Senior Cybersecurity Engineer — Cloud Security & Compliance

GovTech Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

GovTech Singapore is seeking a Cybersecurity Engineer to act as the security SME for a critical national digital platform. You will translate policy requirements into practical technical controls and work closely with product and engineering teams in an agile delivery setting.

Responsibilities include assessing security controls across IaaS/PaaS/SaaS, managing security appliances, triaging OWASP findings, and ensuring secure SDLC practices while mapping controls to ISO 27001/NIST/CIS benchmarks.

Qualifications

• Minimum 5 years of professional experience in cybersecurity engineering, with hands-on work in security operations, risk assessment, or compliance within cloud environments.
• Working knowledge of Singapore-specific regulatory frameworks: WOG IM8 Reform and CSA CCOPv2 for Critical Information Infrastructure.
• Hands-on experience with security technologies such as SIEM, CSPM, ASM, WAF, and vulnerability management tools.
• Familiarity with cybersecurity frameworks and standards including OWASP, MITRE ATT&CK, ISO 27001, NIST, and CIS benchmarks.
• Ability to communicate technical security concepts to policy and compliance stakeholders, and translate compliance requirements into engineering-actionable tasks.
• Pragmatic decision-making: able to balance security requirements with delivery timelines and business needs.
• Experience supporting audit cycles and producing compliance evidence.
• Proficiency in at least one scripting language (e.g., Python, PowerShell, YARA) for automation and tooling.
• Relevant certifications such as GCIH, GCFA, OSCP, CISSP, or AWS Security Specialty are advantageous.
• Ability to conduct in-house VAPT is a strong plus.

Responsibilities

• Translate policy requirements into implementable technical controls for cloud-based platforms.
• Triage security findings against OWASP Top 10 and coordinate retesting with product and engineering teams.
• Ensure secure SDLC practices across the delivery lifecycle.
• Translate CSA Cybersecurity Act and WOG IM8 high-risk cloud requirements into actionable controls.
• Log and assess advisories, track remediation, and ensure closure.
• Conduct security risk assessments and map controls to compliance frameworks (ISO 27001, NIST, CIS).
• Support internal and external audits with evidence gathering and coordination.
• Perform threat modelling and participate in offensive/defensive security operations as needed.
• Engage stakeholders to align regulatory requirements with engineering decisions and drive remediation.

Skills

Cybersecurity engineering

Security operations

Risk assessment

Compliance

Cloud security

Tools

SIEM

CSPM

ASM

WAF

Vulnerability management

Job description

GovTech Singapore is seeking a Cybersecurity Engineer to act as the security SME for a critical national digital platform. You will translate policy requirements into practical technical controls and work closely with product and engineering teams in an agile delivery setting.

Responsibilities include assessing security controls across IaaS/PaaS/SaaS, managing security appliances, triaging OWASP findings, and ensuring secure SDLC practices while mapping controls to ISO 27001/NIST/CIS benchmarks.