Cybersecurity Engineer (Familiar with VMS and Governance) - Multiple Headcounts

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are looking for talented individuals to join as Cybersecurity Engineer who is familiar with Vulnerability Management Systems and Governance. Selected individuals will be offered as a direct contract employment till 30 November 2028.

Responsibilities:

• Cybersecurity Standards and Configuration: Develop and maintain cybersecurity standards, procedures, configurations and rulesets. Identify security gaps and work with relevant teams to implement and validate improvements.
• Vulnerability Management (VMS): Analyse and prioritise vulnerability findings from VMS and other scanning activities. Work with system and service owners to remediate or mitigate identified vulnerabilities based on risk.
• Cybersecurity Assessments: Scope and manage cybersecurity assessments, including security hardening reviews, penetration testing, source code reviews and cybersecurity compliance assessments. Review findings and drive identified gaps towards remediation or appropriate risk treatment.
• Published Vulnerabilities and Security Patches: Monitor relevant vulnerabilities, security advisories and patch releases. Assess their applicability and risk based on factors such as CVSS, exploitability and system exposure, and recommend appropriate remediation or mitigation.
• Threat Intelligence and IOC Scanning: Assess threat intelligence and Indicators of Compromise (IOCs) for relevance to the environment. Coordinate IOC scanning, analyse potential exposure and recommend follow-up actions.
• Security Validation and Incident Response: Validate operational readiness through security exercises and drive corrective actions for identified gaps. Support incident response through technical triage, impact assessment, containment, remediation and escalation where required.
• Cybersecurity Logging and Government Cybersecurity Operations Center [GCSOC] Telemetry: Ensure required cybersecurity logs and telemetry are onboarded to GCSOC in a timely manner. Validate telemetry ingestion and coordinate troubleshooting and restoration of logging gaps or disruptions.
• Stakeholder Engagement and Security Posture Reporting: Engage stakeholders on cybersecurity findings, incidents and security posture. Translate technical findings into clear risks, priorities and actionable recommendations.

Requirements

• Knowledgeable in cyber security principles, operational security management techniques, architecture and designs, cybersecurity attributes (e.g. confidentiality, integrity, availability, accountability, assurance, etc.) and security measures (e.g. authentication, authorisation etc.) for applications in an enterprise environment or setup.

•  Possess more than 5 years’ working experience on cybersecurity in one or more of the following domains: Network security design, applications secure development, cryptography, mobile management, cloud hosting design and implementation, DevSecOps, etc.
• Possess security certifications such as SANS GCIH, CISSP, CISM, AWS or any cloud service security specialty is an added advantage.
• Knowledgeable on cyber security technologies (SIEM, VMS, CTEM, VA, GRC and Cloud Security toolsets.
• Experience in risk assessment on system, network, application cloud security vulnerabilities, misconfigurations and security patches with technical understanding on their mitigation.
• Has understanding of vulnerability assessment, penetration testing report, conduct a full impact of identified and reported vulnerabilities, recommend, and conduct remediation and mitigation.
• Experience in understanding alerts, identifying potential threats and performing basic triaging prior to escalation to next level security responder.
• Has good interpersonal and stakeholder management skills with presentation skills, and the ability to write clearly, concisely, and within context.
• Experience in working with cross-functional, multi-disciplinary teams or contractors to formulate and institute security policies, standards, procedures and configurations.

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at:  or such other successor site.

Benefits

• A wholly-owned subsidiary of GovTech.
• An attractive yearly training budget with annual performance bonus
• Contract Staff enjoys the same benefits as Permanent Employees