First VP, Infrastructure Security Engineering Lead

United Overseas Bank; Singapore; On-site; SGD 140,000 - 210,000; Full time

Job summary

1011 United Overseas Bank Ltd in Singapore seeks an Infrastructure Security Engineering Lead to design, implement, and continually improve security controls across Windows, Linux, Unix, cloud, and on-prem infrastructure.

You will lead configuration management, endpoint security, PAM, and compliance efforts, collaborating with IAM, Cyber Defense, and platforms teams to reduce risk in a highly regulated financial services environment.

Qualifications

• Hands-on experience securing Windows, Linux, Unix, AD, container and cloud environments.
• Experience with configuration management, hardening, compliance monitoring, drift detection, and policy enforcement.
• Experience with endpoint security technologies (EPP/EDR, anti-malware, HIPS, FIM) and PAM solutions.
• Knowledge of identity security, non-human identities, authentication, authorization, and access governance.
• Ability to automate security controls and reporting via scripting and engineering tools.
• Ability to translate security policies into practical technical solutions.
• Strong analytical, troubleshooting, stakeholder management, and communication skills.
• Experience in financial services or regulated environments preferred.
• Certifications such as CISSP, CISM, CyberArk, Microsoft, Red Hat advantageous.

Responsibilities

• Develop and enforce security baselines for Windows, Linux, Unix, AD, Cloud and related infrastructure platforms.
• Implement and operate configuration compliance monitoring to identify drift and policy violations.
• Develop automated compliance, security assessment, and reporting capabilities to improve visibility.
• Engineer and manage endpoint security technologies (EPP, EDR, anti-malware, HIPS, FIM, endpoint compliance).
• Lead security hardening and configuration management initiatives across servers, endpoints, and platforms.
• Manage and enhance PAM controls including onboarding, vaulting, password rotation, session monitoring, and reviews.
• Establish security controls for service accounts, machine identities, and non-human accounts.
• Identify and remediate unmanaged or overprivileged accounts to reduce risk.
• Provide security engineering support for projects, upgrades, audits, and incidents.
• Develop automation patterns, standards, and procedures for efficiency and scale.
• Collaborate with Infrastructure, IAM, Cyber Defense, Governance teams to implement controls.

Skills

Security configuration management

Endpoint security

Privileged Access Management (PAM)

Automation scripting

Security policy enforcement

Incident response

Identity & access governance

Cloud security

Vulnerability remediation

Tools

Endpoint protection platforms (EPP)

EDR

Host intrusion prevention

File integrity monitoring

CyberArk

Credential rotation

Job description

Company: 1011 United Overseas Bank Ltd

About UOB

United Overseas Bank Limited (UOB) is a leading bank in ASEAN with a global network in Southeast Asia, Asia Pacific, Europe and North America. Operating through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia, Thailand and Vietnam, we have a global network of about 430 branches and offices in 19 markets. At the heart of UOB is our culture, shaped by the UOB Way and anchored on our four values - Honourable, Enterprising, United and Committed. For more than 90 years, these values have guided how we do right by our customers, collaborate with one another and create long-term value for the communities we operate in. As One Bank, we are committed to helping our colleagues build sustainable careers grounded in purpose, supported by strong values, and enriched with meaningful opportunities to grow.

Job Description

The Infrastructure Security Engineering Lead is responsible for the engineering, implementation, and continuous improvement of security controls that protect the Bank's servers, endpoints, privileged accounts, and supporting infrastructure. The role focuses on secure configuration management, endpoint security services, privileged access controls, and the ongoing assurance of security compliance across Windows, Linux, Unix, Networks, Appliance, Container, Cloud and associated technologies.

Responsibilities

• Develop, maintain, and enforce security configuration baselines and hardening standards for Windows, Linux, Unix, Active Directory, Cloud and related infrastructure platforms.
• Implement and operate configuration compliance monitoring capabilities to identify configuration drift, policy violations, and deviations from approved security standards.
• Develop and maintain automated compliance, security assessment, and reporting capabilities to improve security visibility and control effectiveness.
• Engineer, implement, and manage endpoint security technologies, including endpoint protection, anti-malware, intrusion prevention, file integrity monitoring, endpoint compliance, and endpoint security policy enforcement.
• Lead security hardening and configuration management initiatives to improve the overall security posture of servers, endpoints, and infrastructure platforms.
• Manage and enhance Privileged Access Management (PAM) controls, including privileged account onboarding, credential protection, password/secrets vaulting, session management, monitoring, and periodic access reviews.
• Establish security controls and governance for service accounts, application identities, machine identities, and other non-human accounts throughout their lifecycle.
• Identify and remediate unmanaged, orphaned, inactive, shared, or excessively privileged accounts to reduce identity-related security risks.
• Provide security engineering support for technology projects, platform upgrades, vulnerability remediation, audits, risk assessments, and security incidents.
• Develop automation, reusable engineering patterns, technical standards, and operational procedures to improve efficiency, consistency, and scalability.
• Collaborate closely with Infrastructure, Platform Engineering, Identity & Access Management, Cyber Defense, Security Architecture, Risk, and Governance teams to implement and maintain security controls.

Requirements

• Strong hands-on experience administering and securing Windows, Linux, Unix, Active Directory, Container and Cloud environments.
• Strong experience in Configuration Management , including security baseline development, hardening, compliance monitoring, configuration drift detection, and policy enforcement.
• Strong hands-on experience implementing and managing Endpoint Security technologies such as endpoint protection platforms (EPP), endpoint detection and response (EDR), anti-malware, host intrusion prevention, file integrity monitoring, and endpoint compliance solutions.
• Strong experience in Privileged Access Management (PAM) solutions, including privileged account lifecycle management, password vaulting, credential rotation, session monitoring, and privileged access controls.
• Good understanding of identity security, non-human identities, authentication, authorization, access governance, and security monitoring.
• Experience in automating security controls, compliance reporting, and operational processes through scripting and engineering tools.
• Ability to translate security policies, standards, and regulatory requirements into practical technical solutions.
• Strong analytical, troubleshooting, stakeholder management, documentation, and communication skills.
• Resilient and adaptable, with the ability to manage competing priorities and resolve complex technical challenges.
• Experience working in financial services or other highly regulated environments is preferred.
• Relevant certifications such as CISSP, CISM, CyberArk, Microsoft, Red Hat, Linux, or other cybersecurity-related certifications are advantageous.

Additional Requirements

B