IT Security Engineer

Company Overview

Cold Storage and Giant are two of Singapore’s most trusted grocery brands. Cold Storage offers fresh produce, meat, seafood, and international products through multiple banners. Giant operates over 35 stores island-wide, providing affordable groceries and household essentials.

Job Summary

We are seeking a skilled and proactive IT Security Engineer to implement, maintain, and enhance our organisation’s information security posture by collaborating with cross-functional teams to embed security across all systems and processes.

Responsibilities

Analyse security threats and develop optimised security policies to strengthen organisational defenses

Detect, investigate, and respond to cyber threats within the M365 ecosystem, including email, Teams, SharePoint, and OneDrive

Collaborate with IT Infrastructure and Network teams to configure servers, networks, and cloud environments securely

Partner with End User Support to enhance endpoint security, user awareness, and access control measures

Monitor and investigate security incidents, escalating issues as necessary to ensure timely resolution

Perform regular vulnerability assessments and recommend remediation actions, following up to verify implementation

Develop and maintain security documentation such as standards, procedures, and technical guidelines to support compliance and operational consistency

Assist in achieving compliance with security frameworks, regulations, and industry best practices (e.g., ISO 27001, NIST)

Continuously evaluate emerging threats and recommend new tools, technologies, and processes to mitigate risks effectively

Maintain data sources for log monitoring systems and develop detection and alerting rules to improve threat visibility

Preferred competencies and qualifications

Strong analytical and problem-solving skills to investigate and resolve security vulnerabilities effectively

Excellent written and verbal communication skills to convey technical information clearly to non-technical stakeholders

Knowledge of cybersecurity threats, vulnerabilities, and exploit methods to anticipate and defend against attacks

Understanding of cloud computing platforms and security considerations (GCP, Azure, AWS) to secure cloud environments

Experience with security configurations, patch management, certification management, firmware updates, firewall rules, and endpoint security agent management

3-5 years of hands‑on experience in IT security operations to manage and respond to security challenges

Ability to collaborate effectively in a fast‑paced environment while maintaining confidentiality, integrity, and availability of information assets

Hands‑on experience with SIEM, EDR, XDR, UEBA, and SOAR tools to enhance security monitoring and response capabilities

Bonus Skillsets

Knowledge of the MITRE ATT&CK framework to understand adversary tactics and techniques

Familiarity with the ISO27001 framework to support information security management

Understanding of Zero Trust architecture principles to strengthen security posture

Required competencies and certifications

CompTIA Security+, ISC2 Certified in Cybersecurity, or GIAC certifications to demonstrate foundational cybersecurity expertise

Preferred competencies and certifications

Relevant certifications such as CISM or CSSP are advantageous but not mandatory

#J-18808-Ljbffr