Senior Systems Engineer (Vulnerability Management)

SP Group; Singapore; In loco; SGD 100.000 - 160.000; Tempo pieno

Descrizione del lavoro

SP Group in Singapore is seeking an experienced security professional to lead vulnerability management across OT, SCADA, IT and network environments. You will assess risks, coordinate remediation plans with owners and vendors, and support patching, firmware upgrades and validation across servers and OT systems.

Applicants should have 5+ years in OT/SCADA/CII and strong knowledge of risk assessment, patch management and network security.

Competenze

• 5+ years’ experience in OT/SCADA/CII, network, infrastructure administration, IT or cybersecurity operations.
• Working knowledge of ISO 27001, CIS Benchmarks, risk assessment, network security, patch and vulnerability management.
• Strong troubleshooting skills for patching, firmware upgrades and configuration changes.

Mansioni

• Assess vulnerabilities across OT, SCADA, CII, IT/network environments and recommend remediation.
• Assess remediation feasibility, operational impact and compensating controls; coordinate remediation plans with teams and vendors.
• Support patch deployment, firmware upgrades and validation across servers, apps, networks and OT systems.
• Conduct periodic scans on OT, air-gapped, enterprise and cloud environments; coordinate penetration tests and asset mapping.
• Provide weekend support for emergency patches or maintenance windows.
• Track KPIs/KRIs on vulnerability exposure, patch compliance and SLA adherence; present dashboards and reports to security council.
• Prepare documentation for Change Requests, Deviations and Risk Acceptances.
• Coordinate security reviews, risk assessments and audits; implement auditor recommendations.
• Support VM Lead in remediation meetings with system owners and stakeholders.

Conoscenze

Vulnerability management

OT/SCADA security

Network security

Analytics dashboards

Formazione

Bachelor’s degree in Cybersecurity/CS/Engineering

Strumenti

MS Excel

PowerBI

Co-Pilot

Descrizione del lavoro

• Assess vulnerabilities across OT, SCADA, CII, IT/network environments, and recommend remediation.
• Assess remediation feasibility, operational impact and compensating controls for sensitive systems, and coordinate remediation plans, patch schedules and maintenance windows with teams, system owners and vendors.
• Support patch deployment, firmware upgrades and validation across servers, applications, network devices and OT systems.
• Conduct periodic scans on OT, air-gapped, enterprise and cloud environments; coordinate penetration tests and asset inventory mapping.
• Provide weekend support for emergency patches, critical deployments or maintenance windows.
• Track KPIs/KRIs on vulnerability exposure, patch compliance and SLA adherence, and present dashboards and technical reports to the security council and senior management.
• Prepare documentation for Change Requests, Deviations and Risk Acceptances.
• Coordinate security reviews, risk assessments and audits, and follow through on recommendations from auditors or the security council.
• Support the VM Lead in facilitating remediation meetings with system owners and stakeholders.

Technical Specialisations:

Candidates are expected to fulfil one or more of the following areas. Experience in multiple areas is a plus:

• Application stacks: Java, .NET, Apache, nginx, IIS, Weblogic.
• Network Systems: Routers, switches, firewalls (ACI, Cisco, Arista, F5, Checkpoint, Palo Alto); network flows.
• VM Analyst: 3+ years in vulnerability management and 5+ years in analytics; skilled in dashboards and reporting (MS Excel, Co-Pilot, PowerBI).

What You'll Need:

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering or a related field.
• 5+ years’ experience in OT/SCADA/CII, network, infrastructure administration, IT or cybersecurity operations.
• Working knowledge of ISO 27001, CIS Benchmarks, risk assessment, network security, patch and vulnerability management.
• Strong troubleshooting skills for patching, firmware upgrades and configuration changes.

We regret to inform that only shortlisted candidates will be notified.