Security Engineer (AMK)

COMBUILDER PTE LTD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

COMBUILDER PTE LTD is seeking an experienced Security Engineer with 6+ years in cybersecurity, network security, and security engineering to safeguard enterprise environments. You will monitor threats, respond to incidents, manage Check Point Firewall and CloudGuard, and secure cloud and data center infrastructure.

The role covers security governance, vulnerability management, and continuous improvement, while also providing infrastructure support during quieter periods to ensure service

Qualifications

• Bachelor's degree or related discipline is advantageous.
• Minimum 6 years in cybersecurity, network security, or security engineering.
• Hands-on experience with Check Point Firewall and CloudGuard.
• Experience managing enterprise Cisco switching environments.
• Experience supporting Broadcom VMware NSX security and virtualization environments.

Responsibilities

• Monitor, investigate, and respond to cybersecurity incidents and alerts.
• Threat hunting, forensic analysis, and incident investigations.
• Analyze security logs to identify malicious activities and risks.
• Support security assessments, remediation plans, and root-cause analysis.
• Manage Check Point Firewall environments, including policy creation, NAT, IPS, VPN, and threat prevention.
• Implement and maintain cloud security controls using Check Point CloudGuard.
• Administer Broadcom VMware NSX environments and implement micro-segmentation.
• Ensure security governance, compliance, and coordination with audits.
• Contribute to security improvements and automation initiatives.
• Provide infrastructure and systems support during low-security demand to ensure continuity.

Skills

Security Operations

Incident Response

Threat Hunting

Vulnerability Management

Security Monitoring

IAM

VPN Technologies

IDS/IPS

Cloud Security

Micro-Segmentation

Network Security

Threat Analysis

Log Analysis

Education

Bachelor's Degree in IT/Cybersecurity/CS

Tools

Check Point Firewall Administration

Check Point CloudGuard

Broadcom VMware NSX

VMware Infrastructure

Cisco Switching

Job description

An experienced Security Engineer with 6 years of expertise in cybersecurity operations, network security, firewall administration, cloud security, and infrastructure protection. Responsible for safeguarding enterprise environments through proactive threat monitoring, incident response, vulnerability management, and security governance. The role also provides infrastructure and systems support during periods of lower security operational demand to ensure operational continuity and service availability.

Key Responsibilities

Primary Responsibilities: Cybersecurity (70-80%)

Security Operations & Incident Response

• Monitor, investigate, and respond to cybersecurity incidents and security alerts.
• Conduct threat hunting, forensic analysis, and incident investigations.
• Analyze security logs and events to identify malicious activities and security risks.
• Support security assessments, remediation plans, and root cause analysis.

Network & Firewall Security

• Manage and administer Check Point Firewall environments, including policy creation, NAT configuration, IPS, VPN, application control, and threat prevention.
• Monitor firewall performance and optimize security policies in line with security standards.
• Support network segmentation and secure network architecture initiatives.

Cloud Security

• Implement and maintain security controls for cloud environments utilizing Check Point CloudGuard.
• Monitor cloud security posture and ensure compliance with organizational security requirements.
• Perform cloud risk assessments and vulnerability management.

Data Center & Virtualization Security

• Administer and secure Broadcom VMware NSX environments.
• Implement micro-segmentation policies and network security controls within virtualized infrastructure.
• Support network virtualization security architecture and troubleshooting activities.

Security Governance & Compliance

• Conduct vulnerability assessments and coordinate remediation activities.
• Support internal and external security audits.
• Develop and maintain security policies, standards, and procedures.
• Ensure compliance with cybersecurity frameworks and regulatory requirements.

Security Improvement & Automation

• Recommend and implement security enhancements.
• Participate in infrastructure and security projects.
• Support security awareness initiatives and technical security consultations.

Secondary Responsibilities: Infrastructure & Systems Support (20-30%)

Network Infrastructure Support

• Configure, maintain, and troubleshoot Cisco Switches and network infrastructure.
• Support LAN/WAN connectivity, VLAN configurations, routing, switching, and network performance optimization.
• Assist with network upgrades, migrations, and capacity planning.

Systems Administration

• Support Windows and Linux servers.
• Perform patch management, system monitoring, and maintenance activities.
• Support virtualization platforms and infrastructure services.

Operational Support

• Monitor system health and infrastructure availability.
• Support backup, recovery, and disaster recovery activities.
• Participate in scheduled maintenance and service improvement initiatives.

Required Technical Skills

Security Technologies

• Check Point Firewall Administration
• Check Point CloudGuard
• Security Incident Response
• Vulnerability Management
• Security Monitoring and Threat Detection
• Security Governance and Compliance
• VPN Technologies
• IPS/IDS Solutions
• Identity and Access Management (IAM)

Networking Technologies

• Cisco Switching Technologies
• TCP/IP, Routing, Switching
• VLAN Configuration
• Network Segmentation
• LAN/WAN Infrastructure

Virtualization & Cloud

• Broadcom VMware NSX
• VMware Infrastructure
• Micro-Segmentation
• Cloud Security Architecture
• Hybrid Cloud Security

Operating Systems

• Windows Server Administration
• Linux Server Administration

Requirements

• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related discipline will be added advantage.
• Minimum 6 years of experience in Cybersecurity, Network Security, or Security Engineering.
• Hands-on experience with Check Point Firewall and CloudGuard solutions.
• Experience managing enterprise Cisco switching environments.
• Experience supporting Broadcom VMware NSX security and virtualization environments.

Preferred Certifications

• Check Point Certified Security Administrator (CCSA)
• Check Point Certified Security Expert (CCSE)
• Cisco CCNA / CCNP
• VMware NSX Certification
• CISSP
• CISM
• CompTIA Security+