Security Detection & SIEM Engineer

LUMINA ADVISORY & GLOBAL SEARCH PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

LUMINA ADVISORY & GLOBAL SEARCH PTE. LTD. is seeking a security analyst to strengthen threat identification, investigation and response capabilities.

You will work hands-on with alerts, logs, detection rules and vulnerability findings to produce clear, actionable outcomes. Primary duties include managing daily SIEM operations, investigating alerts through TheHive, reviewing evidence, and coordinating remediation with regional teams.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science or related field.
• At least 3 years of relevant SIEM operations or security monitoring experience.
• Hands-on experience with SIEM, log management or security monitoring platforms.
• Hands-on OpenSearch experience for log queries and security event analysis.
• Strong knowledge of Linux and Windows administration fundamentals.
• Practical experience in security event investigation and detection tuning.
• Strong analytical and problem-solving skills with independent work style.
• Effective communication in English and Mandarin.

Responsibilities

• Manage daily SIEM operations and security monitoring activities.
• Investigate security alerts and cases through TheHive, including evidence review, analysis, documentation and case handling.
• Analyse CVE findings, identify affected systems and potential impact, and coordinate remediation tracking and follow-up.
• Tune and maintain security detection rules and basic correlation logic to improve detection effectiveness.
• Investigate security incidents and determine the appropriate escalation or case closure.
• Analyse suspicious commands, logs, scripts and system activities, validating findings before reaching conclusions.
• Prepare security monitoring reports, metrics, dashboards and operational summaries.
• Work with infrastructure and application teams to support incident handling and continuous improvement.

Skills

SIEM operations

Security monitoring

Log management

OpenSearch

Linux

Windows administration

Incident investigation

Detection tuning

Analytical thinking

English

Mandarin

Education

Bachelor's degree in Information Security / Cybersecurity / Computer Science

Tools

TheHive

OpenSearch

Python

Shell scripting

Job description

About the Role

Join our security team and help strengthen how we identify, investigate and respond to security threats. You will work hands-on with security alerts, logs, detection rules and vulnerability findings, turning technical evidence into clear and actionable outcomes.

What You'll Do

• Manage daily SIEM operations and security monitoring activities.
• Investigate security alerts and cases through TheHive, including evidence review, analysis, documentation and case handling.
• Analyse CVE findings, identify affected systems and potential impact, and coordinate remediation tracking and follow-up.
• Tune and maintain security detection rules and basic correlation logic to improve detection effectiveness.
• Investigate security incidents and determine the appropriate escalation or case closure.
• Analyse suspicious commands, logs, scripts and system activities, validating findings before reaching conclusions.
• Prepare security monitoring reports, metrics, dashboards and operational summaries.
• Work with infrastructure and application teams to support incident handling and continuous improvement.

What We're Looking For (Must Have)

• Bachelor's degree inInformation Security, Cybersecurity, Computer Science or a related field.
• At least 3 years of relevant experience in SIEM operations, security monitoring, security analysis or security engineering.
• Hands-on experience with SIEM, log management or security monitoring platforms.
• Hands-on OpenSearch experience covering log queries, log analysis, security event investigation and basic index management.
• Strong knowledge of Linux andWindows administration fundamentals and security log analysis.
• Practical experience insecurity event investigation, incident analysis and detection tuning.
• Strong analytical, troubleshooting and problem-solving skills, with the ability to investigate unfamiliar technical behaviour independently.
• Effective communication inEnglish and Mandarin, as the role works with regional stakeholders who primarily communicate in these languages.

Good to Have

• Experience using TheHive for alert or case investigation.
• Familiarity with event correlation, behavioural analysis and detection engineering concepts.
• Experience in CVE analysis and vulnerability remediation tracking.
• Python, Shell scripting or security automation experience.