Security Engineer

As a Security Engineer at InvestaX, you'll be the technical security lead in a new position within the organization, responsible for deploying and operating our security control stack. You'll work alongside software developers and DevOps engineers to embed security deeply into our product development lifecycle, manage our vulnerability and penetration testing processes, and serve as the technical security subject matter expert across the team.

What you'll do

• Implement and operate our security stack including SAST, DAST, ZTNA, IAM, EDR, WAF, and SIEM tools alongside the technology team
• Conduct technical assessments including source code reviews, security posture reviews, purple teaming, and threat modeling
• Work with engineering teams to secure and improve CI/CD pipelines, building automation scripts and tools to enhance security operations efficiency
• Provide security guidance to the technology team to ensure security requirements are embedded throughout the product development lifecycle
• Own the vulnerability management process and provide technical guidance to other teams on risk treatment
• Manage and own the penetration testing framework and process within the organization

What you bring

• 4+ years of technical experience in IT, with at least 2 years in security engineering, DevSecOps, cloud security, or offensive security
• Hands-on experience with security solutions and tools such as WAF, CASB, ZTNA, EDR, and SIEM
• Hands-on experience with AWS security services including GuardDuty, Inspector, CloudWatch, CloudTrail, Security Hub, and IAM
• At least one of the following certifications: ISC CISSP, ISC CCSP, AWS Certified Security - Specialty, OSCP, OSEP, CRTP, or CRTE
• Hands-on experience with Infrastructure as Code tools such as Terraform, OpenTofu, or AWS Elastic Beanstalk
• Proficiency in scripting with bash or Python
• Excellent problem-solving, analytical, written, and verbal communication skills

Nice to have

• Experience integrating security testing into CI/CD pipelines
• Experience managing penetration testing frameworks and engagements
• Security architecture experience
• Previous experience in a DevOps engineering or software engineering role
• Hands-on experience with blockchain technology

About InvestaX

InvestaX is a tokenization SaaS platform enabling the issuance, trading, and custody of real-world assets. Holding a Capital Markets Services licence and Recognized Market Operator licence from the Monetary Authority of Singapore, InvestaX provides a complete RWA solution with banking integration, KYC verification, OTC trading, primary issuance, and blockchain-powered infrastructure. The company also operates IX Swap, an RWA exchange offering access to private market investments in real estate, startups, and high-growth companies through decentralized trading and DeFi solutions.