ICT Security Engineer

WE-PLUS PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

WE-PLUS PTE. LTD. is seeking an ICT Security Engineering professional to elevate its capability to detect and respond to cyber threats by deploying, maintaining, and improving a new SIEM infrastructure.

You will collaborate with Production Infrastructure & Observability teams and join the Production CSIRT / SIEM Engg team with opportunities to expand. Key responsibilities include SIEM server administration, automation development, log-source integration, GROK patterns, and contributing to policy

Qualifications

• Bachelor's degree in information technology or related field.
• 7+ years of experience with at least 4–5 years in large-scale SIEM/logging deployments.
• Experience with Logstash and regular expressions.

Responsibilities

• Install and administer the SIEM infrastructure servers.
• Build and maintain automation (Ansible playbooks, Python/Bash scripts).
• Integrate new log sources and Kafka-based pipelines.
• Develop parsers/GROK patterns; apply regex expertise.
• Participate in small-scale project-management tasks.
• Act as a full-time member of Production CSIRT / SIEM Engg team.
• Contribute to the Control/Policy framework and day-to-day compliance.
• Report incidents per Incident Management System.

Skills

SIEM Admin

Regex

Python

Ansible

Linux Admin

CI/CD

Datadog

Logstash

GROK

Production CSIRT

Threat detection

Education

Bachelor's Degree in Information Technology

Tools

Logstash

Vector

Datadog

Ansible

Kafka

SQL

Job description

Role Summary

Our client is looking for an ICT Security Engineering professional to increase its capability to improve the Bank detection & reaction to Cyber Threats by deploying, maintaining and improving the new SIEM infrastructure. The candidate will work in close collaboration with Production Infrastructure & Observability teams. The candidate will also fully be part of the Production CSIRT / SIEM Engg team with the opportunity to expand the scope of activities within the team.

Main Responsibilities

• Install and administrate the servers of the SIEM Infrastructure.
• Build & maintain automation (Ansible playbooks, python/bash scripts) and self-service tool to minimize manual work.
• Integrate new log sources and emerging technologies (including Kafka-based pipelines).
• Develop custom parsers/GROK patterns; apply regular-expression expertise.
• Participate in small-scale project-management tasks (scope definition, delivery tracking)
• Act as a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.
• Contribute to the Permanent Control framework for implementation of policies and procedures in day‑to‑day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System.

Qualifications & Experience

• Bachelor's Degree in Information Technology or relevant fields.
• Candidate must have overall 7 or more years of experience with minimum 4-5 years focused on large-scale setup to manage Logtash, regular expression.
• Banking-sector experiences is optional but regarded as a plus.

Role-Specific Technical Skills (Production Experience)

• Administration experience [Logtash, Vector (Datadog)].
• Linux administration (RHEL/Ubuntu).
• Experience writing Regex (Regular Expression).
• Scripting/programming – Python or Bash (minimum 2 years).
• Knowledge on SQL.
• Automation/orchestration – Ansible (or equivalent) and CI/CD pipelines.
• Background in IT Security concepts & administration (OS, Network).
• Managing Production security tools with focus on logging platforms – ingestion, indexing, monitoring and analytics (mandatory) preferably in large organization; SIEM experience is plus.

Personal Attributes

• Rigorous and detail-oriented.
• Strong analytical and problem-solving skills.
• Self-driven; able to work autonomously and take ownership.
• Excellent communicator and collaborative team player.
• High energy, proactive attitude and willingness to up-skill.
• Able to manage multiple priorities simultaneously.