Senior Cyber Security Operations Lead (2 Year Contract)

MORGAN MCKINLEY PTE. LTD.; Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

Morgan McKinley Pte. Ltd.

in Singapore is seeking a Senior Cyber Security Operations Lead to bolster the organisation’s security posture across its technology stack, with a focus on vulnerability management, compliance, automation and AI-enabled improvements. The role emphasizes administration and engineering of Tenable Vulnerability Management and Compliance Management, with responsibilities spanning incident prevention, audits, platform upgrades and collaboration with vendors to sustain secure

Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science or related field.
• 5+ years hands-on cybersecurity operations and tool management.
• 3+ years administering Tenable platform (Tenable One/SC, Nessus) and related components.

Responsibilities

• Lead Vulnerability Management (VM) for assigned cyber security tools and plan remediation.
• Lead security compliance through system hardening, configuration management and policy enforcement.
• Lead IT lifecycle management and timely platform updates with minimal business disruption.
• Plan downtime and coordinate with cross-functional teams for updates and upgrades.
• Support audits and remediation actions; work with vendors to maintain secure operations.
• Participate in DR exercises and architectural planning for cloud security tools.
• Develop automation and AI-assisted capabilities to improve Tenable workflows and KM.

Skills

Cybersecurity Ops

Tenable Platform

Nessus Scanning

Vulnerability Mgmt

Automation/AI

Education

Bachelor's degree in Cybersecurity/IT

Tools

Tenable One

Tenable Security Center

Nessus

Job description

Job Summary

We are seeking a highly skilled and motivated Senior Cyber Security Operations Lead to join our Cyber Security Operations team. The ideal candidate will play a key role in maintaining and enhancing the organisation's cyber security technology stack, with a strong focus on security, compliance, operational efficiency, automation and service excellence. The role will have a particular focus on the administration, engineering and continuous improvement of the Tenable Vulnerability Management and Compliance Management platform. This includes platform architecture, vulnerability assessment, CIS Benchmark compliance, audit file engineering, automation and the responsible application of AI to improve operational efficiency.

Key Responsibilities

This role ensures the security posture of critical systems through proactive monitoring, incident response, system maintenance, and implementation of security enhancements across the organisation's technology stack.

Be part of a team that is responsible for managing and maintaining the cyber security operations of organisation:

• Lead Vulnerability Management (VM) of assigned cyber security tools, including proactive monitoring of vulnerabilities, planning remediation schedules, adhering to vulnerability deads
• Lead security compliance through regular system hardening, configuration management, and policy enforcement.
• Lead IT lifecycle management.
• Ensure timely and successful updates and upgrades whilst ensuring minimal disruption to business operations.
• Plan downtime and collaborate with cross-functional teams for system updates and upgrades.
• Support regular audits and perform remediation actions.
• Work closely with vendors.
• Provide operations support, in a multi-vendor network including Critical Information Infrastructure (CII).
• Participate in Disaster Recovery (DR) exercise and contribute to architectural planning for managed security tools in cloud environments.
• Manage tool setups and migrations.
• Create, maintain and review technical documentation, Standard Operating Procedures (SOP) as part of Knowledge Management (KM).
• Drive efficiencies through AI and automation.
• Proactive documentation as part of Knowledge Management (KM).
• Occasionally provide after-hours support including weekends as required.

AI-Assisted Tenable Audit & Task Automation

Develop AI-assisted and automation capabilities to support the end-to-end lifecycle of Tenable Audit Files, including analysis, modification, validation, testing, deployment and ongoing maintenance.

Leverage AI to assist with mapping changes in CIS Benchmarks against existing Tenable Audit Files and identify compliance checks requiring modification, addition or retirement.

Develop and customise Tenable compliance checks to align with organisational security standards, regulatory requirements and approved deviations.

Automate impact analysis and documentation of changes made to Tenable Audit Files, including control mappings, modification rationale and version history.

Implement appropriate validation and testing processes to ensure the accuracy and reliability of AI-assisted Audit File modifications.

Ensure all AI-generated or AI-assisted changes are subject to engineer review and controlled testing prior to production deployment.

Design and implement automation using Tenable APIs, Python, PowerShell and Ansible to reduce manual effort associated with recurring Tenable platform administration and engineering activities.

Automate routine activities including asset management, platform and scanner health checks, scan configuration, scanner administration, compliance scan management, Audit File lifecycle management, housekeeping and reporting.

Develop automated monitoring and health-check mechanisms to proactively identify scanner, scan, plugin, connectivity and platform-related issues.

Automate collection of diagnostic information and routine troubleshooting activities to improve incident investigation and resolution time.

Develop reusable scripts, workflows and automation modules to standardise common Tenable operational activities and reduce human error.

Maintain appropriate documentation, source control and operational procedures for developed automation to ensure maintainability and knowledge transfer.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum 5 years of hands-on experience in cybersecurity operations and security tool management.
• Minimum 3 years of hands-on experience administering and maintaining the Tenable vulnerability management platform, including Tenable One, Tenable Security Center, Nessus Scanners, and related components.
• Minimum 3 years of experience in administering and troubleshooting the Tenable Nessus platform, including agent-based scans, credentialed scans, plugin updates, scan policies, and vulnerability assessment operations.
• Minimum 3 y