Job Description Lead the development and implementation of comprehensive cybersecurity policies, standards, and incident response plans. Conduct in-depth security reviews of systems and infrastructure to evaluate resilience against evolving cyber threats. Manage vulnerability assessments, penetration testing, and secure code reviews; analyze findings and recommend effective remediation strategies. Provide expert security consultation and assurance throughout the lifecycle of infrastructure and application projects. Design and deliver cybersecurity awareness programs, including phishing simulations, training workshops, and incident response exercises. Collaborate with IT governance and operational teams to address security risks, audit findings, and compliance requirements. Investigate and respond to cybersecurity incidents and alerts, perform root cause analysis, and drive containment and recovery efforts. Utilize threat intelligence to improve cyber defense strategies and continuously enhance the organization’s threat detection capabilities. Stay abreast of emerging technologies, threats, and trends to drive continuous improvements in security posture. Oversee cybersecurity projects, procurement, and lifecycle management of security tools and services. Maintain accurate and timely reporting on cybersecurity metrics, risks, incidents, and compliance matters to internal management and regulatory bodies. Requirements Bachelor's degree in Computer Science, Information Technology, or a related field. Minimum 8 years of experience in vulnerability assessments and penetration testing Demonstrated expertise in cloud security (AWS, Azure, M365, SaaS). Hands-on experience with tools and technologies such as EDR / XDR, DAM, MDM, Microsoft AIP, PAM, IAM, MFA, NAC, and red teaming methodologies. Professional certifications such as CISSP, CISM, CISA, CEH, CHFI, or CREST certifications are highly advantageous. Strong communication skills, with the ability to convey technical concepts clearly to both technical and non-technical stakeholders, including executive leadership. Analytical, proactive, and a collaborative team player with a strong sense of responsibility and initiative.
Lead/Senior Engineer (Cybersecurity) • Singapore