L2 Cybersecurity Support Engineer

Thales Group; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Thales in Singapore is seeking a highly capable L2 Cybersecurity Engineer to safeguard data and systems with day-to-day security infrastructure administration, incident investigations, and risk mitigation. You'll monitor threats, coordinate vulnerability assessments, and implement protections across firewalls, SIEM, EDR, and tokenization/identity tools, while collaborating with IT and development teams.

On-call may be required; a strong foundation in security metrics and communication is

Qualifications

• Bachelor's degree in information security or related field.
• 3+ years in cybersecurity with L2 focus and 1–2 years in mission-critical systems.
• Strong knowledge of security protocols, TCP/IP, OS (Linux/Windows).
• Experience with SIEM, firewalls, vulnerability scanners, and incident response.
• Certifications such as Security+, CEH, or CISSP preferred.
• Excellent analytical, communication, and collaboration skills.

Responsibilities

• Incident Response: investigate and respond to security incidents from L1 and perform root cause analysis.
• Monitoring & Analysis: monitor security alerts from SIEM dashboards and sources.
• Vulnerability Management: perform assessments and coordinate penetration testing.
• Security Infrastructure Management: manage firewalls, IDS/IPS, EDR/AV, CipherTrust, HSM, 2FA, PAM, Guardium and Rapid7.
• Policy & Documentation: develop and enforce security policies and documentation.
• Threat Hunting: proactively search for hidden threats and malware.
• Collaboration & Mentorship: work with IT/dev and mentor junior staff.
• Reporting: prepare detailed reports for management and compliance.
• On-Call Support: may require 24/7 on-call and on-site as needed.

Skills

Incident response

SIEM

Firewalls

Vulnerability management

Network security

Threat hunting

Cloud security

ITSM

Communication

Education

Bachelor's degree in Information Security or related field

Tools

QRadar

Palo Alto

Fortigate

Check Point

Tenable

Guardium

Rapid7

EDR/AV

2FA

PAM

Job description

Location: SINGAPORE, Singapore Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we're driven by a mission to build a future we can all trust. In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we're shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress. Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we're driven by a mission to build a future we can all trust. In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we're shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

The L2 Cybersecurity Engineer plays a crucial role in safeguarding the company's data and systems. This individual is responsible for day-to-day administration of security infrastructure, monitoring breaches, conducting in-depth incident investigations, and implementing technical solutions to mitigate risks. The role requires a deep understanding of network protocols, security tools, and the ability to work under pressure during security incidents.

Responsibilities:

• Incident Response: Investigate and respond to security incidents and breaches escalated from L1 support, performing root cause analysis to prevent recurrence.
• Monitoring & Analysis: Monitor and analyze security alerts and events from various sources, including SIEM (Security Information and Event Management) platforms (e.g., QRADAR) and security dashboards.
• Vulnerability Management: Conduct regular vulnerability assessments and coordinate penetration testing activities to identify weaknesses in systems and networks.
• Security Infrastructure Management: Implement, configure, troubleshoot, and maintain security technologies such as firewalls (e.g., Palo Alto, Fortigate, Check Point), intrusion detection/prevention systems (IDS/IPS), EDR/AV, CipherTrust (Tokenization Server), HSM, 2FA, PAM, IBM Guradium and Rapid 7.
• Policy & Documentation: Develop, maintain, and enforce security policies, procedures, and documentation, ensuring compliance with industry standards and regulations.
• Threat Hunting: Proactively search for hidden threats, malware, and vulnerabilities in the system to enhance detection capabilities.
• Collaboration & Mentorship: Collaborate with IT, development, and L3 teams to address security issues and implement best practices. May also assist in training and mentoring junior (L1) security staff.
• Reporting: Prepare detailed reports and documentation of security incidents, analyses, and system status for management and compliance purposes.
• On-Call Support: May require participation in a 24/7 on-call rotation to address critical incidents and ensure minimal downtime and be onsite if necessary.

Requirements:

• Education: Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent work experience.
• Experience: 3+ years of proven experience in cybersecurity or information security roles, with a focus on L2 support or similar responsibilities. Minimally 1-2 years of experience in supporting mission critical systems with a stringent SLA of 99.9%
• Technical Proficiency: Strong understanding of security protocols, TCP/IP, network security, operating systems (Linux, Windows), and cloud security concepts. Well-versed in IT Service Management (ITSM) standards, processes, guidelines and best practices is an advantage.
• Tool Experience: Hands-on experience with security tools such as SIEM, firewalls, vulnerability scanners (e.g., Tenable), and incident response platforms.
• Certifications (Preferred): Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or CISSP are highly valued.
• Soft Skills: Strong analytical thinking, problem-solving skills, attention to detail, and excellent communication and collaboration skills.

At Thales, we're committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you'll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference - for a safer, greener, and more inclusive world.

Interested in finding out more about Thales and why you should join us?