IT Security Engineer: DevSecOps & Compliance

MINDTECK SINGAPORE PTE LTD; Singapore; On-site; SGD 60,000 - 120,000; Full time

Job summary

Mindteck Singapore Pte Ltd is seeking an IT Security Engineer to implement, operate, and support security controls for mission-critical systems in a secure environment. The role spans Day 1 project security and Day 2 operations security, collaborating with Security Leads, Infra, System, and Software teams to meet government security policies.

The incumbent will contribute to security architecture, threat modelling, vulnerability management, and CI/CD security, ensuring robust incident response,

Qualifications

• Degree in Computer Science / Cybersecurity / Information Security or equivalent
• 3-7 years of IT experience in cybersecurity or infrastructure security
• Experience supporting security in projects or production environments
• Familiarity with Singapore Government security policies (IM8 preferred)
• Hands-on experience with Kubernetes / Docker security
• IAM and access control
• Security tools (SAST, DAST, SIEM, vulnerability scanners)
• CI/CD and DevSecOps practices
• Basic knowledge of network security, application security, and cloud security
• CEH, CompTIA Security+, or equivalent
• Other certifications (e.g., CISSP Associate, GIAC, AWS/Azure Security) advantageous

Responsibilities

• Security Implementation & Engineering: implement security architecture and controls as designed by Security Leads/Architects
• Support system, application, and infrastructure security configurations
• Assist in threat modelling and risk assessment activities
• Translate security requirements into technical implementation across platforms
• Compliance Support: assist with IM8, WOG security requirements, and PDPA
• Prepare documentation for Security Risk Assessments, Vulnerability Assessments, and Penetration Testing
• Maintain security documentation and evidence for audits
• DevSecOps & Secure Development: implement and maintain security tools in CI/CD pipelines (SAST, DAST, SCA, container scanning)
• Monitor findings and work with developers on remediation
• Support secure coding practices and DevSecOps adoption
• Assist in API security, secrets management, and secure communications setup
• Security Testing Support: coordinate VA/PT activities and track remediation
• Document findings and closure evidence for certification/go-live
• System & Platform Hardening: harden operating systems, middleware, databases, Kubernetes, containers
• Configure API Gateways, WAF, and authentication/authorization mechanisms (OAuth2, mTLS)
• Incident Response: investigate, contain, remediate security incidents; perform RCA
• Vulnerability & Patch Management: regular scans, patch tracking, remediation
• Security Monitoring: monitor SIEM alerts; tune rules and dashboards
• Audit & Compliance Support: evidence collection and remediation tracking
• Access Control Administration: RBAC, MFA, PAM; perform least-privilege reviews

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Security or equivalent

Tools

Kubernetes

Docker

IAM and access control

SAST/DAST/SIEM

CI/CD / DevSecOps

Vulnerability scanners

Cloud security basics

Job description

Mindteck Singapore Pte Ltd is seeking an IT Security Engineer to implement, operate, and support security controls for mission-critical systems in a secure environment. The role spans Day 1 project security and Day 2 operations security, collaborating with Security Leads, Infra, System, and Software teams to meet government security policies.

The incumbent will contribute to security architecture, threat modelling, vulnerability management, and CI/CD security, ensuring robust incident response,