IT Security Engineer

Role:

• The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment. This role covers both:

• Day 1 Security (Build / Project Implementation)

• Day 2 Security (Operations / Production Support)

• The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.

Responsibilities

Day 1 – Project / Implementation Security 1. Security Implementation & Engineering

• Implement security architecture and controls as designed by Security Leads/Architects

• Support system, application, and infrastructure security configurations

• Assist in threat modelling and risk assessment activities

• Translate security requirements into technical implementation across platforms 2. Compliance Support

• Support compliance with:

• IM8 / Government security policies

• Whole of Government (WOG) security requirements

• PDPA (where applicable)

• Assist in preparation and documentation for:

• Security Risk Assessments (SRA)

• Vulnerability Assessments (VA)

• Penetration Testing (PT)

• Maintain security documentation and evidence for audits 3. DevSecOps & Secure Development

• Implement and maintain security tools in CI/CD pipelines:

• SAST, DAST, SCA, container scanning

• Monitor and triage findings, and work with developers on remediation

• Support secure coding practices and DevSecOps adoption

• Assist in API security, secrets management, and secure communications setup 4. Security Testing Support

• Support coordination and execution of VA/PT activities

• Track vulnerabilities and ensure timely remediation

• Assist in documenting findings and closure evidence

• Support system security certification and go-live requirements 5. System & Platform Hardening

• Implement and maintain security hardening for:

• Operating systems

• Middleware and databases

• Kubernetes and containers (RBAC, secrets, net