SL2703 - Security Engineer

FPT ASIA PACIFIC PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

FPT Asia Pacific PTE. LTD. in Singapore is seeking a Cybersecurity Engineer to support the operational delivery, continuous improvement, and performance of Managed Security Services within the Cyber Fusion Centre.

You will implement, operate, monitor, and optimise security controls across enterprise infrastructure, cloud services, applications, endpoints, networks, and identity environments, contributing to cyber resilience and regulatory readiness.

Qualifications

• Minimum 3 years of relevant cybersecurity experience in operations or security engineering.
• Hands-on experience with listed security technologies (see tools).
• Familiarity with scripting or automation (Python/PowerShell/Bash) preferred.

Responsibilities

• Operate, maintain, and continuously improve Managed Security Services across the security tech stack.
• Monitor health, availability, capacity, and performance of security platforms.
• Support security incident handling, troubleshooting, escalation, and remediation.
• Maintain operational documentation, runbooks, escalation procedures, SOPs, and service metrics.
• Identify control gaps and recommend practical security improvements.

Skills

Cybersecurity principles

Incident response

Security operations

Tools

Email security

IDPS

WAF

Anti-malware

Attack surface monitoring

Certificate management

Vulnerability management

SIEM/SOAR

Endpoint security

Cloud security controls

Job description

About the Role

We are looking for a Cybersecurity Engineer to support the operational delivery, continuous improvement, and performance of Managed Security Services within the Cyber Fusion Centre.

The role focuses on the implementation, operation, monitoring, and optimisation of security controls across enterprise infrastructure, cloud services, applications, endpoints, networks, identity environments, and emerging technologies.

You will provide hands-on security engineering support, maintain effective security operations processes, strengthen preventive and detective controls, and contribute to the organisation’s cyber resilience, regulatory readiness, and threat response capabilities.

Key Responsibilities

Managed Security Services Operations

• Operate, maintain, and continuously improve Managed Security Services across the enterprise security technology stack.


• Monitor service health, availability, capacity, and performance of assigned security platforms.


• Support security incident handling, troubleshooting, escalation, and remediation activities.


• Maintain operational documentation, runbooks, escalation procedures, standard operating procedures, and service metrics.


• Ensure reliable service delivery and timely resolution of operational security issues.

Security Engineering & Controls

• Implement, configure, tune, troubleshoot, and maintain security controls across infrastructure, endpoint, network, cloud, application, and identity environments.


• Support the deployment of preventive, detective, and responsive security controls aligned with enterprise security and regulatory requirements.


• Monitor and validate control effectiveness through testing, reporting, and continuous improvement.


• Identify control gaps and recommend practical security improvements.

Security Tools & Technology

• Provide hands-on support for security technologies including email security, IDPS, WAF, anti-malware, attack surface monitoring, certificate management, vulnerability management, SIEM/SOAR, endpoint security, and cloud security controls.


• Maintain security platform configurations, access controls, integrations, and operational readiness.


• Work closely with security vendors and managed service providers to troubleshoot issues and improve service performance.


• Monitor vendor performance and ensure agreed service levels are achieved.

Security Requirements & Documentation

• Develop and maintain system security requirements, operational procedures, configuration standards, and technical documentation.


• Support audit evidence collection, control attestation, compliance reporting, and regulatory activities.


• Ensure security documentation remains accurate, current, and accessible to relevant internal teams and service providers.

AI Security

• Support the implementation of security controls for AI and machine learning environments.


• Assist with securing data, model deployments, inference endpoints, logging, access controls, and system configurations.


• Identify and mitigate AI-related security risks, including data leakage, prompt injection, adversarial attacks, model abuse, and data poisoning.


• Support AI security monitoring and incident response readiness.

Post-Quantum Cryptography & Crypto-Agility

• Support post-quantum cryptography readiness initiatives, including cryptographic inventories, certificate visibility, dependency tracking, and migration planning.


• Monitor developments in quantum-resistant cryptographic standards and assess their potential impact on TLS, digital signatures, encryption services, and certificate management.


• Contribute to hybrid cryptographic migration and crypto-agility initiatives.

Projects & Continuous Improvement

• Support cybersecurity projects, remediation initiatives, service improvements, and operational uplift activities.


• Track risks, dependencies, actions, and milestones to ensure timely delivery.


• Recommend improvements to strengthen cyber resilience, reduce operational risk, and improve security outcomes.


• Escalate material risks, control gaps, recurring incidents, vendor performance issues, and unresolved operational concerns.

Requirements

• Minimum 3 years of relevant experience in cybersecurity operations, security engineering, Managed Security Services, infrastructure security, or related technology risk functions.


• Hands-on experience with security technologies such as email security, IDPS, WAF, anti-malware, attack surface monitoring, certificate management, vulnerability management, SIEM/SOAR, endpoint security, or cloud security.


• Strong understanding of cybersecurity principles, secure configuration, incident response, threat detection, vulnerability management, access control, logging, and security monitoring.


• Ability to investigate complex security issues, identify root causes, assess risks, and recommend practical remediation.


• Familiarity with scripting or automation using Python, PowerShell, Bash, or equivalent is preferred.


• Strong stakeholder management, documentation,