First VP, Infrastructure Security Engineering Lead

UOB; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

United Overseas Bank Ltd is seeking an Infrastructure Security Engineering Lead to design, implement, and continuously improve security controls across Windows, Linux, Unix, networks, Cloud and container platforms. You will drive secure configuration baselines, endpoint protection, PAM controls, and compliance assurance in a complex financial services environment.

You will collaborate with Infrastructure, Platform Engineering, Identity & Access Management, Cyber Defense, Risk and Governance

Qualifications

• Strong hands-on experience administering and securing Windows, Linux, Unix, Active Directory, Container and Cloud environments.
• Strong experience in Configuration Management, including security baseline development, hardening, compliance monitoring, configuration drift detection, and policy enforcement.
• Strong hands-on experience implementing and managing Endpoint Security technologies such as endpoint protection platforms (EPP), endpoint detection and response (EDR), anti-malware, host intrusion prevention, file integrity monitoring, and endpoint compliance solutions.
• Strong experience in Privileged Access Management (PAM) solutions, including privileged account lifecycle management, password vaulting, credential rotation, session monitoring, and privileged access controls.
• Good understanding of identity security, non-human identities, authentication, authorization, access governance, and security monitoring.
• Experience in automating security controls, compliance reporting, and operational processes through scripting and engineering tools.
• Ability to translate security policies, standards, and regulatory requirements into practical technical solutions.
• Strong analytical, troubleshooting, stakeholder management, documentation, and communication skills.
• Resilient and adaptable, with the ability to manage competing priorities and resolve complex technical challenges.
• Experience working in financial services or other highly regulated environments is preferred.
• Relevant certifications such as CISSP, CISM, CyberArk, Microsoft, Red Hat, Linux, or other cybersecurity-related certifications are advantageous.

Responsibilities

• Develop, maintain, and enforce security configuration baselines and hardening standards for Windows, Linux, Unix, Active Directory, Cloud and related infrastructure platforms.
• Implement and operate configuration compliance monitoring capabilities to identify configuration drift, policy violations, and deviations from approved security standards.
• Develop and maintain automated compliance, security assessment, and reporting capabilities to improve security visibility and control effectiveness.
• Engineer, implement, and manage endpoint security technologies, including endpoint protection, anti-malware, intrusion prevention, file integrity monitoring, endpoint compliance, and endpoint security policy enforcement.
• Lead security hardening and configuration management initiatives to improve the overall security posture of servers, endpoints, and infrastructure platforms.
• Manage and enhance Privileged Access Management (PAM) controls, including privileged account onboarding, credential protection, password/secrets vaulting, session management, monitoring, and periodic access reviews.
• Establish security controls and governance for service accounts, application identities, machine identities, and other non-human accounts throughout their lifecycle.
• Identify and remediate unmanaged, orphaned, inactive, shared, or excessively privileged accounts to reduce identity-related security risks.
• Provide security engineering support for technology projects, platform upgrades, vulnerability remediation, audits, risk assessments, and security incidents.
• Develop automation, reusable engineering patterns, technical standards, and operational procedures to improve efficiency, consistency, and scalability.
• Collaborate closely with Infrastructure, Platform Engineering, Identity & Access Management, Cyber Defense, Security Architecture, Risk, and Governance teams to implement and maintain security controls.

Skills

Windows

Linux

Unix

Active Directory

Container

Cloud

Configuration Management

Endpoint Security

PAM

Identity Security

Scripting

Tools

EPP

EDR

CyberArk

Microsoft

Red Hat

Job description

Company: 1011 United Overseas Bank Ltd

About UOB

United Overseas Bank Limited (UOB) is a leading bank in ASEAN with a global network in Southeast Asia, Asia Pacific, Europe and North America. Operating through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia, Thailand and Vietnam, we have a global network of about 430 branches and offices in 19 markets. At the heart of UOB is our culture, shaped by the UOB Way and anchored on our four values - Honourable, Enterprising, United and Committed. For more than 90 years, these values have guided how we do right by our customers, collaborate with one another and create long-term value for the communities we operate in. As One Bank, we are committed to helping our colleagues build sustainable careers grounded in purpose, supported by strong values, and enriched with meaningful opportunities to grow.

Job Description

The Infrastructure Security Engineering Lead is responsible for the engineering, implementation, and continuous improvement of security controls that protect the Bank’s servers, endpoints, privileged accounts, and supporting infrastructure. The role focuses on secure configuration management, endpoint security services, privileged access controls, and the ongoing assurance of security compliance across Windows, Linux, Unix, Networks, Appliance, Container, Cloud and associated technologies.

Responsibilities

• Develop, maintain, and enforce security configuration baselines and hardening standards for Windows, Linux, Unix, Active Directory, Cloud and related infrastructure platforms.
• Implement and operate configuration compliance monitoring capabilities to identify configuration drift, policy violations, and deviations from approved security standards.
• Develop and maintain automated compliance, security assessment, and reporting capabilities to improve security visibility and control effectiveness.
• Engineer, implement, and manage endpoint security technologies, including endpoint protection, anti-malware, intrusion prevention, file integrity monitoring, endpoint compliance, and endpoint security policy enforcement.
• Lead security hardening and configuration management initiatives to improve the overall security posture of servers, endpoints, and infrastructure platforms.
• Manage and enhance Privileged Access Management (PAM) controls, including privileged account onboarding, credential protection, password/secrets vaulting, session management, monitoring, and periodic access reviews.
• Establish security controls and governance for service accounts, application identities, machine identities, and other non-human accounts throughout their lifecycle.
• Identify and remediate unmanaged, orphaned, inactive, shared, or excessively privileged accounts to reduce identity-related security risks.
• Provide security engineering support for technology projects, platform upgrades, vulnerability remediation, audits, risk assessments, and security incidents.
• Develop automation, reusable engineering patterns, technical standards, and operational procedures to improve efficiency, consistency, and scalability.
• Collaborate closely with Infrastructure, Platform Engineering, Identity & Access Management, Cyber Defense, Security Architecture, Risk, and Governance teams to implement and maintain security controls.

Requirements

• Strong hands-on experience administering and securing Windows, Linux, Unix, Active Directory, Container and Cloud environments.
• Strong experience in Configuration Management , including security baseline development, hardening, compliance monitoring, configuration drift detection, and policy enforcement.
• Strong hands-on experience implementing and managing Endpoint Security technologies such as endpoint protection platforms (EPP), endpoint detection and response (EDR), anti-malware, host intrusion prevention, file integrity monitoring, and endpoint compliance solutions.
• Strong experience in Privileged Access Management (PAM) solutions, including privileged account lifecycle management, password vaulting, credential rotation, session monitoring, and privileged access controls.
• Good understanding of identity security, non-human identities, authentication, authorization, access governance, and security monitoring.
• Experience in automating security controls, compliance reporting, and operational processes through scripting and engineering tools.
• Ability to translate security policies, standards, and regulatory requirements into practical technical solutions.
• Strong analytical, troubleshooting, stakeholder management, documentation, and communication skills.
• Resilient and adaptable, with the ability to manage competing priorities and resolve complex technical challenges.
• Experience working in financial services or other highly regulated environments is preferred.
• Relevant certifications such as CISSP, CISM, CyberArk, Microsoft, Red Hat, Linux, or other cybersecurity-related certifications are advantageous.

Additional Requirements

Be a Part of the UOB Family

UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate’s age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors. All employment decisions at UOB are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.