Senior Security Engineer

About the job

We’re on a mission to make financial services accessible and effortless for SMEs. As one of Singapore’s latest digital wholesale banks fully regulated by MAS, we’re committed to continuous innovation to bring about simpler, safer and more rewarding financial services. #bringingaboutwhatsnext

We are looking for a highly motivated Senior Security Engineer who will join the Bank’s cybersecurity team. The Senior Security Engineer will support the CISO in executing day-to-day cybersecurity operations and contribute to the development, implementation, and governance of the Bank's cybersecurity policy framework. This role plays a critical part in maintaining the Bank's security posture, ensuring regulatory compliance, and enabling secure growth of digital banking services.

Responsibilities

Security Operations

• Monitor and respond to security alerts, incidents, and threats across the Bank's infrastructure, applications, and cloud environments
• Conduct triage, investigation, and escalation of security incidents in coordination with the SOC and IT teams
• Maintain and tune security tools (SIEM, EDR, WAF, vulnerability scanners, etc.) for optimal detection and response
• Perform regular security assessments, vulnerability scans, and penetration test coordination
• Support 24/7 incident response activities as part of the on-call rotation

Policy & Governance

• Assist in developing, reviewing, and updating cybersecurity policies, standards, and procedures aligned with regulatory requirements (e.g., MAS TRM, PDPA)
• Conduct policy compliance assessments and report gaps to the CISO
• Maintain documentation for audit and regulatory examinations
• Support risk assessment activities and maintain the risk register
• Coordinate with internal audit and external regulators during assessments

Security Architecture & Engineering

• Review and provide security input on new projects, system changes, and cloud deployments
• Implement security controls across network, endpoint, identity, and application layers
• Support secure configuration management and hardening initiatives (e.g., CIS Benchmarks)
• Evaluate and recommend security technologies to address emerging threats

Awareness & Collaboration

• Deliver security awareness training to staff on policies, threats, and best practices
• Collaborate with IT, DevOps, and business teams to embed security into processes
• Serve as a security point of contact for operational queries and escalations

Requirements

• Bachelor's degree in Computer Science, Information Security, or related field
• 5+ years of experience in cybersecurity, with at least 2 years in a financial services or regulated environment
• Relevant certifications (e.g., CISSP, CISM, CEH, GSEC, Security+, CCSP, OSCP)
• Hands-on experience with security operations (SIEM, SOAR, incident response)
• Familiarity with cloud security and containerised environments
• Experience implementing and maintaining security policies in a regulated industry
• Knowledge of vulnerability management and patching processes
• Understanding of network security, identity & access management, and endpoint protection

Competencies

• Analytical Thinking: Ability to assess complex security scenarios and prioritise risks
• Communication: Clear written and verbal communication for technical and non-technical audiences
• Attention to Detail: Rigorous approach to documentation, compliance, and operational accuracy
• Collaboration: Works effectively across teams and builds strong stakeholder relationships
• Adaptability: Thrives in a fast-paced digital bank environment with evolving priorities

Preferred Qualifications

• Experience in a digital bank, fintech, or start-up environment
• Knowledge of Singapore regulatory requirements (MAS, PDPA)
• Hands-on experience with DevSecOps practices and CI/CD security integration
• Familiarity with AI/ML security considerations and emerging technology risks