Cyber Security Engineer

Location: Singapore, Singapore

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

The Cybersecurity Engineer will be responsible for coordinating VAPT activities, analyzing security logs and alerts, reviewing firewall configurations and access rules, managing remediation of security findings, supporting security incident investigation, and maintaining the necessary security documentation and compliance evidence. The role will also support security patching, configuration hardening, risk assessment and audit requirements.

Responsibilities

• Provide Level 2 operational support, maintenance and troubleshooting for network and cybersecurity infrastructure to ensure system availability, security compliance and operational stability.
• Perform preventive maintenance, health checks and operational monitoring of network and security equipment.
• Manage firewall operations, including rule administration, configuration changes, troubleshooting and verification in accordance with established security policies.
• Provide operational support and maintenance for Hardware Security Modules (HSM), ensuring availability and proper functioning.
• Monitor Security Information and Event Management (SIEM) platforms, investigate security alerts, analyse events, identify potential threats and escalate incidents to the relevant teams.
• Administer and maintain Symantec Endpoint Protection Manager (SEPM), including monitoring endpoint security status and supporting security policy enforcement.
• Monitor Aruba ClearPass and PAAM platforms, investigate operational issues and coordinate remediation to maintain service availability and access security.
• Support Vulnerability Assessment and Penetration Testing (VAPT) remediation activities, including tracking findings, coordinating corrective actions and performing remediation verification.
• Conduct quarterly security and compliance checks and support IM8 compliance governance to ensure adherence to applicable security standards, policies and requirements.
• Perform incident, problem and change management activities, including incident investigation, escalation, root cause analysis and implementation of corrective and preventive actions.
• Support patch management, configuration management and security hardening activities to maintain infrastructure integrity and reduce security risks.
• Conduct testing and verification of infrastructure changes, patches, configurations and security remediation activities to ensure operational readiness and minimise service disruptions.
• Coordinate incident response and resolution with relevant stakeholders, technical teams and service providers in accordance with established procedures and service-level agreements (SLAs).
• Maintain accurate operational documentation, incident records, configuration baselines, standard operating procedures (SOPs) and knowledge base articles.
• Support day-to-day cybersecurity Business-as-Usual (BAU) operations, ensuring timely resolution of operational issues and adherence to established security policies, operational procedures and service-level requirements.

Requirements:

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent work experience.
• 3+ years of proven experience in cybersecurity or information security roles, with a focus on L2 support or similar responsibilities. Minimally 1-2 years of experience in supporting mission critical systems with a stringent SLA of 99.9%
• Strong understanding of security protocols, TCP/IP, network security, operating systems (Linux, Windows), and cloud security concepts. Well-versed in IT Service Management (ITSM) standards, processes, guidelines and best practices is an advantage.
• Hands-on experience with security tools such as SIEM, firewalls, vulnerability scanners (e.g., Tenable), and incident response platforms.
• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or CISSP are highly valued.
• Strong analytical thinking, problem-solving skills, attention to detail, and excellent communication and collaboration skills.

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.