Security Automation Leader(Splunk/Python)

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NTT SINGAPORE PTE. LTD. is seeking a Security Automation Leader to strengthen our cybersecurity posture through automation, data analytics, intelligent tooling, and cloud security engineering.

You will design, implement, and maintain distributed Splunk environments, drive security automation with Splunk, Python, APIs, and AI-powered tools, and develop dashboards, alerts, and automation workflows across AWS, Azure, M365, and OpenShift containers.

Qualifications

• Experience designing and maintaining distributed/clustered Splunk environments.
• Strong knowledge of Splunk SPL, Linux commands, and Python scripting.
• Experience with cloud security services and security-by-design practices.

Responsibilities

• Design, implement, and maintain distributed Splunk environments.
• Drive security automation initiatives using Splunk, Python, APIs, and dashboards.
• Develop dashboards, alerts, reports, and automation workflows for security monitoring.
• Collaborate across AWS, Azure, M365, and OpenShift environments for security posture.
• Troubleshoot complex issues and perform root cause analysis.
• Ensure documentation and knowledge transfer to production teams.

Skills

Splunk SPL

Python scripting

Linux commands

Automation

Scripting & Troubleshooting

Cloud security

OpenShift/Kubernetes

Data analysis

APIs integration

AI tooling

Education

Bachelor's degree in computer science or related field

Tools

Copilot

Splunk Admin

Kubernetes/OpenShift

Job description

As a Security Automation Leader, you will play acritical role in enhancing our cybersecurity posture through automation, data analytics, intelligent tooling, and cloud security engineering

As a Security Automation Leader, you will play a critical role in enhancing our cybersecurity posture through automation, data analytics, intelligent tooling, and cloud security engineering.

Design, implement, and maintain distributed and clustered Splunk environments, ensuring seamless integration with infrastructure, security, and application platforms.

Drive security automation initiatives using Splunk, Python, APIs, dashboards, and AI-powered tools such as Copilot to improve operational efficiency.

Develop and maintain dashboards, alerts, reports, and automation workflows to support security monitoring, vulnerability management, and operational processes.

Optimize data ingestion, search performance, and platform availability to ensure a scalable and resilient Splunk environment.

Administer Splunk access controls, application deployments, upgrades, and platform configurations in accordance with security and compliance requirements.

Troubleshoot complex technical issues, perform root cause analysis, and document findings to support continuous improvement and knowledge sharing.

Support security engineering activities across AWS, Azure, Microsoft 365, and OpenShift Container Platform (OCP), including security monitoring, vulnerability management, and compliance initiatives.

Develop integrations between cloud security services, SIEM platforms, and security tooling to enhance visibility, automation, and operational effectiveness.

Collaborate with infrastructure, platform, and application teams to implement security controls and security-by-design practices across cloud and containerized environments.

Education:

Bachelor's degree in computer science or related field.

Certifications (preferred but not explicitly listed):

• Splunk Certified Power User / Admin / Architect
• Coding development using Python and similar
• AWS, Azure, Microsoft 365, or Kubernetes/OpenShift security certifications

Essential:

• You must be well versed with Splunk SPL, Linux commands and python scripting
• Design, deployment, and maintenance of distributed/clustered Splunk environments
• Management of search heads, indexers, forwarders
• Data ingestion: configuring inputs, indexes, source types
• Content creation: dashboards, reports, alerts
• Access control: user roles, authentication
• Application management: installing/upgrading custom and Splunk base apps
• Scripting & Troubleshooting
• Linux command-line skills
• Python scripting for automation and troubleshooting
• Log analysis and issue reproduction
• Bug reporting and vendor escalation

You must be the experienced developer, with good experience in system integration/interfacing.

Depending on the project, your duties may include coding, scripting, building new systems (where necessary) and interfaces. For new system build-up, you may need to environment support during SIT/UAT.

You are expected to ensure your work are adequately documented and transferred to the production team post-cutover.

You will be expected to work with the senior developers and system architect in formulating technical solutions that is fit for purpose for your assigned projects. The solution will need to satisfy all security, regulatory and architectural standards.

You should possess hands-on experience with cloud security technologies across AWS, Azure, Microsoft 365, and OpenShift/Kubernetes environments, including security monitoring, vulnerability management, cloud security posture management, and security tool integration