Security Exposure & Third-Party Detection Engineer

Astek; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Astek is hiring a Detection Engineer to support the Security Exposure and Third-Party Cyber Assurance Centre of Excellence within CASD—External Threat Operations. The role covers continuous monitoring across SEM and TPCA, plus third-party risk assessments and threat validation.

The successful candidate will build scripts and dashboards, leverage CTI, and collaborate with stakeholders to reduce exposure timelines and improve security posture across the organization and its partners.

Qualifications

• Degree in Computer Science, Information Technology, or a related discipline.
• 3–5 years hands-on cybersecurity experience in operations, exposure management, or third-party risk.
• Experience conducting third‑party/vendor security assessments (VDD, ODD, SIG).
• Knowledge of NIST, ISO 27001, CIS Controls.
• Hands-on experience with ASM/EASM, cyber exposure management, digital risk monitoring, dark-web monitoring, or CTI platforms.
• Strong scripting skills in Python, PowerShell, or Bash.
• Understanding of TCP/IP, DNS, HTTP/S; familiar with AWS, Azure, GCP.
• Understanding of third- and fourth-party cyber risk and supply chain exposure.
• Excellent analytical and documentation abilities; strong stakeholder communication.

Responsibilities

• Operate and maintain always-on security exposure and external threat monitoring platforms.
• Monitor organisation, portfolio companies, and third parties for internet-facing vulnerabilities and threats.
• Perform ASM/EASM activities to identify, assess, validate, and prioritise external exposures.
• Conduct third-party/vendor cybersecurity assessments, including VDD/ODD/SIG.
• Assess third-party security controls against NIST, ISO 27001, CIS Controls.
• Leverage CTI, digital risk, and dark-web monitoring to identify threats.
• Develop scripts in Python/PowerShell/Bash to automate monitoring and reporting.
• Build dashboards and cyber posture metrics using data lakes.
• Document findings for technical and business stakeholders.
• Support continuous improvement of detection logic and exposure management capabilities.

Skills

Attack Surface Management

Cyber Threat Intelligence

Digital risk monitoring

Dark-web monitoring

Python

PowerShell

Bash

TCP/IP

DNS

HTTP/S

AWS

Azure

GCP

VDD/ODD/SIG

Third-Party Cyber Risk

Analytical thinking

Education

Bachelor's degree in Computer Science or Information Technology

Tools

ASM/EASM platforms

CTI platforms

Data Lake platforms

Job description

Astek is hiring a Detection Engineer to support the Security Exposure and Third-Party Cyber Assurance Centre of Excellence within CASD—External Threat Operations. The role covers continuous monitoring across SEM and TPCA, plus third-party risk assessments and threat validation.

The successful candidate will build scripts and dashboards, leverage CTI, and collaborate with stakeholders to reduce exposure timelines and improve security posture across the organization and its partners.