Cyber Security Consultant – Advanced Analytics

ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD. is seeking a Cyber Security Consultant to design, implement, and maintain SOC technologies across clients, including SIEM, SOAR, TIP, and UEBA.

The role involves integrating defenses in on-premise, hybrid, and multi-cloud environments, with DevSecOps practices to scale solutions. The candidate will develop detection content, automate responses, and contribute to Threat Intelligence and AI/ML integrations while supporting pre-sales engagements and

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• At least 2–3 years of experience deploying and managing SOC technologies.
• Experience with SOC technologies such as SIEM, SOAR, TIP, UEBA, and related platforms.
• Working experience with DevSecOps practices, CI/CD, and cloud environments (AWS/Azure/GCP).
• Strong understanding of cybersecurity principles and best practices.
• Experience in cybersecurity professional services is advantageous.

Responsibilities

• Design, Implement, and Optimize SOC technologies across on-premise, hybrid, or multi-cloud environments.
• Develop threat monitoring content and automated incident response workflows.
• Provide documentation and share best practices with internal teams and clients.
• Offer technical guidance to clients and participate in pre-sales POV engagements.

Skills

DevSecOps

Pre-sales

Threat detection

Education

Bachelor’s degree in Computer Science or related field

Tools

Splunk

Elastic

Sentinel

XSOAR

Exabeam

Anomali

Cribl

Confluent

Mandiant MSV

Cymulate

AttackIQ

Job description

We are seeking a talented Cyber Security Consultant to join our dynamic and growing team. As a Cyber Security Consultant for Advanced Analytics, you will play a crucial role in designing, implementing, and maintaining our SOC (Security Operations Centre) technologies and infrastructure. The ideal candidate should have experience deploying and managing SOC technologies, including SIEM (Security Information and Event Management), SOAR (Security Orchestration, Automation, and Response), TIP (Threat Intelligence Platform), User and Entity Behavior Analytics (UEBA), Data Streaming, Breach and Attack Simulation (BAS) platforms etc. You’ll work closely with cross-functional teams to integrate these technologies into our clients’ environments, ensuring that their security needs are met with the highest standards.

Key Responsibilities:

1. Design, Implement, and Optimize SOC Technologies:

• Gather requirements and propose solutions to solve complex requirements within clients’ on-premise, hybrid or multi cloud environments.

• Implement different technologies across SIEM, SOAR, TIP, UEBA, Data Streaming and BAS solutions.

• Customize and ensure seamless integration to meet specific security requirements within our clients’ environments.

• Practice DevSecOps skillsets to deploy and manage proposed solutions at scale.

• Participate in design and integration with Ensign AI/ML and Threat Intelligence technologies.

1. Threat Detection and Response:

• Develop content for threat monitoring and detection.

• Develop automated response workflows for security incident management.

• Provide fine-tuning of detection content, machine learning models or workflows.

• Participate in design and implementation for Detection-As-Code and Automated Security Response frameworks.

1. Documentation and Knowledge Sharing:

• Produce and maintain documentations related to SOC technologies and processes.

• Share best practices and insights with internal teams and clients.

• Offer guidance to clients on optimizing their SOC solutions.

1. Technical Support and Guidance:

• Participate and support in pre-sales engagements as Subject Matter Expert for proof-of-value (POV) engagements with different SOC technologies.

• Provide technical support for vulnerability management and platform issues in clients’ environment.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.

• At least 2 – 3 years of experience deploying and managing SOC technologies.

• Working experience in technologies like Splunk, Elastic, Sentinel, XSOAR, Exabeam, Anomali, Cribl, Confluent, Mandiant MSV, Cymulate, AttackIQ or equivalent technologies are preferable.

• Working experience in DevSecOps practice, tools (CI/CD, GitLab, Ansible, Chef etc) or Cloud (AWS, Azure, GCP) environments are preferable.

• Strong understanding of cybersecurity principles and best practices.

• Working experience in cybersecurity professional services will be advantageous.

• Excellent problem-solving skills and attention to detail.

• Ability to thrive in a fast-paced, collaborative environment.

• Security certifications related to SOC technologies are a plus.