Lead Engineer/Engineer, Security-By-Design, CISO Office, xCyber

The Home Team Science and Technology Agency (HTX) is a statutory board under the Ministry of Home Affairs (MHA) which aims to pioneer innovation solutions and develop world class science and technology capabilities to transform and empower the Home Team in delivering safety and security for Singapore. The job holder will provide security-by-design leadership to project teams across the Home Team departments and HTX. This will ensure the adoption of defence-in-depth best practices and enable the transformation of the Home Team's cybersecurity systems and processes. • Execute the security architecture design for all new enterprise platforms, defining security principles across multiple domains (network, IAM, application, infrastructure cloud). • Conduct technical security design for platforms, such through reference architectures and hardening standards for multi-tenant environments. • Review the design, implementation, and delivery of security requirements for application development, distributed computing, and architectural solutions using a "Secure by Design" principle. • Provide support to platform teams as the technical specialist on the security architecture of projects before proceeding to formal secure design and risk assessment. Partner with HTD ACISOs and platform teams to ensure security is integrated from the earliest design stages. • Perform technical risk assessments on critical enterprise platforms • Provide recommendation/ advice on technical requirements and testing standards for advanced security validation (e.g., VAPT, red teaming exercises) of these platforms. • Act as the specialist of relevant technologies in the assessment of complex security findings, providing expert recommendations to the ACISOs. • Tertiary education in Computer Science, Information Technology, or a related Engineering field. • Certification in specific technologies (AWS/Microsoft) is essential. • Advanced, hands-on certifications demonstrating both offensive and defensive expertise are highly valued (e.g., OSCP, GIAC, etc). • Cybersecurity certifications are encouraged and demonstrate continuous learning and intake of standard methodologies applicable for this role. e.g. CISSP/ CISM/ CISA/CRISC certifications. • Experience designing, implementing, and delivering security requirements with a "Secure by Design" principle. • Knowledge of Vulnerability Assessment and Penetration Testing (VAPT) for infrastructure, network, web applications, and web services/API. • Strong ability to multi-task and perform under extreme pressure with tight deadlines. • Meticulous planning skills and attention to detail. • Ability to work independently as well as collaboratively within a team. • Resilience in managing a reasonably high level of stress while maintaining effectiveness. • Demonstrated drive, level-headedness, and adaptability in dynamic environments. • Excellent interpersonal and communication skills for engaging with internal and external stakeholders. All new hires are appointed on a two-year contract in the first instance and will be assessed and considered for permanent tenure over time, based on performance. As part of the shortlisting process for this role, you may be required to complete a medical declaration and/or undergo further assessment. All shortlisted applicants will be updated on the status of their applications within 4 weeks upon closing of the advertisement. #LI-NL2