CSOC Cyber Threat Engineer | 24/7 Security Operations

NETS; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

NETS, through its subsidiary BCS, is seeking a CSOC Engineer to join the IT Security Team in Singapore. You will monitor, detect, investigate and respond to cybersecurity threats across the organization, operating 24/7 security controls and incident workflows.

You will optimize detection capabilities, automate security operations with SIEM/SOAR, support forensic investigations, and provide Tier 2/3 incident support in a fast-paced environment.

Qualifications

• Degree or Diploma in Computer Science, Computer Engineering, or Information Security.
• At least 6 years of experience in a SOC, CERT/CIRT, or similar incident response environment.
• Strong hands-on experience with SIEM/SOAR platforms and security controls.
• Knowledge of MAS TRMG, Cyber Hygiene Notice, and Cybersecurity Code of Practice (CCoP).
• Proficiency in Windows, UNIX, Linux, and understanding of network architectures.
• Experience in scripting (Python, Bash, PowerShell) and cloud environments is an advantage.
• Good communication and reporting skills.

Responsibilities

• Operate and manage cyber defence tools to monitor system activities, identify threats and vulnerabilities.
• Review and enhance monitoring use cases for effectiveness and coverage.
• Develop and implement improvements, including SIEM/SOAR tuning and automation.
• Identify security weaknesses and coordinate remediation with IT teams.
• Perform proactive threat hunting for IOCs and TTPs.
• Support 24x7 security operations with Tier 2/3 incident escalations, investigation and reporting.
• Assist in digital forensic investigations and evidence analysis.

Job description

NETS, through its subsidiary BCS, is seeking a CSOC Engineer to join the IT Security Team in Singapore. You will monitor, detect, investigate and respond to cybersecurity threats across the organization, operating 24/7 security controls and incident workflows.

You will optimize detection capabilities, automate security operations with SIEM/SOAR, support forensic investigations, and provide Tier 2/3 incident support in a fast-paced environment.