Cyber Automation Engineer

SINGAPORE TELECOMMUNICATIONS LIMITED; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

A leading communications technology group in Singapore is seeking individuals to join their cybersecurity teams focused on automation development. The role entails designing workflows, integrating security tools, and collaborating across teams to enhance automation processes. Candidates should possess a relevant degree, cybersecurity certifications, and strong programming skills, primarily in Python and PowerShell. Full benefits are offered, along with opportunities for ongoing training and development.

Benefits

Full suite of health and wellness benefits

Ongoing training and development programs

Internal mobility opportunities

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
• Certifications such as CISSP, CEH, or GIAC.
• Strong programming/scripting skills (Python, Bash, PowerShell).

Responsibilities

• Design, develop, and implement automation workflows to support cybersecurity operations.
• Integrate automation tools with existing security infrastructure.
• Develop playbooks for automated incident detection and response.

Skills

Automation Development

Scripting (Python, PowerShell)

Cybersecurity Knowledge

Cloud Environments (AWS, Azure)

Collaboration and Communication

Education

Bachelor’s degree in Cybersecurity, Computer Science

Tools

Ansible

Terraform

Splunk Phantom

Palo Alto Cortex XSOAR

Job description

Be a Part of Something BIG!

We create great technology that can change the future, and we're looking for people to be part of our digital and 5G journey. If you like to work in a dynamic, leading communications technology group to deliver innovations and excellence across the region, come join our digital, software engineering, data and cyber security teams!.

Apply now, and ignite our digital future together.

Make an Impact by

• Automation Development and Maintenance:Design, develop, and implement automation workflows to support cybersecurity operations (e.g., threat detection, incident response).
  Create scripts, bots, or software solutions to automate repetitive cybersecurity tasks.
  Use tools like SOAR (Security Orchestration, Automation, and Response) platforms, RPA (Robotic Process Automation), and custom scripting (e.g., Python, PowerShell).
  Automation of use case playbooks from alert trigger in SIEM to incident ticket creation in Case Management Platform
  
• Integration and Optimization:Integrate automation tools with existing security infrastructure (e.g., SIEM, firewalls, EDR, IDS/IPS).
  Optimize and troubleshoot automation workflows to ensure reliability and scalability.
  Evaluate and recommend new tools and technologies to improve automation capabilities.
  Developing SOC efficiency improvements through AI initiatives for SIEM correlation, etc
  
• Security Monitoring and Response:Develop playbooks for automated incident detection and response.
  Engagement with stakeholders to build SOC S.O.P for incident triage and response.
  
• Collaboration and Training:Work closely with cybersecurity teams to understand requirements and develop effective solutions.
  Document workflows, processes, and automation designs for reference and knowledge sharing.
  Creating a centralized internal knowledge base across inter-dependent teams to promote cross-collaboration, and unified responses to customers.
  
• Continuous Improvement:Stay updated with the latest cybersecurity threats, trends, and tools.
  Identify areas in cybersecurity processes where automation can provide significant value.
  Continuously improve automation capabilities to address emerging challenges.
  

Skills for Success

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
• Certifications such as CISSP, CEH, or GIAC.
• Experience with cloud environments (e.g., AWS, Azure, Google Cloud) and automating cloud security operations.
• Strong programming/scripting skills (e.g., Python, Bash, PowerShell).
• Experience with automation and orchestration tools (e.g., Ansible, Terraform, Splunk Phantom, Palo Alto Cortex XSOAR).
• Familiarity with cybersecurity tools and technologies (e.g., SIEM, firewalls, IDS/IPS, endpoint protection).
• Knowledge of APIs and integration techniques for automation.
• Understanding of cybersecurity frameworks (e.g., NIST, MITRE ATT&CK).
• Familiarity with incident response, threat hunting, and vulnerability management.
• Understanding of cybersecurity frameworks (e.g., NIST, MITRE ATT&CK).
• Familiarity with incident response, threat hunting, and vulnerability management.
• Problem-solving mindset with a focus on innovation.
• Strong communication and teamwork skills.
• Ability to work under pressure and adapt to changing priorities.

Rewards that Go Beyond

• Full suite of health and wellness benefits
• Ongoing training and development programs
• Internal mobility opportunities