Security Engineer

SCIENTE; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

SCIENTE is seeking an Information and Cyber Security Engineer to drive secure cloud adoption and strengthen cyber controls across hybrid cloud environments.

The role requires hands-on cloud security experience, strong IAM/network security knowledge, and the ability to translate findings for both technical and non-technical stakeholders. You’ll collaborate on security architectures, automate checks, and stay ahead of cloud threats.

Qualifications

• 3+ years of experience in Cloud/Cyber/Infrastructure Security.
• GCP or Azure security hands-on experience.
• Experience implementing and validating security controls in cloud environments.
• Strong IAM, network security, encryption, logging, and monitoring understanding.
• Familiar with NIST, CIS Benchmarks, ISO 27001, MAS TRM.
• Experience with vulnerability management and security assessment tools.
• IaC and DevSecOps practices hands-on knowledge.
• Strong problem-solving and troubleshooting skills.
• Good communication and ability to document findings for technical and non-technical stakeholders.

Responsibilities

• Part of the team to perform security control validations across cloud platforms and services.
• Validate and test cloud security controls across cloud platforms and services.
• Implement and maintain security controls aligned with architecture and standards.
• Review cloud environments to identify security risks, misconfigurations, vulnerabilities, and compliance gaps.
• Configure and manage cloud security, monitoring, and automation tools.
• Work with Security Architects to translate requirements into practical technical controls.
• Support vulnerability management, risk assessments, and security incident investigations.
• Automate security checks and stay updated on emerging cloud threats and best practices.

Skills

3+ years experience

GCP security

Azure security

Cloud security controls

IAM

Network security

Encryption

Logging & monitoring

NIST

ISO 27001

CIS Benchmarks

MAS TRM

Vulnerability management

Security assessment tools

IaC

DevSecOps

Problem solving

Communication

Documentation

DevSecOps practices

Security automation

Cloud-native security

Tools

IaC tools

Job description

We are looking for an Information and Cyber Security Engineer to drive secure cloud adoption and strengthen cybersecurity controls across hybrid cloud environments.

Mandatory Skill-set

• Must have 3 years of experience in Cloud Security, Cyber Security, or Infrastructure Security;
• Good hands-on experience with GCP or Azure security;
• Practical experience in implementing and validating security controls in cloud environments;
• Strong understanding of IAM, network security, encryption, logging, and monitoring;
• Familiarity with security standards such as NIST, CIS Benchmarks, ISO 27001, and MAS TRM;
• Experience with vulnerability management and security assessment tools;
• Hands-on knowledge of Infrastructure as Code (IaC) and DevSecOps practices;
• Strong problem-solving and troubleshooting skills, with the ability to identify and resolve security issues;
• Good communication skills, with the ability to document findings and explain security risks clearly to both technical and non-technical stakeholders.

Desired Skill-set

• Exposure to DevSecOps, IaC, cloud security automation, and security assessment tools;
• Familiarity with security frameworks, cloud-native security services, and emerging cloud security trends.

Responsibilities

• Part of the team to perform security control validations and effectiveness testing across cloud platforms and services.
• Validate and test cloud security controls across cloud platforms and services;
• Implement and maintain security controls aligned with security architecture and standards;
• Review cloud environments to identify security risks, misconfigurations, vulnerabilities, and compliance gaps;
• Configure and manage cloud security, monitoring, and automation tools;
• Work with Security Architects to translate requirements into practical technical controls;
• Support vulnerability management, risk assessments, and security incident investigations;
• Automate security checks and stay updated on emerging cloud threats and security best practices.

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.