IT Security Engineer
IT Security Engineer at Ascendion implementing and operating security controls for mission-critical government systems in Singapore, covering both build (Day 1) and production operations (Day 2). Work spans Kubernetes/Docker security, IAM, DevSecOps tooling (SAST, DAST, SIEM), vulnerability management, and compliance with IM8/WOG policies and PDPA.
- Compensation
- Not disclosed
- Location
- North-East Region
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Degree in Computer Science / Cybersecurity / Information Security or equivalent
- 3-7 years of IT experience in cybersecurity or infrastructure security
- Experience supporting security in projects or production environments
- Hands-on experience with Kubernetes / Docker security
- Hands-on experience with IAM and access control
- Hands-on experience with security tools (SAST, DAST, SIEM, vulnerability scanners)
- Experience with CI/CD and DevSecOps practices
- Basic knowledge of network security, application security, and cloud security
- Strong technical troubleshooting and problem-solving skills
- Ability to follow security standards and implement controls effectively
- Good communication skills with technical and non-technical teams
- Detail-oriented with strong documentation skills
Nice to have
- Familiarity with Singapore Government security policies (IM8 preferred)
Full description
About the role
The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment. This role covers both Day 1 Security (Build / Project Implementation) and Day 2 Security (Operations / Production Support). The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards.
Key responsibilities
- Implement security architecture and controls as designed by Security Leads/Architects
- Support system, application, and infrastructure security configurations
- Assist in threat modelling and risk assessment activities
- Translate security requirements into technical implementation across platforms
- Support compliance with IM8 / Government security policies, Whole of Government (WOG) security requirements, and PDPA (where applicable)
- Assist in preparation and documentation for Security Risk Assessments (SRA), Vulnerability Assessments (VA), and Penetration Testing (PT)
- Implement and maintain security tools in CI/CD pipelines (SAST, DAST, SCA, container scanning)
- Support investigation, containment, and remediation of security incidents
- Perform regular vulnerability scans and monitoring
- Monitor alerts from SIEM and security tools
About you
- Degree in Computer Science / Cybersecurity / Information Security or equivalent
- 3–7 years of IT experience in cybersecurity or infrastructure security
- Experience supporting security in projects or production environments
- Familiarity with Singapore Government security policies (IM8 preferred)
- Hands-on experience with Kubernetes / Docker security, IAM and access control, security tools (SAST, DAST, SIEM, vulnerability scanners), and CI/CD and DevSecOps practices
- Basic knowledge of network security, application security, and cloud security
- Strong technical troubleshooting and problem-solving skills
- Ability to follow security standards and implement controls effectively
- Good communication skills with technical and non-technical teams
- Detail-oriented with strong documentation skills