L2 Cybersecurity Engineer (Ref 26505)

Jobline Resources Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Jobline Resources Pte Ltd in Singapore seeks a seasoned Security Operations professional to manage IAM/PAM, EPP/EDR and vulnerability remediation. You will monitor security queues, coordinate incident response, and maintain runbooks, while interfacing with clients and internal teams to drive timely remediation.

The role requires 4+ years in security operations, hands-on CyberArk experience, and strong analysis of AWS Security Hub findings.

Qualifications

• Bachelor's degree in IT/Computing or equivalent.
• 4+ years in security operations with hands-on IAM/PAM experience.
• Experience with CyberArk, EPP/EDR, vulnerability remediation and reviews.
• Proficiency with AWS Security Hub/Inspector findings, log analysis and incident response.

Responsibilities

• Monitor security queues, alerts, incidents and requests, respond per SLA.
• Support certificate lifecycle management and renewal actions.
• Perform IAM/PAM tasks and assist CyberArk administration.
• Investigate EPP/EDR alerts and coordinate containment/remediation.
• Review vulnerability findings and track remediation with resolver groups.
• Conduct account/access reviews and document exceptions or follow-up actions.
• Analyze AWS Security Hub findings and route remediation actions.
• Support incident response with evidence gathering and escalation.
• Update tickets with investigation details and resolutions.
• Execute approved security changes with proper risk/backout data.
• Maintain runbooks and knowledge articles; improve repeatable processes.
• Communicate with clients, internal teams and third parties during remediation.

Skills

Security operations

IAM/PAM

EPP/EDR

Vulnerability management

Incident response

AWS Security Hub

Log analysis

Communication

Education

Bachelor's degree in IT/Computing

Tools

CyberArk

EDR/EPP tools

Job description

Responsibilities:

• Monitors assigned security queues, alerts, findings, incidents and requests and responds within agreed SLA.
• Supports certificate lifecycle management activities, including operational tracking and approved renewal or replacement actions.
• Performs IAM/PAM operational tasks and supports CyberArk administration within approved procedures and access authority.
• Supports EPP/EDR operations, investigates alerts and coordinates containment or remediation actions in accordance with runbooks.
• Reviews vulnerability findings and supports remediation tracking and validation with relevant resolver groups.
• Performs account and access reviews and documents identified exceptions or required follow-up actions.
• Reviews AWS Security Hub and Inspector findings, performs initial analysis and routes or tracks remediation actions.
• Performs security monitoring and log analysis to support incident identification and investigation.
• Supports incident response activities by gathering evidence, recording actions, escalating appropriately and maintaining clear communication.
• Updates tickets with accurate investigation details, actions taken, evidence and resolution status.
• Executes approved security changes with proper risk, validation and backout information.
• Maintains security runbooks and knowledge articles and contributes to improvement of repeatable operational processes.
• Communicates with clients, internal teams and third parties when extending support or coordinating remediation.
• Performs any other related task as required.

Requirements:

• Bachelor's degree or equivalent qualification in IT/Computing (or demonstrated equivalent work experience).
• 4+ years of overall relevant experience.
• 3+ years of experience in Security Operations, IAM/PAM, EDR/EPP and vulnerability management.
• Hands-on experience with certificate lifecycle management, IAM/PAM, CyberArk, EPP/EDR, vulnerability remediation and account/access reviews.
• Experience with AWS Security Hub/Inspector findings, security monitoring, log analysis and incident response.

Certifications relevant to the services provided carry additional weightage on a candidate's qualification for the role.

Required certification(s): CompTIA Security+, GSEC, or equivalent certification.

Good-to-have certification(s):

• CyberArk Defender.
• AWS Certified Security - Specialty.
• Relevant vendor EDR/EPP certification.

Licence no: 12C6060