Job Description

The Security Operations Engineer is responsible for managing and maintaining the client cybersecurity infrastructure, including endpoint protection, privileged access management, vulnerability assessment systems, and security monitoring tools. This role ensures the security posture of critical systems through proactive monitoring, incident response, system maintenance, and implementation of security enhancements across the organization's technology stack.

In addition to core operational responsibilities, the Security Operations Engineer is expected to identify and implement opportunities to leverage AI tools and automation to improve operational effectiveness, reduce manual effort, and strengthen security outcomes. This includes automating repetitive security workflows, developing scripts and integrations to streamline privileged access and monitoring operations, and exploring AI-assisted approaches to alert triage, anomaly detection, and audit reporting. The engineer is expected to proactively drive the adoption of such capabilities within the team, sharing knowledge and building reusable solutions that enhance the team's overall efficiency and resilience.

Key Responsibilities

• Manage and maintain primary security systems including CyberArk PAM, Imperva DAM, Tripwire FIM and Trellix Endpoint DLP solutions.
• Execute security infrastructure projects including CIS hardening implementations, system migrations, and platform consolidations.
• Monitor and respond to security vulnerabilities and zero-day threats, implementing appropriate mitigation measures and patches.
• Support system upgrades and migrations across multiple platforms whilst ensuring minimal disruption to business operations
• Collaborate with cross-functional teams including EDP/USC for endpoint security tool deployments and updates.
• Maintain security compliance through regular system hardening, configuration management, and policy enforcement.
• Participate in disaster recovery planning and contribute to architectural planning for managed security tools in cloud environments.
• Provide technical documentation, standard operating procedures, and knowledge transfer to support team operations
• Respond to security incidents and provide after-hours support as required for critical security systems.
• Identify and implement opportunities to leverage AI tools and automation to streamline workflows, improve operational effectiveness.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum 5 years of hands-on experience in cybersecurity operations and security tool management.
• Proven experience with CyberArk PAM, Imperva DAM, Tripwire FIM and Trellix DLP is preferred.
• Knowledge of vulnerability management tools and processes (Tenable, Nessus)
• Understanding of enterprise security frameworks and compliance requirements.
• Experience with system administration on Windows and Linux platforms.
• Familiarity with security incident response procedures and methodologies.
• Strong analytical and problem-solving skills with attention to detail.
• Ability to work independently and manage multiple concurrent projects.
• Excellent communication skills for stakeholder engagement and technical documentation.
• Demonstrated experience in Security Operation including the use of AI or automation tools to drive efficiency or improve outcomes.

Preferred Qualifications

• Professional certifications such as CyberArk Certified Delivery Engineer (CDE), CISSP, or equivalent security certifications.
• Experience with automation tools and scripting (Ansible, Python, PowerShell).
• Knowledge of cloud security platforms and hybrid infrastructure environments.
• Familiarity with SIEM tools and security monitoring platforms.
• Experience with Singapore Government security standards and compliance frameworks (IM8, CSA guidelines).
• Understanding of financial sector security requirements and regulations.
• Project management experience and ability to lead technical initiatives.
• A proactive mindset towards continuous improvement, with the ability to spot opportunities where AI and automation can add value and the initiative to drive this forward