Information Security Engineer

APAR TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 80,000 - 110,000; Full time

Job summary

APAR TECHNOLOGIES PTE. LTD. is seeking a Security Engineer to design, implement, and manage security measures across networks and systems in Singapore.

You will perform risk assessments, vulnerability management, and incident detection and response to safeguard critical assets. You will conduct security audits to ensure compliance with ISO 27001, PCI-DSS, and GDPR, and collaborate with IT, development, and operations to embed security in the development lifecycle.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent work experience).
• Typically 3–5 years of experience in a security-related role (network, application, or system security).
• Solid understanding of security protocols, cryptography, and security standards.
• Familiarity with security tools (SIEM, PAM, DAM, firewalls, IDS/IPS) and OSs (Linux, Windows).
• Experience with vulnerability scanning, penetration testing, and threat modeling.
• Knowledge of regulatory requirements and industry standards (NIST, ISO 27001, PCI-DSS, etc.).
• Excellent problem-solving and analytical skills.

Responsibilities

• Design and implement security measures to protect networks and systems.
• Perform risk assessment and vulnerability management including scans and patching.
• Detect incidents, respond swiftly, and provide remediation guidance.
• Conduct security audits and ensure regulatory compliance (ISO 27001, PCI-DSS, GDPR).
• Collaborate with IT, development, and operations to embed security in lifecycle.
• Monitor networks and systems with SIEM, IDS/IPS, and firewalls for threats.
• Document procedures, incidents, and management reports.

Education

Bachelors Degree in Computer Science or Information Security

Tools

SIEM

PAM

DAM

Firewalls

IDS/IPS

Linux

Windows

Python

Bash

PowerShell

Job description

Key Responsibilities:

• Design and Implement Security Measures: Develop, implement, and manage security protocols and solutions to ensure the integrity of the organizations network and systems.
• Risk Assessment and Vulnerability Management: Identify security risks and weaknesses, and take proactive measures to mitigate them, including regular vulnerability scans, patch management, and penetration testing.
• Incident Detection and Response: Monitor systems for unusual activity, investigate incidents, and provide recommendations for resolution. Respond swiftly to security breaches and incidents.
• Security Audits and Compliance: Conduct regular security audits and ensure compliance with internal policies, external regulations, and standards such as ISO 27001, PCI-DSS, GDPR, etc.
• Collaboration and Communication: Work with cross-functional teams including IT, development, and operations to ensure security is integrated into all stages of the development lifecycle. Provide security training and awareness to staff.
• Monitoring and Analysis: Utilize security tools (such as SIEM, IDS/IPS, firewalls) to continuously monitor network traffic, systems, and applications for potential threats.
• Documentation and Reporting: Document security procedures, incidents, and actions taken. Prepare reports for management on security status and performance.

Key Skills/ Experience/ Qualifications

• Bachelors Degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• Proven experience (typically 3-5 years) in a security-related role, such as network security, application security, or system security.
• Solid understanding of security protocols, cryptography, and security standards.
• Familiarity with security tools (e.g., SIEM, PAM, DAM, firewalls, intrusion detection systems) and operating systems (Linux, Windows, etc.).
• Experience with vulnerability scanning, penetration testing, and threat modeling.
• Knowledge of regulatory requirements and industry standards (e.g., NIST, ISO 27001, PCI-DSS, IM8, CSA CCOP).
• Excellent problem-solving and analytical skills.

• Strong communication skills, with the ability to explain technical security concepts to non-technical stakeholders.
• Certifications such as CISSP, CISM, CEH, or CompTIA Security+ are highly desirable.
• Familiarity with DevSecOps practices and tools.
• Experience in network security, including firewall management, VPNs, and IDS/IPS systems.
• Familiarity with scripting languages such as Python, Bash, or PowerShell