Engineer, you will support the design, implementation, integration and continuous improvement of enterprise security controls across corporate, cloud and hybrid environments. You will strengthen the organisation's security posture through hands-on engineering of enterprise security platforms, secure logging and monitoring, endpoint protection, access management, email and web security, and security operations enablement.

Scope of the role

The major focus of this role is to provide hands-on security architecture and engineering support for the enterprise security stack, including (but not limited to) SIEM, endpoint detection and response, secure web gateway, email security, log onboarding, cloud security integrations, vulnerability and exposure management tooling and access management execution support. The role works closely with security operations, IAM, infrastructure, cloud, application, workplace technology and vendors to ensure security controls are implemented, integrated, documented and operationally sustainable.

Key Responsibilities

1. Security Architecture & Engineering

• Design, implement and support enterprise security controls across endpoint, identity integration, network, email, web, cloud and monitoring domains.
• Support engineering and integration of enterprise security platforms such as SIEM, EDR/XDR, secure web gateway, email security, vulnerability and exposure management, and related security tooling.
• Develop secure integration patterns between security platforms, infrastructure, cloud services and security operations workflows.
• Support solution design reviews and translate security requirements into practical implementation plans, technical designs and handover documentation.

1. Security Monitoring, Logging & Detection Enablement

• Coordinate onboarding of security logs from enterprise, cloud, application, infrastructure, network and critical systems into central monitoring platforms.
• Ensure log sources are complete, reliable, correctly parsed and aligned with detection, audit and compliance requirements.
• Work with security operations teams to support detection use case testing, alert validation, tuning and incident response readiness.
• Track and resolve log onboarding gaps, data quality issues and integration defects.

1. Privileged Access Management Support

• Support implementation, migration and operational management of privileged access management controls in alignment with the IAM architecture and strategy.
• Work with the IAM Architect, infrastructure, application and operations teams to onboard systems, accounts and privileged workflows into the PAM platform.
• Support PAM-related testing, migration planning, user acceptance, operational handover, documentation and issue resolution.
• Assist with privileged access hygiene activities, including privileged account reviews, service account onboarding, access key rotation support and exception tracking.

1. Security Platform Delivery & Operational Support

• Support implementation, upgrade, migration and enhancement activities across the enterprise security stack.
• Perform technical testing, validation and troubleshooting of security platform integrations.
• Coordinate with vendors, managed service providers, infrastructure teams and application owners to resolve security platform issues.
• Maintain technical documentation covering architecture decisions, configurations, integration flows, risks, dependencies and operational procedures.

1. Risk, Remediation & Stakeholder Management

• Support security assessments for new systems, cloud services, vendor solutions and technology changes.
• Identify security risks, control gaps and remediation options, and communicate them clearly to technical and non-technical stakeholders.
• Track security remediation actions, operational follow-ups and exceptions through to closure.
• Provide security advisory support to project teams to help ensure secure-by-design implementation.

Foundation Competencies

• Strong analytical, problem-solving and critical thinking skills.
• Effective communication and stakeholder management skills across technical and non-technical teams.
• Self-driven team player capable of working independently and managing multiple priorities.
• Strong documentation discipline and ability to produce clear technical decisions, risks and remediation actions.
• Willingness to support urgent security issues or implementation activities when required.

Functional Competencies

• Good working knowledge of SIEM, log management, EDR/XDR, secure web gateway, email security, PAM, IAM concepts, cloud security and security assessments.
• Experience supporting security platform implementation, migration, integration or enhancement activities.
• Good understanding of security logging, monitoring, detection use cases, privileged access controls and infrastructure security.
• Ability to analyse technical issues and translate them into practical security actions.
• Ability to work effectively with security operations, IAM, infrastructure, cloud, application, vendors and managed service providers.

Experience

• Relevant experience in cybersecurity engineering, security operations, infrastructure security, cloud security or security architecture.
• Experience supporting enterprise security platforms, security monitoring, IAM/PAM, endpoint security, email security, web protection or security review processes.
• Experience in regulated, critical infrastructure, media, technology, telecommunications or large enterprise environments will be advantageous.
• Experience working with managed security service providers or outsourced security operations teams will be advantageous.

QUALIFICATIONS

• Bachelor's degree or equivalent experience in Cybersecurity, Information Technology, Computer Science, Engineering or a related field.
• Relevant certifications such as CISSP, CISM, CCSP, GIAC, Microsoft Security, AWS Security, Azure Security or equivalent will be advantageous.