L2 Cybersecurity Incident Response Engineer

Thales; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Thales in Singapore is seeking an L2 Cybersecurity Engineer to safeguard data and systems, performing day-to-day security infrastructure administration, incident investigations, and risk mitigation. The role demands hands-on experience across networks, Linux/Windows, and cloud security, with a focus on rapid containment and root cause analysis.

You will monitor security events via SIEM dashboards, coordinate vulnerability management activities, and collaborate with IT and development teams to

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent work experience.
• 3+ years of proven experience in cybersecurity or information security roles, with a focus on L2 support or similar responsibilities. Minimally 1-2 years of experience in supporting mission critical systems with a stringent SLA of 99.9%
• Strong understanding of security protocols, TCP/IP, network security, operating systems (Linux, Windows), and cloud security concepts. Well-versed in ITSM standards, processes, guidelines and best practices is an advantage.
• Hands-on experience with security tools such as SIEM, firewalls, vulnerability scanners (e.g., Tenable), and incident response platforms.
• Relevant certifications such as CompTIA Security+, CEH, or CISSP are highly valued.
• Strong analytical thinking, problem-solving skills, attention to detail, and excellent communication and collaboration skills.

Responsibilities

• Investigate and respond to security incidents and breaches escalated from L1 support, performing root cause analysis to prevent recurrence.
• Monitor and analyze security alerts and events from various sources, including SIEM platforms and security dashboards.
• Conduct regular vulnerability assessments and coordinate penetration testing activities to identify weaknesses in systems and networks.
• Implement, configure, troubleshoot, and maintain security technologies such as firewalls, IDS/IPS, EDR/AV, CipherTrust, HSM, 2FA, PAM.
• Develop, maintain, and enforce security policies, procedures, and documentation, ensuring compliance with standards and regulations.
• Proactively search for hidden threats, malware, and vulnerabilities to enhance detection capabilities.
• Collaborate with IT, development, and L3 teams to address security issues and mentor junior staff.
• Prepare detailed reports and documentation of security incidents, analyses, and system status for management and compliance.
• May require participation in a 24/7 on-call rotation and be onsite if necessary.

Skills

Security protocols

TCP/IP

Linux

Windows

Cloud security

ITSM

SIEM

Firewalls

Vulnerability scanners

Incident response platforms

Education

Bachelor’s degree in Information Security, CS, or related

Tools

SIEM

Firewalls

Vulnerability scanners (Tenable)

EDR/AV

Tokenization / CipherTrust

Job description

Thales in Singapore is seeking an L2 Cybersecurity Engineer to safeguard data and systems, performing day-to-day security infrastructure administration, incident investigations, and risk mitigation. The role demands hands-on experience across networks, Linux/Windows, and cloud security, with a focus on rapid containment and root cause analysis.

You will monitor security events via SIEM dashboards, coordinate vulnerability management activities, and collaborate with IT and development teams to