Principal Cybersecurity Engineer

NETS; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

NETS in Singapore seeks a Principal Engineer to design, implement and maintain security tools forming a layered defence against cyber threats. You will collaborate with security operations, IT and risk teams to deploy and optimize tools, develop policies, and improve detection and response capabilities.

The role leads enterprise security technologies across on-prem, cloud and hybrid environments, ensuring alignment with security architecture, regulatory requirements and ongoing improvements to

Qualifications

• Minimum 10 years of hands-on experience in security engineering and technology implementation.
• Minimum 5 years in cloud security design and management across AWS or similar platforms.
• Strong foundation in networking concepts, firewalls, and secure architecture principles.
• Proficiency in Unix/Linux and scripting (Shell, Python) for troubleshooting and integration.

Responsibilities

• Design, implement, and maintain enterprise security technologies (SIEM, SOAR, EDR/XDR, Anti-Virus, DLP, PAM, IAM, WAF, IDS/IPS).
• Lead security solutions across on-prem, cloud, and hybrid environments for regulatory and compliance alignment.
• Manage security platforms: hardening, configuration, and ongoing compliance with standards.
• Own lifecycle management of security tools including patches and vulnerability remediation.
• Lead incident response for critical incidents with minimal business impact.
• Troubleshoot complex issues with cross-functional teams and vendors.
• Define and conduct testing (UAT/SIT) before production deployment.
• Drive end-to-end security deployments from POC to production.
• Execute BAU activities and changes following ITSM processes.
• Develop architecture diagrams, runbooks, and audit-ready documentation.
• Provide mentorship to engineers and drive best practices.

Skills

Security engineering

Cloud security

Incident response

Security architecture

Automation

APIs

Linux/Unix

Python scripting

Cross-functional teamwork

Regulatory compliance

Education

Bachelor’s degree in Computer Science or related

Tools

SIEM

SOAR

EDR/XDR

WAF

IDS/IPS

PAM/IAM

DLP

Vulnerability Management

AWS

Job description

The Principal Engineer plays a critical role in helping to design, implement and maintain various security tools that together form a layered defence against cyber threats.The ideal candidate will work closely with security operations, IT, and risk teams to deploy and optimize security tools, develop policies, and improve detection and response capabilities

Key Responsibilities

• Design, implement, and maintain enterprise security technologies, including but not limited to SIEM, SOAR, EDR/XDR, Anti-Virus, Vulnerability Management, DLP, PAM, IAM, WAF, and IDS/IPS.
• Lead the design and implementation of security solutions across on-premises, cloud, and hybrid environments, ensuring alignment with security architecture, regulatory, and compliance requirements.
• Manage and maintain security platforms, ensuring they are hardened, optimally configured, and compliant with organizational security standards and regulatory requirements.
• Own the technology lifecycle management of security tools, including upgrades, patching, vulnerability remediation, and ensuring systems run on supported and stable versions.
• Lead and support incident response activities, including handling critical incidents such as zero-day vulnerabilities, misconfigurations, and security breaches with minimal business impact.
• Troubleshoot complex technical issues, collaborating with cross-functional teams, vendors, and service providers to resolve implementation and operational challenges.
• Define and conduct comprehensive testing (UAT/SIT) for security solutions prior to production deployment, ensuring stability, security, and operational readiness.
• Drive end-to-end implementation initiatives, partnering with vendors and stakeholders to deliver security solutions from proof-of-concept (POC) through full-scale deployment.
• Execute BAU activities and managed changes, adhering to ITSM processes including change, incident, and problem management.
• Develop and maintain technical documentation, including standards, runbooks, KOPs, and architecture diagrams to support operations and audit requirements.
• Provide technical mentorship and guidance to engineers, building team capability and ensuring adherence to best practices.
• Support audit, compliance, and risk management activities, including evidence gathering, control validation, and remediation tracking.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related discipline.
• Minimum 10 years of hands-on experience in security engineering, with deep expertise in implementing and managing security technologies, including but not limited to SIEM, SOAR, EDR/XDR, Anti-Virus, Vulnerability Management, DLP, PAM, IAM, WAF, and IDS/IPS.
• Minimum 5 years of hands-on experience in cloud security, including design and management of native security services across platforms such as AWS
• Strong technical foundation in information security and networking concepts, including TCP/IP, firewalls, system hardening, and secure architecture principles.
• Proficiency in Unix/Linux environments and scripting (e.g., Shell, Python), with the ability to troubleshoot and resolve complex technical and integration issues.
• Demonstrated experience in planning, designing, and executing implementation and production rollouts of security solutions, including handling risks, dependencies, and unforeseen challenges.
• Strong problem-solving skills and ability to operate independently, with a proactive, ownership-driven mindset and focus on delivering outcomes.
• Experience working in complex enterprise environments, collaborating effectively with cross-functional teams and external vendors.
• Relevant industry-recognized certifications, such as CISSP, GIAC, CEH, or equivalent, along with cloud security certifications (e.g., AWS Security Specialty or equivalent).
• Familiarity with automation and integration approaches, including APIs, scripting, and orchestration, to improve operational efficiency and scalability.