Lead SOC Automation & Analytics Engineer

NETS; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NETS is seeking a seasoned SOC automation specialist to design and implement scalable automation across SIEM, SOAR, and EDR/XDR ecosystems. You will lead data-driven initiatives, build reusable frameworks, and drive governance and documentation to streamline SOC operations.

You will collaborate with Cyber Defence, IT, Cloud, and Data teams to translate security telemetry into actionable insights and dashboards for leadership.

Qualifications

• 7+ years in logic automation, cybersecurity, data engineering, or SOC Automation.
• 5+ years in SOC automation / security engineering / data analytics.
• 3+ years in a senior/lead technical role.
• Strong hands-on Python, PowerShell, Bash, PowerApps, RPA, PowerBI.

Responsibilities

• Design and implement automation to reduce manual SOC tasks.
• Develop integrations across SIEM, SOAR, EDR/XDR, ticketing, and threat intel.
• Build reusable automation frameworks using Python, PowerShell, APIs, and workflows.
• Drive use-case automation to improve SOC efficiency and response time.
• Establish automation standards, governance, and documentation.
• Design and maintain SOC data pipelines for reliable telemetry ingestion.
• Perform data analysis to uncover trends and insights.
• Ensure data quality and consistency across security platforms.
• Support advanced analytics including basic machine learning use cases.
• Develop executive dashboards (KPIs, KRIs, SLAs) for SOC performance.

Skills

Python

PowerShell

Bash

PowerApps

RPA

PowerBI

SIEM

SOAR

EDR/XDR

Data visualization

Education

Bachelor’s degree in a relevant field

Tools

Splunk

Elastic

LogRhythm

SolarWinds

Tableau

Grafana

Job description

NETS is seeking a seasoned SOC automation specialist to design and implement scalable automation across SIEM, SOAR, and EDR/XDR ecosystems. You will lead data-driven initiatives, build reusable frameworks, and drive governance and documentation to streamline SOC operations.

You will collaborate with Cyber Defence, IT, Cloud, and Data teams to translate security telemetry into actionable insights and dashboards for leadership.