Job Description

Singapore, Singapore

Company: Singtel Group

At Singtel, we believe in the strength of a vibrant, diverse and inclusive workforce where backgrounds, perspectives and life experiences of our people help us innovate and create strong connections with our customers. We strive to ensure all our people practices are non-discriminatory and provide a fair, performance-based work culture that is diverse, inclusive and collaborative.

Join us and experience what it\'s like to be with an Employer of Choice*. Together, let\'s create a brighter digital future for all. *Awarded at the HR Fest Awards 2020.

We are seeking a skilled and motivated Security Engineer to join our team! As a Security Engineer, you will be responsible for developing, implementing, and maintaining SIEM and SOAR solutions to support various business processes. This includes assisting the Cyber Delivery Managers with customer deliverable delivery.

This position is open to both junior and experienced candidates. Junior candidates should have relevant coursework or internships, while experienced candidates should have a proven track record of success in a security engineering role.

This job description is not exhaustive and may be revised from time to time as necessary to reflect changes in the role or the organization.

Responsibilities:

Security Information and Event Management (SIEM)

• Develop and maintain use cases and processes that enable the detection, prevention, and response to security incidents.
• Build, configure, and deploy SIEM solution and ensure devices are onboarded correctly
• Build, configure, and generate monthly security report on specifically designated customer projects
• Build and develop custom parsers, use cases, rule sets
• Work with Cyber Delivery Manager on specifically designated customer projects
• Maintain and upkeep existing SIEM infrastructure
• Support SOC operations and requests
• Support change requests, change management, break/fix issues pertaining to SIEM
• Decommissioning of log sources as required
• Oversee and manage upgrades to ensure minimum impact to operations (24/7)

Security Orchestration, Automation and Response (SOAR)

• Design and review security use cases that align with business requirements and industry best practices.
• Assess, design, and improve SOC processes and workflows with a focus on integrating automation through tools and technologies
• Implement new automation and ensure continued compatibility with existing detection and response tools
• Design custom use cases, perform onboarding to SOAR platform and UAT
• Deploy and configure publisher and remote agents
• Build and develop custom integrations, playbooks as part of the automation process with other Cyber Security solutions
• Support and maintenance, troubleshoot, optimization of the SOAR platform

Requirements:

• 0 to 3 years of experience and have relevant coursework or internships, while experienced candidates should have a proven track record of success in a security engineering role.
• Have Cyber Security mindset and familiar with Cyber Security threats and happenings.
• Experience in implementation and support of any major SIEM platform and developing content for detection.
• Experience in implementation and support of any major SOAR platform and developing playbooks for automation.
• Experience with Python scripting language for automation.
• Experience with Network Security Architecture Design.
• Experience with TCP/IP Networking Configuration & Troubleshooting.
• Experience with Windows / Unix / Linux Operating System Configuration & Troubleshooting.
• Experience with Firewall Policy Design & Management.
• Understanding of other security solutions like EDR, DLP, PIM
• Excellent analytical thinking and problem-solving skills.
• Strong oral (phone) and written (email) communication skills.
• Work under pressure with tight schedules and aggressive rollout plans.
• Self-managed and team oriented.
• Deadline and detail oriented.
• Relevant certifications such as CISSP, CEH, or Security+

Singtel