Security and IT Operations Engineer

About Hydra X

Hydra X operates regulated market infrastructure for tokenised capital markets. Our clients include

banks, exchanges, asset managers and other financial institutions building and operating

institutional digital asset markets across Asia.

We hold licences in Singapore and other jurisdictions, and operate production systems that support

regulated financial market activity. The systems our engineers build and maintain must meet high

standards of reliability, security, auditability and operational resilience.

The Role

We are looking for an Associate Engineer to support our security and IT operations in Singapore. You

will run internal IT administration, maintain the technical control records our regulatory obligations

require, and support our infrastructure security and key management operations.

This is a hands-on role suited to an engineer early in their career who wants to build a career in

security engineering inside a regulated financial institution. You will be trained on our infrastructure,

key management procedures and audit requirements, and you will work under supervision on

anything touching production and cryptographic material. You will work with engineering teams

across Singapore, Vietnam, China and Indonesia, and with Risk, Compliance and Operations in

Singapore.

Responsibilities

• Run internal IT administration for the Singapore office, including account provisioning,

onboarding and offboarding, endpoint security and IT asset inventory.

• Administer internal systems and access controls, and prepare records for periodic access

reviews by authorised reviewers.

• Provide IT support to staff, escalating or coordinating with service providers where

appropriate.

• Collect and maintain technical control evidence for ISO 27001, SOC 2, MAS TRM-aligned

reviews and other regulatory reviews, including access records, change records and

vulnerability remediation records.

• Implement agreed remediation on systems within scope, including patching, configuration

changes and access control fixes.

• Track open remediation items, follow up with action owners and report status, and report

status for review and closure.

• Prepare security and control metrics for ISMS and other committee reporting.

• Support infrastructure security work, including patching, vulnerability remediation, secure

configuration and access control changes.

• Support security monitoring, log management and incident investigation alongside the

engineering team.

• Support cryptographic key management operations under supervision, following

documented procedures, dual control and segregation of duties.

• Maintain runbooks, operational records and supporting documentation to a standard that

withstands audit.

• Support penetration testing and specialist assessments.

Requirements

• 2 to 3 years of experience in IT operations, infrastructure support, systems administration or

a related technical role. Strong graduates with relevant internship experience will be

considered.

• Working knowledge of Linux and networking fundamentals.

• Familiarity with identity and access management concepts, including account provisioning,

permissions and access reviews.

• Some scripting ability in Python, bash or a similar language, or clear evidence of aptitude for

it.

• Careful, methodical working habits. This role involves controlled procedures that must be

followed exactly as written.

• Clear written documentation and accurate record keeping.

• Willingness to learn cryptographic key management, cloud security and regulatory

technology requirements on the job.

• Strong written and verbal English.

• Based in Singapore, and able to attend on-site infrastructure activities as required.

Good to Have

• Exposure to cloud infrastructure, preferably AWS.

• Exposure to CI/CD pipelines, infrastructure as code or configuration management tools.

• Experience working in an environment subject to external audit or regulatory inspection.

• Background in financial services, capital markets or digital asset infrastructure.

• Familiarity with key management or hardware security modules in any capacity.

• Relevant certifications such as CompTIA Security+, AWS Cloud Practitioner or Solutions

Architect Associate, or equivalent.

Skills

Onboarding, Records Management, ISO 27000, Reviewing, IT Project Administration, Account Development, SoC, Service Providers, Endpoint Security, Linux, CISSP