Security Engineer - DevSecOps & Compliance

Unisoft Infotech Pte Ltd; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Unisoft Infotech Pte Ltd seeks an IT Security Engineer to design, implement, and operate security controls for mission-critical systems in a secured environment. The role spans Day 1 security deployment and Day 2 production support, collaborating with Security Leads, Infrastructure, System, and Software teams to meet government policies.

Responsibilities include implementing security architecture, configuring systems, threat modelling, maintaining CI/CD security, and assisting in audits.

Qualifications

• Bachelor's or higher in Computer Science, Cybersecurity, or equivalent.
• 3–7 years IT security or infrastructure security experience.
• Hands-on with Kubernetes/Docker security and CI/CD/DevSecOps.
• Familiar with Singapore government security policies (IM8 preferred).

Responsibilities

• Implement security architectures and controls as designed by Security Leads/Architects.
• Support security configurations across systems, applications, and infrastructure.
• Assist in threat modelling and risk assessment activities.
• Translate security requirements into technical implementations across platforms.
• Implement and maintain security tools in CI/CD pipelines (SAST, DAST, SCA, container scanning).
• Monitor findings and collaborate with developers on remediation.
• Support secure coding practices and DevSecOps adoption.
• Assist with API security, secrets management, and secure communications setup.
• Support evidence collection and remediation tracking for audits.

Skills

Kubernetes security

Docker security

IAM and access control

DevSecOps practices

Threat modelling

Security incident handling

Education

Degree in Computer Science / Cybersecurity

Tools

SAST tools

DAST tools

SIEM

Vulnerability scanners

CI/CD pipelines

Job description

Unisoft Infotech Pte Ltd seeks an IT Security Engineer to design, implement, and operate security controls for mission-critical systems in a secured environment. The role spans Day 1 security deployment and Day 2 production support, collaborating with Security Leads, Infrastructure, System, and Software teams to meet government policies.

Responsibilities include implementing security architecture, configuring systems, threat modelling, maintaining CI/CD security, and assisting in audits.