Senior Security Engineer
- Posted a month ago
- Be among the first 10 applicants
Job Description
Our client, a well-established financial institution in Singapore, is looking for a Senior Security Engineer to join their cyber security function. This is a hands-on, engineering-led role for someone who solves problems and builds automation, not a monitoring or incident-response role.
The role
You'll design, build and continuously improve security controls across cloud and on-premises infrastructure. The team is looking for an engineer's mindset: someone who identifies inefficiencies in BAU security operations and automates them, rather than someone whose focus sits on watching for and reacting to external threats.
What you'll do
- Design and implement security controls across network, cloud (AWS/Azure/GCP) and application layers
- Identify manual, repetitive BAU security processes and build automation to improve team efficiency
- Partner with engineering and infrastructure teams to embed security into CI/CD pipelines
- Work hands-on across a broad range of security tooling, not limited to a single domain, spanning areas such as SIEM, EDR, IAM, cloud security posture management and network security
- Contribute to security architecture reviews for new systems and projects
- Mentor junior engineers and help shape the team's technical standards
What we're looking for
- Five or more years in a security engineering role, ideally within financial services or another regulated industry
- Demonstrated breadth across multiple security domains and tools, not narrow specialisation in a single area (e.g. IDS/NDR alone)
- A track record of building or improving automation for security operations, evidenced by real examples, not just tool familiarity
- Strong hands-on experience with cloud security (AWS, Azure or GCP)
- Solid understanding of network security, identity and access management, and secure architecture principles
- Scripting ability (Python, Bash or similar) for automation
- Clear communicator, comfortable working with both technical and non-technical stakeholders
More Info
About Company
Skills:
Cryptography, Firmware Development, Pcie, SPDM, SSD firmware testing, TCG Opal, Python-based test automation, key management architectures, fips, NVMe protocols, security validation, validation framework development, hardware Root of Trust, NVMe Security, Secure Boot
Skills:
Iso 27001, cloud security, automation, Infrastructure Security, Kubernetes, Python, container security, Go, Site Reliability Engineering, SOC 2 Type 2, platform engineering
Skills:
threat modeling , LLMs, mitigations against malicious automation, bug bounties, credential stuffing, bot detection, building or deploying AI agents, Security Assessments, security engineering, agentic workflows for security automation, account security mechanisms, security design reviews, threat detection, Security Protocols, anti-abuse systems, security advisories, computer and network security
Skills:
security plus , Ccsp, cloud security, Vulnerability Management, network security, Ceh, identity access management, Incident Response, Oscp, Siem, Cism, endpoint protection, SOAR, GSEC, Security Policies, containerised environments, patching processes, Cissp
Skills:
Shell, Cloud security, Apis, Linux, Networking, Ceh, Automation, Python, GIAC, Cissp, Security Technologies