ICT Security Engineer

WE-PLUS PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

WE-PLUS PTE. LTD. is seeking an ICT Security Engineering professional in Singapore to enhance detection and reaction to cyber threats by deploying and maintaining SIEM infrastructure.

You will collaborate with Production Infrastructure & Observability teams and be part of the Production CSIRT / SIEM Engg team. Responsibilities include deploying SIEM servers, building automation, integrating new log sources, and developing GROK parsers while complying with regulatory guidelines.

Qualifications

• Bachelor's Degree in Information Technology or relevant fields.
• 7+ years of experience with minimum 4-5 years on relevant scope, e.g. ELK stack for large platform or architecture.
• Working knowledge of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics (Mandatory).
• In-depth experience with Kafka.
• Good working knowledge of Linux (RedHat/Ubuntu).
• Programming skills are a MUST (Python or Bash).
• Experienced production support engineer.
• Platform integration skills are a plus – installation, configuration, documentation and administration of multiple production platforms in virtual and physical environments.
• Experience & skills in automation tools (e.g., Ansible) & DevOps pipelines are appreciated.
• Rigorous and strong problem-solving skills.
• Positive attitude, willingness to upskill and perform in-depth troubleshooting.
• Ability to work autonomously.
• Good interpersonal skills and team player.
• High energy level and willingness to take on responsibility and multi-task.

Responsibilities

• Install and administer the servers of the SIEM infrastructure.
• Develop automation on various tasks and self-service tools.
• Participate in integrating new technologies logs.
• Support logs parsing using custom parser / GROK development.
• Project management.
• Be a full-time member of the Production CSIRT / SIEM Engg team and participate in team activities.
• Contribute to the Permanent Control framework for Day-to-Day policies and procedures.
• Comply with regulatory requirements and internal guidelines.
• Contribute to reporting of incidents according to the Incident Management System.

Skills

ELK stack

Kafka

Python

Bash

Linux

Automation

DevOps pipelines

Problem-solving

Team player

Self-motivated

Education

Bachelor's Degree in Information Technology

Tools

Elasticsearch

Logstash

Kibana

Beats

GROK

Ansible

Job description

Role Summary

Our client is looking for an ICT Security Engineering professional to increase its capability to improve the Bank detection & reaction to Cyber Threats by deploying, maintaining and improving the new SIEM infrastructure. The candidate will work in close collaboration with Production Infrastructure & Observability teams. The candidate will also fully be part of the Production CSIRT / SIEM Engg team with the opportunity to expand the scope of activities within the team.

Main Responsibilities

• Install and administrate the servers of the SIEM Infrastructure.
• Develop automation on the different tasks and self-service tool.
• Participate to the integration of new technologies logs.
• Support logs parsing using custom parser/GROK development.
• Project management.
• Be a full time member of the Production CSIRT / SIEM Engg team and participate to the various activities of the team.
• Contribute to the Permanent Control framework for implementation of policies and procedures in day-to-day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System.

Qualifications & Experience

• Bachelor's Degree in Information Technology or relevant fields.
• Candidate must have overall 7 or more years of experience with minimum 4-5 years on relevant scope ie. expertise in handling ELK stack for large platform or architecture.
• Working knowledge of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics (Mandatory).
• In-depth experience with Kafka.
• Good working knowledge of Linux (RedHat/Ubuntu).
• Programming skills is MUST (Python or Bash) is appreciated.
• Experienced production support engineer.
• Platform integration skills are a plus – experience in installation, configuration, documentation and administration of multiple pre-production and production platforms in both virtual and physical environments.
• Experience & skills in automation tools (e.g. Ansible) & DevOps pipelines are appreciated.
• Rigorous and Strong problem-solving skills.
• Positive attitude, willing to upskill and carry out in-depth troubleshooting.
• Has the ability to work autonomously.
• Good interpersonal skills and team player.
• High energy level coupled with a desire to take on responsibility and able to multi-task.