IT Security Engineer

ALTROCKS TECH PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

ALTROCKS TECH PTE. LTD. seeks a Security Operations professional to monitor, investigate, and lead incident response for malware, phishing, insider threats, and data leakage.

The role covers vulnerability management, patch coordination, security tools ownership (SIEM, EDR/XDR, email/web security, DLP), and translating threat intel into practical controls and detections.

Qualifications

• Bachelor-level degree in CS/IT or equivalent.

Responsibilities

• Monitor and investigate security alerts.
• Lead or support incident response for malware, phishing, insider threats and data leakage.
• Coordinate containment, eradication and recovery actions.
• Post-incident root cause analysis and improvements.
• Perform vulnerability scanning and risk assessment.
• Coordinate patching with IT and applications teams.
• Own day-to-day operation of security platforms (SIEM/SOAR, EDR/XDR, email and web security, DLP, CASB).
• Tune detections and reduce false positives.
• Track threats and translate intelligence into actionable controls.

Skills

Incident response experience

Networking knowledge

Windows & Unix desktop experience

Security tools usage

Education

Degree in Computer Science/IT or equivalent

Certifications: QISP, CISSP, CyN, CompTIA Security+

Tools

Security Endpoint solutions

CyberArk

Tenable Nessus

Securonix

Sentinel

Job description

1. Security Operations & Incident Response

• Monitor and investigate security alerts (directly or via SOC)
• Lead or support incident response for:
  • Malware / ransomware
  • Phishing and account compromise
  • Insider threats
  • Data leakage incidents
• Coordinate containment, eradication, and recovery activities
• Conduct post-incident root cause analysis and improvement actions

2. Vulnerability & Patch Management

• Perform vulnerability scanning and risk assessment
• Analyse scan results and prioritize remediation based on business risk
• Coordinate patching with IT and application teams
• Track remediation progress and report risk exposure

3. Security Tool Ownership

• Own day-to-day operation of security platforms such as:
  • SIEM / SOAR
  • EDR / XDR
  • Email and web security
  • DLP, CASB
• Tune detections, improve signal quality, and reduce false positives
• Integrate security tools with enterprise systems
• Advantage if verse in tools like Sentinel / Securonix

4. Threat Management & Intelligence

• Track emerging threats, vulnerabilities, and attack trends
• Assess relevance and impact to the organization
• Translate threat intelligence into actionable controls and detections

Requirement:

• Degree in Computer Science/Information Technology or equivalent
• At least 3 years’ experience in IT
• Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and above)
• Experience in using security tools (E.g. Security Endpoint solutions, CyberArk, Tenable Nessus, Securonix, Sentinel))
• Certified with one or more of the following: QISP, CISSP, Cybersecurity Nexus, CompTIA Security+