Detection Engineer

U3 PROJECTS PTE. LTD.; Singapore; On-site; SGD 90,000 - 160,000; Full time

Benefits offered by this job

Certifications support

Dashboard tooling exposure

Job summary

U3 PROJECTS PTE. LTD. is building a CSAD Centre of Excellence and seeks a hands-on cybersecurity operations professional.

You will monitor exposure, conduct third-party risk assessments, and drive remediation across the organization and its portfolio. The role emphasizes practical security operations, threat intelligence, and dashboard development. Ideal candidates have 3+ years in security operations, experience with VDD/ODD and SIG, and strong scripting skills to automate tasks and create

Qualifications

• Minimum 3 years hands-on experience in cybersecurity operations or related fields.
• Experience in third-party security assessments and questionnaires (VDD/ODD, SIG).
• Strong scripting ability to automate tasks and build dashboards.
• Solid understanding of TCP/IP, DNS, HTTP/S, and cloud exposures.
• Excellent written and verbal communication with stakeholders.
• Team player, adaptable to changes.

Responsibilities

• Operate always-on monitoring platforms and drive remediation across the organization, portfolio companies, and third parties.
• Conduct third-party/vendor security assessments using VDD/ODD and SIG.
• Apply frameworks (NIST, ISO 27001, CIS Controls) to control posture.
• Work with ASM/EASM, CTI, and cyber exposure monitoring.
• Develop dashboards and reporting on data lake platforms.
• Communicate findings clearly to technical and business stakeholders.
• Collaborate with teams; adapt quickly to changes.

Skills

Security operations

Attack surface management

Third-party cyber risk assessment

Scripting (Python/PowerShell/Bash)

Networking basics (TCP/IP/DNS/HTTP/S)

Cloud exposure knowledge (AWS/Azure/G

CTI / cyber threat intel

Documentation & communication

Tools

VDD/ODD

SIG

NIST / ISO 27001 / CIS Controls

ASM/EASM platforms

Data lake platforms

Job description

SKILLS

• The successful candidate is expected to support CSAD's new Security Exposure and Third-Party Cyber Assurance Centre of Excellence during its build phase.
• The role provides the hands-on technical and operational backbone across two tracks- Security Exposure Management (SEM), an outside-in, continuous view of the organization and its portfolio companies' internet-facing attack surface, and Third-Party Cyber Assurance (TPCA), end-to-end due diligence and continuous assurance across third parties and the supply chain.
• Responsible to operate the always-on monitoring platforms, run third-party assurance, validate clear-and-present-danger threats, and drive remediation - narrowing the window between exposure and exploitation across organization, its portfolio companies, and third parties.

Key Responsibilities

• Minimum 3 years of hands-on experience in cybersecurity operations, attack surface/exposure management, third-party cyber risk assessment, or data lake platforms.
• Strong practical experience in running third-party/vendor security assessments and questionnaires (VDD/ODD, SIG) and control frameworks (NIST, ISO 27001, CIS Controls).
• Hands-on experience with ASM/EASM, cyber exposure, or digital risk/dark-web monitoring platforms, and Cyber Threat Intelligence (CTI).
• Advanced scripting knowledge (e.g. Python, PowerShell, or Bash) to automate tasks and build reporting dashboards on data lake platforms.
• Solid understanding of TCP/IP, DNS, HTTP/S, common cloud exposures (AWS, Azure, GCP), and how third-/fourth-party risk propagates.
• Strong analytical, documentation, and communication skills, with discretion to handle sensitive findings.
• Good communication skill, with the ability to document processes clearly and liaise with technical and business stakeholders.
• Good team player, agile, fast learner, and able to adapt to changes

Good to have

• Professional certifications: Security+, CEH, GIAC (GSEC, GCIH), CompTIA CySA+, or equivalent.
• CISSP Associate/CISM candidature.
• Experience in building operational dashboards and cyber posture scorecards.
• Familiarity with tuning detection logic and refining control baselines as a capability matures.