Hands-on Cyber Defense Analyst (SIEM & Cloud)

MAS; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

GovTech is seeking a hands-on security operations practitioner to investigate security alerts and coordinate remediation across cloud, SaaS, and on‑prem environments in Singapore. You will work with engineers and service owners, own findings through closure, and contribute to attack-surface management and log enrichment.

The role emphasizes SIEM maintenance (Datadog), detection development, and incident response support, with flexible work arrangements depending on role.

Qualifications

• Hands-on experience in security operations and incident response.
• Strong log-analysis skills and understanding of indicators of compromise.
• Experience maintaining a SIEM platform (preferably Datadog).
• Ability to write and troubleshoot queries in KQL/SQL/Python.
• Good understanding of cloud and SaaS security.

Responsibilities

• Monitor and investigate security alerts across cloud, SaaS, app, and infrastructure.
• Triage findings, identify affected systems, and coordinate remediation.
• Drive findings through detection to closure with clear ownership and timelines.
• Maintain Datadog SIEM, including dashboards and rules.
• Develop detection logic and alert workflows for cloud/SaaS platforms.
• Support incident response timelines and evidence collection.

Skills

Security operations

Log analysis

Datadog SIEM

Query writing

Cloud security

Coordination

Automation

Communication

Tools

Wiz

Tenable

Datadog

Job description

GovTech is seeking a hands-on security operations practitioner to investigate security alerts and coordinate remediation across cloud, SaaS, and on‑prem environments in Singapore. You will work with engineers and service owners, own findings through closure, and contribute to attack-surface management and log enrichment.

The role emphasizes SIEM maintenance (Datadog), detection development, and incident response support, with flexible work arrangements depending on role.