Senior Security Engineer

Bond Financial Group; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Bond Financial Group is seeking a Senior Security Engineer to implement and operate security controls and tooling in a hands-on role. Reporting to the Information Security Lead, you will execute security operations, support IAM administration, and produce control evidence for ISO 27001:2022.

You will work with the SoC and MSSP teams to validate findings, drive remediation, and contribute to policy reviews. On-call coverage for 24x7 incident response is a requirement.

Qualifications

• 8+ years of progressive information security experience with hands-on security operations in a production environment.
• Experience in incident response, containment, and post-incident reviews.
• Experience administering IAM platforms (SSO, MFA, PAM).
• Experience working with MSSPs and penetration testing firms; ISO 27001:2022 and regulated industry exposure preferred.
• Familiarity with MAS Technology Risk Management (TRM) Guidelines is a bonus.

Responsibilities

• Operate and tune security monitoring, detection, and alerting; triage and investigate security events.
• Lead technical containment and remediation during security incidents; draft post-mortem findings and track remediation to closure.
• Coordinate day-to-day with the SoC team and MSSP; validate findings from penetration tests and vulnerability scans and drive remediation.
• Administer IAM controls including SSO, MFA, and PAM; execute user provisioning and access reviews.
• Operate and maintain email security gateways and endpoint protection platforms.
• Support secure development reviews against OWASP standards and assist with security architecture reviews and threat modelling.
• Implement ISO 27001:2022 controls and collect audit evidence; maintain control documentation and support surveillance audits.
• On-call availability is required to support 24x7 incident response coverage.

Skills

Security operations

Incident response

IAM administration

Threat modelling

Post-incident reviews

Education

Bachelor's degree in Information Security

CISSP/CISM/GIAC (certs) preferred

Tools

Okta / Azure AD (SSO)

CyberArk / BeyondTrust (PAM)

SIEM

MSSP collaboration

Job description

The Senior Security Engineer is a hands-on security engineer responsible for implementing and operating the organisation's security controls and tooling. Reporting to the Information Security Lead, this roleexecutes security operations, supports IAM administration, and produces control evidence for the ISO 27001:2022 certification programme.

Key Responsibilities

Security Operations

• Operate and tune security monitoring, detection, and alerting; triage and investigate security events, escalating per defined runbooks.
• Lead technical containment and remediation during security incidents; draft post-mortem findings and track remediation to closure.
• Coordinate day-to-day with the SoC team and MSSP; validate findings from penetration tests and vulnerability scans and drive remediation.

Identity, Access and Platform Security

• Administer IAM controls including SSO, MFA, and PAM; execute user provisioning, deprovisioning, and periodic access reviews.
• Operate and maintain email security gateways and endpoint protection platforms.
• Support secure development reviews against OWASP standards and assist with security architecture reviews and threat modelling.

Compliance and Support

• Implement ISO 27001:2022 controls and collect audit evidence; maintain control documentation and support surveillance audits.
• Contribute to policy reviews with findings from operations and the evolving threat landscape.
• On-call availability is required to support 24x7 incident response coverage.

Requirements

Experience

• 8+ years of progressive information security experience with hands-on security operations in a production environment.
• Proven experience in incident response, containment, and post-incident reviews.
• Experience administering IAM platforms (SSO, MFA, PAM) and security tooling.
• Experience working with MSSPs and penetration testing firms; ISO 27001:2022 and regulated industry exposure preferred.
• Familiarity with MAS Technology Risk Management (TRM) Guidelines is a bonus.

Technical Skills

• IAM platforms: SSO (e.g. Okta, Azure AD or equivalent), MFA, PAM (e.g. CyberArk, BeyondTrust, or equivalent)
• Cloud security: security hardening, configuration review, and monitoring of cloud environments (AWS preferred)
• Security monitoring, SIEM, and detection/alerting operations
• Email security gateways and endpoint protection platforms
• Vulnerability management and remediation tracking
• ISO 27001:2022 control implementation and evidence collection

Qualifications

• Bachelor's degree or higher in Information Security, Computer Science, or a related discipline.
• CISSP, CISM, or GIAC certifications preferred.