IT Security Engineer

NEWTONE SERVICES PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

NEWTONE SERVICES PTE. LTD. seeks an IT Security Engineer to support cybersecurity across project delivery and production operations for mission-critical systems.

You will collaborate with security leads and IT teams to identify vulnerabilities, monitor posture, support remediation, and ensure government security compliance. The role requires 3–7 years in cybersecurity, hands-on vulnerability assessment and security monitoring, plus familiarity with IAM concepts, RBAC, MFA, and CI/CD security.

Qualifications

• 3-7 years of experience in cybersecurity, infrastructure security or security operations.
• Hands-on experience with vulnerability assessment, remediation tracking and security monitoring.
• Familiarity with Singapore Government security requirements, including IM8, is advantageous.
• Strong analytical, reporting and communication skills across technical and business teams.
• Certifications such as Security+, CEH, CISSP Associate, GIAC or equivalent are advantageous.

Responsibilities

• Perform vulnerability assessments, security reviews and risk analysis across applications and infrastructure.
• Monitor security alerts, vulnerabilities and compliance status, and coordinate remediation with technical teams.
• Support security implementation and hardening across operating systems, applications, middleware, containers and infrastructure.
• Support security testing activities including VA/PT, SAST/DAST and vulnerability scanning, tracking findings through closure.
• Assist with security incident investigation, log analysis, root cause analysis and remediation.
• Support IAM and access control activities including RBAC, MFA, PAM and access reviews.
• Prepare security dashboards, vulnerability reports, compliance metrics and management updates.
• Maintain security documentation and support audits, risk assessments and government security compliance activities.

Skills

Vulnerability assessment

Security monitoring

Security reviews

Risk analysis

IAM

RBAC

MFA

PAM

CI/CD security

DevSecOps

Education

Degree in Cybersecurity

Diploma in IT

Job description

We are looking for anIT Security Engineerto support cybersecurity across both project implementation (Day 1) and production operations (Day 2) for mission-critical systems. You will work closely with Security Leads, infrastructure, system and software teams to identify vulnerabilities, monitor security posture, support remediation, and ensure compliance with government security requirements.

Key Responsibilities

• Performvulnerability assessments, security reviews and risk analysis across applications and infrastructure.
• Monitor security alerts, vulnerabilities and compliance status, and coordinate remediation with technical teams.
• Support security implementation and hardening across operating systems, applications, middleware, containers and infrastructure.
• Support security testing activities includingVA/PT, SAST/DAST and vulnerability scanning, tracking findings through closure.
• Assist with security incident investigation, log analysis, root cause analysis and remediation.
• Support IAM and access control activities includingRBAC, MFA, PAM and access reviews.
• Prepare security dashboards, vulnerability reports, compliance metrics and management updates.
• Maintain security documentation and support audits, risk assessments and government security compliance activities.

Requirements

• Singapore Citizen with a Degree/Diploma in Cybersecurity, Computer Science, IT or related discipline.
• 3-7 years of experiencein cybersecurity, infrastructure security or security operations.
• Hands-on experience withvulnerability assessment, remediation tracking and security monitoring.
• Good understanding of infrastructure, network, application and access security concepts.
• Experience supporting security compliance, audits and security risk assessments.
• Familiarity with Singapore Government security requirements, includingIM8, is advantageous.
• Exposure to DevSecOps, containers, IAM, SIEM or CI/CD security is beneficial;no specific security tool expertise is required.
• Strong analytical, reporting and communication skills with the ability to work across technical and business teams.

Certifications such as Security+, CEH, CISSP Associate, GIAC or equivalent are advantageous.