Enterprise Security Engineer

COMPANY DESCRIPTION

Mediacorp is Singapore’s largest content creator and national media network, operating a suite of TV channels, radio stations, and multiple digital platforms. Its mission is to engage, entertain, and enrich audiences by harnessing the power of creativity.

We are committed to creating an inclusive and diverse workplace where talent thrives. Our hiring decisions are made based on merit and fit-to-role. If you have a disability or special need which requires accommodation to participate in the recruitment process, please inform us when you submit your online application. We will be happy to support as necessary.

Thank you for your interest and application to this role. Please note that only short-listed candidates will be contacted.

As the Security Engineer, you will support the design, implementation, integration and continuous improvement of enterprise security controls across corporate, cloud and hybrid environments. You will strengthen the organisation's security posture through hands-on engineering of enterprise security platforms, secure logging and monitoring, endpoint protection, access management, email and web security, and security operations enablement.

The major focus of this role is to provide hands-on security architecture and engineering support for the enterprise security stack, including (but not limited to) SIEM, endpoint detection and response, secure web gateway, email security, log onboarding, cloud security integrations, vulnerability and exposure management tooling and access management execution support. The role works closely with security operations, IAM, infrastructure, cloud, application, workplace technology and vendors to ensure security controls are implemented, integrated, documented and operationally sustainable.

• Design, implement and support enterprise security controls across endpoint, identity integration, network, email, web, cloud and monitoring domains.
• Support engineering and integration of enterprise security platforms such as SIEM, EDR/XDR, secure web gateway, email security, vulnerability and exposure management, and related security tooling.
• Develop secure integration patterns between security platforms, infrastructure, cloud services and security operations workflows.
• Support solution design reviews and translate security requirements into practical implementation plans, technical designs and handover documentation.

• Coordinate onboarding of security logs from enterprise, cloud, application, infrastructure, network and critical systems into central monitoring platforms.
• Ensure log sources are complete, reliable, correctly parsed and aligned with detection, audit and compliance requirements.
• Work with security operations teams to support detection use case testing, alert validation, tuning and incident response readiness.
• Track and resolve log onboarding gaps, data quality issues and integration defects.

• Support implementation, migration and operational management of privileged access management controls in alignment with the IAM architecture and strategy.
• Work with the IAM Architect, infrastructure, application and operations teams to onboard systems, accounts and privileged workflows into the PAM platform.
• Support PAM-related testing, migration planning, user acceptance, operational handover, documentation and issue resolution.
• Assist with privileged access hygiene activities, including privileged account reviews, service account onboarding, access key rotation support and exception tracking.

• Support implementation, upgrade, migration and enhancement activities across the enterprise security stack.
• Perform technical testing, validation and troubleshooting of security platform integrations.
• Coordinate with vendors, managed service providers, infrastructure teams and application owners to resolve security platform issues.
• Maintain technical documentation covering architecture decisions, configurations, integration flows, risks, dependencies and operational procedures.

• Support security assessments for new systems, cloud services, vendor solutions and technology changes.
• Identify security risks, control gaps and remediation options, and communicate them clearly to technical and non-technical…