Total 2 job vacancies by Deeeplabs Pte. Ltd.

This is a full-time role for a Data Engineer. The Data Engineer will be responsible for designing and implementing scalable data pipelines, developing and maintaining data models, performing Extract, Transform, Load (ETL/ELT) processes, and managing modern data warehousing and analytics solutions—primarily utilizing Microsoft Fabric and Databricks. The role also includes building and operationalizing lakehouse architectures, ensuring data governance and security best practices, and analyzing complex datasets to support business decision-making. Collaboration with cross-functional teams to deliver high-quality data solutions is essential. 

Qualifications 

• Strong proficiency in Data Engineering, Data Modelling, and building Lakehouse/Data Warehouse solutions 

• Demonstrates strong proficiency in Medallion architecture and metadata-driven concepts. 

• Hands-on experience with Microsoft Fabric (Data Factory, Lakehouse, Warehouse, OneLake, Data Activator, Power BI integration) 

• Hands-on with Databricks (Spark, Delta Lake, DLT pipelines, Unity Catalog) 

• Proficiency in ETL/ELT development and orchestration within Azure ecosystem 

• Strong skills in Data Analytics using SQL, Python or PySpark 

• Knowledge of Cloud-native data platforms including Azure Data Lake, Azure Synapse, Azure Data Factory, Azure Storage, etc. 

• Understanding of data governance, security, and CI/CD best practices for cloud data platforms 

• Strong problem-solving and analytical skills 

• Ability to work independently and remotely in a fast-paced environment 

• Bachelor’s degree in computer science, Information Technology, or related field 

About the Role

We are looking for a Senior Cybersecurity Engineer to work across two fronts: protecting our own systems, data, and customers, and delivering security projects for our clients. You will design and build security controls across multi-cloud environments (AWS and Azure), lead incident response, and partner with engineering teams to make security a built-in part of how software ships. On the client side, you will scope and deliver hands-on security engagements, advise customer stakeholders, and represent us as a trusted technical expert.

This is a hands-on technical role that balances internal security ownership with customer-facing project delivery, so comfort working directly with clients is essential.

What You'll Do

Internal security (our own environment)

• Design, implement, and maintain security controls across our AWS and Azure environments, covering identity (IAM, Azure AD/Entra ID), networking, encryption, logging, and workload protection.
• Build and enforce cloud security guardrails using native services (AWS Security Hub, GuardDuty, Azure Defender, Microsoft Sentinel) and cloud security posture management (CSPM) tooling.
• Lead detection and response efforts, including triage, investigation, containment, and post-incident review.
• Build and tune detection logic, alerting pipelines, and automation to reduce manual toil and improve mean time to detect and respond.
• Run and improve vulnerability management: scanning, prioritization, remediation tracking, and reporting.
• Develop and maintain security architecture standards, runbooks, and documentation.

Client project delivery

• Scope, plan, and deliver hands-on security engagements for customers (cloud security reviews, architecture design, hardening, assessments, and remediation).
• Serve as the technical lead and primary point of contact on client projects, translating requirements into deliverables.
• Advise customer stakeholders (engineers through executives) on risk, remediation, and security best practices.
• Conduct or coordinate penetration tests, configuration reviews, and red team exercises for clients, then drive remediation of findings.
• Produce clear, professional client-facing deliverables: assessment reports, architecture diagrams, and remediation roadmaps.
• Support compliance and audit work for clients, with a focus on Singapore government and regulated-sector frameworks (IM8, GCC/GCC+, MTCS, CCoP, PDPA, MAS TRM where relevant), alongside international standards (SOC 2, ISO 27001).

Cross-cutting

• Partner with software and infrastructure teams (internal and client) to embed security into the SDLC (threat modeling, secure code review, CI/CD security gates).
• Evaluate, deploy, and manage security tooling (SIEM, EDR, IDS/IPS, CSPM, secrets management, identity and access).
• Mentor junior engineers and raise security awareness across teams.

What We're Looking For

Required

• 5+ years of experience in cybersecurity, security engineering, or a closely related field.
• Strong knowledge of network security, operating system internals (Linux and Windows), and common attack and defense techniques.
• Deep hands-on experience securing AWS and Azure at scale: identity and access management, network segmentation (VPC/VNet, security groups, NSGs), key management, and workload and data protection.
• Proficiency with at least one scripting or programming language (Python, Go, Bash, or similar) for automation and tooling.
• Experience with detection and response: SIEM platforms, EDR tools, and log analysis at scale.
• Solid grasp of common frameworks and standards (MITRE ATT&CK, NIST CSF, OWASP Top 10, CIS Benchmarks).
• Working knowledge of Singapore government security and compliance requirements, including IM8 (Instruction Manual on ICT & SS Management, managed by GovTech), the Government on Commercial Cloud (GCC and GCC+) guardrails for AWS and Azure, MTCS (SS 584), the Cybersecurity Act and Cybersecurity Code of Practice (CCoP) for Critical Information Infrastructure, and the Personal Data Protection Act (PDPA).
• Strong analytical skills and the judgment to prioritize risk in a fast-moving environment.
• Clear written and verbal communication, with the ability to explain technical risk to non-technical stakeholders.
• Comfort working directly with clients: scoping engagements, managing expectations, and presenting findings to customer stakeholders.
• Ability to manage multiple concurrent projects and shift between internal work and client delivery.

Nice to Have

• Industry certifications (OSCP, GIAC/SANS, CISSP, CCSP, or equivalent), including cloud security certs (AWS Certified Security Specialty, Azure Security Engineer Associate AZ-500).
• Experience with infrastructure as code (Terraform, CloudFormation) and policy as code.
• Background in application security, threat modeling, or secure software development.
• Familiarity with container and Kubernetes security.
• Experience delivering projects under Singapore Government on Commercial Cloud (GCC/GCC+) or for CSA-regulated CII owners.
• Familiarity with CSA Cyber Essentials and Cyber Trust certification marks.
• Eligibility for Singapore government security clearance, where required for public-sector engagements.
• Hands-on penetration testing across multiple scopes: web applications, APIs, external and internal network/infrastructure, cloud configuration reviews (AWS and Azure), and mobile or wireless where applicable.
• Familiarity with common offensive tooling (Burp Suite, Nmap, Metasploit, Cobalt Strike, cloud-native testing tools) and structured methodologies (OWASP WSTG, PTES, NIST SP 800-115).
• Prior experience in a consulting, professional services, or managed security services (MSSP) environment.
• Prior experience leading incident response for production systems.
• Experience operating in a regulated or compliance-heavy environment.

What Success Looks Like

• In your first 90 days: you understand our environment, threat landscape, and tooling, and you have closed or improved several high-priority gaps.
• Within 6 months: you own key areas of our detection and response program and have measurably reduced risk in those areas.
• Within a year: you are a trusted technical leader who has shaped our security architecture and lifted the capability of the whole team.