Web Security Engineer

Ensign InfoSecurity; Singapore; On-site; SGD 65,000 - 90,000; Full time

Job summary

Ensign InfoSecurity in Singapore seeks a Security Engineer with 3–4 years of hands-on experience in Web, Cloud, and Network security. You will configure and optimize WAF policies, monitor DNS and CDN configurations, and lead automation of security changes.

The role requires strong troubleshooting and communication skills, with familiarity in IaC tools and scripting. You will collaborate with cross-functional teams to secure deployments and improve security posture across web-facing services.

Qualifications

• Diploma or degree in cyber security, computer science, information technology, or a related discipline.
• 3–4 years of hands-on experience in web security, cloud security, network security, security engineering, or a related field.
• Strong experience with Web Application Firewall (WAF) technologies.
• Knowledge of DNS security, routing, and traffic management.
• Familiarity with Infrastructure-as-Code (IaC) and configuration management tools is an advantage.

Responsibilities

• Configure, administer, and optimize WAF policies, signatures, and custom security rules.
• Manage and support multi-tier WAF architectures protecting web applications and APIs.
• Configure, monitor, and troubleshoot DNS routing, DNS security controls, and traffic management.
• Manage CDN configurations to ensure optimal security, availability, and performance.
• Implement security configuration changes through automation and configuration management frameworks.
• Investigate and resolve web application security incidents, service disruptions, and traffic anomalies.
• Monitor web security events and recommend improvements to strengthen security posture.
• Collaborate with cloud, infrastructure, and application teams to support secure deployments and operations.
• Maintain documentation, operational procedures, and security standards for web-facing services.

Skills

Analytical skills

Troubleshooting

Communication skills

Education

Diploma or Degree in Cyber Security, Computers/IT

Tools

Python

PowerShell

Bash

Terraform

Ansible

Job description

• Configure, administer, and optimize WAF policies, signatures, and custom security rules.
• Manage and support multi-tier WAF architectures protecting web applications and APIs.
• Configure, monitor, and troubleshoot DNS routing, DNS security controls, and traffic management.
• Manage CDN configurations to ensure optimal security, availability, and performance.
• Implement security configuration changes through automation and configuration management frameworks.
• Investigate and resolve web application security incidents, service disruptions, and traffic anomalies.
• Monitor web security events and recommend improvements to strengthen security posture.
• Collaborate with cloud, infrastructure, and application teams to support secure deployments and operations.
• Maintain documentation, operational procedures, and security standards for web-facing services.

Requirements

• Diploma or Degree in Cyber Security, Computer Science, Information Technology, or a related discipline.
• 3 to 4 years of hands-on experience in Web Security, Cloud Security, Network Security, Security Engineering, or a related field.
• Strong experience with:
• Web Application Firewall (WAF) technologies
• DNS security, routing, and traffic management
• CDN platforms and content delivery technologies
• Cloud environments such as AWS, Azure, or Google Cloud
• Good understanding of:
• HTTP/HTTPS, SSL/TLS, DNS, TCP/IP, and web application architectures
• OWASP Top 10 and common web application attack techniques
• Security monitoring, incident troubleshooting, and log analysis
• Experience with scripting or automation tools such as Python, PowerShell, or Bash is preferred.
• Familiarity with Infrastructure-as-Code (IaC) and configuration management tools is an advantage.
• Strong analytical, troubleshooting, and communication skills.