Cyber Threat Detection Engineer

ICE; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ICE is seeking a highly skilled Threat Detection Engineer to join the Cybersecurity Threat Detection team. You will design, tune, and maintain detections across SIEM, EDR, and NDR platforms, map coverage to MITRE ATT&CK, and hunt for threats proactively.

You will work with threat intelligence, incident response, and red team functions to translate intelligence into production detections, validate log sources, and reduce false positives through automated tooling.

Qualifications

• University degree or equivalent experience in Engineering, MIS, CIS, or related discipline.
• 3+ years of relevant threat detection, security operations, or threat hunting experience.
• Hands-on experience with SIEM/EDR/NDR platforms, including writing and tuning detection logic.
• Working knowledge of scripting for automation.
• Ability to investigate suspicious activity end to end and communicate findings clearly.
• Familiarity with the MITRE ATT&CK framework and adversary tradecraft.
• Solid understanding of OS internals, networking, and security telemetry.

Responsibilities

• Detection Engineering - Design, build, test, and maintain detection content across SIEM, EDR, and NDR platforms.
• Detection Tuning and Health - Own false positives, alert volume, and rule health for areas assigned.
• Detection Coverage - Map detection coverage to MITRE ATT&CK and identify gaps.
• Threat Intelligence Integration - Convert intelligence into prioritized detection work.
• Proactive Threat Hunting - Develop and execute focused hunts for evasive threats.
• Red Team Gap Remediation - Own gaps reported by red/purple teams and validate detections.
• Log Source Health - Validate health of security log sources and onboard/update SIEM sources.
• Automation and Tooling - Build internal tooling and automate repetitive tasks with scripting.

Skills

Threat detection

Security operations

Threat hunting

Scripting

Investigation

MITRE ATT&CK

OS and network fundamentals

Education

Bachelor's degree or equivalent

Tools

SIEM (Splunk)

EDR/NDR

Tanium

CrowdStrike

SentinelOne

Python

PowerShell

Job description

ICE is seeking a highly skilled Threat Detection Engineer to join the Cybersecurity Threat Detection team. You will design, tune, and maintain detections across SIEM, EDR, and NDR platforms, map coverage to MITRE ATT&CK, and hunt for threats proactively.

You will work with threat intelligence, incident response, and red team functions to translate intelligence into production detections, validate log sources, and reduce false positives through automated tooling.