Security Engineer

Position Summary

The Security Engineer plays a critical role in helping to design, implement and maintain various security tools that together form a layered defence against cyber threats.

Key Responsibilities

1. Security Tools Engineering
   1. Work with vendors to drive security projects end-to-end to implement effective security protection for the organisation.
   2. Ensure that each security tool is well designed, thoroughly tested and properly operationalised.
   3. Serve as a subject matter expert for various security domains.
   4. Collaborate with stakeholders to ensure that security projects do not cause a negative impact to other systems and users.
   5. Keep on top of developments in cyber threats and advances in security protection and establish roadmaps to continuously improve the security posture of the organisation.
   6. Establish secure design patterns for applications to follow a well-defined template to ensure application security.
2. Security by Design
   1. Serve as a subject matter expert for security design for projects within the organisation.
   2. Evaluate existing security posture and recommend enhancements.
3. Risk Management and Compliance
   1. Ensure compliance with relevant regulatory requirements and industry standards.
   2. Assist in security audits and assessments.
4. Collaboration and Communication
   1. Collaborate with cross-functional teams to integrate security principles into technology processes and solutions.
   2. Conduct security awareness sessions.

Requirements

• Degree in Computer Science, Computer Engineering or Information Security related fields.
• At least 5 years experience in security engineering, with deep expertise in one or more security domains.
• At least 3 years experience in leading security projects end-to-end.
• Security certifications such CISSP, CISM, CCSP, CISA, AWS Certified Security - Specialty are highly desirable.
• Experience in Security Engineering for Cloud workloads is an added advantage.