Senior SIEM Engineer - Platform & Detection Architect

Randstad Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Randstad Malaysia is seeking a Senior SIEM Engineer with strong hands‑on experience in SIEM platform engineering, security monitoring and detection engineering. This platform‑focused cybersecurity engineering role will own enterprise SIEM architecture, performance, scalability, reliability, and continuous optimization across on‑premises, cloud or hybrid environments.

You will collaborate with SOC, Incident Response, Threat Intelligence, Cloud and Infrastructure teams to ensure reliable security

Qualifications

• 8+ years hands-on experience in SIEM engineering or large-scale security monitoring.
• Proven ability to design, implement and operate enterprise SIEM platforms.
• Experience supporting 24x7 SOC environments with high-volume log ingestion.
• Strong knowledge of SIEM architecture, performance tuning and capacity planning.
• Hands-on detection engineering and knowledge of MITRE ATT&CK.

Responsibilities

• Architect, build and operate large-scale SIEM platforms across on-premises, cloud or hybrid environments.
• Design and maintain SIEM infrastructure with availability, performance, scalability and cost efficiency.
• Tune detections to improve alert quality and reduce false positives.
• Onboard log sources across cloud, endpoint, network, identity, SaaS and applications.
• Automate SIEM deployment, content management and upgrades using IaC and CI/CD.
• Mentor junior SIEM engineers and provide guidance during major security incidents.
• Collaborate with SOC, Threat Intel, Cloud and Infrastructure teams to improve detection and response workflows.

Skills

SIEM engineering

Security monitoring

Detection engineering

SOC operations

Incident response

Security analytics

Threat hunting

Education

Bachelor Degree

Tools

Splunk

Elastic Stack

Linux

Job description

Randstad Malaysia is seeking a Senior SIEM Engineer with strong hands‑on experience in SIEM platform engineering, security monitoring and detection engineering. This platform‑focused cybersecurity engineering role will own enterprise SIEM architecture, performance, scalability, reliability, and continuous optimization across on‑premises, cloud or hybrid environments.

You will collaborate with SOC, Incident Response, Threat Intelligence, Cloud and Infrastructure teams to ensure reliable security