ICT Security Engineer (Python / ELK / Java / SIEM)

MALTEM ASIA PTE. LTD.; Singapore; On-site; SGD 85,000 - 120,000; Full time

Job summary

Maltem Asia is seeking an ICT Security Engineer for a Wealth Management client in Singapore. You will lead security use case definition, design and deployment, and oversee detection capabilities in a 24/7 regional SOC.

The role requires hands-on incident response, threat hunting, and strong experience with ELK SIEM. Proficiency in Python/PowerShell/Bash/SQL and Linux is preferred.

Qualifications

• 3+ years of experience in Cyber Security Incident Response.
• Experience in security use-case design/development and coding.
• Experience with SIEM on ELK stack is a plus.
• Proficiency in Python, PowerShell, Bash, SQL is a plus.

Responsibilities

• Lead security use case definition, design, and implementation.
• Build robust detection posture across IT Production Security Investigation & Incident Response.
• Perform threat hunting and incident response within the 24/7 regional SOC.
• Respond to cyber security incidents and assess the type and severity.

Skills

Security use case design

Threat hunting

Incident response

SIEM experience

Linux

Java

Python

PowerShell

Bash

SQL

MITRE ATT&CK

Automation mindset

Tools

ELK (Elastic Stack)

Kibana

Logstash

Elasticsearch

Job description

Maltem Asia is seeking an ICT Security Engineer for a Wealth Management Client based in Singapore.

Summary:

• Lead technical activities (security use case definition, design, implementation & enrichment) in the team of IT Production Security Investigation & Incident Response based on real-world attack scenarios and framework like MITRE ATT&CK, ensuring robust security detection posture across various layers.
• Understand ongoing security threats in the wild and propose security use case to detect and when possible, protect or mitigate.
• Be autonomous on technical activities (definition, R&D/threat hunting) in the team of IT Production Security Investigation & Incident Response and oversee the detection capabilities of the 24/7 regional IT Production SOC
• Respond to Cyber / IT security incidents and evaluates the type and severity of security events.

Technical Skills:

• Requires a minimum of 3 or more years of experience as security professional
• Experience in security usecase design/development with understanding of Java language.
• Good working knowledge of Linux (RedHat/Ubuntu).
• Working knowledge to interpret security logs or instructions into threat models. SecOPS-DevOPS mindset & skills.
• Experience and knowledge in investigating incidents, remediation, tracking and follow-up for incident closure with concerned teams, stakeholders.
• Thorough understanding of technologies and security concepts, with knowledge & hands on experience in SIEM Product and Security Incident Management
• Experience on incident response activities (threat hunting, event analysis, incident investigation, reporting)
• Comfortable working with and making the most of large data sets (collection, analysis, response), creating content/use cases/models and bringing an automation mindset. Personal Attributes
• Positive attitude, willing to upskill and carry out in-depth troubleshooting
• Has the ability to work autonomously and think on feet, be-proactive.
• Good interpersonal skills and team player
• High energy level coupled with a desire to take on responsibility
• Able to multi-task & deliver within agreed deadlines.

Must have:

• Candidate should have 3 or more years of experience on overall Cyber Security Incident Response with 3+ years specifically on security used case design, development, coding.
• Experience in SIEM on ELK(Elastic Logstash Kibana) stack is a plus
• Professional credentials in one of the relevant IT Security disciplines is a plus (SANS / CISSP / OSCP)
• Experience in common scripting languages such as Python, PowerShell, Bash, SQL is a plus