Data Analyst – Cybersecurity (SIEM)

SAGL CONSULTING PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

A consulting firm in cybersecurity is seeking a skilled Data Analyst to analyze and enrich log data for improved threat detection. Responsibilities include working with SIEM platforms like Splunk or QRadar, scripting for data automation, and collaborating with security teams. Ideal candidates should have expertise in cybersecurity logs and familiarity with scripting, coupled with strong analytical skills.

Qualifications

• Experience in cybersecurity log analysis.
• Proficiency in Python and shell scripting required.
• Good knowledge of regex and log parsing techniques.

Responsibilities

• Analyze security event data from SIEM platforms.
• Collaborate with security teams to improve data quality.
• Develop parsers to automate log processing.

Skills

REST API understanding

SIEM tools experience

Python scripting proficiency

Log parsing techniques

Cybersecurity concepts knowledge

Data correlation skills

Tools

Splunk

QRadar

Job description

Overview

Job Summary: We are seeking a skilled Data Analyst with hands-on experience in cybersecurity log analysis, SIEM data models, and scripting. The ideal candidate will work closely with security teams to parse, analyze, and enrich log data from various sources, helping improve threat detection and monitoring effectiveness.

Responsibilities

• Analyze and interpret security event data from SIEM platforms (e.g., Splunk, QRadar, ArcSight, etc.)
• Develop and maintain parsers, regex rules, and data normalization scripts
• Understand and work with SIEM data models to improve log ingestion and correlation logic
• Write Python or shell scripts to automate log processing and data enrichment tasks
• Collaborate with security engineers and incident response teams to support investigations and improve data quality
• Identify anomalies, patterns, and insights from large volumes of log data

Required Skills

• Understanding of REST API and SYSLOGS
• Strong experience working with cybersecurity log data and SIEM tools
• Proficiency in scripting languages (Python preferred)
• Good knowledge of regex and log parsing techniques
• Familiarity with cybersecurity concepts, threat intelligence, and event types
• Experience working with SIEM data models and structured/unstructured data
• Ability to handle multiple data sources and correlate events for actionable insights

Preferred Qualifications

• Experience with platforms like Splunk, QRadar, or similar
• Exposure to log sources such as firewalls, endpoint security tools, IDS/IPS, etc.
• Basic knowledge of MITRE ATT&CK or threat detection frameworks