Lead Security Engineer - AI-Driven SecOps & SIEM

Sea; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Sea is seeking a Lead Security Engineer to join the Corporate IT Security Operations team in Singapore. You will be a key member, supporting the IT Security Operations Manager in engineering, operation, and continuous improvement of enterprise security platforms.

The role covers SIEM modernization, EDR/XDR operations, security automation, data pipelines, and runbooks. You will mentor teammates and help advance AI-enabled SecOps capabilities across global systems.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or a related discipline.
• Relevant certifications in cybersecurity, cloud, SIEM, incident response, or security engineering would be an advantage.
• Minimum 5+ years of hands-on experience in Security Engineering, SecOps Engineering, SIEM Engineering, Detection Engineering, Incident Response, or related cybersecurity roles, including at least 2 years of exposure to investigation, alert triage, detection tuning, incident response, threat hunting, or SOC operations.

Responsibilities

• Support the IT Security Operations Manager in IT security engineering, security platform operations, SIEM modernization, and SecOps process automation.
• Engineer, operate, and continuously improve enterprise security platforms, including SIEM, EDR/XDR, security automation/orchestration tools, and security data pipelines.
• Support the migration and modernisation of the SIEM environment to Elastic on GCP, including log ingestion, pipeline development, dashboards, alerting, rule tuning, and platform optimisation.
• Build and maintain security data pipelines for logs from corporate IT systems, networks, endpoints, identity platforms, cloud services, applications, and security tools.
• Improve alert enrichment, investigation workflows, case routing, ticketing integration, operational dashboards, and reporting.
• Support security monitoring, alert triage, threat investigation, incident response, detection tuning, and mitigation activities where required.
• Translate investigation experience and SecOps pain points into practical engineering improvements, including better detections, false‑positive reduction, automation playbooks, and runbooks.
• Explore and support AI‑enabled SecOps use cases, including anomaly detection, alert enrichment, investigation assistance, behavioural analytics, and automation of repetitive SOC workflows.
• Partner with infrastructure, network, cloud, endpoint, identity, application, and cybersecurity teams to improve security visibility and operational effectiveness.
• Provide coaching, technical guidance, solution review, and knowledge sharing to team members.
• Maintain technical documentation, operational runbooks, security playbooks, platform standards, and handover materials.

Skills

Security engineering

SecOps

SIEM operations

EDR/XDR

Automation scripting

AI-assisted SecOps

Incident response

Threat hunting

SOC operations

Python

PowerShell

Bash

SOAR tools

Education

Bachelor’s degree in Computer Science / Cybersecurity / Engineering / Information Technology

Tools

Elastic

Splunk

CrowdStrike

Job description

Sea is seeking a Lead Security Engineer to join the Corporate IT Security Operations team in Singapore. You will be a key member, supporting the IT Security Operations Manager in engineering, operation, and continuous improvement of enterprise security platforms.

The role covers SIEM modernization, EDR/XDR operations, security automation, data pipelines, and runbooks. You will mentor teammates and help advance AI-enabled SecOps capabilities across global systems.