Cyber Security Engineer

Location:

Singapore, Singapore

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

The Cybersecurity Engineer will be responsible for coordinating VAPT activities, analyzing security logs and alerts, reviewing firewall configurations and access rules, managing remediation of security findings, supporting security incident investigation, and maintaining the necessary security documentation and compliance evidence. The role will also support security patching, configuration hardening, risk assessment and audit requirements.

• Provide Level 2 operational support, maintenance and troubleshooting for network and cybersecurity infrastructure to ensure system availability, security compliance and operational stability.
• Perform preventive maintenance, health checks and operational monitoring of network and security equipment.
• Manage firewall operations, including rule administration, configuration changes, troubleshooting and verification in accordance with established security policies.
• Provide operational support and maintenance for Hardware Security Modules (HSM), ensuring availability and proper functioning.
• Monitor Security Information and Event Management (SIEM) platforms, investigate security alerts, analyse events, identify potential threats and escalation incidents to the relevant teams.
• Administer and maintain Symantec Endpoint Protection Manager (SEPM), including monitoring endpoint security status and supporting security policy enforcement.
• Monitor Aruba Clear Pass and PAAM platforms, investigate operational issues and coordinate remediation to maintain service availability and access security.
• Support Vulnerability Assessment and Penetration Testing (VAPT) remediation activities, including tracking findings, coordinating corrective actions and performing remediation verification.
• Conduct quarterly security and compliance checks and support IM8 compliance governance to ensure adherence to applicable security standards, policies and requirements.
• Perform incident, problem and change management activities, including incident investigation, escalation, root cause analysis and implementation of corrective and preventive actions.
• Support patch management, configuration management and security hardening activities to maintain infrastructure integrity and reduce security risks.
• Conduct testing and verification of infrastructure changes, patches, configurations and security remediation activities to ensure operational readiness and minimise service disruptions.
• Coordinate incident response and resolution with relevant stakeholders, technical teams and service providers in accordance with established procedures and service-level agreements (SLAs).
• Maintain accurate operational documentation, incident records, configuration baselines, standard operating procedures (SOPs) and knowledge base articles.
• Support day-to-day cybersecurity Business-as-Usual…