Lead, Security Tools Engineering & Operations

Role Summary

We are seeking an experienced Lead, Security Tools Engineering & Operations to drive the stability, optimisation, and continuous improvement of our enterprise security platforms. This role is responsible for ensuring that all deployed cybersecurity tools are fully operational, optimally configured, and consistently delivering maximum security value.

The successful candidate will lead the engineering and operational management of security platforms, ensuring they remain effective, modern, and aligned with evolving business and cybersecurity requirements. You will proactively optimise platform capabilities, enable advanced features, and drive continuous improvements to strengthen the organisation's security posture.

This role requires a strong technical background in cybersecurity platforms, an engineering mindset focused on operational excellence, and the ability to engage senior stakeholders, manage vendors, and lead cross-functional teams across onshore and offshore locations.

Key Responsibilities

Security Platform Management & Optimisation

• Monitor, maintain, tune, and optimise enterprise security platforms, including EDR, XDR, SIEM, SOAR, Vulnerability Management, IAM, Cloud Security, and Email Security solutions.
• Ensure all relevant platform features, detection rules, integrations, automation capabilities, and security controls are fully enabled and operating effectively.
• Perform regular health checks to validate data ingestion, sensor coverage, platform availability, and overall system performance.
• Identify capability gaps and operational inefficiencies, recommending and implementing improvements to maximise platform effectiveness.
• Drive continuous improvements to operational processes, documentation, workflows, and escalation procedures.
• Serve as the escalation point for critical production and platform-related incidents.
• Support governance, audit, compliance, and regulatory initiatives relating to security platforms.
• Oversee managed security service providers (MSSPs), reviewing deliverables, service quality, and SLA/KPI performance.

Security Engineering & Continuous Improvement

• Keep abreast of vendor product releases, emerging features, and industry best practices, ensuring relevant capabilities are adopted.
• Develop and execute security platform enhancement roadmaps to maintain a modern and resilient cybersecurity environment.
• Conduct periodic capability reviews to ensure platforms continue to meet business, regulatory, and evolving threat landscape requirements.
• Drive platform automation and operational efficiencies through engineering best practices.

Integration & Platform Engineering

• Partner with Infrastructure, Cloud, Engineering, Network, and SOC teams to ensure seamless deployment, maintenance, and integration of security sensors, agents, connectors, and APIs.
• Support implementation of new security technologies and enhancements across the enterprise.

Vendor & Stakeholder Management

• Act as the technical owner for assigned security platforms.
• Manage vendor relationships, coordinate product enhancements, and oversee technical issue resolution.
• Collaborate with internal stakeholders to ensure security platforms effectively support threat detection, incident response, compliance, audit, and risk management requirements.
• Lead and mentor a geographically distributed team across onshore and offshore locations.
• Present operational updates, risks, and strategic recommendations to senior management.

Requirements

• 10-15 years of relevant experience, preferably within financial services or asset management, including at least 8 years specialising in cybersecurity platforms.
• Strong understanding of information security principles, governance, and security operations.
• Experience with MAS regulatory requirements, including Technology Risk Management (TRM), Cyber Hygiene, Outsourcing Guidelines, and related regulations.
• Hands-on expertise across enterprise security technologies, including:Endpoint Detection & Response (EDR/XDR)SIEM & SOARVulnerability ManagementIdentity & Access Management (IAM)Cloud SecurityEmail Security
• Proven experience optimising security tools, tuning detection rules, configuring integrations, and improving platform performance.
• Strong leadership experience managing technical teams and third-party vendors.
• Excellent stakeholder management and communication skills, with the ability to engage technical teams and senior business leaders.
• Self-motivated, analytical, detail-oriented, and capable of thriving in a fast-paced environment.

Mandatory Skills

• Cybersecurity service delivery
• Security platform engineering and operations
• Security tools/platform management
• Security Operations Centre (SOC) operations
• Security incident management
• Vulnerability management
• Identity & Access Management (IAM)
• Risk management
• Stakeholder management
• Vendor management
• SLA/KPI governance
• Operational governance
• Team leadership

Preferred Skills

• Cloud Security
• Privileged Access Management (PAM)
• Governance, Risk & Compliance (GRC)
• SIEM & SOAR
• Endpoint Security
• Network Security
• Threat Intelligence
• Security Architecture
• Audit & Regulatory Compliance
• Data Protection
• Third-Party Risk Management
• Business Continuity
• Project & Programme Management

Preferred Certifications

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• Microsoft Security Certifications
• Equivalent industry-recognised cybersecurity certifications

Interested candidates may apply directly with an updatedresume. Only shortlisted candidates will be notified. Information provided inthis advertisement is for recruitment purposes only.

By submitting your personal data and/or resume, you giveconsent to collection, use and disclosure of your personal data and/or resumeby the company (or its agent) for the purpose of the processing andadministration by the company relating to this job application.

https://www.cgpgroup.com/privacy-policy

Cornerstone Global Partners (EA LicenseNumber: 19C9859) is an affirmative equal-opportunity employer and recruitmentfirm. We evaluate qualified applicants without regard to race, colour,religion, creed, gender, sexual orientation, gender identity, maritalstatus, national origin, age, veteran status, disability, or any otherprotected class.

Eugene Then
[Confidential Information]

EA Registration Number: R22104742.

Cornerstone Global Partners Pte Ltd (EA License:19C9859)