Elastic Security Engineer - SIEM & Threat Hunting

NETS; Singapore; On-site; SGD 110,000 - 150,000; Full time

Job summary

BCS, a wholly owned subsidiary of NETS, manages and operates the security for Singapore’s payments infrastructure, including FAST, IBG, CTS, PayNow and SGQR. The Cyber Security Engineer role focuses on Elastic Security (SIEM/ELK) to monitor, detect threats, and lead incident investigations while maintaining and improving security solutions.

You will develop use cases, perform threat hunting, and support vulnerability assessments, with collaboration across IT Security and stakeholders.

Qualifications

• Degree in Computer Science, Information Security, Information Technology, Engineering, or a related discipline.
• At least 4 years hands-on experience administering cybersecurity solutions and supporting security operations, with proven expertise in Elastic Security (ELK Stack) or comparable SIEM platforms.

Responsibilities

• Manage, administer, and optimize Elastic Security, including Elasticsearch, Kibana, Logstash, and Beats.
• Develop and tune SIEM use cases, correlation rules, dashboards, and alerts.
• Perform log onboarding, analysis, and security event monitoring.
• Conduct threat hunting and investigate security alerts and incidents.
• Support incident response activities, including containment and recovery.
• Operate and enhance Network Detection and Response (NDR) capabilities and analyze network security events.
• Participate in cybersecurity projects, solution implementations, and technology upgrades.
• Support cybersecurity assurance activities such as Vulnerability Assessment and Penetration Testing (VAPT), Red Team Exercises, and Table-top Exercises.
• Maintain operational and technical documentation.
• Stay current with cybersecurity threats, technologies, and best practices.

Skills

Elastic Security

SIEM

Threat detection

Log analytics

NDR

MITRE ATT&CK

Education

Bachelor's degree in Computer Science or related field

Tools

ELK Stack

Job description

BCS, a wholly owned subsidiary of NETS, manages and operates the security for Singapore’s payments infrastructure, including FAST, IBG, CTS, PayNow and SGQR. The Cyber Security Engineer role focuses on Elastic Security (SIEM/ELK) to monitor, detect threats, and lead incident investigations while maintaining and improving security solutions.

You will develop use cases, perform threat hunting, and support vulnerability assessments, with collaboration across IT Security and stakeholders.