Cyber Security Engineer

Antaes Asia; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Antaes Asia seeks an experienced cyber security incident response lead to manage end-to-end IR engagements in Singapore. You will triage, contain, eradicate, recover and conduct post-incident reviews, coordinating with technical teams and stakeholders.

You will translate MITRE ATT&CK into actionable detections, build content with YARA and Sigma, and hunt threats using Tanium EDR and Elastic/Kibana. Strong scripting in Python/PowerShell is required.

Qualifications

• 3-6 years experience leading real-world incident response.
• Hands-on expertise with Tanium EDR and Elastic/Kibana (SIEM).
• Strong command of detection engineering: MITRE ATT&CK, Sigma, YARA.
• Practical malware, phishing and domain analysis skills.
• Scripting and automation in Python and/or PowerShell.
• Strong analytical mindset, composure under pressure, and clear written and spoken English.

Responsibilities

• Lead end-to-end cyber incident response, from triage and containment to eradication, recovery and post-incident review, with minimal supervision.
• Translate MITRE ATT&CK techniques into high-fidelity, actionable detection rules, and tune them to reduce false positives.
• Build and maintain detection content using YARA and Sigma.
• Investigate and analyse sophisticated threats: phishing campaigns, malicious domains, malware samples and actively exploited vulnerabilities.
• Use Tanium EDR for endpoint investigation, threat hunting and remediation.
• Use Elastic/Kibana (SIEM) for log analysis, correlation, dashboards and alerting.
• Automate security workflows and response playbooks with Python or PowerShell.
• Document findings and communicate clearly with technical teams and stakeholders during and after incidents.

Skills

Tanium EDR

Elastic/Kibana

MITRE ATT&CK

Sigma

YARA

Python

PowerShell

Phishing analysis

Domain analysis

Incident response leadership

English communication

Tools

Tanium EDR

Elastic/Kibana

YARA

Sigma

Job description

Lead end-to-end cyber incident response, from triage and containment to eradication, recovery and post-incident review, with minimal supervision.

Translate MITRE ATT&CK techniques into high-fidelity, actionable detection rules, and tune them to reduce false positives.

Build and maintain detection content using YARA and Sigma.

Investigate and analyse sophisticated threats: phishing campaigns, malicious domains, malware samples and actively exploited vulnerabilities.

Use Tanium EDR for endpoint investigation, threat hunting and remediation.

Use Elastic/Kibana (SIEM) for log analysis, correlation, dashboards and alerting.

Automate security workflows and response playbooks with Python or PowerShell.

Document findings and communicate clearly with technical teams and stakeholders during and after incidents.

Qualifications

Required Skills

3-6 years experience leading real-world incident response, not only supporting it.

Deep, hands-on expertise with Tanium EDR and Elastic/Kibana (SIEM).

Strong command of detection engineering: MITRE ATT&CK, Sigma, YARA.

Practical malware, phishing and domain analysis skills.

Scripting and automation in Python and/or PowerShell.

Strong analytical mindset, composure under pressure, and clear written and spoken English.

Preferred Skills

Experience in financial services or another regulated environment.

Relevant certifications (e.g. GCIH, GCFA, GCTI, GREM, OSCP or equivalent).

Familiarity with SOAR platforms and threat intelligence tooling.

Reverse engineering or threat hunting experience.