About the Role
We are looking for a Senior Cybersecurity Engineer to work across two fronts: protecting our own systems, data, and customers, and delivering security projects for our clients. You will design and build security controls across multi-cloud environments (AWS and Azure), lead incident response, and partner with engineering teams to make security a built-in part of how software ships. On the client side, you will scope and deliver hands-on security engagements, advise customer stakeholders, and represent us as a trusted technical expert.
This is a hands-on technical role that balances internal security ownership with customer-facing project delivery, so comfort working directly with clients is essential.
What You'll Do
Internal security (our own environment)
- Design, implement, and maintain security controls across our AWS and Azure environments, covering identity (IAM, Azure AD/Entra ID), networking, encryption, logging, and workload protection.
- Build and enforce cloud security guardrails using native services (AWS Security Hub, GuardDuty, Azure Defender, Microsoft Sentinel) and cloud security posture management (CSPM) tooling.
- Lead detection and response efforts, including triage, investigation, containment, and post-incident review.
- Build and tune detection logic, alerting pipelines, and automation to reduce manual toil and improve mean time to detect and respond.
- Run and improve vulnerability management: scanning, prioritization, remediation tracking, and reporting.
- Develop and maintain security architecture standards, runbooks, and documentation.
Client project delivery
- Scope, plan, and deliver hands-on security engagements for customers (cloud security reviews, architecture design, hardening, assessments, and remediation).
- Serve as the technical lead and primary point of contact on client projects, translating requirements into deliverables.
- Advise customer stakeholders (engineers through executives) on risk, remediation, and security best practices.
- Conduct or coordinate penetration tests, configuration reviews, and red team exercises for clients, then drive remediation of findings.
- Produce clear, professional client-facing deliverables: assessment reports, architecture diagrams, and remediation roadmaps.
- Support compliance and audit work for clients, with a focus on Singapore government and regulated-sector frameworks (IM8, GCC/GCC+, MTCS, CCoP, PDPA, MAS TRM where relevant), alongside international standards (SOC 2, ISO 27001).
Cross-cutting
- Partner with software and infrastructure teams (internal and client) to embed security into the SDLC (threat modeling, secure code review, CI/CD security gates).
- Evaluate, deploy, and manage security tooling (SIEM, EDR, IDS/IPS, CSPM, secrets management, identity and access).
- Mentor junior engineers and raise security awareness across teams.
What We're Looking For
Required
- 5+ years of experience in cybersecurity, security engineering, or a closely related field.
- Strong knowledge of network security, operating system internals (Linux and Windows), and common attack and defense techniques.
- Deep hands-on experience securing AWS and Azure at scale: identity and access management, network segmentation (VPC/VNet, security groups, NSGs), key management, and workload and data protection.
- Proficiency with at least one scripting or programming language (Python, Go, Bash, or similar) for automation and tooling.
- Experience with detection and response: SIEM platforms, EDR tools, and log analysis at scale.
- Solid grasp of common frameworks and standards (MITRE ATT&CK, NIST CSF, OWASP Top 10, CIS Benchmarks).
- Working knowledge of Singapore government security and compliance requirements, including IM8 (Instruction Manual on ICT & SS Management, managed by GovTech), the Government on Commercial Cloud (GCC and GCC+) guardrails for AWS and Azure, MTCS (SS 584), the Cybersecurity Act and Cybersecurity Code of Practice (CCoP) for Critical Information Infrastructure, and the Personal Data Protection Act (PDPA).
- Strong analytical skills and the judgment to prioritize risk in a fast-moving environment.
- Clear written and verbal communication, with the ability to explain technical risk to non-technical stakeholders.
- Comfort working directly with clients: scoping engagements, managing expectations, and presenting findings to customer stakeholders.
- Ability to manage multiple concurrent projects and shift between internal work and client delivery.
Nice to Have
- Industry certifications (OSCP, GIAC/SANS, CISSP, CCSP, or equivalent), including cloud security certs (AWS Certified Security Specialty, Azure Security Engineer Associate AZ-500).
- Experience with infrastructure as code (Terraform, CloudFormation) and policy as code.
- Background in application security, threat modeling, or secure software development.
- Familiarity with container and Kubernetes security.
- Experience delivering projects under Singapore Government on Commercial Cloud (GCC/GCC+) or for CSA-regulated CII owners.
- Familiarity with CSA Cyber Essentials and Cyber Trust certification marks.
- Eligibility for Singapore government security clearance, where required for public-sector engagements.
- Hands-on penetration testing across multiple scopes: web applications, APIs, external and internal network/infrastructure, cloud configuration reviews (AWS and Azure), and mobile or wireless where applicable.
- Familiarity with common offensive tooling (Burp Suite, Nmap, Metasploit, Cobalt Strike, cloud-native testing tools) and structured methodologies (OWASP WSTG, PTES, NIST SP 800-115).
- Prior experience in a consulting, professional services, or managed security services (MSSP) environment.
- Prior experience leading incident response for production systems.
- Experience operating in a regulated or compliance-heavy environment.
What Success Looks Like
- In your first 90 days: you understand our environment, threat landscape, and tooling, and you have closed or improved several high-priority gaps.
- Within 6 months: you own key areas of our detection and response program and have measurably reduced risk in those areas.
- Within a year: you are a trusted technical leader who has shaped our security architecture and lifted the capability of the whole team.
