Security Engineer Tenable

Unison Group; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Unison Group is seeking a Senior ICT Infrastructure Engineer (Cyber Security Tools) to join its Cyber Security Operations team in Singapore. The role focuses on admin, engineering and continuous improvement of the Tenable vulnerability and compliance platforms, with emphasis on automation, AI, audits, and policy enforcement.

The successful candidate will lead VM for security tools, ensure CIS benchmark compliance, manage audits, coordinate with vendors, and contribute to DR planning while

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field.
• Minimum 5 years hands-on cybersecurity operations experience.
• Minimum 3 years administering Tenable VM platform (Tenable One, Security Center, Nessus).
• Minimum 3 years administering Tenable Nessus platform (agent-based scans, credentialed scans, plugin updates).
• Minimum 3 years developing/auditing Tenable Audit Files for CIS Benchmark scans.
• Experience with Privileged Access Management (PAM) tools such as CyberArk.
• Strong vendor management and cross-functional communication skills.
• Experience across cloud environments and Critical Information Infrastructure (CII).
• Tenable Security Center Specialist or equivalent certification mandatory.

Responsibilities

• Lead Vulnerability Management (VM) for security tools with proactive monitoring and remediation planning.
• Lead security compliance via system hardening, config management and policy enforcement.
• Oversee IT lifecycle management and timely updates with minimal business disruption.
• Plan downtime and coordinate with cross-functional teams for system updates.
• Support audits and perform remediation actions with vendors.
• Develop and maintain technical documentation and SOPs (KM).
• Drive efficiencies through AI and automation.
• Provide after-hours support as required.

Skills

Cyber security operations

Security tool management

Tenable platform

Nessus

Vendor management

Communication skills

PAM tools

Automation

Cloud environments

Audit & compliance

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Tenable Vulnerability Management

Tenable One

Tenable Security Center

Nessus Scanners

CyberArk PAM

Job description

We are seeking a highly skilled and motivated Senior ICT Infrastructure Engineer (Cyber Security Tools) to join our Cyber Security Operations team. The ideal candidate will play a key role in maintaining and enhancing the organization’s cyber security technology stack, with a strong focus on security, compliance, operational efficiency, automation and service excellence.

The role will have a particular focus on the administration, engineering and continuous improvement of the Tenable Vulnerability Management and Compliance Management platform. This includes platform architecture, vulnerability assessment, CIS Benchmark compliance, audit file engineering, automation and the responsible application of AI to improve operational efficiency.

Key Responsibilities

This role ensures the security posture of critical systems through proactive monitoring, incident response, system maintenance, and implementation of security enhancements across the organization's technology stack.

Be part of a team thatis responsible formanaging andmaintainingthe cyber security operations of organization:

• Lead Vulnerability Management (VM) of assigned cyber security tools, including proactive monitoring of vulnerabilities, planning remediation schedules, adhering to vulnerability deadlines and seeking deviations via Risk Assessment (RA).
• Leadsecurity compliance through regular system hardening, configuration management, and policy enforcement.
• Lead IT lifecycle management.
• Ensuretimelyand successful updates and upgrades whilst ensuring minimal disruption to business operations.
• Plan downtime and collaborate with cross-functional teams for system updates and upgrades.
• Support regular audits and perform remediation actions.
• Work closely with vendors.
• Provide operations support, in a multi-vendor network including Critical Information Infrastructure (CII).
• Participatein Disaster Recovery (DR) exercise and contribute to architectural planning for managed security tools in cloud environments.
• Manage tool setups and migrations.
• Create,maintainand review technical documentation, Standard Operating Procedures (SOP) as part of Knowledge Management (KM).
• Drive efficiencies through AI and automation.
• Proactive documentation as part of Knowledge Management (KM).
• Occasionally provide after-hours support including weekends asrequired.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum5years of hands-on experience in cybersecurity operations and security tool management.
• Minimum 3 years of hands-on experience administering and maintaining the Tenable vulnerability management platform, including Tenable One, Tenable Security Center, Nessus Scanners, and related components.
• Minimum 3 years of experience in administering and troubleshooting the Tenable Nessus platform, including agent-based scans, credentialed scans, plugin updates, scan policies, and vulnerability assessment operations.
• Minimum 3 years of hands-on experience developing, maintaining, and optimizing Tenable Audit Files for CIS Benchmark compliance scans, including tailoring audit policies to organizational security standards and regulatory requirements.
• Hands-on ability in operating Privileged Access Management (PAM) tools such as CyberArk.
• Good vendor management skills.
• Good written and verbal communication skills withdemonstratedability to influence and communicate effectively with non-technical audiences including management.
• Applicants are expected to manage work in fast-paced environments, across heterogeneous networks including cloud environments, some of which are Critical Information Infrastructure (CII).
• Tenable Security Center Specialist or equivalent certification is a mandatory requirement for this role.
• Candidates who do not have the relevant certification are advised not to apply.