External Cyber Exposure & 3rd-Party Risk Engineer

NTT SINGAPORE PTE. LTD.; Singapore; Presencial; SGD 78 000 - 123 000; Tempo integral

Resumo da oferta

NTT Singapore Pte. Ltd. is seeking a Detection Engineer – Cybersecurity for a 6‑month contract in Singapore. The role focuses on external exposure management, third‑party risk, CTI and remediation across complex enterprise environments.

You will closely monitor internet-facing assets, perform third‑party assessments, review risk controls and drive security improvements with stakeholders across security, risk and business teams.

Qualificações

• 3–5 years of hands-on cybersecurity experience with Security Exposure Management and related areas.
• Experience conducting third‑party/vendor cybersecurity assessments.
• Experience with security questionnaires, evidence reviews and risk assessments.
• Understanding of third, fourth and nth-party cyber risk.
• Familiarity with NIST CSF, ISO 27001 and CIS Controls.
• Knowledge of AWS, Azure and/or Google Cloud Platform security.

Responsabilidades

• Perform continuous external attack-surface discovery and monitoring of assets.
• Identify unknown and exposed assets and validate security exposures.
• Analyse vulnerabilities and external exposures against threat intel.
• Assess third‑party service providers including risk ratings and evidence.
• Automate monitoring and reporting using Python/PowerShell/Bash.
• Collaborate with security, risk and business stakeholders to drive remediation.

Conhecimentos

SEM & EASM

Third-party risk

Threat intel

Vuln management

Python scripting

Cloud security

Ferramentas

SecurityScorecard

Censys

Descrição da oferta de emprego

NTT Singapore Pte. Ltd. is seeking a Detection Engineer – Cybersecurity for a 6‑month contract in Singapore. The role focuses on external exposure management, third‑party risk, CTI and remediation across complex enterprise environments.

You will closely monitor internet-facing assets, perform third‑party assessments, review risk controls and drive security improvements with stakeholders across security, risk and business teams.