Security Engineer

Job Summary

The Security Operations Engineer is responsible for managing and maintaining the Authority's cybersecurity infrastructure, including endpoint protection, privileged access management, vulnerability assessment systems, and security monitoring tools. This role ensures the security posture of critical systems through proactive monitoring, incident response, system maintenance, and implementation of security enhancements across the organisation's technology stack.

In addition to core operational responsibilities, the Security Operations Engineer is expected to identify and implement opportunities to leverage AI tools and automation to improve operational effectiveness, reduce manual effort, and strengthen securityoutcomes. This includes automating repetitive security workflows, developing scripts and integrations to streamline privileged access and monitoring operations, and exploring AI-assisted approaches to alert triage, anomaly detection, and audit reporting. The engineeris expected to proactively drive the adoption of such capabilities within the team, sharing knowledge and building reusable solutions that enhance the team's overall efficiency and resilience.

Key Responsibilities

· Manage and maintain primary security systems including CyberArk PAM, Imperva DAM, Tripwire FIM and Trellix Endpoint DLP solutions.

• Execute security infrastructure projects including CIS hardening implementations, system migrations, and platform consolidations.
• Monitor and respond to security vulnerabilities and zero-day threats, implementing appropriate mitigation measures and patches.
• Support system upgrades and migrations across multiple platforms whilst ensuring minimal disruption to business operations
• Collaborate with cross-functional teams including EDP/USC for endpoint securitytool deployments and updates.
• Maintain security compliance through regular system hardening, configuration management, and policy enforcement.
• Participate in disaster recovery planning and contribute to architectural planning for managed security tools in cloud environments.
• Provide technical documentation, standard operating procedures, and knowledge transfer to support team operations
• Respond to security incidents and provide after-hours support as required for critical security systems.
• Identify and implement opportunities to leverage AI tools and automation to streamline workflows, improve operational effectiveness.

What are we looking for

Requirements

· Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.

• Minimum 3-5 years of hands-on experience in cybersecurity operations and security tool management.
• Proven experience with CyberArk PAM, Imperva DAM, Tripwire FIM and Trellix DLP is preferred.
• Knowledge of vulnerability management tools and processes (Tenable, Nessus)
• Understanding of enterprise security frameworks and compliance requirements.
• Experience with system administration on Windows and Linux platforms.
• Familiarity with security incident response procedures and methodologies.
• Strong analytical and problem-solving skills with attention to detail.
• Ability to work independently and manage multiple concurrent projects.
• Excellent communication skills for stakeholder engagement and technical documentation.
• Demonstrated experience in Security Operation including the use of AI or automation tools to drive efficiency or improve outcomes.

Preferred Qualifications

· Master's degree in Cybersecurity or related advanced qualification.

• Professional certifications such as CyberArk Certified Delivery Engineer (CDE), CISSP, or equivalent security certifications.
• Experience with automation tools and scripting (Ansible, Python, PowerShell).
• Knowledge of cloud security platforms and hybrid infrastructure environments.
• Familiarity with SIEM tools and security monitoring platforms.
• Experience with Singapore Government security standards and compliance frameworks (IM8, CSA guidelines).
• Understanding of financial sector security requirements and regulations.
• Project management experience and ability to lead technical initiatives.
• A proactive mindset towards continuous improvement, with the ability to spot opportunities where AI and automation can add value and the initiative to drive these forward.

What you will be working on

· Security Infrastructure Modernisation: Supporting ongoing platform migrations, system upgrades, and integration projects to maintain current securitytechnology stack.

• GDC Security Tool Setup/Migration: Contributing to the architectural planning and implementation of managed security tools in the Government Data Centre environment.
• Supporting SOC on security incidents investigation, analysis and recommending remediation measures.
• Collaborate with cross-functional teams to ensure security considerations are integrated into all aspects of IT operations and projects.
• Manage and optimise CyberArk Privileged Access Management (PAM) solutions to enhance security controls.
• Utilise Tenable vulnerability management tools to identify, assess, and mitigate security risks across the organisation.
• Drive new initiatives to improve operational efficiency through system integration, automation and enhancement of SOPs for CyberArk management.
• Support the Tripwire upgrade project in collaboration with vendor support teams.
• Spearhead the new datacentre CyberArk setup project, including architecture design and implementation.