Security Analyst

QUESS SINGAPORE; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

QUESS SINGAPORE is seeking an experienced security operations engineer to administer and optimize enterprise security tools, including SIEM, EDR, IPS, NTA, and DAM. The role focuses on monitoring events, investigating alerts, and strengthening incident response while supporting secure network designs and AI-enabled threat detection.

The candidate should have 4+ years of hands-on experience, strong scripting skills in Python and PowerShell, API proficiency, and familiarity with SOAR platforms to

Qualifications

• 4+ years hands-on experience administering and managing enterprise security tools
• Experience with Google Security Operations SIEM, EDR, IPS, NTA, and DAM technologies
• Knowledge of IT network security concepts including LAN/WAN, VLAN, MPLS, network zoning, micro-segmentation, and restricted network design
• Familiarity with AI/ML security solutions and automation tooling
• Proficiency in Python and PowerShell with API usage for automation
• Knowledge of SOAR tools and security workflow automation
• Strong analytical and troubleshooting skills to support enterprise security operations

Responsibilities

• Administer, configure, and maintain enterprise security tools (Google Security Operations SIEM, EDR, IPS, NTA, DAM)
• Monitor security events, investigate alerts, support threat detection, and enhance incident response
• Support secure network design (LAN/WAN, VLAN, MPLS, network zoning, micro-segmentation)
• Leverage AI/ML-based security tools to improve threat detection and operations
• Develop scripts using Python, PowerShell, and APIs to automate tasks
• Utilize SOAR platforms to streamline incident handling and workflow automation

Skills

SIEM administration

EDR

IPS

NTA

DAM

Networking security

AI/ML in security

Python scripting

PowerShell

API integration

SOAR

Security ops

Education

Bachelor's degree in CS/IS/cybersecurity

Tools

Google Security Operations SIEM

EDR tooling

IPS

NTA

DAM

SOAR platforms

Python

PowerShell

APIs

Job description

About the role

Administer, configure, and maintain enterprise security tools, including Google Security Operations SIEM, Endpoint Detection and Response (EDR), Intrusion Prevention Systems (IPS), Network Traffic Analysis (NTA), and Database Activity Monitoring (DAM). Support the implementation and administration of secure network architectures, including LAN, WAN, VLAN, MPLS, network zoning, micro-segmentation, and restricted network environments. Work with cybersecurity tools and solutions that leverage Artificial Intelligence (AI) and Machine Learning (ML) capabilities to improve threat detection and security operations.

Key responsibilities

• Administer, configure, and maintain enterprise security tools, including Google Security Operations SIEM, Endpoint Detection and Response (EDR), Intrusion Prevention Systems (IPS), Network Traffic Analysis (NTA), and Database Activity Monitoring (DAM)
• Monitor security events, investigate alerts, support threat detection, and enhance security monitoring and incident response capabilities
• Support the implementation and administration of secure network architectures, including LAN, WAN, VLAN, MPLS, network zoning, micro-segmentation, and restricted network environments
• Work with cybersecurity tools and solutions that leverage Artificial Intelligence (AI) and Machine Learning (ML) capabilities to improve threat detection and security operations
• Develop and maintain scripts using Python, PowerShell, and APIs to integrate security controls, automate workflows, and streamline repetitive operational tasks
• Leverage Security Orchestration, Automation and Response (SOAR) platforms to improve operational efficiency and security incident handling

About you

• Minimum 4 years of hands-on experience administering and managing enterprise security tools and solutions
• Practical experience with Google Security Operations SIEM, EDR, IPS, NTA, and DAM technologies
• Good knowledge of IT network security concepts, including secure LAN/WAN, VLAN, MPLS, network zoning, micro-segmentation, and restricted network design
• Familiarity with cybersecurity solutions incorporating AI and ML capabilities
• Proficiency in scripting languages such as Python and PowerShell, with experience using APIs for security tool integration and automation
• Knowledge of SOAR tools and security workflow automation
• Strong analytical, troubleshooting, and problem-solving skills, with the ability to support enterprise security operations