Senior Security Engineer

BOND FINANCIAL GROUP PTE. LTD.; Shenton Way; On-site; SGD 120,000 - 180,000; Full time

Job summary

BOND FINANCIAL GROUP PTE. LTD. in Singapore is seeking a Senior Security Engineer to implement and operate security controls and tooling across the environment.

You will drive security operations, IAM administration, and provide evidence for ISO 27001:2022 certification. The role requires hands-on experience in incident response, vulnerability management, and collaboration with MSSPs, SoC, and audit teams. On-call coverage and strong understanding of OWASP and threat modelling are essential.

Qualifications

• Bachelor's degree or higher in Information Security, Computer Science, or related discipline.
• 8+ years of progressive information security experience with hands‑on security operations in a production environment.
• Certifications such as CISSP, CISM, or GIAC are preferred.

Responsibilities

• Operate and tune security monitoring, detection, and alerting; triage and investigate security events.
• Lead containment and remediation during security incidents; draft post‑mortem findings and track remediation to closure.
• Coordinate with SoC team and MSSP; validate findings from penetration tests and vulnerability scans and drive remediation.
• Administer IAM controls including SSO, MFA, and PAM; provisioning and deprovisioning users and access reviews.
• Operate and maintain email security gateways and endpoint protection platforms.
• Support secure development reviews against OWASP standards and assist with security architecture reviews and threat modelling.
• Implement ISO 27001:2022 controls and collect audit evidence; maintain control documentation and support surveillance audits.
• On‑call availability to support 24x7 incident response coverage.

Skills

Security operations

Incident response

IAM administration

Threat modelling

Education

Bachelor's degree in Information Security

Tools

Okta

Azure AD

CyberArk

BeyondTrust

MSSP tooling

SIEM

Job description

The Senior Security Engineer is a hands‑on security engineer responsible for implementing and operating the organisation's security controls and tooling. Reporting to the Information Security Lead, this role executes security operations, supports IAM administration, and produces control evidence for the ISO27001:2022 certification programme.

Responsibilities

Security Operations

• Operate and tune security monitoring, detection, and alerting; triage and investigate security events, escalating per defined runbooks.
• Lead technical containment and remediation during security incidents; draft post‑mortem findings and track remediation to closure.
• Coordinate day‑to‑day with the SoC team and MSSP; validate findings from penetration tests and vulnerability scans and drive remediation.

Identity, Access and Platform Security

• Administer IAM controls including SSO, MFA, and PAM; execute user provisioning, deprovisioning, and periodic access reviews.
• Operate and maintain email security gateways and endpoint protection platforms.
• Support secure development reviews against OWASP standards and assist with security architecture reviews and threat modelling.

Compliance and Support

• Implement ISO 27001:2022 controls and collect audit evidence; maintain control documentation and support surveillance audits.
• Contribute to policy reviews with findings from operations and the evolving threat landscape.
• On‑call availability is required to support 24x7 incident response coverage.

Requirements

Experience

• 8+ years of progressive information security experience with hands‑on security operations in a production environment.
• Proven experience in incident response, containment, and post‑incident reviews.
• Experience administering IAM platforms (SSO, MFA, PAM) and security tooling.
• Experience working with MSSPs and penetration testing firms; ISO 27001:2022 and regulated industry exposure preferred.
• Familiarity with MAS Technology Risk Management (TRM) Guidelines is a bonus.

Technical Skills

• IAM platforms: SSO (e.g. Okta, Azure AD or equivalent), MFA, PAM (e.g. CyberArk, BeyondTrust,or equivalent)
• Cloud security: security hardening, configuration review, and monitoring of cloud environments(AWS preferred)
• Security monitoring, SIEM, and detection/alerting operations
• Email security gateways and endpoint protection platforms
• Vulnerability management and remediation tracking
• Secure development frameworks: OWASP, SANS CWE Top 25; threat modelling fundamentals
• ISO 27001:2022 control implementation and evidence collection

Qualifications

• Bachelor's degree or higher in Information Security, Computer Science, or a related discipline.
• CISSP, CISM, or GIAC certifications preferred.