Senior Security Engineer

Key Responsibilities:

• Manage end-to-end security patching lifecycle for systems and platforms, ensuring timely remediation of vulnerabilities and endof-life (EOL) software components.
• Collaborate with vulnerability management and infrastructure teams to assess, prioritize, and deploy patches based on risk and business impact.
• Maintain and enhance security patch management processes and documentation, ensuring alignment with best practices, policies & procedures, and compliance requirements.
• Design, develop, and maintain/enhance security automation scripts and workflows to streamline security patching processes.
• Track and populate security operations metrics. Automate as much as possible the process of gathering, analyzing, and presenting the security operations metrics.
• To involve in the preparation of various security reports and decks.
• Support the team in various security operations projects and initiatives.
• Involve in security operations automation project and provide contribution, ideas, and deliverables.
• Review and assess security deviation and exception requests proposed by application teams, infrastructure teams, and other stakeholders, ensuring completeness, justification, and alignment with the risk appetite & regulatory requirements.
• Evaluate deviations against relevant attack path analysis, regulatory requirements, and security standards to identify potential security risks and relevant mitigation controls.

Qualifications:

• 5 years of Tech experience in the cybersecurity area
• Strong knowledge of cybersecurity vulnerability management & EOL process remediation and automation, patching processes and tooling, cyber monitoring, and AI security.
• Knowledge of various source code management systems & cloud environment (such as Azure, AWS, GCP), including understanding of containers/K8s and microservices-based architecture.
• Hands-on scripting with python/shell script/other scripting languages, dashboard visualization & API integration with Power BI & Power Automate, and Working experience as developers or DevOps or SRE would be an added advantage.
• Ability to drive the problem resolution of complex security issues, with strong analytical mindset based on data-driven approach.
• Experience of the implementation of a variety of security tools and documentation of the process.
• Familiarity with MAS TRM guideline or similar regulatory requirements.
• Excellent interpersonal and communication skills, with the ability to deliver the key message of “why”, “what”, and “how” certain things are needed for remediation, with elaboration of the risks, severity and impact.