ICT Security Engineer (Elastic stack knowledge)

MIGSO-PCUBED; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

MI-GSO | PCUBED Group in Singapore seeks an ICT Security Engineer to join the Production Security team. You will install and administer SIEM infrastructure, build automation (Ansible, Python/Bash) and integrate new log sources, including Kafka pipelines.

As a full-time member of the Production CSIRT / SIEM Engineering squad, you will contribute to incident management, policy compliance and ongoing security improvements.

Qualifications

• Proven experience with large-scale production log management and SIEM.
• Minimum 2 years scripting in Python or Bash.
• Experience with regex for data parsing and log extraction.
• Automation and orchestration using Ansible and CI/CD tooling.
• Understanding of IT security concepts and production administration.
• Experience managing production security tools with focus on logging/analytics.

Responsibilities

• Install and administer the servers of the SIEM Infrastructure.
• Build and maintain automation (Ansible playbooks, python/bash scripts).
• Integrate new log sources and emerging technologies (including Kafka-based pipelines).
• Act as a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.

Skills

Regex expertise

Python or Bash scripting

Ansible automation

CI/CD pipelines

IT security concepts

SIEM / log management

Tools

CI/CD tooling

Logstash

SIEM platforms

Regex tooling

Job description

We are looking for an ICT Security Engineer to be located in SG to join our Production Security team. Please find attached the JD and some details below:

Key Responsibilities

Direct Responsibilities

• Install and administrate the servers of the SIEM Infrastructure.
• Build & maintain automation (Ansible playbooks, python/bash scripts) and self-service tool to minimize manual work.
• Integrate new log sources and emerging technologies (including Kafka-based pipelines).
• Act as a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.

Contributing Responsibilities

• Contribute to the Permanent Control framework for implementation of policies and procedures in day‑to‑day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System

Role Specific Technical Skills

Production experience across the following technologies:

• Experience writing Regex (Regular Expression)
• Scripting/programming – Python **or** Bash (minimum 2 years).
• Automation/orchestration – Ansible (or equivalent) and CI/CD pipelines.
• Background in IT Security concepts & administration (OS, Network).
• Managing Production security tools with focus on logging platforms – ingestion, indexing, monitoring and analytics (mandatory) preferably in large organization. SIEM experience is plus

Personal Attributes

• Rigorous and detail-oriented.
• Strong analytical and problem-solving skills.
• Self-driven; able to work autonomously and take ownership.
• Excellent communicator and collaborative team player.
• High energy, proactive attitude and willingness to up-skill.
• Able to manage multiple priorities simultaneously.

Specific Qualifications

• Total professional experience ≥ 7 years, with at least 4-5 years focused on large-scale setup to manage Logstash , regular expression.
• Banking-sector experience is optional but regarded as a plus.
• Experience writing Regex (Regular Expression)
• Scripting/programming – Python **or** Bash (minimum 2 years).