Whalet Hiring! Full Time IT Infrastructure - Security Engineer in - Ricebowl

About Whalet

Whalet is a cross-border payments company building its international headquarters in Singapore. As a Payment Service Provider regulated by the Monetary Authority of Singapore (MAS), we are setting up a local technology team to run and secure the infrastructure behind our payment services across Asia Pacific and beyond.

The Role

We are looking for a hands-on engineer with around five years of experience to run our Singapore cloud infrastructure and own its day-to-day security. You will be one of the first members of the local technology team, working closely with our group technology team in China and with Compliance and Risk to keep our platform reliable, secure and inspection-ready.

This is an opportunity to help build a regulated payments technology environment from the ground up, with real ownership and room to grow.

Key Responsibilities

Infrastructure & Reliability

• Deploy, operate and improve our Singapore cloud environment (compute, network, databases, storage), ensuring high availability and performance for payment workloads
• Build and maintain monitoring, alerting, logging and capacity management; define and track service level objectives
• Automate infrastructure and releases using Infrastructure-as-Code and CI/CD pipelines
• Apply change management, release review and rollback discipline to protect production

Security Operations & Compliance

• Implement and maintain security baselines, patching, endpoint protection/EDR and vulnerability scanning; coordinate periodic penetration tests and track remediation
• Manage identity and access, including privileged access, least privilege and segregation of duties
• Operate security monitoring (SIEM) and respond to security incidents, including regular exercises
• Implement technical controls aligned with the MAS Technology Risk Management Guidelines and Notices on Technology Risk Management and Cyber Hygiene, and with PDPA requirements
• Prepare and maintain security policies, procedures and evidence to support internal audits, external audits and MAS inspections

Resilience & Incident Management

• Maintain Business Continuity and Disaster Recovery arrangements and run regular recovery tests
• Support incident escalation and regulatory incident reporting within MAS timelines

Third Parties & Collaboration

• Support due diligence and ongoing monitoring of cloud providers and other technology vendors, in line with MAS outsourcing and third-party risk expectations
• Work with the China HQ technology team to apply group standards while meeting Singapore requirements, and with Compliance and Risk on technology risk reviews before new features go live

Requirements

Essential

• Bachelor's degree in Computer Science, Information Technology, Information Security or a related field
• 4–6 years' experience in infrastructure, DevOps, SRE or security engineering, including running production systems
• Hands-on experience with AWS (or an equivalent major cloud) and containerised workloads on Kubernetes
• Experience with Terraform, Ansible or similar IaC tools and CI/CD pipelines
• Solid Linux and networking fundamentals (VPC, firewalls, load balancing, WAF) and experience operating relational databases and Redis
• Experience with monitoring and observability tools such as Prometheus, Grafana or Datadog
• Practical security operations experience: SIEM, EDR, vulnerability management and incident response
• Exposure to a regulated or audited environment (for example MAS TRM, ISO 27001, SOC 2 or PCI DSS), including preparing documentation and evidence
• Fluent English and Mandarin; willingness to participate in an on-call rotation

Strongly Preferred

• Experience supporting payment systems in production, such as cross-border remittance, ewallets, card processing or FAST/PayNow
• Prior experience at an MAS-licensed financial institution or payments company, including MAS inspections
• Experience setting up infrastructure and controls in an early-stage or fast-growing environment

Nice to Have

• Certifications such as AWS, CKA/CKS, Security+, CISSP, CISM or OSCP

Personal Attributes

• Ownership mindset and composure under pressure
• Self-driven and comfortable working across time zones and cultures

How to Apply

Please submit your CV and a brief cover note to *************