IT Security Engineer

COLD STORAGE SINGAPORE (1983) PTE LTD; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Cold Storage Singapore (1983) PTE LTD is seeking an IT Security Engineer to implement, maintain, and enhance our security posture across systems and processes. You will collaborate with cross-functional teams to embed security at every layer and drive security program maturity.

The role emphasizes threat detection, incident response, vulnerability management, and compliance with ISO 27001/NIST within a dynamic retail IT environment. Strong communication and cloud security expertise are essential.

Qualifications

• 3–5 years hands-on IT security operations experience.
• Experience with cloud security across major platforms (GCP, Azure, AWS).
• Familiarity with ISO 27001 and NIST security frameworks.

Responsibilities

• Analyse security threats and develop optimised security policies to strengthen organisational defenses.
• Detect, investigate, and respond to cyber threats within the M365 ecosystem, including email, Teams, SharePoint, and OneDrive.
• Collaborate with IT Infrastructure and Network teams to configure servers, networks, and cloud environments securely.
• Partner with End User Support to enhance endpoint security, user awareness, and access control measures.
• Monitor and investigate security incidents, escalating issues as necessary to ensure timely resolution.
• Perform regular vulnerability assessments and recommend remediation actions, following up to verify implementation.
• Develop and maintain security documentation such as standards, procedures, and technical guidelines to support compliance and operational consistency.
• Assist in achieving compliance with security frameworks, regulations, and industry best practices (e.g., ISO 27001, NIST).
• Continuously evaluate emerging threats and recommend new tools, technologies, and processes to mitigate risks effectively.
• Maintain data sources for log monitoring systems and develop detection and alerting rules to improve threat visibility.

Skills

Threat detection

Incident response

Vulnerability management

Cloud security

End user security awareness

Communication skills

SIEM/EDR/XDR

Education

Security certifications (CompTIA Security+, CISSP, GIAC)

Tools

SIEM

EDR

XDR

UEBA

SOAR

Firewalls

Log monitoring

Job description

Company Overview

Cold Storage and Giant are two of Singapore’s most trusted grocery brands. Cold Storage offers fresh produce, meat, seafood, and international products through multiple banners. Giant operates over 35 stores island-wide, providing affordable groceries and household essentials.

Job Summary

We are seeking a skilled and proactive IT Security Engineer to implement, maintain, and enhance our organisation’s information security posture by collaborating with cross-functional teams to embed security across all systems and processes.

Responsibilities

• Analyse security threats and develop optimised security policies to strengthen organisational defenses
• Detect, investigate, and respond to cyber threats within the M365 ecosystem, including email, Teams, SharePoint, and OneDrive
• Collaborate with IT Infrastructure and Network teams to configure servers, networks, and cloud environments securely
• Partner with End User Support to enhance endpoint security, user awareness, and access control measures
• Monitor and investigate security incidents, escalating issues as necessary to ensure timely resolution
• Perform regular vulnerability assessments and recommend remediation actions, following up to verify implementation
• Develop and maintain security documentation such as standards, procedures, and technical guidelines to support compliance and operational consistency
• Assist in achieving compliance with security frameworks, regulations, and industry best practices (e.g., ISO 27001, NIST)
• Continuously evaluate emerging threats and recommend new tools, technologies, and processes to mitigate risks effectively
• Maintain data sources for log monitoring systems and develop detection and alerting rules to improve threat visibility

Preferred competencies and qualifications

• Strong analytical and problem-solving skills to investigate and resolve security vulnerabilities effectively
• Excellent written and verbal communication skills to convey technical information clearly to non-technical stakeholders
• Knowledge of cybersecurity threats, vulnerabilities, and exploit methods to anticipate and defend against attacks
• Understanding of cloud computing platforms and security considerations (GCP, Azure, AWS) to secure cloud environments
• Experience with security configurations, patch management, certification management, firmware updates, firewall rules, and endpoint security agent management
• 3-5 years of hands‑on experience in IT security operations to manage and respond to security challenges
• Ability to collaborate effectively in a fast‑paced environment while maintaining confidentiality, integrity, and availability of information assets
• Hands‑on experience with SIEM, EDR, XDR, UEBA, and SOAR tools to enhance security monitoring and response capabilities

Bonus Skillsets

• Knowledge of the MITRE ATT&CK framework to understand adversary tactics and techniques
• Familiarity with the ISO27001 framework to support information security management
• Understanding of Zero Trust architecture principles to strengthen security posture

Required competencies and certifications

• CompTIA Security+, ISC2 Certified in Cybersecurity, or GIAC certifications to demonstrate foundational cybersecurity expertise

Preferred competencies and certifications

• Relevant certifications such as CISM or CSSP are advantageous but not mandatory