Lead Engineer / Engineer, ICA CISO, CISO Office, xCybersecurity

HTX (Home Team Science & Technology Agency); Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

HTX (Home Team Science & Technology Agency) in Singapore is seeking a security-focused leader to guide project teams on secure-by-design principles and comprehensive cybersecurity strategy. You will work with the CISO to align security with public-safety objectives and drive defense-in-depth across information systems.

You will coordinate incident response efforts with GITSIR and GCSOC, maintain robust security documentation, and stay ahead of evolving threats and regulatory requirements to

Qualifications

• Design, implement and deliver security requirements with a Secure by Design mindset.
• Knowledge of Vulnerability Assessment and Penetration Testing (VAPT) for infrastructure, networks, web apps and APIs.
• Understanding of cloud and AI technologies for private, public and hybrid deployments.
• Familiarity with IoT and OT deployments.

Responsibilities

• Collaborate with the CISO to develop and execute the security strategy.
• Review design, implementation and delivery of security requirements using a Secure by Design approach.
• Assist in orchestrating the incident response plan and advise responders.
• Coordinate with Government IT Security Incident Response (GITSIR) & Government Cyber Security Ops Centre (GCSOC).
• Maintain documentation of security policies, procedures and incident reports.

Skills

Secure by Design

Security strategy

Incident response

VAPT knowledge

Regulatory compliance

Education

Cybersecurity certifications (CISSP/CCSP/CISM/CISA)

Job description

What The Role Is HTX is Singapore's Science and Technology agency that brings together diverse scientific and engineering capabilities to develop transformative, operationally ready solutions for public safety. As a statutory board under the Ministry of Home Affairs, HTX works at the forefront of science and technology to empower the Home Team with cutting-edge capabilities. Guided by our mission to amplify, augment and accelerate the Home Team's advantage, we are committed to keeping Singapore the safest place on planet Earth.

Reporting to the Agency Chief Information Security Officer (CISO), the job holder will provide security-by-design leadership to project teams across the Home Team departments and HTX. This will ensure the adoption of defence-in-depth best practices and enable the transformation of the Home Team's cybersecurity systems and processes.

What You Will Be Working On

• Collaborate with the CISO to develop and execute the organisation's security strategy, aligning it with business goals and compliance requirements.
• Familiarise yourself and effectively execute ICT, cybersecurity measures, and government regulations in Information Technology & Smart Systems (ICT&&SS) and the Cybersecurity Code of Practice (CCoP).
• Review the design, implementation, and delivery of security requirements for application development, distributed computing, and architectural solutions using a "Secure by Design" principle.
• Assist in orchestrating the incident response plan and advise responders for minimal impact and swift resolution.
• Collaborate with cyber incident response agencies, such as Government IT Security Incident Response (GITSIR) & Government Cyber Security Ops Centre (GCSOC), for proper incident closure and reporting.
• Stay abreast of the latest cybersecurity threats and trends to enhance security measures.
• Direct and influence multidisciplinary teams in implementing and operating cybersecurity controls.
• Work with cross-functional teams and vendors to integrate security practices throughout the organisation.
• Maintain comprehensive documentation of security policies, procedures, and incident reports.

What We Are Looking For

• Tertiary education in Cybersecurity, Information Security, Information Technology, Computer Science, or related engineering fields; or proven work experience and skillsets.
• Experience designing, implementing, and delivering security requirements with a "Secure by Design" principle.
• Knowledge of Vulnerability Assessment and Penetration Testing (VAPT) for infrastructure, network, web applications, and web services/API.
• Understanding industry trends in cloud and AI technologies for private, public, and hybrid cloud deployments.
• Familiarity with Internet-of-Things (IoTs) and Operational Technology (OT) deployments.
• Cybersecurity professional qualifications such as CISSP, CCSP, CISM, CISA, and CCSP would be advantageous.
• All new hires are appointed on a two-year contract in the first instance and will be assessed and considered for permanent tenure over time, based on performance.
• As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment.
• All shortlisted applicants will be updated on the status of their applications within 4 weeks upon closing of the advertisement.