Workplace Security Engineer - Zero Trust & IAM Expert

Webot; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Webot is seeking a Workplace Security Engineer to design, implement, and continuously improve security controls across identity, endpoint, and data protection. You will own key security platforms and collaborate with IT, Cloud, and Compliance teams to meet financial industry security requirements.

Responsibilities span identity engineering, zero trust, endpoint security, DLP, vulnerability governance, and security automation.

Qualifications

• 5+ years in security engineering / IT security with hands-on implementation experience.
• Proficient in at least one programming/scripting language (Python, Go, or PowerShell/Bash) with a track record of building tools or automation.
• Solid understanding of RESTful APIs, JSON/YAML processing, and Git.
• Experience with Infrastructure as Code (Terraform) applied to security architecture is a strong plus.
• Deep experience in at least two of the following: IAM/SSO, Endpoint security, Zero Trust / VPN / SASE, Windows/macOS troubleshooting, networking, audits.

Responsibilities

• Identity & Access Engineering: design secure identity architecture across Google Workspace and AWS IAM Identity Center.
• Zero Trust / Remote Access Engineering: optimize remote access and ZTNA/SASE.
• Endpoint Security Engineering: enforce endpoint baselines and device posture.
• Data Security & DLP Engineering: tune data protection controls and DLP rules.
• Vulnerability & Patch Governance: triage vulnerabilities and define SLAs.
• Security Monitoring, Incident Response & Improvement: enhance alerting and runbooks.
• Security Automation & Tooling: build tools and automate tasks with Python/Go.
• Documentation & Audit Readiness: create runbooks and evidence pipelines.

Skills

Python

Go

PowerShell/Bash

Tools

Git

Terraform

Jamf

Apple Business Manager

Cortex XDR

Job description

Webot is seeking a Workplace Security Engineer to design, implement, and continuously improve security controls across identity, endpoint, and data protection. You will own key security platforms and collaborate with IT, Cloud, and Compliance teams to meet financial industry security requirements.

Responsibilities span identity engineering, zero trust, endpoint security, DLP, vulnerability governance, and security automation.