{"id":1241572,"url":"https://alion.io/job/ocbc-workspace-security-engineer-avpvp","title":"Workspace Security Engineer (AVP/VP)","company":{"id":4187,"name":"OCBC Bank","domain":"ocbc.com","url":"https://alion.io/company/ocbc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":123,"ghost_share":0,"stale_share":0.772,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":73000,"max_usd":157000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-09-24T00:00:00Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-18T09:07:44Z","board_verified":true,"closed_at":null,"days_open":25,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":25},"description":"WHO WE ARE:\nAs Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.\nToday, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.\nWe invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.\nYour Opportunity Starts Here.\nWhy Join\nProtecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering - Risk professional, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.\nHow you succeed\nWe are looking for a hands-on Workspace Security Engineer to strengthen our security engineering capability across Microsoft endpoint and modern workplace technologies. This role is suited to an experienced EUC or modern workplace engineer who understands the Microsoft ecosystem and is ready to take deeper ownership of security policy engineering, solution design, automation, and control assurance.\nThe successful candidate will help shape secure endpoint solutions, translate security requirements into practical configurations, evaluate new capabilities, and develop the standards and monitoring needed to protect enterprise user-computing environments. The role offers the opportunity to grow from a strong Microsoft and EUC foundation into broader workspace security engineering ownership.\nWhat you do\nEngineer Microsoft endpoint and modern workplace security policies, configurations, and technical controls.\n Contribute to the workspace security solution roadmap and the continued evolution of endpoint security capabilities.\n Translate security requirements and control gaps into practical policy designs, configuration changes, and engineering solutions.\nConfigure and enhance security capabilities across Microsoft Intune, Microsoft 365, Entra ID, Conditional Access, device compliance, and endpoint-management services.\nEngineer and improve security baselines, endpoint protection, attack-surface reduction, application control, device control, vulnerability remediation, and endpoint telemetry.\nEvaluate new Microsoft security features and develop recommendations, test plans, and implementation approaches for their adoption.\nDefine security configuration standards, reference settings, technical guardrails, and exception requirements.\nDevelop monitoring and reporting capabilities for policy deployment, configuration compliance, control coverage, exceptions, and security effectiveness.\nUse PowerShell, Microsoft Graph APIs, scripting, and automation to improve configuration management, validation, evidence collection, and reporting.\nInvestigate complex endpoint-security issues, policy conflicts, configuration weaknesses, and control failures, and develop sustainable remediation.\nProduce clear engineering documentation, test evidence, implementation guidance, and operating procedures.\nCollaborate with stakeholders from different functions to deliver effective workspace security controls.\nContribute technical knowledge, reusable engineering practices, and continuous improvement across the wider cybersecurity engineering team.\nWho you are\nApproximately 8 or more years of relevant experience in EUC, endpoint engineering, modern workplace, infrastructure, or cybersecurity within enterprise environments.\nStrong hands-on experience with Microsoft Intune, Microsoft 365, Entra ID or Azure AD, Active Directory, Group Policy, device compliance, and Conditional Access.\nPractical experience designing, configuring, testing, or modernising endpoint policies, including GPO-to-Intune migration or large-scale device-management initiatives.\nGood understanding of endpoint security baselines, identity-driven access, vulnerability remediation, patching, application deployment, device compliance, and secure configuration management.\nAbility to analyse security requirements or control gaps and convert them into structured technical solutions and implementation plans.\nExperience assessing platform capabilities, identifying limitations, and recommending practical improvements or new feature adoption.\nExperience with PowerShell, Microsoft Graph APIs, scripting, workflow automation, or configuration-as-code practices.\nStrong troubleshooting, analytical, documentation, communication, and stakeholder-management skills.\nAbility to work effectively across security and technology teams in a complex enterprise environment.\nCuriosity and willingness to build deeper expertise across Microsoft endpoint security, advanced control engineering, telemetry, and automation.\nPreferred experience\nMicrosoft certifications in Azure, Microsoft 365, Security, Compliance and Identity, Endpoint Administration, or related disciplines.\nExposure to Microsoft endpoint protection, application control, attack-surface reduction, security monitoring, vulnerability management, or privileged-workstation security.\nExperience supporting Windows and mobile-device security; exposure to macOS security is beneficial.\nExperience developing security dashboards, control metrics, compliance reporting, or configuration-assurance automation.\nExperience in financial services, regulated industries, or other large and high-availability environments.\nExperience applying AI-assisted tools or automation to technical assessment, documentation, workflow optimisation, or engineering delivery.\nWho we are\nAs Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.\nToday, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation.\nBut for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.\nWe invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.\nWhat we offer:\nCompetitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.","description_format":"text","description_chars":7341,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Wealth Management & Financial Advisors","Endpoint Security"],"lifecycle":[{"event":"open","at":"2026-09-25T16:46:41Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.624,"p_room":0.9,"age_days":25,"expected_fill_days":45,"reasons":["conf:20","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/ocbc-workspace-security-engineer-avpvp","json_url":"https://alion.io/job/ocbc-workspace-security-engineer-avpvp.json","meta":{"generated_at":"2026-10-19T10:48:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7569,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4187},"rest":"https://alion.io/mcp/rest/get_company?id=4187"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Focbc-workspace-security-engineer-avpvp"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Focbc-workspace-security-engineer-avpvp"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Focbc-workspace-security-engineer-avpvp"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ocbc-workspace-security-engineer-avpvp\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Focbc-workspace-security-engineer-avpvp"}]}