L2 Cybersecurity Incident Response Engineer

Thales; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Thales Singapore is seeking an L2 Cybersecurity Engineer to safeguard company data and systems. You will handle day-to-day security operations, incident investigations, and risk mitigation within a fast-paced environment.

You will monitor SIEM alerts, manage security tooling, and collaborate with IT and development teams. The role includes a potential 24/7 on-call rotation and on-site duties in Singapore.

Qualifications

• Bachelor's degree or equivalent in information security, CS, or related field.
• 3+ years in cybersecurity roles with L2 support or equivalent.
• Strong knowledge of TCP/IP, Linux/Windows, and cloud security concepts.
• Experience with ITSM processes and best practices is a plus.
• Certs such as Security+, CEH, or CISSP are valued.

Responsibilities

• Investigate and respond to security incidents escalated from L1, performing root cause analysis.
• Monitor security alerts from SIEM dashboards and sources.
• Coordinate vulnerability assessments and penetration testing.
• Manage security infrastructure: firewalls, IDS/IPS, EDR/AV, tokenization, HSM, 2FA, PAM.
• Develop and enforce security policies and documentation.
• Proactively hunt for threats to strengthen detection capabilities.
• Collaborate with IT, development, and L3 teams; mentor L1 staff.
• Prepare detailed incident and system status reports for management and compliance.
• Participate in 24/7 on-call rotation and on-site support as needed.

Skills

Incident response

Monitoring & analysis

Vulnerability management

Security architecture

Threat hunting

Documentation

On-call readiness

Education

Bachelor's degree in Information Security or Computer Science

Tools

SIEM

Firewalls

Tenable

Incident response platforms

PAM / IAM tooling

Job description

Thales Singapore is seeking an L2 Cybersecurity Engineer to safeguard company data and systems. You will handle day-to-day security operations, incident investigations, and risk mitigation within a fast-paced environment.

You will monitor SIEM alerts, manage security tooling, and collaborate with IT and development teams. The role includes a potential 24/7 on-call rotation and on-site duties in Singapore.