Lead Security Systems Engineer (Microsoft Sentinel)

epam systems pte. ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

EPAM Systems Pte. Ltd. in Singapore is hiring a hands-on Security Operations professional to own Microsoft Sentinel detections, coordinate incident response, and manage outsourced SOC/MDR relationships.

You will drive detection improvements, vulnerability tracking, and post-incident reviews while leading a small team and collaborating with cross-functional stakeholders. The role emphasizes endpoint protection through Defender for Endpoint/Cloud, strong governance of third-party services, and

Qualifications

• Proven experience leading security operations in a hands-on capacity.
• Strong background in Microsoft Sentinel including rule tuning, workbooks, hunting and detection engineering.
• Hands-on experience with Microsoft Defender for Endpoint and Microsoft Defender for Cloud.
• Demonstrated ability to manage an outsourced SOC/MDR service including escalations and performance governance.
• Knowledge of incident response practices including severity assessment, coordination and post-incident reviews.
• Experience with Jira Service Management and end-to-end ticket lifecycle ownership.
• Strong understanding of Vulnerability Management including scanning, remediation tracking and patch governance.
• Clear communication with confidence translating operational metrics into management-ready reporting.

Responsibilities

• Own Microsoft Sentinel detections including analytics rules, workbooks and Kusto Query Language (KQL) queries
• Lead day-to-day SOC and incident operations with an outsourced SOC/MDR vendor including SLAs, escalations and service reviews
• Validate log source coverage across endpoint, identity, network, cloud and critical business systems
• Triage and coordinate incident response from assessment through containment, remediation and closure in Jira Service Management
• Improve signal quality by reducing false positives and tracking Mean Time to Detect and Mean Time to Respond
• Run post-incident reviews and update detections, runbooks and incident response playbooks
• Own vulnerability scanning cadence, maintain a remediation register and track patching against agreed SLAs
• Mentor and support the Security Operations Analyst while building repeatable, audit-ready processes

Skills

Microsoft Sentinel

SOC operations

Incident response

Jira Service Management

Vulnerability management

Threat hunting

Communication

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Cloud

Jira Service Management

Job description

About EPAM

EPAM is a leading global provider of digital platform engineering and development services. EPAM has been expanding in Singapore since 2013 and delivering the best solutions to our customers. As a recognized leader, EPAM Singapore achieved Great Place to Work® Certification in 2023 and is committed to providing our team with inspiring careers.

You will have the opportunity to work with fellow talented technologists and accelerate your career by participating in our numerous upskilling, training, and certification programs. That is why EPAM Singapore was awarded Gold for Best In-House Certification Programme in the Employee Experience Awards 2023 and Silver in the SkillsFuture Employers Awards 2022 for our efforts in championing employees' skills development and building a lifelong learning culture at the workplace. You can also look forward to developing holistically with the multiracial festivals and various wellness and cultural activities organized by our passionate colleagues here.

Why EPAM?

• By choosing EPAM, you're getting a job at one of the most loved workplaces according to Newsweek 2022 & 2023.
• Employee ideas are the main driver of our business. We have a very supportive environment where your voice matters.
• You will be challenged while working side-by-side with the best talent globally. We work with top-notch technologies, constantly seeking new industry trends and best practices.
• We offer a transparent career path and an individual roadmap to engineer your future & accelerate your journey.
• At EPAM, you can find vast opportunities for self-development: online courses and libraries, mentoring programs, partial grants of certification, and experience exchange with colleagues around the world. You will learn, contribute, and grow with us.

What You’ll Do

• Own Microsoft Sentinel detections including analytics rules, workbooks and Kusto Query Language (KQL) queries
• Lead day-to-day SOC and incident operations with an outsourced SOC/MDR vendor including SLAs, escalations and service reviews
• Validate log source coverage across endpoint, identity, network, cloud and critical business systems
• Triage and coordinate incident response from assessment through containment, remediation and closure in Jira Service Management
• Improve signal quality by reducing false positives and tracking Mean Time to Detect and Mean Time to Respond
• Run post-incident reviews and update detections, runbooks and incident response playbooks
• Own vulnerability scanning cadence, maintain a remediation register and track patching against agreed SLAs
• Mentor and support the Security Operations Analyst while building repeatable, audit-ready processes

What Will Make You Shine

• Proven experience leading security operations in a hands-on capacity
• Strong background in Microsoft Sentinel including rule tuning, workbooks, hunting and detection engineering
• Hands-on experience with Microsoft Defender for Endpoint and Microsoft Defender for Cloud
• Demonstrated ability to manage an outsourced SOC/MDR service including escalations and performance governance
• Knowledge of incident response practices including severity assessment, coordination and post-incident reviews
• Experience with Jira Service Management and end-to-end ticket lifecycle ownership
• Strong understanding of Vulnerability Management including scanning, remediation tracking and patch governance
• Clear communication with confidence translating operational metrics into management-ready reporting

Nice to Have

• Experience in a regulated environment such as financial services, asset management or a hedge fund
• Tenable Nessus or comparable vulnerability scanning tooling
• Darktrace or network anomaly detection tooling

How We Hire

Here, we summarize the typical journey to finding a job within EPAM:

• Go through some standard interviews:

1. General interview with a recruiter
2. Technical interview with our technology experts
3. Manager interview or Offer interview with a hiring manager

• Get ready to join the team

It takes 1 min of application to start the journey with us.