Cybersecurity Engineer (2 Year Contract)

Job Summary

We are seeking an experienced Security Engineer to join our team, with expertise spanning two closely related specialisations: Security Architecture and Security Engineering Operations. Working at the intersection of design and delivery, you will collaborate across the organisation to architect, implement, and continuously improve security capabilities that protect our infrastructure and systems. In this role, you will be responsible for designing, reviewing and maintaining effective security solutions across a range of security and related technologies, ensuring these are built to be robust, scalable, and fit for purpose. Alongside this, you will take a hands-on approach to implementing, integrating, and operationalising security tools and controls — ensuring that what is designed on paper translates into effective, well-functioning capabilities in practice, and as well as continuously improved

Responsibilities

• Develop, document, and maintain security policies, procedures, guidelines and baselines for cloud and hybrid environments
• Collaborate closely with the SOC team to analyse and fine-tune SIEM detection rules, correlation logic, and security policies to improve alert fidelity and suppress false positives
• Collaborate closely with the Security Engineering team to continuously strengthen detection and response capabilities, contributing to regular reviews and iterative improvements to security monitoring and alerting workflows.
• Track and report on the effectiveness of security controls through periodic review and finetuning.
• Assist in developing risk assessment and security frameworks to support a comprehensive and consistent risk assessment methodology suited for cloud and hybrid environment.
• Assist in conducting in-depth security architecture reviews and threat modelling exercises for new and existing systems, systematically identifying attack surfaces, trust boundaries, and design-level weaknesses, and providing concrete, prioritised mitigation recommendations.
• Assist in performing structured risk assessments across infrastructure and application system for cloud and hybrid environments

Requirements

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Minimum 3 years of relevant IT experience in deploying and managing security services for on-prem and cloud, including the design, development, implementation and/or management of the solution.
• Excellent communication skills and the ability to collaborate with diverse teams.
• Organised, independent and able to work with minimal supervision in a fast-paced working environment and adhere to organisational process and governance.
• Strong understanding of risk management methodologies and compliance frameworks
• Experience with security tools and technologies, such as Security Information and Events Management, Data Loss Prevention, Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, Intrusion Prevent etc
• Professional certifications such as CISM, CRISC, CISSP, or equivalent are preferred.
• Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP) are a plus.

If you are interested in this role and would like to discuss the opportunity further please click apply now or email Chew Kai-Xinn at ***email_hidden*** for more information.

Only shortlisted candidates will be responded to, therefore if you do not receive a reply within 14 days please accept this as notification that you have not been shortlisted.

Morgan McKinley Pte Ltd

Chew Kai-Xinn

EA Licence No: 11C5502

EAP Registration No: R2196712