Senior Security Engineer

About the RoleThis role is accountable for building and operating the platforms that underpin ANEXT Bank's security posture, while providing day-to-day operational support to Platform Security Operations. You will design, deploy, and maintain secure infrastructure, applications, and cloud environments, and work hand-in-hand with the SOC, IT, DevOps, and business teams to detect, protect, and respond to emerging threats across the Bank.

Key Responsibilities

Platform EngineeringDesign, build, and maintain stable, secure platforms across the Bank's infrastructure, applications, and cloud environmentsEngineer and automate platform components to enable secure, reliable, and scalable service deliveryImplement and manage platform security controls across network, endpoint, identity, and application layersSupport secure configuration management and hardening initiatives (e.g., CIS Benchmarks)Evaluate and recommend security technologies and platform improvements to address emerging threatsEnsure platforms are designed and maintained to meet regulatory requirements (e.g., MAS TRM, PDPA)Platform Security Operations SupportSupport the monitoring, response, and resolution of security alerts, incidents, and threats across the Bank's platformsAssist with triage, investigation, and escalation of security incidents in coordination with the SOC and IT teamsSupport the maintenance and tuning of security tools (SIEM, EDR, WAF, vulnerability scanners, etc.) for optimal detection and responseProvide Level 2 support for platform-related security and operational issuesAssist with security assessments, vulnerability scans, and penetration testing coordinationPolicy & GovernanceSupport the development, review, and update of cybersecurity policies, standards, and procedures aligned with regulatory requirements (e.g., MAS TRM, PDPA)Conduct policy compliance assessments and report gaps to relevant stakeholdersMaintain audit-ready documentation for audit and regulatory examinationsSupport risk assessment activities and maintain the risk registerCoordinate with internal audit and external regulators during assessmentsAwareness & CollaborationDeliver security awareness support to staff on policies, threats, and best practicesCollaborate with IT, DevOps, and business teams to embed security into processesAct as the platform security point of contact for operational queries and escalations

Requirements

Bachelor's degree in Computer Science, Information Security, or related field8+ years of experience in cybersecurity, with at least 2 years in a financial services or regulated environmentRelevant certifications (e.g., CISSP, CISM, CEH, GSEC, Security+, CCSP, OSCP)Hands-on experience with security operations (SIEM, SOAR, incident response)Familiarity with cloud security and containerised environmentsExperience implementing and maintaining security policies in a regulated industryKnowledge of vulnerability management and patching processesUnderstanding of network security, identity & access management, and endpoint protectionCompetenciesAnalytical Thinking: Ability to assess complex security scenarios and prioritise risksCommunication: Clear written and verbal communication for technical and non-technical audiencesAttention to Detail: Rigorous approach to documentation, compliance, and operational accuracyCollaboration: Works effectively across teams and builds strong stakeholder relationshipsAdaptability: Thrives in a fast-paced digital bank environment with evolving prioritiesPreferred QualificationsExperience in a digital bank, fintech, or start-up environmentKnowledge of Singapore regulatory requirements (MAS, PDPA)Hands-on experience with DevSecOps practices and CI/CD security integrationFamiliarity with AI/ML security considerations and emerging technology risks