IT Security Engineer: DevSecOps & Incident Response

Ascendion; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Ascendion is seeking an IT Security Engineer to implement, operate, and support security controls for mission-critical systems within a secured environment in Singapore.

The role covers Day 1 security (build/project implementation) and Day 2 security (operations/production support), collaborating with Security Leads, Infra, System, and Software teams to ensure alignment with government security policies and standards.

Qualifications

• Degree in Computer Science / Cybersecurity / Information Security or equivalent.
• 3–7 years of IT experience in cybersecurity or infrastructure security.
• Familiarity with Singapore Government security policies (IM8 preferred). Singaporean profiles only.
• Hands-on experience with IAM and access control, security tooling (SAST/DAST/SIEM), CI/CD and DevSecOps.

Responsibilities

• Implement security architecture and controls as designed by Security Leads/Architects.
• Support compliance with government security policies and standards (IM8, WOG, PDPA).
• Develop and maintain secure CI/CD pipelines (SAST/DAST/SCA, container scanning).
• Assist in risk assessments, vulnerability management, and security testing (VA/PT).
• Support incident response, logging, monitoring, and access control administration (RBAC, MFA).

Skills

IT security experience

Communication skills

Documentation

Problem solving

Collaborative teamwork

Security standards understanding

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Security or equivalent

Tools

SAST

DAST

SIEM

Vulnerability scanners

CI/CD security tools

Job description

Ascendion is seeking an IT Security Engineer to implement, operate, and support security controls for mission-critical systems within a secured environment in Singapore.

The role covers Day 1 security (build/project implementation) and Day 2 security (operations/production support), collaborating with Security Leads, Infra, System, and Software teams to ensure alignment with government security policies and standards.