Process Automation Lead

encora technologies pte. ltd.; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

encora technologies pte. ltd. in Singapore is seeking a Security Automation Leader to elevate our cybersecurity posture through automation, data analytics, and cloud security engineering.

You will design and maintain distributed Splunk environments and drive automation using Python, APIs, dashboards, and AI-powered tooling. You will collaborate with infrastructure and application teams to deploy security controls across AWS, Azure, M365, and OpenShift/Kubernetes, develop integrations with SIEMs,

Qualifications

• Proficient in Splunk SPL, Linux, and Python for automation.
• Design, deployment, and maintenance of distributed/clustered Splunk environments.
• Management of search heads, indexers, forwarders.
• Data ingestion: configuring inputs, indexes, source types.
• Content creation: dashboards, reports, alerts.
• Access control: user roles, authentication.
• Application management: installing/upgrading apps.
• Scripting & Troubleshooting; Linux CLI.
• Python scripting for automation and troubleshooting.
• Cloud security across AWS, Azure, M365, OpenShift/Kubernetes.

Responsibilities

• Design, implement, and maintain distributed and clustered Splunk environments.
• Drive security automation initiatives using Splunk, Python, APIs, dashboards, and AI-powered tools.
• Develop dashboards, alerts, reports, and automation workflows to support security monitoring and vulnerability management.
• Optimize data ingestion, search performance, and platform availability.
• Administer Splunk access controls, deployments, upgrades, and configurations.
• Troubleshoot complex issues, perform root cause analysis, document findings.
• Support security engineering across AWS, Azure, M365, and OCP.
• Develop integrations between cloud security services, SIEMs, and tooling.
• Collaborate with teams to implement security controls and security-by-design.

Skills

Splunk SPL

Linux commands

Python scripting

Security automation

API integrations

Troubleshooting

Root cause analysis

Cloud security

Education

Bachelor’s degree in computer science or related field

Tools

Splunk

Kubernetes/OpenShift

AWS

Azure

Microsoft 365

Job description

Responsibilities

As a Security Automation Leader, you will play a critical role in enhancing our cybersecurity posture through automation, data analytics, intelligent tooling, and cloud security engineering.

• Design, implement, and maintain distributed and clustered Splunk environments, ensuring seamless integration with infrastructure, security, and application platforms.
• Drive security automation initiatives using Splunk, Python, APIs, dashboards, and AI-powered tools such as Copilot to improve operational efficiency.
• Develop and maintain dashboards, alerts, reports, and automation workflows to support security monitoring, vulnerability management, and operational processes.
• Optimize data ingestion, search performance, and platform availability to ensure a scalable and resilient Splunk environment.
• Administer Splunk access controls, application deployments, upgrades, and platform configurations in accordance with security and compliance requirements.
• Troubleshoot complex technical issues, perform root cause analysis, and document findings to support continuous improvement and knowledge sharing.
• Support security engineering activities across AWS, Azure, Microsoft 365, and OpenShift Container Platform (OCP), including security monitoring, vulnerability management, and compliance initiatives.
• Develop integrations between cloud security services, SIEM platforms, and security tooling to enhance visibility, automation, and operational effectiveness.
• Collaborate with infrastructure, platform, and application teams to implement security controls and security-by-design practices across cloud and containerized environments.

Requirements

Education:

• Bachelor’s degree in computer science or related field.

Certifications (preferred but not explicitly listed):

• oSplunk Certified Power User / Admin / Architect
• oCoding development using Python and similar
• oAWS, Azure, Microsoft365, or Kubernetes/OpenShift security certifications

Essential

• You must be well versed with Splunk SPL, Linux commands and python scripting
• oDesign, deployment, and maintenance of distributed/clustered Splunk environments
• oManagement of search heads, indexers, forwarders
• oData ingestion: configuring inputs, indexes, source types
• oContent creation: dashboards, reports, alerts
• oAccess control: user roles, authentication
• oApplication management: installing/upgrading custom and Splunk base apps
• oScripting & Troubleshooting
• oLinux command-line skills
• oPython scripting for automation and troubleshooting
• oLog analysis and issue reproduction
• oBug reporting and vendor escalation
• You must be the experienced developer, with good experience in system integration/interfacing.
• Depending on the project, your duties may include coding, scripting, building new systems(where necessary) and interfaces. For new system build-up, you may need to environment support during SIT/UAT.
• You are expected to ensure your work are adequately documented and transferred to the production team post-cutover.
• You will be expected to work with the senior developers and system architect in formulating technical solutions that is fit for purpose for your assigned projects. The solution will need to satisfy all security, regulatory and architectural standards.
• You should possess hands-on experience with cloud security technologies across AWS, Azure, Microsoft 365, and OpenShift/Kubernetes environments, including security monitoring, vulnerability management, cloud security posture management, and security tool integration

Key Domain/ Technical Skills

• Integration with infrastructure and security devices
• Security design architecture and process.
• Splunk as a core SPL (Search Processing Language) and reporting
• Python Scripting for automation and troubleshooting.
• Cloud security, monitoring, and compliance across AWS, Azure, Microsoft 365, and OCP.