Senior IT Security Engineer (1-year renewable contract)

evolution recruitment solutions pte. ltd.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

evolution recruitment solutions pte. ltd. is seeking an experienced IT Security Engineer to strengthen enterprise cybersecurity across governance, operations, and risk management.

You will maintain security controls, investigate threats, manage vulnerabilities, and collaborate with internal teams and external partners to improve the organisation's security posture. Responsibilities span security governance, incident response, vulnerability management, and infrastructure protection across

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or related discipline.
• At least 5 years of relevant experience in cybersecurity, IT security operations, security controls, IT infrastructure security, or security auditing.
• Hands-on experience with security technologies and enterprise security tools.

Responsibilities

• Governance, compliance, policies and security baselines aligned with industry standards.
• Perform security reviews and ensure CIS benchmark compliance and system hardening.
• Lead vulnerability assessments, patching, and remediation activities across environments.
• Manage security across on-premises and cloud, including PAM, EDR/XDR and network security.
• Coordinate security incidents from detection to containment and remediation.
• Deliver security awareness and maintain documentation on policies and controls.

Skills

Security Governance

Security Operations

Vulnerability Management

Endpoint Security

Cloud Security

IAM & Access

Security Testing

Threat Analysis

Incident Response

Security Tools

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SIEM

WAF

EDR/XDR

PAM

Vulnerability Tools

Job description

Please note that visa sponsorship is not available at this time.

Role Overview

We are looking for an experienced IT Security Engineer to strengthen enterprise cybersecurity across security operations, governance, infrastructure protection, and risk management. This role will be responsible for maintaining security controls, investigating potential threats, managing vulnerabilities, and working with internal teams and external partners to improve the organisation's overall security posture.

Key Responsibilities

1. Security Governance & Compliance

• Develop and maintain information security policies, technical standards, procedures, and security baselines in line with industry best practices and regulatory requirements.
• Conduct regular security reviews and ensure compliance with security controls, system hardening standards, and CIS benchmarks.
• Support cybersecurity risk assessments, audits, third-party reviews, and remediation activities.
• Advise IT, application, infrastructure, and cloud teams on security best practices and security-by-design principles.
• Support personal data protection initiatives and security requirements relating to data privacy.

2. Security Operations & Incident Response

• Monitor security events, emerging threats, and the organisation's overall cybersecurity posture.
• Investigate alerts using SIEM and other security monitoring platforms, conduct initial triage, and escalation when necessary.
• Coordinate security incident response from investigation through containment, remediation, and closure.
• Monitor threat intelligence and vulnerability developments, providing relevant security advisories and patching recommendations.
• Improve security monitoring capabilities, detection rules, alert accuracy, and incident response procedures.

3. Vulnerability Management & Security Testing

• Coordinate vulnerability assessments, penetration testing, and security reviews across applications, networks, servers, endpoints, and cloud environments.
• Analyse findings, recommend remediation measures, and track corrective actions against agreed timelines.
• Conduct security and compliance checks on computing devices before they are connected to corporate networks.

4. Infrastructure, Endpoint & Access Security

• Configure, maintain, and optimise security tools to ensure effective integration with enterprise IT infrastructure.
• Implement and manage security controls across on-premises and cloud environments, covering networks, systems, endpoints, identities, and runtime environments.
• Manage endpoint protection solutions, including antivirus and EDR/XDR, as well as privileged access management (PAM) platforms such as CyberArk.
• Conduct periodic reviews of user accounts, privileged accounts, access permissions, access logs, and third-party service provider reports.
• Support secure network architecture, system hardening, access control, and infrastructure security monitoring.

5. Security Solutions & Vendor Management

• Identify opportunities to enhance security capabilities and collaborate with external vendors on the design, testing, deployment, and handover of cybersecurity solutions.
• Oversee third-party security service providers, review service performance and security reports, and ensure adherence to agreed security standards and SLAs.
• Coordinate the implementation, maintenance, testing, and monitoring of security technologies, including WAF, DDoS protection, SIEM, EDR/XDR, PAM and vulnerability management tools.

6. Security Awareness & Reporting

• Deliver security awareness initiatives and training for employees and external service providers.
• Maintain documentation covering security policies, procedures, incidents, vulnerability assessments, and control reviews.
• Prepare regular reports on security incidents, vulnerability remediation, compliance, risk exposure, and mitigation progress.
• Work closely with internal IT teams, business stakeholders, cloud providers, and external partners on security initiatives.

Requirements

Education & Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related discipline.
• At least 5 years of relevant experience in cybersecurity, IT security operations, security controls, IT infrastructure security, or security auditing.
• Practical experience in security operations, vulnerability management, incident response, access control, and enterprise security technologies.

Technical Skills

• Hands-on experience with security technologies such as SIEM, WAF, antivirus, EDR/XDR, PAM, and vulnerability assessment tools.
• Strong understanding of threat analysis, incident response, vulnerability remediation, endpoint security, identity and access management, secure network design, and system hardening.
• Good knowledge of enterprise IT infrastructure, on-premises and cloud security, security logging, monitoring, and secure configuration standards.
• Familiarity with security frameworks such as ISO 27001, NIST CSF, and CIS benchmarks.
• Exposure to Microsoft Azure, AWS, or other cloud security environments is an advantage.
• Knowledge of ing, automation, Infrastructure as Code (IaC) security, CI/CD security, or security orchestration is a plus.

Certifications

• CISSP, CISM, CISA, or equivalent cybersecurity certifications are preferred.
• Additional certifications such as CCSP, Microsoft Security/Azure Security, AWS Certified Security, or GIAC are advantageous.