Senior Cybersecurity Engineer / Cyber Security Officer (CSO)

About the Role

We are seeking an experienced Cybersecurity Engineer to lead cybersecurity design, implementation, governance and assurance for integrated technology and infrastructure projects.

The successful candidate will undertake both hands-on cybersecurity engineering and Cyber Security Officer (CSO) responsibilities, ensuring that security requirements are effectively incorporated throughout the project lifecycle.

You will collaborate with network engineers, system engineers, software vendors, project managers and clients to deliver secure, compliant and operationally resilient solutions involving enterprise networks, servers, connected sensors, operational technology (OT) and integrated applications.

The role covers tender preparation, security architecture, risk assessment, deployment, testing, commissioning, handover and ongoing maintenance.

Key Responsibilities

• Review client specifications, tender requirements and relevant cybersecurity standards, translating them into practical technical controls, security designs and compliance deliverables.
• Lead cybersecurity architecture and solution design, including network segmentation, security zones, firewall policies, secure remote access, encryption and administrative access controls.
• Prepare cybersecurity compliance matrices, security architecture diagrams, data-flow diagrams, cybersecurity risk assessments and implementation plans.
• Act as the designated project Cyber Security Officer (CSO), where appointed, serving as the primary cybersecurity point of contact for clients, consultants, vendors and project teams.
• Develop, implement and maintain cybersecurity management plans, policies, procedures, risk registers and security documentation.
• Ensure cybersecurity compliance with applicable regulatory requirements, industry standards, contractual obligations and client-specific security requirements.
• Implement, configure and validate cybersecurity controls across firewalls, network devices, Windows/Linux servers, virtual infrastructure and integrated applications.
• Establish and oversee system-hardening baselines, vulnerability management, patch management, security configuration reviews and remediation activities.
• Implement or oversee role-based access controls, multi-factor authentication (MFA), privileged access management and service-account security.
• Design and implement security logging, centralised monitoring, alerting and Security Information and Event Management (SIEM) integration where required.
• Conduct cybersecurity risk assessments, identify potential security threats and recommend appropriate technical and operational mitigation measures.
• Coordinate cybersecurity architecture reviews, vulnerability assessments, penetration testing, security audits and closure of identified findings.
• Develop cybersecurity incident response, escalation, reporting and recovery procedures, and support incident investigations and corrective actions.
• Support tender submissions, technical clarifications, cybersecurity equipment selection, solution evaluation and security-related cost estimates.
• Review cybersecurity deliverables and coordinate implementation activities with multidisciplinary engineering teams, suppliers and external assessors.
• Support cybersecurity testing, commissioning, security assurance, documentation, handover and operational readiness assessments.
• Provide ongoing cybersecurity guidance for system upgrades, maintenance activities and security improvements.

Requirements

• Diploma or degree in Cybersecurity, Information Technology, Computer Engineering or a related discipline, or equivalent relevant experience.
• Minimum 5 years of relevant experience in cybersecurity engineering, infrastructure security, security architecture or systems integration.
• Proven experience in cybersecurity solution design, technical implementation, security governance and risk management.
• Strong understanding of TCP/IP, VLANs, routing, firewalls, VPNs, network segmentation and secure network architecture.
• Hands-on experience securing enterprise networks, firewalls, Windows/Linux servers and virtualised environments.
• Practical experience in system hardening, vulnerability assessment, security monitoring, access management and incident handling.
• Knowledge of cybersecurity standards and frameworks such as ISO/IEC 27001, NIST CSF and IEC 62443.
• Ability to interpret technical specifications and prepare cybersecurity architectures, compliance responses, risk assessments and technical documentation.
• Experience coordinating with clients, consultants, vendors, cybersecurity assessors and multidisciplinary engineering teams.
• Strong analytical, problem-solving, communication and documentation skills.
• Ability to work independently, manage cybersecurity deliverables and balance security requirements with operational and project constraints.

Professional Certifications

Candidates should preferably possess at least one of the following recognised cybersecurity certifications:

• CISSP – Certified Information Systems Security Professional
• CISM – Certified Information Security Manager
• CISA – Certified Information Systems Auditor
• CRISC – Certified in Risk and Information Systems Control

Additional certifications or qualifications are advantageous:

• ISO/IEC 27001 Lead Implementer or Lead Auditor
• Fortinet NSE certifications or equivalent vendor security certifications
• Cisco CCNP Security
• CompTIA Security+ / CySA+
• GIAC GICSP or ISA/IEC 62443 OT cybersecurity certification

Equivalent professional qualifications and demonstrable relevant experience may be considered, subject to applicable client or project requirements.

Additional Advantages

• Experience supporting critical infrastructure, airports, transportation, industrial facilities or large-scale integrated technology projects.
• Familiarity with operational technology (OT), industrial control systems, connected sensors, CCTV, access control systems and other integrated security platforms.
• Experience working with Fortinet security solutions, including FortiGate, FortiManager, FortiAnalyzer and FortiSIEM.
• Experience developing cybersecurity architectures and compliance submissions for large-scale IT/OT infrastructure projects.
• Familiarity with Singapore cybersecurity regulatory requirements and client-specific cybersecurity standards.
• Experience managing cybersecurity activities from tender preparation through commissioning, handover and ongoing maintenance.