Information Technology Security Engineer

Newtone consulting; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Newtone consulting in Singapore is seeking an IT Security Engineer to strengthen the security posture of our enterprise IT environment. You'll work with infrastructure, applications, and operations teams to identify security risks, perform vulnerability assessments, monitor compliance, and drive remediation activities.

This role blends hands-on technical work with governance, focusing on reporting, continuous improvement, and operational security.

Qualifications

• Diploma or Degree in Computer Science, Cybersecurity, Information Security or related discipline.
• 2–5 years of experience in cybersecurity or IT security operations.
• Hands-on experience with cybersecurity platforms such as SIEM, PAM, 2FA, EDR, endpoint protection, vulnerability management, SOAR.
• Experience conducting vulnerability assessments and coordinating remediation activities.
• Familiarity with security monitoring, reporting, and security compliance processes.
• Good understanding of infrastructure, operating systems, networking, and application security.
• Experience preparing security reports and presenting findings to technical and business stakeholders.
• Strong analytical, troubleshooting, and communication skills.
• Security certifications (e.g., Security+, CEH, CISA, CISSP, or equivalent) are an advantage.

Responsibilities

• Perform vulnerability assessments and security reviews across infrastructure and applications.
• Monitor security posture and identify security risks, gaps, and compliance deviations.
• Coordinate remediation activities with infrastructure, application, and operations teams.
• Produce security dashboards, KPI reports, and management updates on vulnerabilities and remediation progress.
• Support security audits and ensure compliance with internal security standards and regulatory requirements.
• Develop and maintain security documentation, procedures, and operational guidelines.
• Recommend improvements to strengthen the organization's overall security posture.
• Stay current with emerging cyber threats, vulnerabilities, and industry best practices.

Job description

We're looking for an IT Security Engineer to strengthen the security posture of our enterprise IT environment. You'll work closely with infrastructure, application, and operations teams to identify security risks, perform vulnerability assessments, monitor compliance, and drive remediation activities.

This role is ideal for someone who enjoys both hands-on technical work and security governance, with a strong focus on reporting, continuous improvement, and operational security.

Key Responsibilities

• Perform vulnerability assessments and security reviews across infrastructure and applications.
• Monitor security posture and identify security risks, gaps, and compliance deviations.
• Coordinate remediation activities with infrastructure, application, and operations teams.
• Produce security dashboards, KPI reports, and management updates on vulnerabilities and remediation progress.
• Support security audits and ensure compliance with internal security standards and regulatory requirements.
• Develop and maintain security documentation, procedures, and operational guidelines.
• Recommend improvements to strengthen the organization's overall security posture.
• Stay current with emerging cyber threats, vulnerabilities, and industry best practices.

What We're Looking For

• Diploma or Degree in Computer Science, Cybersecurity, Information Security, or a related discipline.
• 2–5 years of experience in cybersecurity, vulnerability management, or IT security operations.
• hands-on experience with cybersecurity platforms such as SIEM, PAM, 2FA, EDR, endpoint protection, vulnerability management, SOAR
• Experience conducting vulnerability assessments and coordinating remediation activities.
• Familiarity with security monitoring, reporting, and security compliance processes.
• Good understanding of infrastructure, operating systems, networking, and application security.
• Experience preparing security reports and presenting findings to technical and business stakeholders.
• Strong analytical, troubleshooting, and communication skills.
• Security certifications (e.g., Security+, CEH, CISA, CISSP, or equivalent) are an advantage.