Senior Security Engineer

ANEXT Bank; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

ANEXT Bank is seeking a Security Engineer to support the CISO in cybersecurity operations and governance, ensuring regulatory compliance and secure growth of digital banking services.

This individual contributor role leverages regulator-environment experience to navigate a fast-paced digital bank with evolving priorities.

Qualifications

• Minimum 5 years in cybersecurity, with at least 2 years in a critical information infrastructure environment.
• Hands-on experience with security operations (SIEM, SOAR, incident response) and policy/governance.
• Familiarity with cloud security and containerised environments in regulated industries.

Responsibilities

• Monitor and respond to security alerts, incidents, and threats across the Bank's infrastructure, applications, and cloud environments.
• Triages, investigates, and escalates incidents with the SOC and IT teams.
• Maintain and tune security tools (SIEM, EDR, WAF, vulnerability scanners) for detection and response.
• Coordinate vulnerability scans, penetration test coordination, and on-call incident response.
• Assist in developing, reviewing, and updating cybersecurity policies and procedures.
• Support risk assessments, audit documentation, and regulatory examinations.

Skills

Security Operations

Policy & Governance

SIEM

SOAR

Incident Response

Cloud Security

Container Security

Vulnerability Management

Patch Management

Identity & Access Management

Network Security

Endpoint Protection

Tools

SIEM

EDR

WAF

Vulnerability Scanners

CIS Benchmarks

Job description

We’re on a mission to make financial services accessible and effortless for SMEs. As one of Singapore’s digital wholesale banks fully regulated by MAS, we’re committed to continuous innovation to bring about simpler, safer and more rewarding financial services. #bringingaboutwhatsnext

About the Role

The Security Engineer will support the CISO in executing day-to-day cybersecurity operations and contribute to the development, implementation, and governance of the Bank's cybersecurity policy framework. This role plays a critical part in maintaining the Bank's security posture, ensuring regulatory compliance, and enabling secure growth of digital banking services.

This is an individual contributor role who will utilise the experience in a regulator environment to navigate a fast-paced digital bank with evolving priorities.

Job Responsibilities

Security Operations (40%)

• Monitor and respond to security alerts, incidents, and threats across the Bank's infrastructure, applications, and cloud environments
• Conduct triage, investigation, and escalation of security incidents in coordination with the SOC and IT teams
• Maintain and tune security tools (SIEM, EDR, WAF, vulnerability scanners, etc.) for optimal detection and response
• Perform regular security assessments, vulnerability scans, and penetration test coordination
• Support incident response activities as part of the on-call rotation

Policy & Governance (30%)

• Assist in developing, reviewing, and updating cybersecurity policies, standards, and procedures aligned with regulatory requirements (e.g., MAS TRM, PDPA)
• Conduct policy compliance assessments and report gaps to the CISO
• Maintain documentation for audit and regulatory examinations
• Support risk assessment activities and maintain the risk register
• Coordinate with internal audit and external regulators during assessments

Security Architecture & Engineering (20%)

• Review and provide security input on new projects, system changes, and cloud deployments
• Implement security controls across network, endpoint, identity, and application layers
• Support secure configuration management and hardening initiatives (e.g., CIS Benchmarks)
• Evaluate and recommend security technologies to address emerging threats

Awareness & Collaboration (10%)

• Deliver security awareness training to staff on policies, threats, and best practices
• Collaborate with IT, DevOps, and business teams to embed security into processes
• Serve as a security point of contact for operational queries and escalations

Requirements

• Minimum 5 years of experience in cybersecurity with at least 2 years in a critical information infrastructure environment
• Must have experience in Security Operations and Policy & Governance
• Hands-on experience with security operations (SIEM, SOAR, incident response)
• Familiarity with cloud security and containerised environments
• Experience implementing and maintaining security policies in a regulated industry
• Knowledge of vulnerability management and patching processes
• Understanding of network security, identity & access management, and endpoint protection