Remote Detection Engineer, SIEM & Security Operations Lead

Reap; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work options

Flexible hours

Home office budget

Annual leave and holidays

Job summary

Reap is a globally focused payment technology company building next‑generation security for a multi‑rail ecosystem. We seek a Detection Engineering and Security Operations lead to design and implement our detection infrastructure from the ground up, integrating CrowdStrike and cloud logs, and turning threat intelligence into precise rules.

You will partner with the CISO and engineering teams to reduce incident impact, improve detection times, and automate responses.

Qualifications

• Experience building detection rules from scratch across SIEM platforms.
• Ability to translate MITRE ATT&CK into testable detection rules.
• Hands-on log source integration and normalisation (CloudTrail/Okta/M365).
• Proficiency in Python for security automation and orchestrations.

Responsibilities

• Own the SIEM platform from evaluation to production detection capability.
• Write detection rules for Lazarus Group, social engineering, and related TTPs.
• Own alert triage and escalation process with defined SLAs.
• Ingest relevant logs and build a robust detection rule library.
• Operationalise threat intelligence and translate IOCs into rules on cadence.
• Build dashboards and automated reports for security leadership.
• Support CrowdStrike Falcon Complete configuration and response workflows.

Skills

SIEM platforms

Microsoft Sentinel

Splunk

Elastic

KQL

SPL

Python

Threat detection

Tools

CrowdStrike

AWS CloudTrail

Okta logs

M365 logs

SaaS logs

Job description

Reap is a globally focused payment technology company building next‑generation security for a multi‑rail ecosystem. We seek a Detection Engineering and Security Operations lead to design and implement our detection infrastructure from the ground up, integrating CrowdStrike and cloud logs, and turning threat intelligence into precise rules.

You will partner with the CISO and engineering teams to reduce incident impact, improve detection times, and automate responses.