IT Security Engineer

Location: SINGAPORE, Singapore Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust. In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress. JOB OBJECTIVE CPS Asia provides a range of cybersecurity services and solutions to our regional clients with a strong focus on Operational Technology. Our ambition is to scale up our existing business and increase our footprint in the region with a refreshed strategy and mandate to leverage our global capability and win new business in our core markets. We are actively seeking a IT Security Engineer to take a leading role in design, development, and implementation of IT/OT cybersecurity solutions within our existing install base and external customers. The role will require someone who is a problem solver, determined and enthusiastic. They will bring experience of implementing a wide variety of cybersecurity products and solutions within large complex system development. They will have the ability to apply cybersecurity principles and best practises to organisational requirements and be able to identify and remediate critical infrastructure systems that were designed without system security considerations. The successful Candidate will enjoy a rewarding role full of new challenges and be part of a company that provides highly complex solutions in the most critical operational environments where robust safety and resilience standards are applied. ROLES & RESPONSIBILITIES • Design, develop, and implement cybersecurity solutions that meet customer and regulatory requirements. • Evaluate and integrate Commercial Off-The-Shelf (COTS) cybersecurity products into system architectures. • Ensure secure system design considering access control, authentication mechanisms, encryption, and compliance standards. • Develop security architectures addressing multilevel security, high availability, and sensitive data handling • Collaborate with engineering teams to integrate cybersecurity components into larger systems and platforms. • Build, configure, and test integrated systems to validate functionality and security performance. • Support test and evaluation activities including system validation, penetration testing, and vulnerability assessments. • Identify and troubleshoot technical issues arising during integration and testing phases. • Provide technical support and guidance during system deployment and operational phases. • Create implementation plans, standard operating procedures, and maintenance documentation. • Train customers and operational teams on cybersecurity features and system management best practices. • Work closely with project managers, delivery teams, subcontractors, and partners to ensure timely and quality delivery. • Manage customer interactions as the point of contact for cybersecurity inquiries and support. • Participate in risk and opportunity management throughout the project lifecycle. • Maintain clear and detailed technical documentation and status reports. WORK EXPERIENCE REQUIREMENTS • Minimum of 1 year of experience in Helpdesk/Support Roles and/or System Administrator/Integrator. • Minimum of 5 - 7 years’ of experience in cybersecurity engineering • Subject Matter Expert in any cybersecurity domain/products/vendors • Experience in delivery for customers from Aviation, Government, Defence sectors • Experience in conducting a cybersecurity risk management exercise • Experience in administrating and troubleshoot Windows and/or Linux Operating Systems • Familiar with the following concepts and technology • Cybersecurity concepts, technologies and terminology • Computer networking concepts and protocols, and network security methodologies, such as TCP/IP • Cybersecurity and other relevant domains’ standards, regulations, code of practices such as ISO 27001, IM8 and CCoP • Verification, Validation and Qualification of Solution • Information Technology Service Management (ITSM) • Configuration Management • Secure Software Development Lifecycle • Operational Technology/Critical Information Infrastructure/Cyber-Physical Technology • Development of personal projects and/or homelabs, including non-cyberscurity nature, is a plus factor. QUALIFICATION, CERTIFICATION & EDUCATIONAL REQUIREMENTS Mandatory (One or more of the following) • Degree in Information Security (preferred) or Information Technology or Computer Science • Certified Information Systems Security Professional (CISSP), or • Certified Information Security Manager (CISM) • Systems Security Certified Practitioner (SSCP) • Security+ Preferred • Information Systems Security Architecture Professional (CISSP-ISSAP) PREFERRED SKILLS Technical Skills: • Strong knowledge of cybersecurity principles, frameworks, and best practices • Proficiency with Identity and Access Management (IAM), Privileged Access Management (PAM), Privileged Identity Management (PIM), and Multi-Factor Authentication (MFA) solutions • Expertise in network security, network monitoring, and intrusion detection/prevention systems • Familiarity with Public Key Infrastructure (PKI), Certificate Authority (CA) operations, and digital certificates • Practical understanding of backup, r…