Ascendion Hiring! Full Time Information Technology Security Engineer in - Ricebowl

Role:

• The IT Security Engineer will be responsible for implementing, operating, and supporting security controls for mission-critical systems within a secured environment.

This role covers both the following:

• Day 1 Security (Build / Project Implementation)
• Day 2 Security (Operations / Production Support)
• This role will work closely with security leads, infra, system, and software teams to ensure compliance with government security policies and standards.

Responsibilities:

• Support the implementation of security controls based on approved security designs and standards.
• Assist with security hardening for operating systems, servers, middleware, databases, containers and platform components.
• Help identify, track and close vulnerabilities across project and production environments.
• Support vulnerability assessments, penetration testing activities and remediation follow-up.
• Assist with security compliance activities, including documentation, audit evidence and security readiness checks.
• Monitor security alerts and logs, and support investigation of security issues.
• Support access control activities, including RBAC, MFA, privileged access and user access reviews.

Required Skills:

• 2 years of experience in cybersecurity, infrastructure security, security operations, system security, DevSecOps or related areas.
• Practical exposure to security implementation, security operations or production support environments.
• Experience in at least some of the following areas: security hardening, vulnerability management, patch remediation, IAM or access control, RBAC, MFA or privileged access, SIEM monitoring or log analysis, incident investigation support, and security documentation or audit evidence.
• Familiarity with Singapore government security policies such as IM8 or WOG security requirements will be highly preferred.
• Exposure to Kubernetes, Docker, CI/CD security, SAST, DAST, SCA, container scanning, API security or cloud security would be useful.