Cybersecurity Operations Engineer

Role Overview

• Enhance security visibility and monitoring capabilities across Singpass' applications, pipelines, and endpoint systems to ensure comprehensive threat detection and response.
• Identify security gaps within Singpass' operational environment and develop targeted solutions to address these gaps.
• Manage security incident triage processes, ensuring swift and effective responses to potential threats and maintaining operational readiness.
• Participate in 24/7 on-call rotation for security incidents
• Manage resolution of vulnerabilities reported via the Government Bug Bounty Programme.
• Collaborate with cross-functional teams to implement security controls
• Support stakeholders such as the CISO in providing guidance in security controls and design for applications, infrastructure, network, etc.
• Contribute to engineering initiatives to optimise security operations, including the integration of artificial intelligence technologies and processes to enhance capabilities and operational efficiency.
• Develop customised tooling and processing to support security operations.
• Develop and maintain security documentation and training materials.
• Create and maintain security runbooks and documentation
• Be familiar and work with security principles, policies, and industry best practices.

Requirements

• Relevant certifications in security operations such as CISM, CISSP, GCIH, CySA+ and others is an advantage.
• At least 3-years’ hands-on experience with security incident operations and response; experience is valued over certifications.
• Familiarity with scripting languages such as Perl, Python, Powershell, and others
• Experience with Golang and Typescript is advantageous.
• Experience with compliance frameworks is advantageous.
• Passionate about cybersecurity and optimizing processes
• Good understanding of network security monitoring tools and techniques
• Strong understanding of security standards
• Good communication skills across both technical and non-technical audiences
• Proven ability to work in cross-functional environments.
• Excellent stakeholder management abilities
• Analytical mindset with strong problem-solving abilities
• Collaborative and a team player, self-motivated, creative and driven

Tech Stack

• Cyber Security
• Perl
• Python
• Swift
• TypeScript
• Go

Benefits

• A wholly-owned subsidiary of GovTech.
• An attractive yearly training budget and annual performance bonus.