Lead Engineer/Engineer, Security-By-Design, CISO Office, xCyber

HTX (Home Team Science & Technology Agency); Singapore; On-site; SGD 150,000 - 190,000; Full time

Job summary

HTX (Home Team Science & Technology Agency) in Singapore is seeking a security-by-design leadership specialist to drive secure architecture across Home Team projects.

You will work with HTX and Home Team departments to embed defence-in-depth, perform risk assessments, and guide platform teams from earliest design through delivery of secure solutions. This role requires collaboration with ACISOs and technical experts to ensure security across network, IAM, apps, and cloud.

Qualifications

• Tertiary education in CS/IT or related engineering field.
• Certifications in AWS and/or Microsoft technologies are essential.
• Advanced security certifications (OSCP, GIAC, etc.) are highly valued.
• Cybersecurity certifications (CISSP/CISM/CISA/CRISC) encouraged.
• Experience delivering security-by-design across platforms.
• Knowledge of VAPT for infrastructure, networks, apps and APIs.

Responsibilities

• Lead security architecture design for enterprise platforms across domains.
• Develop reference architectures and hardening standards for multi-tenant environments.
• Review security requirements for applications and services with a Secure by Design approach.
• Provide support to platform teams as security design specialist for projects.
• Perform technical risk assessments on critical enterprise platforms.
• Advise on testing standards for advanced security validation (VAPT, red team).
• Act as technology expert to assess complex security findings for ACISOs.

Skills

Multitasking

Stress resilience

Stakeholder communication

Analytical thinking

Team collaboration

Education

Tertiary education in CS/IT or related Engineering field

Certification in AWS

Certification in Microsoft technologies

Advanced security certifications (OSCP, GIAC, etc.)

Cybersecurity certifications (CISSP/CISM/CISA/CRISC)

Job description

What The Role Is

HTX is Singapore's Science and Technology agency that brings together diverse scientific and engineering capabilities to develop transformative, operationally ready solutions for public safety. As a statutory board under the Ministry of Home Affairs, HTX works at the forefront of science and technology to empower the Home Team with cutting-edge capabilities. Guided by our mission to amplify, augment and accelerate the Home Team's advantage, we are committed to keeping Singapore the safest place on planet Earth.

What The Role Is

HTX is Singapore's Science and Technology agency that brings together diverse scientific and engineering capabilities to develop transformative, operationally ready solutions for public safety. As a statutory board under the Ministry of Home Affairs, HTX works at the forefront of science and technology to empower the Home Team with cutting-edge capabilities. Guided by our mission to amplify, augment and accelerate the Home Team's advantage, we are committed to keeping Singapore the safest place on planet Earth.

The job holder will provide security-by-design leadership to project teams across the Home Team departments and HTX. This will ensure the adoption of defence-in-depth best practices and enable the transformation of the Home Team's cybersecurity systems and processes.

What You Will Be Working On

• Execute the security architecture design for all new enterprise platforms, defining security principles across multiple domains (network, IAM, application, infrastructure cloud).
• Conduct technical security design for platforms, such through reference architectures and hardening standards for multi-tenant environments.
• Review the design, implementation, and delivery of security requirements for application development, distributed computing, and architectural solutions using a "Secure by Design" principle.
• Provide support to platform teams as the technical specialist on the security architecture of projects before proceeding to formal secure design and risk assessment. Partner with HTD ACISOs and platform teams to ensure security is integrated from the earliest design stages.
• Perform technical risk assessments on critical enterprise platforms
• Provide recommendation/ advice on technical requirements and testing standards for advanced security validation (e.g., VAPT, red teaming exercises) of these platforms.
• Act as the specialist of relevant technologies in the assessment of complex security findings, providing expert recommendations to the ACISOs.

What We Are Looking For

• Tertiary education in Computer Science, Information Technology, or a related Engineering field.
• Certification in specific technologies (AWS/Microsoft) is essential.
• Advanced, hands‑on certifications demonstrating both offensive and defensive expertise are highly valued (e.g., OSCP, GIAC, etc).
• Cybersecurity certifications are encouraged and demonstrate continuous learning and intake of standard methodologies applicable for this role. e.g. CISSP/ CISM/ CISA/CRISC certifications.
• Experience designing, implementing, and delivering security requirements with a "Secure by Design" principle.
• Knowledge of Vulnerability Assessment and Penetration Testing (VAPT) for infrastructure, network, web applications, and web services/API.
• Strong ability to multi-task and perform under extreme pressure with tight deadlines.
• Meticulous planning skills and attention to detail.
• Ability to work independently as well as collaboratively within a team.
• Resilience in managing a reasonably high level of stress while maintaining effectiveness.
• Demonstrated drive, level-headedness, and adaptability in dynamic environments.
• Excellent interpersonal and communication skills for engaging with internal and external stakeholders.

  All new hires are appointed on a two‑year contract in the first instance and will be assessed and considered for permanent tenure over time, based on performance.

  As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment.

  All shortlisted applicants will be updated on the status of their applications within 4 weeks upon closing of the advertisement.