Cybersecurity Platform Engineer

RED ALPHA CYBERSECURITY PTE. LTD.; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

RED ALPHA CYBERSECURITY PTE. LTD. is seeking a Cybersecurity Platform Engineer to maintain platform services, review and optimize security platforms such as Azure Sentinel and SOAR, and manage onboarding/offboarding of cloud subscriptions and projects.

The role designs and implements playbooks, develops detection rules and hunting queries, and provides architectural guidance to the security operations team while ensuring reliable performance and effective reporting.

Qualifications

• Minimum of three years of relevant cybersecurity platform management experience.
• Hands-on experience deploying and maintaining cybersecurity platforms with troubleshooting skills.
• Proficient in Python, PowerShell, Bash for automation.
• Strong knowledge of Windows and Linux operating systems, networking concepts, and cybersecurity frameworks.
• Familiar with cloud platforms such as AWS, Azure, or Google Cloud Platform and their security services.
• Professional information security qualifications such as CISSP, CISM, or CEH preferred.
• Strong analytical, communication, and problem-solving abilities in cybersecurity platform environments.

Responsibilities

• Design and implement playbooks and workflows.
• Develop KQL queries and SOAR capabilities.
• Create custom integrations and response automation.
• Lead datasource integration.
• Configure connectors and log parsing rules.
• Optimize log collection and retention.
• Build custom workbooks and dashboards.
• Develop detection rules and hunting queries.
• Perform operational and executive reporting.
• Provide architectural guidance.
• Manage performance optimization.
• Document procedures and train team members.

Job description

About the role

The CybersecurityPlatform Engineeris responsibleforthe maintenance of all platform services under this Contract. The platform engineer shall review,optimise, configure,maintainand manage thesecurityplatforms under the scope of the Contractor such as Azure Sentinel services and SOAR. The role's responsibility includes but is not limited to creating andmaintainingSOAR playbooks,cloudsubscription and project onboarding and offboarding.

CoreResponsibilities:

• Design and implement playbooks and workflows;


• DevelopKQL queries and SOAR capabilities;


• Create custom integrations and response automation;


• Lead datasource integration;


• Configure connectors and log parsing rules;


• Optimize log collection and retention;


• Build custom workbooks and dashboards;


• Developdetectionrules and hunting queries;


• Perform operational and executive reporting;


• Provide architectural guidance;


• Manage performance optimization; and


• Document procedures and train team members.

Core Requirements:

• A minimum ofTHREE (3) years of relevant experience in cybersecurityplatform management,securityinfrastructure operations, or related technical disciplines;


• Hands-on experience in deploying, supporting, andmaintainingcybersecurityplatforms, including troubleshooting techniques and use of diagnostic tools;


• Scripting and codingproficiencyin Python, PowerShell, Bash, or similar programming languagesforautomation and platform management;


• Strong knowledge of Windows andLinuxoperating systems, networking concepts and protocols, and cybersecurityframeworks;


• Familiarity withcloudplatforms such as AWS, Azure, or GoogleCloudPlatform and theirsecurityservices;


• Professional qualification in informationsecuritysuch as CISSP, CISM, CEH, or equivalent cybersecuritycredential is preferred; and


• Strong analytical skills, excellent communication abilities, and advanced problem-solving capabilities in cybersecurityplatform environments.