Infrastructure Security Engineer (Vulnerability Management)

Morgan McKinley; Singapore; On-site; SGD 110,000 - 140,000; Full time

Job summary

Morgan McKinley is hiring on behalf of an established organization in Singapore for an Infrastructure Security Engineer (Vulnerability Management). The role sits at the crossroads of OT and enterprise IT, offering exposure to industrial control environments and modern cloud systems.

You will evaluate vulnerabilities across OT, SCADA, critical infrastructure and IT, coordinating remediation timelines and patch windows with internal teams and vendors.

Qualifications

• Diploma/Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related discipline.
• 5+ years across OT/SCADA/critical infrastructure, network administration, IT, or cybersecurity operations.
• Knowledge of ISO 27001, CIS Benchmarks, risk assessment, network security, and patch/vulnerability management.
• Strong troubleshooting for patching, firmware updates and configuration changes.

Responsibilities

• Evaluate vulnerabilities across OT, SCADA, critical infra and IT, with remediation recommendations.
• Weigh operational impact, coordinate remediation timelines, patch windows and maintenance.
• Drive patch rollouts, firmware updates and post-deployment validation across OT/IT assets.
• Conduct scheduled vulnerability scans and coordinate testing; maintain asset inventories.
• Provide weekend support for emergency patches or planned maintenance windows.
• Report risk and performance indicators; build dashboards and summaries for governance.
• Draft documentation for change requests and risk acceptance.
• Support security reviews, risk assessments and audit actions.
• Collaborate with Vulnerability Management Lead on remediation discussions.

Skills

OT/SCADA experience

Vulnerability management

ISO 27001 knowledge

CIS Benchmarks

Network security

Patch management

Troubleshooting

Education

Diploma/Bachelor's in Cybersecurity/CS/Engineering

Job description

We're hiring on behalf of an established organization in Singapore for an Infrastructure Security Engineer (Vulnerability Management) to join their team. This role sits at the intersection of operational technology (OT) and enterprise IT, offering genuine exposure to both industrial control environments and modern enterprise/cloud systems.

Responsibilities

• Evaluate security vulnerabilities across operational technology, SCADA, critical information infrastructure, and standard IT/network environments, and put forward practical remediation recommendations.
• Weigh the operational impact of proposed fixes on sensitive systems, assessing feasibility and compensating controls, and coordinating remediation timelines, patch windows and maintenance schedules with internal teams, system owners and external vendors.
• Help drive patch rollouts, firmware updates and post-deployment validation across servers, applications, network infrastructure and OT assets.
• Carry out scheduled vulnerability scans spanning OT, air-gapped, enterprise and cloud environments, while coordinating penetration tests and keeping asset inventories current.
• Provide occasional weekend support for emergency patches, critical releases, or planned maintenance windows.
• Maintain and report on key risk and performance indicators (vulnerability exposure, patch compliance, SLA performance) building dashboards and technical summaries for senior stakeholders and the security governance board.
• Draft supporting documentation for change requests, formal deviations and risk acceptance submissions.
• Support internal security reviews, risk assessments and audit cycles, and help ensure follow-through on resulting action items.
• Partner with the Vulnerability Management Lead to run remediation discussions with system owners and other stakeholders.

Requirements

• A Diploma/Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related discipline.
• At least 5 years of experience across OT/SCADA/critical infrastructure, network administration, general IT, or cybersecurity operations.
• Solid working knowledge of ISO 27001, CIS Benchmarks, risk assessment methodology, network security principles, and patch/vulnerability management practices.
• A strong troubleshooting instinct and comfortable diagnosing issues through patching, firmware updates and configuration changes.

Areas of Specialization

• Network & Security Infrastructure: Routers, switches, and firewalls (ACI, Cisco, Arista, F5, Check Point, Palo Alto); network flow analysis.
• Vulnerability Analytics & Reporting: 3+ years focused on vulnerability management, plus 5+ years in broader analytics, with strong dashboarding and reporting skills