Senior Security Engineer

About ANEXT BankWe’re on a mission to make financial services accessible and effortless for SMEs. As one of Singapore’s digital wholesale banks fully regulated by MAS, we’re committed to continuous innovation to bring about simpler, safer and more rewarding financial services. #bringingaboutwhatsnextAbout the RoleThe Security Engineer will support the CISO in executing day-to-day cybersecurity operations and contribute to the development, implementation, and governance of the Bank's cybersecurity policy framework. This role plays a critical part in maintaining the Bank's security posture, ensuring regulatory compliance, and enabling secure growth of digital banking services.This is an individual contributor role who will utilise the experience in a regulator environment to navigate a fast-paced digital bank with evolving priorities.Job ResponsibilitiesSecurity Operations (40%)Monitor and respond to security alerts, incidents, and threats across the Bank's infrastructure, applications, and cloud environmentsConduct triage, investigation, and escalation of security incidents in coordination with the SOC and IT teamsMaintain and tune security tools (SIEM, EDR, WAF, vulnerability scanners, etc.) for optimal detection and responsePerform regular security assessments, vulnerability scans, and penetration test coordinationSupport incident response activities as part of the on-call rotationPolicy & Governance (30%)Assist in developing, reviewing, and updating cybersecurity policies, standards, and procedures aligned with regulatory requirements (e.g., MAS TRM, PDPA)Conduct policy compliance assessments and report gaps to the CISOMaintain documentation for audit and regulatory examinationsSupport risk assessment activities and maintain the risk registerCoordinate with internal audit and external regulators during assessmentsSecurity Architecture & Engineering (20%)Review and provide security input on new projects, system changes, and cloud deploymentsImplement security controls across network, endpoint, identity, and application layersSupport secure configuration management and hardening initiatives (e.g., CIS Benchmarks)Evaluate and recommend security technologies to address emerging threatsAwareness & Collaboration (10%)Deliver security awareness training to staff on policies, threats, and best practicesCollaborate with IT, DevOps, and business teams to embed security into processesServe as a security point of contact for operational queries and escalationsRequirementsMinimum 5 years of experience in cybersecurity with at least 2 years in a critical information infrastructure environmentRelevant certifications (e.g., CISSP, CISM, CEH, GSEC, Security+, CCSP, OSCP)Must have experience in Security Operations and Policy & GovernanceHands-on experience with security operations (SIEM, SOAR, incident response)Familiarity with cloud security and containerised environmentsExperience implementing and maintaining security policies in a regulated industryKnowledge of vulnerability management and patching processesUnderstanding of network security, identity & access management, and endpoint protection