Security Engineer — Incident Response & Threat Hunting

NCS; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

NCS is seeking a Security Engineer to join the Intelligent Platforms team in Singapore. You will validate detections, perform log reviews, threat hunting, and support patch pipelines and incident response from triage through containment and recovery.

Mentorship and certifications are available to grow end-to-end capabilities from architecture to day-to-day operations. You will work on operating and refining security tools, coordinate with cross-functional teams, and stay updated on the latest

Qualifications

• Experience operating SIEM/EDR/XDR/PAM and patch pipelines.
• Ability to verify detections, tune rules, and reduce false positives.
• Experience in threat hunting, log reviews, and incident response processes.

Responsibilities

• Assist in operating SIEM/EDR/PAM platforms and patch pipelines.
• Verify and validate detections; tune rules/use-cases to reduce false positives and improve coverage.
• Conduct IOC scans based on threat intel.
• Support configuration, maintenance, and optimization of security tools (antivirus, firewalls, IDS).
• Perform log reviews and threat hunting; elevate and track incidents to closure.
• Develop incident response runbooks, escalation procedures, and investigation checklists.
• Assist evidence collection, timeline creation, root cause analysis, and incident documentation.
• Support containment and remediation with cross-team coordination.
• Monitor security systems with stakeholders and report platform KPIs.
• Stay current with cyber threats and technologies.

Skills

Analytical thinking

Communication

Stakeholder management

Problem solving

Tools

SIEM

EDR

XDR

PAM

Firewalls

IPS

Antivirus

Patch management tools

Job description

NCS is seeking a Security Engineer to join the Intelligent Platforms team in Singapore. You will validate detections, perform log reviews, threat hunting, and support patch pipelines and incident response from triage through containment and recovery.

Mentorship and certifications are available to grow end-to-end capabilities from architecture to day-to-day operations. You will work on operating and refining security tools, coordinate with cross-functional teams, and stay updated on the latest