Senior/ Engineer, Cybersecurity

Singapore Polytechnic; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Singapore Polytechnic is seeking a technically-inclined and cybersecurity-minded professional to join our IT security team as Technical Cybersecurity Engineer and Subject-Matter-Expert. You will drive threat modelling using MITRE ATT&CK, oversee IT security compliance, incident response, data governance, and risk management across enterprise systems and learning platforms.

This role offers a 2-year contract initially and opportunities to strengthen the organisation's security posture while

Qualifications

• Relevant qualifications in Computer Science and related disciplines.
• Certifications in cybersecurity, information security, or data governance (e.g. CISSP, CISA, CISM, CDPSE, CDMP).
• Good understanding of cybersecurity principles, information security frameworks, and data governance best practices.
• Familiarity with MITRE ATT&CK and PDPA.
• Ability to leverage AI tools to enhance cybersecurity operations and data governance.

Responsibilities

• To propose, lead, and conduct threat modelling activities (e.g. STRIDE) using the MITRE ATT&CK framework for enterprise systems and applications to identify threats, attack vectors, and risk.
• To facilitate internal IT security compliance assessment and ensure IT security requirements are properly implemented.
• To conduct IT security related briefing/training to end-users and administrators.
• To manage IT security projects and implementations.
• To monitor, analyse, investigate and resolve security incidents (may require after-hours response).
• To conduct post-incident reviews and recommend procedural and technical measures to prevent recurrence.
• To ensure timely response to IT security alerts and escalation of security events.
• Propose, implement and maintain data governance policies, standards, and procedures across enterprise and learning platforms.
• Maintain data classification, ownership, stewardship, and accountability frameworks.
• Monitor and improve data quality, integrity, and completeness through governance processes and controls.
• Oversee data lifecycle management including creation, storage, retention, archival, and disposal.
• Ensure compliance with organisational policies and data protection regulations.
• Collaborate with business units to identify critical data assets and governance requirements.

Skills

Threat modelling

Security monitoring

Incident response

Data governance

Risk management

Communication skills

Team collaboration

AI tools for security

Education

Bachelor's degree in Computer Science

Tools

MITRE ATT&CK

Security frameworks

Job description

[What the role is]

Plaque of Commendation (Gold) – NTUC May Day Awards 2026

[What the role is]

Plaque of Commendation (Gold) – NTUC May Day Awards 2026
Most Positive Workplace Collaboration Award – Singapore International Chamber of Commerce (SICC) Awards 2025
The Straits Times Singapore’s Best Employers for 2024, 2025 & 2026
We are looking for a technically-inclined and cybersecurity-minded trailblazer to join us.
You will team up with us to strengthen our cybersecurity posture and data governance capabilities by driving security monitoring, threat modelling, risk management, compliance assurance, and data protection initiatives. You will play a key role in safeguarding our digital ecosystem, ensuring responsible use of data, and enabling secure adoption of technology solutions across the organisation.

[What you will be working on]

Technical Cybersecurity Engineer and Subject-Matter-Expert

• To propose, lead, and conduct threat modelling activities (e.g. STRIDE) using the MITRE ATT&CK framework for enterprise systems and applications to identify potential threats, attack vectors, and security risk.
• To facilitate internal IT security compliance assessment and ensure IT security requirements are adequately and properly implemented.
• To conduct IT security related briefing/training to end-users and administrators.
• To manage IT security projects and implementations.

Incident Response, Security monitoring & Threat intelligence

• To monitor, analyse, investigate and resolve security incidents (this role may require you to respond to security incidents after office hours).
• To conduct post-incident reviews and recommend procedural and technical measures to prevent similar incidents in future.
• To ensure timely and adequate response to IT security alerts, and escalation of security events.

Data Governance

• Propose, implement and maintain data governance policies, standards, and procedures across enterprise and learning platforms.
• Maintain data classification, ownership, stewardship, and accountability frameworks.
• Monitor and improve data quality, integrity, consistency, and completeness through governance processes and controls.
• Oversee data lifecycle management, including data creation, storage, retention, archival, and secure disposal.
• Ensure compliance with organisational policies and applicable data protection and privacy regulations.
• Collaborate with business units to identify critical data assets and define governance requirements.

[What we are looking for]

• Relevant qualifications in Computer Science and related disciplines.
• Professional and recognised certifications in cybersecurity, information security, or data governance (e.g. CISSP, CISA, CISM, CDPSE, CDMP).
• Good understanding of cybersecurity principles, information security frameworks, and data governance best practices.
• Familiarity with the MITRE ATT&CK framework and ability to map identified threats, attack techniques, and mitigations to relevant security controls.
• Familiarity with data privacy and protection regulations such as Personal Data Protection Act (PDPA).
• Ability to leverage Artificial Intelligence (AI) tools and technologies to enhance cybersecurity operations, data governance processes, security analysis, and productivity.
• Experience conducting security or compliance assessments and supporting audit activities.
• Experience implementing or supporting data governance frameworks, data classification, metadata management, and data lifecycle management.

General competencies:

• Versatile and adaptable individual who is comfortable handling a different range of responsibilities and collaborating with diverse stakeholders in a dynamic environment
• Demonstrated ability to multitask, adapt quickly to new challenges, and maintain effective working relationships with technical and non-technical stakeholders
• Excellent analytical and problem-solving skills
• Strong communication skills to engage stakeholders and end-users
• Self-driven, independent, professional and an excellent collaborator/partner in teams

Successful candidate will be offered a 2-year contract in the first instance.

If you are shortlisted for the position, you should hear from us within 30 days of the closing date of the advertisement.