Senior IT Security Engineer (1-Year Renewable Contract)

Evolution Singapore; Singapore; On-site; SGD 90,000 - 160,000; Full time

Job summary

Evolution Singapore seeks an experienced IT Security Engineer to fortify enterprise cybersecurity across governance, operations, and risk management. You will maintain controls, investigate threats, manage vulnerabilities, and collaborate with internal teams and partners to lift the organization’s security posture.

Your responsibilities include governance, incident response, vulnerability assessments, and security technology oversight.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• At least 5 years of relevant cybersecurity experience in security operations, governance, and risk management.
• Practical experience with security operations, vulnerability management, incident response, access control, and enterprise security technologies.

Responsibilities

• Develop and maintain information security policies, standards, procedures, and baselines.
• Monitor security events and threats; triage and escalate as needed.
• Coordinate vulnerability assessments and security testing across environments.
• Manage security controls across on‑premises and cloud environments.
• Oversee security technologies (WAF, SIEM, EDR/XDR, PAM) and security reporting.
• Deliver security awareness initiatives and report on risk, incidents, and remediation progress.

Skills

Threat analysis

Incident response

Security controls

Vulnerability mgmt

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

SIEM tools

EDR/XDR

PAM (CyberArk)

WAF

Cloud security tools

Job description

We are looking for an experienced IT Security Engineer to strengthen enterprise cybersecurity across security operations, governance, infrastructure protection, and risk management. This role will be responsible for maintaining security controls, investigating potential threats, managing vulnerabilities, and working with internal teams and external partners to improve the organisation’s overall security posture.

Key Responsibilities

1. Security Governance & Compliance

• Develop and maintain information security policies, technical standards, procedures, and security baselines in line with industry best practices and regulatory requirements.
• Conduct regular security reviews and ensure compliance with security controls, system hardening standards, and CIS benchmarks.
• Support cybersecurity risk assessments, audits, third-party reviews, and remediation activities.
• Advise IT, application, infrastructure, and cloud teams on security best practices and security-by-design principles.
• Support personal data protection initiatives and security requirements relating to data privacy.

2. Security Operations & Incident Response

• Monitor security events, emerging threats, and the organisation’s overall cybersecurity posture.
• Investigate alerts using SIEM and other security monitoring platforms, conduct initial triage, and escal​ate.
• Coordinate security incident response from investigation through containment, remediation, and closure.
• Monitor threat intelligence and vulnerability developments, providing relevant security advisories and patching recommendations.
• Improve security monitoring capabilities, detection rules, alert accuracy, and incident response procedures.

3. Vulnerability Management & Security Testing

• Coordinate vulnerability assessments, penetration testing, and security reviews across applications, networks, servers, endpoints, and cloud environments.
• Analyse findings, recommend remediation measures, and track corrective actions against agreed timelines.
• Conduct security and compliance checks on computing devices before they are connected to corporate networks.

4. Infrastructure, Endpoint & Access Security

• Configure, maintain, and optimise security tools to ensure effective integration with enterprise IT infrastructure.
• Implement and manage security controls across on-premises and cloud environments, covering networks, systems, endpoints, identities, and runtime environments.
• Manage endpoint protection solutions, including antivirus and EDR/XDR, as well as privileged access management (PAM) platforms such as CyberArk.
• Conduct periodic reviews of user accounts, privileged accounts, access permissions, access logs, and third‑party service provider reports.
• Support secure network architecture, system hardening, access control, and infrastructure security monitoring.

5. Security Solutions & Vendor Management

• Identify opportunities to enhance security capabilities and collaborate with external vendors on the design, testing, deployment, and handover of cybersecurity solutions.
• Oversee third‑party security service providers, review service performance and security reports, and ensure adherence to agreed security standards and SLAs.
• Coordinate the implementation, maintenance, testing, and monitoring of security technologies, including WAF, DDoS protection, SIEM, EDR/XDR, PAM, and vulnerability management tools.

6. Security Awareness & Reporting

• Deliver security awareness initiatives and training for employees and external service providers.
• Maintain documentation covering security policies, procedures, incidents, vulnerability assessments, and control reviews.
• Prepare regular reports on security incidents, vulnerability remediation, compliance, risk exposure, and mitigation progress.
• Work closely with internal IT teams, business stakeholders, cloud providers, and external partners on security initiatives.

Requirements

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related discipline.
• At least 5 years of relevant experience in cybersecurity, IT security operations, security controls, IT infrastructure security, or security auditing.
• Practical experience in security operations, vulnerability management, incident response, access control, and enterprise security technologies.

Technical Skills

• Hands‑on experience with security technologies such as SIEM, WAF, antivirus, EDR/XDR, PAM, and vulnerability assessment tools.
• Strong understanding of threat analysis, incident response, vulnerability remediation, endpoint security, identity and access management, secure network design, and system hardening.
• Good knowledge of enterprise IT infrastructure, on‑premises and cloud security, security logging, monitoring, and secure configuration standards.
• Familiarity with security frameworks such as ISO 27001, NIST CSF, and CIS benchmarks.
• Exposure to Microsoft Azure, AWS, or other cloud security environments is an advantage.
• Knowledge of scripting, automation, Infrastructure as Code (IaC) security, CI/CD security, or security orchestration is a plus.

Certifications

• CISSP, CISM, CISA, or equivalent cybersecurity certifications are preferred.
• Additional certifications such as CCSP, Microsoft Security/Azure Security, AWS Certified Security, or GIAC are advantageous.