Cyber Security Engineer

NETS; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

BCS, a wholly owned subsidiary of NETS, is strengthening its IT Security team in Singapore. The Cyber Security Engineer will manage Elastic Security, SIEM and NDR, conduct threat hunting, monitor logs and respond to incidents, while supporting vulnerability management and security projects.

You will work with MAS guidelines and engage stakeholders across levels, maintaining documentation and expanding security capabilities with enterprise platforms such as CyberArk and Trend Micro.

Qualifications

• Degree in Computer Science, Information Security, Information Technology, Engineering, or a related discipline.
• Hands-on experience in administering cybersecurity solutions and supporting security operations, with expertise in Elastic Security (ELK Stack) or comparable SIEM.

Responsibilities

• Manage and optimize Elastic Security (Elasticsearch, Kibana, Logstash, Beats).
• Develop and tune SIEM use cases, correlation rules, dashboards and alerts.
• Perform log onboarding, analysis, and security event monitoring.
• Conduct threat hunting and investigate security alerts/incidents.
• Support incident response activities including containment and recovery.
• Operate and enhance Network Detection and Response (NDR) capabilities.

Skills

Elastic Security

SIEM

Threat detection

Incident response

Threat hunting

NDR

Security best practices

MAS guidelines

Stakeholder communication

Linux/Windows

Education

Bachelor’s degree in CS/IT/Engineering

Tools

ELK Stack

SIEM platforms

Job description

BCS, a wholly owned subsidiary of NETS and part of the NETS Group, manages and operates the clearing and payment infrastructure for the Singapore Automated Clearing House. This includes services such as Fast and Secure Transfers (FAST), Inter-bank GIRO (IBG), and the Cheque Truncation System (CTS). BCS also supports PayNow and the SGQR Central Repository, among other services.

Team and Position Summary

The IT Security Team at BCS ensures the security, availability and resilience of BCS systems, protecting data and mitigating emerging cyber threats in alignment with regulatory requirements.

The Security Engineering unit is a key function within IT Security, responsible to oversee and advance BCS’ cybersecurity defense capabilities through effective vulnerability management and robust security solution design.

The Cyber Security Engineer will strengthen the organisation's cyber defence capabilities by leveraging strong hands-on experience in Elastic Security (SIEM/ELK Stack). The incumbent will be responsible for security monitoring, threat detection, incident investigation, and the administration and optimisation of cybersecurity solutions.

Key Responsibilities

• Manage, administer, and optimize Elastic Security, including Elasticsearch, Kibana, Logstash, and Beats.
• Develop and tune Security Information and Event Management (SIEM) use cases, correlation rules, dashboards, and alerts.
• Perform log onboarding, analysis, and security event monitoring.
• Conduct threat hunting and investigate security alerts and incidents.
• Support incident response activities, including containment and recovery.
• Operate and enhance Network Detection and Response (NDR) capabilities and analyze network security events.
• Participate in cybersecurity projects, solution implementations, and technology upgrades.
• Support cybersecurity assurance activities such as Vulnerability Assessment and Penetration Testing (VAPT), Red Team Exercises, and Table-top Exercises.
• Maintain operational and technical documentation.
• Stay current with cybersecurity threats, technologies, and best practices.
• Learn and support additional security platforms such as CyberArk, Trend Micro, and other enterprise security solutions.

Requirements

Education and Experience

• Degree in Computer Science, Information Security, Information Technology, Engineering, or a related discipline.
• At least 4 years of hands‑on experience in administering cybersecurity solutions and supporting security operations, with proven expertise in Elastic Security (ELK Stack) or comparable SIEM platforms

Skills and Knowledge

• Strong understanding of Security Information and Event Management (SIEM), security monitoring, and log analytics concepts.
• Good knowledge of threat detection techniques, adversary behaviors, and the MITRE ATT&CK framework.
• Familiar with networking fundamentals, including protocols, traffic analysis, and common cybersecurity technologies.
• Possess a good understanding of various Operating Systems, e.g., Linux, Unix and Windows.
• Hands‑on experience with Network Detection and Response (NDR) solutions, including monitoring, threat detection, investigation, and incident response activities.
• Familiarity with MAS Cyber Hygiene, Technology Risk Management Notices, MAS Technology Risk Management Guidelines, Cybersecurity Act, and Cybersecurity Code of Practice (CCoP).
• Excellent communication, analytical, and problem‑solving skills, with the ability to engage effectively with stakeholders at all levels.

Preferred Certifications:

• Elastic Certified Engineer or Analyst
• CompTIA Security+ / CySA+
• Certified Information Systems Security Professional (CISSP)