Detection Engineer

U3 SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 100,000 - 170,000; Full time

Job summary

U3 SOLUTIONS PTE. LTD. seeks a hands-on cybersecurity operations specialist to support SEM/TPCA initiatives. You will monitor exposure across the organization, perform third-party risk assessments, and drive remediation across internal teams, portfolio companies, and vendors.

The role requires experience with cyber exposure platforms, CTI, and scripting to automate reporting on data lake platforms, with strong communication skills to document and coordinate with stakeholders.

Qualifications

• Minimum 3 years of hands-on experience in cybersecurity operations, attack surface/exposure management, third-party cyber risk assessment, or data lake platforms.
• Experience running third-party/vendor security assessments and questionnaires (VDD/ODD, SIG) and applying control frameworks (NIST, ISO 27001, CIS Controls).
• Hands-on experience with ASM/EASM, cyber exposure, or digital risk/dark-web monitoring platforms, and CTI.
• Advanced scripting knowledge to automate tasks and build reporting dashboards on data lake platforms.
• Solid understanding of TCP/IP, DNS, HTTP/S, and cloud exposures (AWS, Azure, GCP).
• Strong analytical, documentation, and communication skills; able to liaison with stakeholders.
• Good team player, agile, fast learner, adaptable.

Responsibilities

• Operate the always-on monitoring platforms, run third‑party assurance, identify threats, and drive remediation.
• Narrow the window between exposure and exploitation across the organization, its portfolio companies, and third parties.
• Document processes clearly and liaise with technical and business stakeholders.

Skills

Cybersecurity operations

Attack surface management

Third-party risk assessment

Data lake platforms

ASM/EASM

Cyber Threat Intelligence

Scripting (Python/PowerShell/Bash)

Cloud exposures (AWS/Azure/GCP)

Networking basics (TCP/IP, DNS, HTTP/S

Communication & documentation

Team collaboration / agile

Tools

VDD/ODD

SIG

NIST

ISO 27001

CIS Controls

Job description

SKILLS:

• The successful candidate is expected to support CSAD's new Security Exposure and Third-Party Cyber Assurance Centre of Excellence during its build phase.
• The role provides the hands-on technical and operational backbone across two tracks- Security Exposure Management (SEM), an outside-in, continuous view of the organization and its portfolio companies' internet-facing attack surface, and Third-Party Cyber Assurance (TPCA), end-to-end due diligence and continuous assurance across third parties and the supply chain.
• Responsible to operate the always-on monitoring platforms, run third-party assurance, validate clear-and-present-danger threats, and drive remediation - narrowing the window between exposure and exploitation across organization, its portfolio companies, and third parties.

Key Responsibilities:

• Minimum 3 years of hands-on experience in cybersecurity operations, attack surface/exposure management, third-party cyber risk assessment, or data lake platforms.
• Strong practical experience in running third-party/vendor security assessments and questionnaires (VDD/ODD, SIG) and control frameworks (NIST, ISO 27001, CIS Controls).
• Hands-on experience with ASM/EASM, cyber exposure, or digital risk/dark-web monitoring platforms, and Cyber Threat Intelligence (CTI).
• Advanced scripting knowledge (e.g. Python, PowerShell, or Bash) to automate tasks and build reporting dashboards on data lake platforms.
• Solid understanding of TCP/IP, DNS, HTTP/S, common cloud exposures (AWS, Azure, GCP), and how third-/fourth-party risk propagates.
• Strong analytical, documentation, and communication skills, with discretion to handle sensitive findings.
• Good communication skill, with the ability to document processes clearly and liaise with technical and business stakeholders.
• Good team player, agile, fast learner, and able to adapt to changes

Good to have:

• Professional certifications: Security+, CEH, GIAC (GSEC, GCIH), CompTIA CySA+, or equivalent.
• CISSP Associate/CISM candidature.
• Experience in building operational dashboards and cyber posture scorecards.
• Familiarity with tuning detection logic and refining control baselines as a capability matures.