Cyber Security Operations Engineer

SimplyGo Pte. Ltd.; Singapore; Hybrid; SGD 67,000 - 76,000; Full time

Benefits offered by this job

Hybrid work options

Performance bonus

Additional Wage Supplement

Wellbeing programs

Job summary

SimplyGo Pte. Ltd. in Singapore is seeking a Senior Engineer, Security Operations to join the cybersecurity team and drive monitoring, incident response, and security engineering across enterprise systems.

You will work with SIEM, SOAR, XDR, and cloud security tools, collaborate with MSSPs, and help strengthen governance, threat detection, and operational maturity. The role offers hybrid work arrangements, competitive pay within SGD 67k–76k, and opportunities for professional growth.

Qualifications

• Training in Computer Science, Information Security, Cybersecurity, or related discipline.
• 3 to 5 years hands-on experience in cybersecurity operations, SOC, cloud security, or security engineering.
• Strong knowledge of SOC operations, monitoring, SIEM engineering, threat detection, and incident response.
• Hands-on experience with Microsoft Sentinel, Defender Suite, 365 Defender, and cloud monitoring.

Responsibilities

• Support day-to-day cybersecurity operations, monitoring, and incident response.
• Monitor SIEM, SOAR, XDR, EDR, PAM, and threat intelligence platforms.
• Collaborate with MSSPs and forensics partners to investigate incidents.
• Tackle vulnerability management and cloud security governance.

Skills

SOC operations

SIEM engineering

Threat detection

Incident response

Cloud security

MSSP collaboration

PAM

XDR

EDR

IAM

RBAC

Threat intel

Education

Bachelors in CS / Info Security

Tools

Microsoft Sentinel

Microsoft Defender Suite

Microsoft 365 Defender

Azure Arc

Job description

We are SimplyGo Pte. Ltd. (SPL), a wholly owned subsidiary of the Land Transport Authority, and a key player in the Singapore public transport ecosystem. We develop transit ticketing and travel card-related products and services that simplify journeys and create value for our commuters. We believe great ideas come from people who are curious, driven, and eager to learn. Join us if you are looking for an organisation that allows you to make a meaningful impact and provide the support you need to grow.

What You Will Do

At SPL, you are an integral part of our team - driving meaningful projects and witnessing the tangible difference your work makes. As a Senior Engineer, Security Operations, you will support and execute cybersecurity operations, security engineering, monitoring, and incident response across enterprise infrastructure, cloud platforms, applications, endpoints, and networks, with a strong focus on SIEM engineering, threat detection, and security monitoring. You will also strengthen the organization's cybersecurity posture by managing daily security operations, vulnerability management, cloud security governance, and security engineering initiatives.

Key Tasks You Will Be Involved In

IT Security Operations

• Support day-to-day cybersecurity operations, including continuous monitoring, threat detection, incident response, and security event management across enterprise environments.
• Monitor and validate the effectiveness of security technologies such as SIEM, SOAR, XDR, EDR, PAM, DDoS protection, and threat intelligence platforms.
• Collaborate with managed security service providers (MSSPs) and digital forensics partners to investigate and respond to security incidents.
• Perform alert triage, investigate indicators of compromise (IOCs), support incident reporting, and maintain comprehensive security asset coverage.

Security Engineering & Technology

• Support the implementation, enhancement, and lifecycle management of cybersecurity technologies, including SIEM, SOAR, XDR, PAM, SOC, and cloud security solutions.
• Fine-tune detection rules to improve alert quality, optimise security log management, troubleshoot Azure Arc and PAM solutions, and expand monitoring coverage across production environments.

Cybersecurity Projects & Continuous Improvement

• Contribute to cybersecurity initiatives that enhance the organization's security posture, strengthen governance, reduce cyber risk, and improve operational maturity.
• Support the implementation of security standards, regulatory compliance, and industry best practices while driving continuous improvements across cybersecurity operations.

What you’ll gain

At SimplyGo, our people are at the heart of everything we do.

We ASPIRE to create a supportive and inclusive workplace where you can thrive.

Here’s what you can look forward to:

Professional

• Continuous growth through training, mentorship, and development.
• Career pathways with room to advance and expand your skills.
• A culture of collaboration that celebrates innovation, respect, and teamwork.

Individual

• An attractive annual compensation package within the indicative range of $67,000 to $76,000, with compensation commensurate with experience, including an Additional Wage Supplement and Performance Bonus.
• Comprehensive benefits to support your lifestyle and wellbeing.
• Flexibility with hybrid work options and supportive arrangements.
• Wellbeing initiatives designed to keep you healthy, balanced, and engaged.

This role might be for you if you have:

• Training in Computer Science, Information Security, Cybersecurity, or a related discipline.
• 3 to 5 years of hands-on experience in cybersecurity operations, Security Operations Centre (SOC), cloud security, or security engineering.
• Strong knowledge of SOC operations, security monitoring, SIEM engineering, threat detection, and incident response.
• Hands-on experience with Microsoft Sentinel, Microsoft Defender Suite, Microsoft 365 Defender, and cloud-native security monitoring solutions.
• Good understanding of cloud security architecture and infrastructure security across Microsoft Azure, AWS, and hybrid/multi-cloud environments.
• Experience with Identity and Access Management (IAM), Privileged Access Management (PAM), Role-Based Access Control (RBAC), and least-privilege access principles.
• Familiarity with Endpoint Detection and Response (EDR/XDR), threat hunting, threat intelligence, and security event analysis.
• Proven ability to investigate and respond to cybersecurity incidents, including malware, phishing, and advanced cyber threats.
• Passion for cybersecurity, technology innovation, continuous improvement, and delivering operational excellence.