Information Technology Security Engineer

Newtone consulting; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

Newtone consulting is seeking an IT Security Engineer to support cybersecurity across project implementation and production operations for mission-critical systems. You will work with Security Leads and IT teams to identify vulnerabilities, monitor security posture, and ensure compliance with government security requirements.

In this role you will perform vulnerability assessments, security reviews, risk analyses, and support remediation, hardening, and security testing across OS, applications,

Qualifications

• 2–5 years of experience in cybersecurity
• Hands-on experience with vulnerability assessment, remediation tracking and security monitoring
• Understanding of infrastructure, network, application and access security concepts
• Experience supporting security compliance, audits and risk assessments
• Familiarity with Singapore Government security requirements (IM8) advantageous

Responsibilities

• Perform vulnerability assessments, security reviews and risk analysis across applications and infrastructure.
• Monitor security alerts, vulnerabilities and compliance status, and coordinate remediation with technical teams.
• Support security implementation and hardening across operating systems, applications, middleware, containers and infrastructure.
• Support security testing activities including VA/PT, SAST/DAST and vulnerability scanning, tracking findings through closure.
• Assist with security incident investigation, log analysis, root cause analysis and remediation.
• Support IAM and access control activities including RBAC, MFA, PAM and access reviews.
• Prepare security dashboards, vulnerability reports, compliance metrics and management updates.
• Maintain security documentation and support audits, risk assessments and government security compliance activities.

Skills

Vulnerability assessments

Security monitoring

IAM access control

RBAC

MFA

PAM

SAST/DAST

DevSecOps

Remediation tracking

Security dashboards

Security audits

SIEM

Education

Degree/Diploma in Cybersecurity

Job description

We are looking for an IT Security Engineer to support cybersecurity across both project implementation (Day 1) and production operations (Day 2) for mission-critical systems. You will work closely with Security Leads, infrastructure, system and software teams to identify vulnerabilities, monitor security posture, support remediation, and ensure compliance with government security requirements.

Key Responsibilities

• Perform vulnerability assessments, security reviews and risk analysis across applications and infrastructure.
• Monitor security alerts, vulnerabilities and compliance status, and coordinate remediation with technical teams.
• Support security implementation and hardening across operating systems, applications, middleware, containers and infrastructure.
• Support security testing activities including VA/PT, SAST/DAST and vulnerability scanning, tracking findings through closure.
• Assist with security incident investigation, log analysis, root cause analysis and remediation.
• Support IAM and access control activities including RBAC, MFA, PAM and access reviews.
• Prepare security dashboards, vulnerability reports, compliance metrics and management updates.
• Maintain security documentation and support audits, risk assessments and government security compliance activities.

Requirements

• Singapore Citizen with a Degree/Diploma in Cybersecurity, Computer Science, IT or related discipline.
• 2–5 years of experience in cybersecurity, infrastructure security or security operations.
• Hands‑on experience with vulnerability assessment, remediation tracking and security monitoring.
• Good understanding of infrastructure, network, application and access security concepts.
• Experience supporting security compliance, audits and security risk assessments.
• Familiarity with Singapore Government security requirements, including IM8, is advantageous.
• Exposure to DevSecOps, containers, IAM, SIEM or CI/CD security is beneficial; no specific security tool expertise is required.
• Strong analytical, reporting and communication skills with the ability to work across technical and business teams.

Certifications such as Security+, CEH, CISSP Associate, GIAC or equivalent are advantageous.