Detection Engineer - Threat Detection & SIEM

Jobtailor; Singapore; On-site; SGD 70,000 - 120,000; Full time

Job summary

Jobtailor in Singapore seeks a Security Detection Engineer to develop and tune detection rules for government environments. You will analyze SIEM/EDR logs, differentiate real threats from benign activity, and research attacker TTPs to improve coverage across on-premises and cloud systems.

The role requires hands-on experience with Sigma, KQL, SPL, EQL, YARA, and automation, plus collaboration with incident responders and security engineers to operationalize detections.

Qualifications

• Degree in Cybersecurity, Information Security, Computer Science or a related field.
• Certifications from OffSec, SANS, GIAC or related for cloud security, detection engineering, incident response, malware analysis, or pen-testing.
• Minimum 3 years’ experience in security operations, incident response or related cybersecurity fields in enterprise/government settings.
• Knowledge of MITRE ATT&CK and attacker TTPs, and detection use cases.
• Hands-on experience with SIEM, EDR, SOAR; scripting (Python/PowerShell); automation.

Responsibilities

• Develop, implement, and document detection rules using Sigma, KQL, SPL, EQL, or YARA.
• Analyze security logs and alerts from SIEM and EDR within government environments.
• Differentiate true threats from benign activity and reduce false positives across networks, endpoints, and cloud.
• Research threats targeting government networks, endpoints, and cloud environments.
• Collaborate with security analysts and incident responders on government IR protocols.
• Operationalize detection rules for accurate alert escalation.
• Collaborate with security engineers to integrate detection systems.

Skills

Detection Rule Development

Threat Analysis

Automation

Scripting (Python/PowerShell)

Collaboration

Education

Bachelor's degree in Cybersecurity, Information Security, or Computer Science

Tools

Splunk

Elastic

SIEM

EDR

SOAR

Job description

Jobtailor in Singapore seeks a Security Detection Engineer to develop and tune detection rules for government environments. You will analyze SIEM/EDR logs, differentiate real threats from benign activity, and research attacker TTPs to improve coverage across on-premises and cloud systems.

The role requires hands-on experience with Sigma, KQL, SPL, EQL, YARA, and automation, plus collaboration with incident responders and security engineers to operationalize detections.