Assurity Trusted Solutions

Builds and secures digital systems for organisations

Cybersecurity Engineer - Familiar with VMS and Governance

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeSingaporeHybrid

About the Job

Requirements

Knowledge of cybersecurity principles, operational security management techniques, architecture and designs, cybersecurity attributes such as confidentiality, integrity, availability, accountability and assurance, and security measures such as authentication and authorisation in an enterprise environment.
More than 5 years of cybersecurity work experience in one or more domains, including network security design, secure application development, cryptography, mobile management, cloud hosting design and implementation, or DevSecOps.
Knowledge of cybersecurity technologies, including Security Information and Event Management, Vulnerability Management Systems, Continuous Threat Exposure Management, vulnerability assessment, Governance, Risk and Compliance, and cloud security toolsets.
Experience assessing system, network, application and cloud security risks involving vulnerabilities, misconfigurations and security patches, with technical understanding of mitigation.
Understanding of vulnerability assessment and penetration testing reports, including evaluating the impact of identified vulnerabilities and recommending and conducting remediation or mitigation.
Experience understanding alerts, identifying potential threats and performing basic triage before escalation to the next-level security responder.
Interpersonal and stakeholder-management skills, presentation skills, and the ability to write clearly, concisely and in context.
Experience working with cross-functional, multidisciplinary teams or contractors to formulate and institute security policies, standards, procedures and configurations.

Responsibilities

Develop and maintain cybersecurity standards, procedures, configurations and rulesets.
Identify security gaps and work with relevant teams to implement and validate improvements.
Analyse and prioritise vulnerability findings from Vulnerability Management Systems and other scanning activities.
Work with system and service owners to remediate or mitigate identified vulnerabilities based on risk.
Scope and manage cybersecurity assessments, including security hardening reviews, penetration testing, source code reviews and cybersecurity compliance assessments.
Review assessment findings and drive identified gaps toward remediation or appropriate risk treatment.
Monitor relevant vulnerabilities, security advisories and patch releases; assess applicability and risk based on factors such as Common Vulnerability Scoring System scores, exploitability and system exposure; and recommend remediation or mitigation.
Assess threat intelligence and Indicators of Compromise for relevance to the environment.
Coordinate Indicators of Compromise scanning, analyse potential exposure and recommend follow-up actions.
Validate operational readiness through security exercises and drive corrective actions for identified gaps.
Support incident response through technical triage, impact assessment, containment, remediation and escalation where required.
Ensure required cybersecurity logs and telemetry are onboarded to the Government Cybersecurity Operations Center in a timely manner.
Validate telemetry ingestion and coordinate troubleshooting and restoration of logging gaps or disruptions.
Engage stakeholders on cybersecurity findings, incidents and security posture.
Translate technical findings into clear risks, priorities and actionable recommendations.

Desired Qualifications

Security certifications such as SANS GCIH, CISSP, CISM, AWS, or a cloud-service security specialty are an added advantage.

Cybersecurity Engineer (Familiar with VMS and Governance) - Multiple Headcounts

Assurity Trusted Solutions · Singapore, Singapore (Hybrid) · Contract · Posted 2026-09-18

Workplace: hybrid

Department: GPE

Description

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are looking for talented individuals to join as Cybersecurity Engineer who is familiar with Vulnerability Management Systems and Governance. Selected individuals will be offered as a direct contract employment till 30 November 2028.

Responsibilities:

Cybersecurity Standards and Configuration: Develop and maintain cybersecurity standards, procedures, configurations and rulesets. Identify security gaps and work with relevant teams to implement and validate improvements.
Vulnerability Management (VMS): Analyse and prioritise vulnerability findings from VMS and other scanning activities. Work with system and service owners to remediate or mitigate identified vulnerabilities based on risk.
Cybersecurity Assessments: Scope and manage cybersecurity assessments, including security hardening reviews, penetration testing, source code reviews and cybersecurity compliance assessments. Review findings and drive identified gaps towards remediation or appropriate risk treatment.
Published Vulnerabilities and Security Patches: Monitor relevant vulnerabilities, security advisories and patch releases. Assess their applicability and risk based on factors such as CVSS, exploitability and system exposure, and recommend appropriate remediation or mitigation.
Threat Intelligence and IOC Scanning: Assess threat intelligence and Indicators of Compromise (IOCs) for relevance to the environment. Coordinate IOC scanning, analyse potential exposure and recommend follow-up actions.
Security Validation and Incident Response: Validate operational readiness through security exercises and drive corrective actions for identified gaps. Support incident response through technical triage, impact assessment, containment, remediation and escalation where required.
Cybersecurity Logging and Government Cybersecurity Operations Center [GCSOC] Telemetry: Ensure required cybersecurity logs and telemetry are onboarded to GCSOC in a timely manner. Validate telemetry ingestion and coordinate troubleshooting and restoration of logging gaps or disruptions.
Stakeholder Engagement and Security Posture Reporting: Engage stakeholders on cybersecurity findings, incidents and security posture. Translate technical findings into clear risks, priorities and actionable recommendations.

Requirements

Knowledgeable in cyber security principles, operational security management techniques, architecture and designs, cybersecurity attributes (e.g. confidentiality, integrity, availability, accountability, assurance, etc.) and security measures (e.g. authentication, authorisation etc.) for applications in an enterprise environment or setup.
Possess more than 5 years’ working experience on cybersecurity in one or more of the following domains: Network security design, applications secure development, cryptography, mobile management, cloud hosting design and implementation, DevSecOps, etc.
Possess security certifications such as SANS GCIH, CISSP, CISM, AWS or any cloud service security specialty is an added advantage.
Knowledgeable on cyber security technologies (SIEM, VMS, CTEM, VA, GRC and Cloud Security toolsets.
Experience in risk assessment on system, network, application cloud security vulnerabilities, misconfigurations and security patches with technical understanding on their mitigation.
Has understanding of vulnerability assessment, penetration testing report, conduct a full impact of identified and reported vulnerabilities, recommend, and conduct remediation and mitigation.
Experience in understanding alerts, identifying potential threats and performing basic triaging prior to escalation to next level security responder.
Has good interpersonal and stakeholder management skills with presentation skills, and the ability to write clearly, concisely, and within context.
Experience in working with cross-functional, multi-disciplinary teams or contractors to formulate and institute security policies, standards, procedures and configurations.

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: or such other successor site.

Benefits

A wholly-owned subsidiary of GovTech.
An attractive yearly training budget with annual performance bonus
Contract Staff enjoys the same benefits as Permanent Employees

Apply

Apply at Assurity Trusted Solutions

About the Company

Assurity Trusted Solutions

Builds and secures digital systems for organisations

Assurity Trusted Solutions sells technology services to Singapore government agencies and commercial customers. Its engineers take digital products from design through operation, while managed services teams support the infrastructure and business processes behind them. Its assurance practice advises customers on cyber risks and tests applications, networks and systems for weaknesses before attackers exploit them. The business also supports agency product adoption, connecting government services with users and private sector organisations. Founded in 2010 by Singapore's Infocomm Development Authority, Assurity is headquartered in Singapore and is a wholly owned subsidiary of the Government Technology Agency.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: Not listed
Founded: 2010

Recently Posted Jobs

Explore more opportunities at Assurity Trusted Solutions

See more jobs