Cybersecurity Engineer (PKI, Cryptography Experience)

Job Description

• Define cryptographic information using established standards such as Software Bill of Materials (SBOM) and Cryptography Bill of Materials (CBOM).
• Develop methodologies to discover and inventory cryptographic assets, practical approaches to capture cryptographic information, and guidance to maintain Cryptography Bill of Materials (CBOM).
• Develop representative AI, cloud, and IoT archetypes from a practitioner's perspective.
• Develop migration strategies, including risk-based prioritisation to minimise disruption to business continuity, and provide configuration and key management considerations.
• Conduct proof-of-concept activities, workshops, review, training sessions, and surveys with client to validate proposed methodologies, taxonomy, discovery approaches, archetypes, and migration guidance.
• Support methodologies and approaches with relevant research studies and validate them through hands-on activities using the test environment.
• Build and maintain a suitable test environment including the necessary tools, licences, and resources to support the project

Project Management & Client Engagement

• Manage project timelines, deliverables, and milestones independently
• Engage with clients professionally and build strong working relationships
• Collaborate with other teams within NCS to ensure project success
• Translate technical findings into practical guidance suitable for project teams

Qualifications

Essential Qualifications & Experience

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or Information Security
• Minimum 3 years of hands-on experience in managing Public Key Infrastructure (PKI)
• Strong knowledge and practical experience in cryptography
• Experience in cryptographic asset discovery and cryptographic inventory development
• Ability to develop practical cybersecurity guidance and methodologies
• Experience with security testing, VAPT, scanning, and source code review
• Due to project sensitivity, we will only consider Singapore Citizen

Soft Skills:

• Ability to work independently with minimal supervision
• Strong project management skills
• Excellent client management and stakeholder engagement abilities
• Ability to collaborate effectively with cross-functional teams within NCS
• Strong communication skills to translate technical findings into practical guidance
• Ability to facilitate training and review sessions

Technical Expertise:

• Experience with cryptography standards or frameworks
• Familiarity with AI security, cloud security architectures, or IoT security
• Experience working with government agencies or critical information infrastructure environments
• Knowledge of specific tools for cryptographic discovery or SBOM/CBOM development
• Experience in cybersecurity architecture, enterprise architecture, and system component mapping
• Understanding of cryptographic management, key management, and configuration management

Industry Experience:

• Experience in government, enterprise, or critical information infrastructure environments
• Track record of delivering cybersecurity projects in complex, regulated environments

Additional Information

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.

Scam Alert

We are aware of fraudulent job offers and impersonations of NCS recruiters. Phishing emails using convincing-looking but fake addresses are also commonly used to trick you into thinking that they come from official NCS sources.

Please note that all official communications from NCS Group will only be sent from verified corporate email addresses. Always check that the sender’s email address ends with the genuine NCS domain, @ncs.com.sg and beware of extra letters, symbols or misspellings. When in doubt, verify the sender’s identity by contacting us at [email protected].