L2 Cybersecurity Support Engineer

Thales; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Thales Singapore is seeking an L2 Cybersecurity Engineer to safeguard company data and systems. You will handle day-to-day security operations, incident investigations, and risk mitigation within a fast-paced environment.

You will monitor SIEM alerts, manage security tooling, and collaborate with IT and development teams. The role includes a potential 24/7 on-call rotation and on-site duties in Singapore.

Qualifications

• Bachelor's degree or equivalent in information security, CS, or related field.
• 3+ years in cybersecurity roles with L2 support or equivalent.
• Strong knowledge of TCP/IP, Linux/Windows, and cloud security concepts.
• Experience with ITSM processes and best practices is a plus.
• Certs such as Security+, CEH, or CISSP are valued.

Responsibilities

• Investigate and respond to security incidents escalated from L1, performing root cause analysis.
• Monitor security alerts from SIEM dashboards and sources.
• Coordinate vulnerability assessments and penetration testing.
• Manage security infrastructure: firewalls, IDS/IPS, EDR/AV, tokenization, HSM, 2FA, PAM.
• Develop and enforce security policies and documentation.
• Proactively hunt for threats to strengthen detection capabilities.
• Collaborate with IT, development, and L3 teams; mentor L1 staff.
• Prepare detailed incident and system status reports for management and compliance.
• Participate in 24/7 on-call rotation and on-site support as needed.

Skills

Incident response

Monitoring & analysis

Vulnerability management

Security architecture

Threat hunting

Documentation

On-call readiness

Education

Bachelor's degree in Information Security or Computer Science

Tools

SIEM

Firewalls

Tenable

Incident response platforms

PAM / IAM tooling

Job description

Location: SINGAPORE, Singapore

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia-Pacific region. With 2,000 employees across three local sites, we deliver cutting-edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

The L2 Cybersecurity Engineer plays a crucial role in safeguarding the company's data and systems. This individual is responsible for day-to-day administration of security infrastructure, monitoring breaches, conducting in-depth incident investigations, and implementing technical solutions to mitigate risks. The role requires a deep understanding of network protocols, security tools, and the ability to work under pressure during security incidents.

Responsibilities:

• Incident Response: Investigate and respond to security incidents and breaches escalated from L1 support, performing root cause analysis to prevent recurrence.
• Monitoring & Analysis: Monitor and analyze security alerts and events from various sources, including SIEM (Security Information and Event Management) platforms (e.g., QRADAR) and security dashboards.
• Vulnerability Management: Conduct regular vulnerability assessments and coordinate penetration testing activities to identify weaknesses in systems and networks.
• Security Infrastructure Management: Implement, configure, troubleshoot, and maintain security technologies such as firewalls (e.g., Palo Alto, Fortigate, Check Point), intrusion detection/prevention systems (IDS/IPS), EDR/AV, CipherTrust (Tokenization Server), HSM, 2FA, PAM, IBM Guradium and Rapid 7.
• Policy & Documentation: Develop, maintain, and enforce security policies, procedures, and documentation, ensuring compliance with industry standards and regulations.
• Threat Hunting: Proactively search for hidden threats, malware, and vulnerabilities in the system to enhance detection capabilities.
• Collaboration & Mentorship: Collaborate with IT, development, and L3 teams to address security issues and implement best practices. May also assist in training and mentoring junior (L1) security staff.
• Reporting: Prepare detailed reports and documentation of security incidents, analyses, and system status for management and compliance purposes.
• On-Call Support: May require participation in a 24/7 on-call rotation to address critical incidents and ensure minimal downtime and be onsite if necessary

Requirements:

• Education: Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent work experience.
• Experience: 3+ years of proven experience in cybersecurity or information security roles, with a focus on L2 support or similar responsibilities. Minimally 1-2 years of experience in supporting mission critical systems with a stringent SLA of 99.9%
• Technical Proficiency: Strong understanding of security protocols, TCP/IP, network security, operating systems (Linux, Windows), and cloud security concepts. Well-versed in IT Service Management (ITSM) standards, processes, guidelines and best practices is an advantage.
• Tool Experience: Hands‑on experience with security tools such as SIEM, firewalls, vulnerability scanners (e.g., Tenable), and incident response platforms.
• Certifications (Preferred): Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or CISSP are highly valued.
• Soft Skills: Strong analytical thinking, problem‑solving skills, attention to detail, and excellent communication and collaboration skills.

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.