Cybersecurity Engineer (Public Sector)

1-year contract, renewable

Hybrid work arrangement

Government project

About the Role

This role applies foundational security principles to real-world engineering challenges, executing security tasks with growing independence. Depending on area of focus, responsibilities may span improving security implementations, automating security processes, reviewing secure code and design patterns, and evaluating new cybersecurity tools. You'll work closely with security and product teams to support threat modelling, implement security controls, and secure government systems.

Key Responsibilities

Cybersecurity Operations

Perform routine reporting and dashboarding, using automation to improve efficiency

Support review of VAPT findings and contribute to remediation planning

Validate security vulnerabilities and findings from assessment reports

Refine incident response playbooks

Contribute to compliance documentation and evidence collection

Assist with implementing security controls and operational security tasks

Participate in threat modelling and identify security requirements from policy

Perform periodic IAM role reviews to uphold least-privilege access

Security Architecture & Engineering

Apply security standards and controls across CI/CD pipelines, Kubernetes platforms, and cloud environments

Cyber Defence & Incident Response

Support incident response activities, escalating complex issues appropriately

Perform alert triage and assist investigations across security monitoring platforms

Contribute to refining detection rules, playbooks, and response runbooks

Support guided threat hunting to identify potential indicators of compromise

Product Engineering

Deliver POCs or features spanning multiple components, balancing security, performance, and maintainability

Use code and cloud security analysis tools, remediating findings appropriately

Recommend improvements to product security, performance, and team efficiency

Emerging Technology Research

Test new tools in lab environments and summarise findings

Contribute to POC initiatives with defined objectives and outcomes

Collaboration & Growth

Collaborate with peers and stakeholders to execute tasks effectively

Share knowledge, resources, and lessons learnt openly

Suggest improvements to enhance team effectiveness

What We're Looking For

Technical Skills

Foundational knowledge of security architecture, secure system design, and threat modelling

Ability to perform guided vulnerability validation and support remediation

Familiarity with securing CI/CD platforms, Kubernetes environments, and cross-cutting platform products

Exposure to developer-centric tools, including agentic AI workflows and coding assistants

Familiarity with SIEM platforms, EDR tools, and cloud-native security monitoring

Ability to follow and contribute to detection logic, incident response playbooks, and threat hunting processes

Scripting/automation skills (e.g. Python, Bash) for security tooling and workflow automation

Understanding of IAM, secrets management, and zero trust principles

Behavioural Fit

Works independently with minimal supervision

Proactively identifies and addresses issues, knowing when to escalate

Adapts effectively to changing priorities

Collaborates constructively with peers and stakeholders

Contributes positively through knowledge sharing and openness

Education & Experience

Degree in Infocomm Security, Computer Science, Computer/Electronics Engineering, or Information Technology

Minimum 2 years of relevant experience, or demonstrated potential backed by a strong track record

Certifications (Desirable)

OSCP, CISSP, or other relevant cybersecurity certifications

/Ref: T24-238