Assurity Trusted Solutions

Builds and secures digital systems for organisations

Cybersecurity Operations Engineer - CIO Office

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeSingaporeNo salary listed

About the Job

Requirements

Experience with AWS, Microsoft Azure, Google Cloud, Microsoft 365, Google Workspace, or other cloud and software-as-a-service platforms.
Experience with Wiz, Tenable, Datadog SIEM, Elastic, Microsoft Sentinel, Chronicle, Splunk, Defender, GuardDuty, or comparable cloud security, vulnerability-management, monitoring, and security platforms.
Experience with incident-response case management, ticketing, security orchestration, and automated response workflows.
Experience analysing security logs, onboarding log sources, validating coverage, normalising events, tuning detections, or maintaining detection-as-code practices.
Experience with vulnerability scanners, cloud-security platforms, vulnerability-management workflows, and attack-surface management.
Relevant certifications such as Security+, CySA+, GCIH, GCDA, or SC-200, or equivalent practical experience; certifications do not replace investigation ability.

Responsibilities

Monitor and investigate security alerts, suspicious activity, vulnerabilities, and incidents across cloud, software-as-a-service, application, and infrastructure environments.
Triage security findings, determine their relevance and severity, identify affected systems, and coordinate practical remediation with product and platform teams.
Drive findings through the full lifecycle from detection to mitigation, evidence collection, risk acceptance where appropriate, and formal closure; maintain clear ownership, due dates, and escalation paths.
Operate and improve attack-surface management, including asset discovery, domain and service exposure, stale or unmanaged assets, ownership tracking, and remediation follow-up.
Manage vulnerability information from security scanners, cloud-security platforms, and security alerts; correlate duplicate findings and focus attention on exploitable attack paths and material risk.
Support onboarding and validation of production security logs to central monitoring, including log-source selection, ingestion checks, parsing, coverage evidence, and troubleshooting with product teams.
Operate and improve automated baseline and privileged-activity log review for required monitoring use cases; tune rules and distinguish meaningful deviations from expected administrative or deployment activity.
Maintain the Datadog security information and event management platform, including log-source health, parsing, dashboards, alerting, and coverage; write and tune customised detection rules for GovTech-specific security use cases.
Develop and maintain detection logic, queries, dashboards, and alert workflows for cloud and software-as-a-service platforms; reduce noise while preserving visibility of high-value security signals.
Support incident response by establishing timelines, collecting relevant evidence, coordinating containment and recovery actions, documenting decisions, and confirming follow-up actions address the underlying cause.
Build and maintain workflow automation for common incidents and recurring operational tasks, including alert enrichment, team notification, ticket creation, evidence gathering, and status reporting.
Support insider-risk monitoring and related security investigations with appropriate confidentiality, evidence handling, escalation, and coordination with relevant stakeholders.
Maintain operational runbooks, detection documentation, log-source inventories, incident records, lessons learned, and metrics for response performance and recurring gaps.

Cybersecurity Operations Engineer (CIO Office)

Assurity Trusted Solutions · Singapore, Singapore (Hybrid) · Contract · Posted 2026-10-30

Workplace: hybrid

Department: CIO

Description

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade. ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, governance and assurance services as well as managed processes. In a dynamic digital & cyber landscape where trust & collaboration is key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

Responsibilities:

Key Responsibilities

Monitor and investigate security alerts, suspicious activity, vulnerabilities and incidents across cloud, SaaS, application and infrastructure environments.
Triage security findings, determine their relevance and severity, identify affected systems and coordinate practical remediation with product and platform teams.
Drive findings through the full lifecycle from detection to mitigation, evidence collection, risk acceptance where appropriate and formal closure. Maintain clear ownership, due dates and escalation paths.
Operate and improve attack-surface management, including asset discovery, domain and service exposure, stale or unmanaged assets, ownership tracking and remediation follow-up.
Manage vulnerability information from security scanners, cloud-security platforms and security alerts. Correlate duplicate findings and focus attention on exploitable attack paths and material risk.
Support the onboarding and validation of production security logs to central monitoring, including log-source selection, ingestion checks, parsing, coverage evidence and troubleshooting with product teams.
Operate and improve automated baseline and privileged-activity log review for required monitoring use cases. Tune rules and distinguish meaningful deviations from expected administrative or deployment activity.
Maintain the Datadog security information and event management (SIEM) platform, including log-source health, parsing, dashboards, alerting and coverage. Write and tune customised detection rules for GovTech-specific security use cases.
Develop and maintain detection logic, queries, dashboards and alert workflows for cloud and SaaS platforms. Reduce noise while preserving visibility of high-value security signals.
Support incident response by establishing timelines, collecting relevant evidence, coordinating containment and recovery actions, documenting decisions and confirming that follow-up actions address the underlying cause.
Build and maintain workflow automation for common incidents and recurring operational tasks, including alert enrichment, team notification, ticket creation, evidence gathering and status reporting.
Support insider-risk monitoring and related security investigations with appropriate confidentiality, evidence handling, escalation and coordination with relevant stakeholders.
Maintain operational runbooks, detection documentation, log-source inventories, incident records, lessons learned and metrics for response performance and recurring gaps.

Requirements

Experience with AWS, Microsoft Azure, Google Cloud, Microsoft 365, Google Workspace or other cloud and SaaS platforms.
Experience with Wiz, Tenable, Datadog SIEM, Elastic, Microsoft Sentinel, Chronicle, Splunk, Defender, GuardDuty or comparable cloudsecurity, vulnerability-management, monitoring and security platforms.
Experience with incident-response case management, ticketing, security orchestration and automated response workflows.
Experience analysing security logs, onboarding log sources, validating coverage, normalising events, tuning detections or maintaining detection-ascode practices.
Experience with vulnerability scanners, cloud-security platforms, vulnerability-management workflows and attack-surface management.
Relevant certifications such as Security+, CySA+, GCIH, GCDA, SC-200 or equivalent practical experience. Certifications are useful but do not replace investigation ability.

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/ or such other successor site.

Benefits

A wholly-owned subsidiary of GovTech.
We promote a learning culture and encourage you to grow and learn.
Contract Staff enjoys the same benefits as Permanent Employees.

Apply

Apply at Assurity Trusted Solutions

About the Company

Assurity Trusted Solutions

Builds and secures digital systems for organisations

Assurity Trusted Solutions sells technology services to Singapore government agencies and commercial customers. Its engineers take digital products from design through operation, while managed services teams support the infrastructure and business processes behind them. Its assurance practice advises customers on cyber risks and tests applications, networks and systems for weaknesses before attackers exploit them. The business also supports agency product adoption, connecting government services with users and private sector organisations. Founded in 2010 by Singapore's Infocomm Development Authority, Assurity is headquartered in Singapore and is a wholly owned subsidiary of the Government Technology Agency.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: Not listed
Founded: 2010

Recently Posted Jobs

Explore more opportunities at Assurity Trusted Solutions

See more jobs