Security Engineer - DevSecOps & Compliance

Ascendion; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Ascendion is seeking an IT Security Engineer to implement, operate, and support security controls for mission-critical systems within a secured environment in Singapore. The role spans Day 1 project security and Day 2 production security, collaborating with Security Leads, Infra, System, and Software teams to ensure adherence to IM8, WOG, and PDPA requirements.

You will drive security in CI/CD, perform risk assessments, coordinate VA/PT activities, manage access controls (RBAC, MFA, PAM), and

Qualifications

• Degree in Computer Science / Cybersecurity / Information Security or equivalent.
• 3–7 years of IT experience in cybersecurity or infrastructure security.
• Experience supporting security in projects or production environments.
• Familiarity with Singapore Government security policies (IM8 preferred).
• Hands-on experience with IAM and access control, SIEM, vulnerability scanners, CI/CD, and DevSecOps.

Responsibilities

• Security Implementation & Engineering across platforms.
• Compliance with IM8, Government security policies, WOG, and PDPA.
• DevSecOps: SAST, DAST, SCA, container scanning and remediation.
• Security Testing Support: VA/PT and go-live readiness.
• Vulnerability tracking, patching, and audit evidence.
• Access control administration: RBAC, MFA, PAM; least privilege reviews.
• Incident response support and log analysis.
• Configuration of API Gateways, WAF, and cloud security basics.

Skills

Security controls

Threat modelling

DevSecOps

RBAC

MFA

PAM

Log analysis

Education

Degree in Computer Science / Cybersecurity / Information Security or equivalent

Tools

SIEM

Vulnerability scanners

CI/CD tooling

IAM platform

Job description

Ascendion is seeking an IT Security Engineer to implement, operate, and support security controls for mission-critical systems within a secured environment in Singapore. The role spans Day 1 project security and Day 2 production security, collaborating with Security Leads, Infra, System, and Software teams to ensure adherence to IM8, WOG, and PDPA requirements.

You will drive security in CI/CD, perform risk assessments, coordinate VA/PT activities, manage access controls (RBAC, MFA, PAM), and