ICT SECURITY ENGINEER

HELIUS TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

HELIUS TECHNOLOGIES PTE. LTD. is seeking a senior cybersecurity leader to own the end-to-end DFIR lifecycle, from detection to eradication, for major incidents.

You will drive the group’s cyber defence strategy, align with MAS TRM, NIST CSF v2.0 and ISO/IEC 27001:2022, and optimise SIEM, SOAR, EDR and DLP platforms for maximum coverage and impact.

Qualifications

• Bachelor’s degree in computer science, information security or related field, or equivalent professional experience.
• 8+ years in cyber security with hands‑on DFIR, detection engineering, threat hunting, SIEM, SOAR, EDR, DLP, automation and AI‑enabled SOC.

Responsibilities

• Take command of major cyber incidents and own end‑to‑end DFIR lifecycle from detection to post‑incident review.
• Set and drive cyber defence and detection‑and‑response strategy aligned to MAS TRM, NIST CSF v2.0 and ISO/IEC 27001:2022.
• Govern and optimise SIEM, SOAR, EDR and DLP platforms to maximise coverage and value.
• Lead detection engineering and proactive threat hunting mapped to MITRE ATT&CK framework.
• Shape security telemetry and logging strategy, prioritising log source onboarding for comprehensive coverage.
• Build security automation and orchestration to speed up detection and response.

Skills

DFIR

Detection Engineering

Threat Hunting

SIEM

SOAR

EDR

DLP

Security Automation

AI in SOC

Education

Bachelor's degree in CS/InfoSec or related field

Job description

A bachelor’s degree in computer science, Information Security or a related field, or equivalent professional experience.

8+ years in cyber security, with deep, hands‑on expertise in DFIR, Detection Engineering, Threat Hunting, SIEM, SOAR, EDR, DLP, security automation and AI‑enabled Security Operations.

Experience in a regulated financial services or insurance environment (strongly preferred).

A proven track record leading major cyber incidents and complex forensic investigations from start to finish.

Strong working knowledge of MAS TRM, NIST CSF v2.0, ISO/IEC 27001:2022 and the MITRE ATT&CK framework

Hands‑on experience across cloud (AWS/Azure), endpoint, network and identity telemetry, detection-as-code and automation

One or more relevant certifications — CISSP, GCFA, GCIH, GNFA, GREM, GCTI or equivalent.

Responsibilities:

• Take command of major cyber incidents and own the end-to-end DFIR lifecycle — from detection and containment through eradication, recovery and post‑incident review.
• Set and drive the Group’s cyber defence and detection‑and‑response strategy, aligned to MAS TRM, NIST CSF v2.0 and ISO/IEC 27001:2022.
• Govern and optimise our SIEM, SOAR, EDR and DLP platforms to maximise detection coverage, efficacy and value.
• Lead detection engineering and proactive, intelligence‑led threat hunting mapped to the MITRE ATT&CK framework.
• Shape our security telemetry and logging strategy, prioritising log source onboarding for comprehensive coverage.
• Build security automation and orchestration that make detection and response faster, more consistent and higher quality.