Cyber Data Engineer - Platform Automation & Analytics

MORGAN STANLEY MANAGEMENT SERVICE (SINGAPORE) PTE. LTD.

Singapore

On-site

SGD 120,000 - 160,000

Full time

2 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Morgan Stanley Management Service (Singapore) Pte. Ltd.

is seeking a Cyber Data Engineer to strengthen APAC cyber engineering coverage from Singapore, focusing on hands-on platform engineering, automation, data onboarding, troubleshooting, and operational resilience. The successful candidate will work on large-scale security analytics platforms that ingest, transform, store, and expose security event data for detection, investigation, and response use cases, collaborating with threat hunting,

Qualifications

Experience engineering, deploying, supporting, or operating large-scale security analytics platforms such as Elasticsearch or Splunk.
Strong understanding of cyber event data including log ingestion, parsing, field extraction, normalization, enrichment, routing, and data quality validation.
Experience with data pipeline or dataflow technologies such as Logstash, Cribl, Kafka, Apache NiFi, syslog, or equivalent enterprise data transport tooling.
Strong automation and integration experience, ideally using Python and tools such as Ansible, Terraform, or similar technologies.
Experience integrating cyber platforms with cloud and on-premises environments (AWS, Azure, Google Cloud).
Solid understanding of Linux/Unix, networking, HTTP, TLS, DNS, load balancing, authentication.
Good understanding of DevOps practices (Git, Jenkins, Jira, CI/CD).
Strong analytical and troubleshooting skills.
Excellent written and verbal communication skills.

Responsibilities

Engineering and maintaining large-scale cyber analytics platforms, including Splunk, Elasticsearch, and associated data ingestion and storage components.
Onboarding new cyber data sources, validating event quality, developing field extractions, and ensuring data usability for detection, investigation, and response teams.
Designing, building, and supporting data pipelines that collect, transform, route, and transmit cyber event data from cloud and on-premises sources.
Developing automation tools that integrate with internal APIs, configuration management frameworks, CI/CD pipelines, and infrastructure services.
Improving platform reliability, scalability, monitoring, alerting, recovery, and operational resilience across APAC and global cyber engineering environments.
Investigating and resolving complex technical issues across application, infrastructure, network, operating system, data, and integration layers.
Acting as an escalation point for difficult platform, ingestion, search, performance, and data availability issues.
Identifying and implementing tuning opportunities to improve platform performance, reduce operational toil, and increase engineering efficiency.
Partnering with cyber stakeholders across threat hunting, detection engineering, incident response, investigations, insider threat, and technology risk to deliver fit-for-purpose engineering solutions.