Engineer (Security Operation)

Ministry of Defence of Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Ministry of Defence of Singapore seeks an experienced SOC leader to review designs of the SOC infrastructure, advise on intrusion detection placement, and oversee daily threat detection and incident response operations.

The role requires 6–8 years in cybersecurity with at least 2 years in a senior or supervisory SOC position, plus hands-on experience with SIEM, IDS/IPS, and EDR tools.

Qualifications

• Education in Cybersecurity, Computer Engineering, Information Systems or a related field.
• 6–8 years of cybersecurity experience, with at least 2 years in a senior or supervisory SOC role.
• Proficiency in threat detection, incident response and security tool management.
• Experience with SOC tools: SIEM, IDS/IPS, EDR.

Responsibilities

• Review and advise on SOC infrastructure designs, determining placement and coverage of intrusion detections.
• Create and manage customised security event detection rules.
• Oversee daily SOC operations involving threat detection and incident management.
• Supervise SOC training and development activities.
• Establish and maintain operational procedures, guidelines and knowledge management.
• Interact with vendors and system managers for system integration and enhancement.
• Rotate with Head SOC for 24/7 monitoring duties.

Skills

Threat detection

Incident response

Security tool management

SOC leadership

Education

Cybersecurity degree or related field

Tools

SIEM

IDS/IPS

EDR

Job description

What The Role Is

You review and advise on the designs of the Security Operations Center (SOC)’s infrastructure, determining the placement and coverage of intrusion detections, endpoint hardening agents within the host and network environment.

What You Will Be Working On

• Create and manage customised security event detection rules
• Oversee daily SOC operations involving threat detection and incident management
• Supervise SOC training and development activities
• Establish and maintain operational procedures, guidelines and knowledge management
• Interact with vendors and system managers for system integration and enhancement
• Rotate with Head SOC for 24/7 monitoring duties

Challenge(s)

• Balancing leadership and technical skills
• Managing resources, including staffing needs and integration of complex SOC tools
• Rapidly responding to cyber incidents while maintaining composure

What We Are Looking For

• Education in Cybersecurity, Computer Engineering, Information Systems or a related field
• At least 6 to 8 years of working experience in cybersecurity roles, minimum 2 years in a senior or supervisory role within a SOC or Cyber Emergency Response Team
• Technological knowledge in threat detection, incident response and security tool management
• Proficiency in SOC tools (Security Information and Event Management, Intrusion Detection System, Intrusion Prevention System, Endpoint Detection and Response)
• Certification in GIAC Security Operations Certified (GSOC), GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP) and/or Certified Information System Manager (CISM) is preferred
• Familiarity in evaluating cybersecurity tools
• Vendor collaboration and management skills