ELK SIEM Engineer - Logstash, Linux & Automation

WE Asia Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

WE Asia Pte Ltd seeks an ICT Security Engineer in Singapore to join the Production Security team. You will focus on the Logstash ingestion layer within the bank's SIEM platform, maintaining pipelines, troubleshooting data flow, and automating tasks with Python or Bash.

The role requires deep technical expertise in Logstash, Linux administration, and scripting, with a strong emphasis on production support and platform management.

Qualifications

• Hands-on production experience with Logstash, including troubleshooting pipelines and ingestion.
• Proficient in Linux administration (RedHat/Ubuntu), comfortable on Linux servers, checking logs, managing services, and investigating resource issues.
• Minimum 2 years of scripting/programming experience in Python or Bash for automation, log parsing and ops tasks.
• Production-grade experience with the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) including data ingestion, indexing, monitoring and analytics.
• Strong hands-on experience with Kafka.
• Proven background in production support across both virtual and physical environments.
• Bachelor's Degree in Information Technology or a related field.
• Minimum 7 years of total professional experience, with 4–5 years focused on large-scale Elastic Stack design, deployment, and support.

Responsibilities

• Troubleshoot Logstash production pipelines, identifying and resolving ingestion failures.
• Investigate why client servers are not sending data to Logstash, and restore data flow.
• Perform health checks on Linux servers — check service status, analyze logs, and troubleshoot CPU/memory/disk issues.
• Restart and reconfigure Logstash services safely in production environments.
• Develop Python or Bash scripts for automation, log parsing, and operational tasks.
• Install, configure, and administer servers within the SIEM infrastructure.
• Manage project deliverables and contribute to platform improvements.
• Platform integration tasks including installation, configuration, documentation, and administration of pre-production and production platforms.
• Contribute to the Permanent Control framework and ensure compliance with regulatory requirements and incident reporting processes.

Skills

Logstash

Linux administration

Python/Bash scripting

Elastic Stack

Kafka

Production support

7+ years total experience

ELK design/deploy

Education

Bachelor's Degree in Information Technology or related field

Tools

Elasticsearch

Kibana

Beats

Job description

WE Asia Pte Ltd seeks an ICT Security Engineer in Singapore to join the Production Security team. You will focus on the Logstash ingestion layer within the bank's SIEM platform, maintaining pipelines, troubleshooting data flow, and automating tasks with Python or Bash.

The role requires deep technical expertise in Logstash, Linux administration, and scripting, with a strong emphasis on production support and platform management.