IT Security Engineer

Day 1 – Project / Implementation Security

1. Security Implementation & Engineering

Implement security architecture and controls as designed by Security Leads/Architects Support system, application, and infrastructure security configurations Assist in threat modelling and risk assessment activities Translate security requirements into technical implementation across platforms

1. Compliance Support

Support compliance with: IM8 / Government security policies Whole‑of‑Government (WOG) security requirements PDPA (where applicable) Assist in preparation and documentation for: Security Risk Assessments (SRA) Vulnerability Assessments (VA) Penetration Testing (PT) Maintain security documentation and evidence for audits

1. DevSecOps & Secure Development

Implement and maintain security tools in CI/CD pipelines: SAST, DAST, SCA, container scanning Monitor and triage findings, and work with developers on remediation Support secure coding practices and DevSecOps adoption Assist in API security, secrets management, and secure communications setup

1. Security Testing Support

Support coordination and execution of VA/PT activities Track vulnerabilities and ensure timely remediation Assist in documenting findings and closure evidence Support system security certification and go-live requirements

1. System & Platform Hardening

Implement and maintain security hardening for: Operating systems Middleware and databases Kubernetes and containers (RBAC, secrets, network policies) Support configuration of: API Gateways WAF Authentication and authorization mechanisms (OAuth2, mTLS) Day 2 – Operations / Production Security

1. Incident Response

Support investigation, containment, and remediation of security incidents Perform log analysis and assist in root cause analysis (RCA) Work with SOC and internal teams during incidents Follow and improve incident response playbooks

1. Vulnerability & Patch Management

Perform regular vulnerability scans and monitoring Track and verify patching and remediation activities Escalate high-risk vulnerabilities and propose mitigation controls

1. Security Monitoring

Monitor alerts from SIEM and security tools Assist in tuning detection rules and dashboards Ensure logging and monitoring coverage across systems

1. Audit & Compliance Support

Support audit preparation, evidence collection, and remediation tracking Maintain security records and documentation Assist in reporting security posture and issues

1. Access Control Administration

Support implementation of: RBAC MFA Privileged Access Management (PAM) Perform user access reviews and ensure least privilege Important Note:

> Please share your resume in word format with dilip@helius-tech.com > Important Note: If this requirement is not a match for you please refer to your friends. > Interested professionals can reach out to me for Confidential Discussion @ +65- 9060-4050.

Best Regards,

Dilip Kumar Daga Vice President - Strategic Accounts Helius Technologies Pte Ltd 36, Robinson Road,#13-05, City House, Singapore 068877 DID: +(65) 6429-9407 Mobile: +(65) 9060-4050 Fax: +(65) 62222213 Email id: dilip@helius-tech.com http://helius-tech.com Registration No : R1108376 EA Licence No : 11C3373 https://www.linkedin.com/in/dilipdaga/