Cybersecurity Engineer (Automation)

Assurity Trusted Solutions; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Annual Leave Benefits

Family Care Leave

Birthday Leave

Collaborative work environment

Job summary

Assurity Trusted Solutions in Singapore invites a skilled SOAR engineer to lead automation of cyber security operations. You will design and refine playbooks, automate tasks, and drive secure, scalable workflows.

The ideal candidate has 3+ years in SOAR, strong Python/PowerShell/Bash skills, experience with Cortex XSOAR, REST APIs, and MITRE ATT&CK. You will collaborate with cross-functional teams and vendors to deliver robust integrations.

Qualifications

• 3+ years of SOAR experience in a security operations environment.
• Strong programming in Python, PowerShell or Bash.
• Hands-on with Cortex XSOAR and playbook development.
• Experience with REST APIs, JSON and data parsing.
• Familiarity with MITRE ATT&CK and SOC operations.
• Experience with version control and CI/CD workflows.

Responsibilities

• Lead the Security Orchestration, Automation and Response (SOAR) initiatives to improve incident response efficiency.
• Develop workflow processes to automate manual cybersecurity tasks.
• Create and maintain automation scripts/playbooks to support reporting, monitoring and response.
• Define and enforce playbook development standards and improve performance of sub-playbooks.
• Collaborate with cross-functional teams to ensure seamless integration of automation initiatives.

Skills

SOAR

Python

PowerShell

Bash

Cortex XSOAR

REST APIs

JSON

MITRE ATT&CK

Git

CI/CD

Tools

Git

CI/CD

JSON

API integrations

Job description

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

Key Responsibilities:

• Lead the Security Orchestration, Automation and Response (SOAR) of cyber security operations processes to improve efficiency and reduce response times for security incidents.
• Develop workflow processes to automate manual cybersecurity tasks.
• Develop and maintain automation scripts/playbooks to support the operational workflow, including reporting, monitoring and incident response
• Define and enforce playbook development standards (naming structure, parameterisation, logging)
• Optimize sub-playbooks for performance, logic clarity, error handling and parameter flexibility.
• Refactor legacy/existing playbooks for reusability, naming consistency and reduced duplication
• Support integration of SOAR platform with third party applications and systems (e.g. message bus and API gateway) based on the required workflow
• Conduct playbook testing, validation, regression and integration testing on the automated workflow and integration code for robustness and performance
• Implement and manage automation platforms and technologies across existing security frameworks.
• Collaborate with cross-functional teams to ensure seamless integration of security automation initiatives.
• Take the lead to work with third party system administrators or vendors to resolve integration issues and data flow issues.
• Defining the interface testing scenarios and testing to ensure that the integration and interfacing testing is successful.
• Monitor performance and reliability of automations, identify bottlenecks or failure points
• Document all workflows, decisions logic, sub-playbook dependencies and version changes.
• Stay current with emerging security threats, technologies, and practices to propose automated solutions.
• Provide training and support to team members on automated security processes and tools.

• At least 3 years of experience with security orchestration, automation, and response (SOAR) platforms, preferably with Cortex XSOAR
• Strong programming skills in languages such as Python, PowerShell, or Bash.
• Proficiency in XSOAR components: playbooks, sub-playbooks, integrations, incident types, classifiers, layouts
• Experience with REST APIs, JSON, and data parsing
• Familiarity with incident response processes, MITRE ATT&CK framework, and SOC operations
• Comfortable with Git-based version control and code review workflows should XSOAR CI/CD be implemented
• Familiarity with various cybersecurity frameworks and compliance requirements.
• Understanding of RBAC and case management customisation in XSOAR
• Ability to analyse API documentation and build custom integrations where needed
• Security Certifications such as GISA, GSEC, CISSP, or CEH is an advantage.
• Possess the following soft skills and attributes:
  • Ability to justify new initiatives and recommend new initiatives to stakeholder(s).
  • Effective communication skills to explain complex technical issues to non-technical audience.
  • Adept at working independently and as part of a team.
  • Strong problem-solving and analytical thinking skills.

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience.

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/privacy.html or such other successor site.

• We promote a learning culture and encourage you to grow and learn.
• Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
• Working in a collaborative environment with helpful team members