Infrastructure Cybersecurity Engineer

Assurity Trusted Solutions; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Leave benefits and wellness programmes

Flexible work arrangements

Job summary

Assurity Trusted Solutions is seeking an Infrastructure Cybersecurity Engineer to protect the enterprise IT infrastructure and lead offensive security initiatives. You will act as the SME for security guidance, design secure architectures, and drive remediation from findings across network, servers, and cloud.

You will implement monitoring tools, manage IAM, and ensure compliance with ISO 27001, NIST, and CIS benchmarks while promoting security awareness among IT teams and stakeholders.

Qualifications

• Minimum 2 years of relevant security engineering experience focusing on infrastructure/security.
• Offensive security knowledge and OSCP certification required.
• Hands-on experience with penetration testing, scoping, execution, and reporting to technical and non-technical audiences.
• Professional certifications such as CISSP, CEH, CISM, CCSP are a plus.

Responsibilities

• Serve as cybersecurity SME for Infrastructure, advising on security designs and operations.
• Design and implement secure architecture for IT infrastructure including network segmentation and access controls.
• Coordinate and perform penetration testing and vulnerability assessments; translate findings into remediation plans.
• Implement and manage security monitoring tools (SIEM, IDS/IPS) and incident response for infrastructure security.
• Manage identity and access management with strong authentication and least privilege principles.
• Ensure compliance with ISO 27001, NIST, CIS benchmarks and other regulations; participate in incident response activities.
• Secure cloud environments with configuration management and encryption; promote security awareness across IT teams.

Skills

Penetration testing

Network security

Cloud security

SIEM

Threat modeling

Incident response

Security architecture

IAM

Vulnerability assessment

Encryption

Education

OSCP certification

CISSP/CISM/CCSP

Tools

Metasploit

Nmap

Burp Suite

SIEM platforms

Firewalls

Endpoint security

Encryption tools

Job description

As an Infrastructure Cybersecurity Engineer, you will be embedded within the Infrastructure division as the subject matter expert (SME) for all cybersecurity-related matters, playing a critical role in safeguarding the organisation's enterprise IT infrastructure against security threats and vulnerabilities. You will serve as the go-to resource for the infrastructure team on security guidance, standards, and best practices, while contributing to the overall security posture of the organisation and protecting sensitive data and assets from potential breaches and attacks across network, applications, systems, and cloud environments. A key aspect of this role involves applying offensive security knowledge and penetration testing expertise to proactively identify and address weaknesses before they can be exploited.

You will be working on:

• Serving as the cybersecurity SME within the Infrastructure division, providing expert guidance and advisory to infrastructure teams on security-related decisions, designs, and operations.

• Designing and implementing secure architecture for the organisation's IT infrastructure, including network segmentation, secure configurations, and access controls to establish a robust security foundation.
• Conducting and coordinating penetration testing and vulnerability assessments across network and infrastructure environments, translating findings into actionable remediation plans.
• Identifying, assessing, and remediating vulnerabilities across servers, network devices, and cloud services to reduce the risk of exploitation and maintain a strong security baseline.
• Implementing and managing security monitoring tools and technologies — including intrusion detection systems and SIEM solutions — to detect, investigate, and respond to security incidents in a timely manner.
• Managing user access and privileges within the infrastructure, implementing strong authentication mechanisms, and enforcing least privilege principles as part of a comprehensive Identity and Access Management framework.
• Ensuring that the organisation's infrastructure complies with relevant security standards, regulations, and industry best practices, such as CIS benchmarks, NIST guidelines, and ISO 27001.
• Participating in incident response activities related to infrastructure security incidents, covering analysis, containment, eradication, and recovery.
• Implementing and managing security tools and technologies such as firewalls, endpoint protection, and encryption solutions to enhance the overall infrastructure security posture.
• Securing cloud environments through configuration management, data encryption, and adherence to cloud security best practices across public cloud platforms.

• Promoting security awareness and best practices among IT teams and stakeholders, fostering a culture of security across the organisation.

• Minimum 2 years of relevant experience in a security engineering role, with a focus on infrastructure security, network security, or systems security.
• Offensive Security Certified Professional (OSCP) is required.
• Hands-on experience conducting network or infrastructure penetration testing, including scoping, execution, and reporting of findings to both technical and non-technical audiences.
• Demonstrated ability to function as a cybersecurity SME, advising and influencing technical teams on security matters and translating complex security concepts for non-technical stakeholders.
• Additional professional certifications such as CISSP, CEH, CISM, CCSP, or equivalent are an advantage.
• Proficient in network security, system security, cloud security, and infrastructure security best practices.
• Hands-on experience with security technologies including firewalls, intrusion detection and prevention systems, VPNs, endpoint security, and encryption.
• Experience with security tools and platforms including SIEM solutions, vulnerability scanners, penetration testing tools (e.g. Metasploit, Nmap, Burp Suite), and security monitoring systems.
• Familiarity with risk assessment and risk management principles, including the ability to identify, assess, and mitigate security risks within complex infrastructure environments.
• Working knowledge of security standards and frameworks such as ISO 27001, NIST, CIS benchmarks, and relevant compliance requirements.
• Experience securing cloud environments across public cloud platforms such as AWS, Azure, or Google Cloud.
• Strong communication and collaboration skills, with the ability to articulate security requirements and provide guidance to both technical teams and non-technical stakeholders.
• Strong analytical and problem-solving skills to identify and address security challenges across the infrastructure landscape

Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programmes.

We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you.