Lead Security Engineer: SIEM/EDR SecOps & AI-Driven Ops

Sea; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Sea is seeking a Lead Security Engineer to join its Corporate IT Security Operations team in Singapore. You will engineer, operate, and continuously improve security platforms, including SIEM and EDR/XDR, while driving automation and data pipelines to strengthen threat detection and response.

You will mentor the team, translate security pain points into practical engineering solutions, and partner with infrastructure, cloud, identity, and application teams to enhance security visibility across

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or a related discipline.
• Minimum 5+ years of hands-on experience in Security Engineering, SecOps Engineering, SIEM Engineering, Detection Engineering, Incident Response, or related cybersecurity roles.
• Hands-on experience with at least one major SIEM or security analytics platform, such as Elastic Security or Splunk, and EDR/XDR tools.
• Experience with security automation using scripting, APIs, SOAR tools, Python, PowerShell, Bash, or similar technologies.
• Experience with AI-assisted SecOps, including alert enrichment, anomaly detection, investigation support, SOC workflow automation.

Responsibilities

• Support the IT Security Operations Manager in IT security engineering, security platform operations, SIEM modernisation, and SecOps process automation.
• Engineer, operate, and continuously improve enterprise security platforms, including SIEM, EDR/XDR, security automation/orchestration tools, and security data pipelines.
• Support the migration and modernisation of the SIEM environment to Elastic on GCP, including log ingestion, pipeline development, dashboards, alerting, rule tuning, and platform optimisation.
• Build and maintain security data pipelines for logs from corporate IT systems, networks, endpoints, identity platforms, cloud services, applications, and security tools.
• Improve alert enrichment, investigation workflows, case routing, ticketing integration, operational dashboards, and reporting.
• Support security monitoring, alert triage, threat investigation, incident response, detection tuning, and mitigation activities where required.
• Translate investigation experience and SecOps pain points into practical engineering improvements, including better detections, false‑positive reduction, automation playbooks, and runbooks.
• Explore and support AI-enabled SecOps use cases, including anomaly detection, alert enrichment, investigation assistance, behavioural analytics, and automation of repetitive SOC workflows.
• Partner with infrastructure, network, cloud, endpoint, identity, application, and cybersecurity teams to improve security visibility and operational effectiveness.
• Provide coaching, technical guidance, solution review, and knowledge sharing to team members.
• Maintain technical documentation, operational runbooks, security playbooks, platform standards, and handover materials.

Skills

Security Engineering

SecOps Engineering

SIEM Engineering

Detection Engineering

Incident Response

AI-assisted SecOps

Scripting

Team Leadership

Education

Bachelor’s degree in Computer Science / Cybersecurity / IT

Tools

Elastic Security

Splunk

CrowdStrike

Job description

Sea is seeking a Lead Security Engineer to join its Corporate IT Security Operations team in Singapore. You will engineer, operate, and continuously improve security platforms, including SIEM and EDR/XDR, while driving automation and data pipelines to strengthen threat detection and response.

You will mentor the team, translate security pain points into practical engineering solutions, and partner with infrastructure, cloud, identity, and application teams to enhance security visibility across