Cybersecurity Engineer – Security Operations & Vulnerability Management

Cybersecurity Engineer – Security Operations & Vulnerability Management Location: Chai Chee, Singapore Employment term: 12-month renewable contract Working arrangement: Five-day work week Salary: SGD 6,000–8,000 per month, depending on experience Reporting to: Senior Manager, Cyber Security & IT Governance About the Role We are seeking a hands-on Cybersecurity Engineer to strengthen and continuously improve our organisation’s cybersecurity posture. You will support security monitoring, incident response, vulnerability management and the operation of security controls across on-premises and cloud environments. You will work closely with our MSSP, internal IT teams, technology vendors and business stakeholders to investigate threats, remediate vulnerabilities and protect critical systems and information assets. Candidates are not expected to have experience with every technology listed. Strong cybersecurity fundamentals and practical experience across security operations, incident response and vulnerability management are most important. Key Responsibilities Monitor, investigate and respond to cybersecurity alerts and incidents using SIEM, EDR and other security platforms. Perform threat analysis and coordinate incident containment, remediation, root-cause analysis and recovery. Work with the MSSP, vendors and internal teams throughout the incident lifecycle. Manage vulnerability, exposure and attack-surface remediation activities. Track identified vulnerabilities and coordinate timely remediation with system owners. Support vulnerability assessments, penetration testing and remediation validation. Administer and support endpoint, network, identity, application and cloud-security technologies. Support security controls across on-premises, AWS, Azure or OCI environments. Contribute to endpoint security, identity security, network security and Zero Trust initiatives. Review security alerts, threat intelligence and industry trends to recommend control improvements. Support cybersecurity governance, risk assessments, compliance reviews and audits. Assist with ISO 27001, Cyber Trust Mark, IMDA TCS Code or similar cybersecurity requirements. Evaluate new cybersecurity and AI-security technologies where relevant. Coordinate security vendors and ensure services and remediation activities are delivered within agreed timelines. Prepare incident reports, vulnerability updates, security documentation and management summaries. Requirements Degree or diploma in Cybersecurity, Information Technology, Computer Science or a related discipline. Approximately three to five years of relevant experience in cybersecurity operations, security engineering, incident response or a Security Operations Centre. Hands-on experience investigating security alerts and coordinating cybersecurity incidents. Practical experience with vulnerability scanning, prioritisation and remediation. Good understanding of endpoint, network, identity and cloud-security principles. Familiarity with cybersecurity frameworks, risk management and incident-response processes. Experience working with an MSSP, technology vendors or cross-functional IT teams. Ability to communicate technical risks and recommendations clearly to technical and non-technical stakeholders. Strong analytical, troubleshooting and documentation skills. Relevant Technical Experience Candidates should have hands-on experience with several of the following technologies or comparable enterprise-security platforms: SIEM and Endpoint Security CrowdStrike Falcon or CrowdStrike Next-Gen SIEM Microsoft Defender Other enterprise SIEM, EDR or XDR platforms Vulnerability and Exposure Management Tenable One or Tenable Nessus Cymulate or other breach-and-attack simulation platforms Qualys or comparable vulnerability-management tools Network and Application Security Palo Alto Networks firewalls Zscaler Vectra NDR Forescout NAC Imperva WAF Identity and Data Security CyberArk PAM Microsoft Entra ID IAM, PAM and MFA controls Proofpoint, Microsoft Purview, DLP or CASB Cloud Security AWS, Microsoft Azure or Oracle Cloud Infrastructure Experience with every product is not mandatory. Candidates with strong transferable experience across SIEM, EDR, vulnerability management, incident response and security engineering are encouraged to apply. Preferred Qualifications Relevant certifications such as Security+, CEH, GCIH, CISSP, CISM, CCSP or equivalent. Experience supporting ISO 27001, Cyber Trust Mark, IMDA TCS Code or …