Security Engineer (Security Operations)

GOLDTECH RESOURCES PTE LTD; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

GOLDTECH RESOURCES PTE LTD in Singapore seeks an experienced Security Analyst (L2) to strengthen cybersecurity operations, manage incidents and elevate the organization’s security posture. You will monitor threats, investigate events, oversee vulnerability management and support incident response, while optimizing security tools and collaborating with IT teams to safeguard critical systems.

This role requires a degree in CS/IT/cybersecurity and at least three years of relevant experience, with

Qualifications

• Degree in computer science, IT, or cybersecurity.
• Minimum 3 years of IT/security operations experience.
• Familiar with SIEM and endpoint security.
• Understanding of ISO 27001, NIST, PDPA, GDPR or SOC 2.
• Strong analytical and communication skills.
• Ability to work independently and with teams.

Responsibilities

• Monitor security events and investigate suspicious activities across enterprise systems and networks.
• Analyze incidents involving malware, ransomware, phishing, and data breaches.
• Coordinate containment, threat elimination and system recovery.
• Perform root cause analysis and recommend fixes.
• Work with IT teams to ensure timely incident resolution.
• Administer and optimize security tools including SIEM, SOAR, EDR/XDR.
• Fine-tune alerts and monitoring configurations.
• Assist with email protection, web security, DLP, and CASB controls.
• Support security governance, risk assessments and audits.
• Prepare risk and performance reports.

Skills

IT experience

Security ops

SIEM

Endpoint security

Networking basics

Analytical skills

Communication

Independent work

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SIEM/SOAR

EDR/XDR

Vulnerability scanners

DLP

CASB

Microsoft Sentinel

Job description

We are seeking an experienced Security Analyst (L2) to strengthen cybersecurity operations, manage security incidents and enhance the organization’s overall security posture.

The successful candidate will be responsible for monitoring security threats, investigating suspicious activities, managing vulnerabilities and supporting incident response activities. The role also involves optimizing security tools, improving threat detection capabilities and collaborating with technical teams to safeguard critical IT systems and infrastructure.

Key Responsibilities

Security Monitoring & Incident Management

• Monitor security events and investigate suspicious activities across enterprise systems and networks.
• analyze security incidents involving malware, ransomware, phishing, compromised accounts and potential data breaches.
• Coordinate incident containment, threat elimination and system recovery activities.
• Perform root cause analysis and recommend corrective measures to prevent recurring incidents.
• Work closely with internal IT teams and security operations personnel to ensure timely incident resolution.

Vulnerability & Risk Management

• Conduct vulnerability assessments and evaluate security weaknesses across IT environments.
• Review assessment findings, determine risk severity and recommend appropriate remediation priorities.
• Coordinate with infrastructure and application teams on security patching and vulnerability resolution.
• Track remediation progress, outstanding security risks and corrective actions.
• Prepare vulnerability reports and provide updates on security exposure.

Security Tools & Threat Detection

• Administer, monitor and optimize security solutions, including SIEM, SOAR, EDR/XDR and endpoint protection platforms.
• Fine-tune security alerts, detection rules and monitoring configurations to improve threat identification and minimize false positives.
• Support security controls for email protection, web security, Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB).
• Assist with integrating security monitoring platforms into existing enterprise systems.
• Analyze emerging cyber threats and recommend improvements to security controls.

Security Governance & Continuous Improvement

• Support cybersecurity governance, risk assessments and compliance activities.
• Maintain security documentation, incident procedures and operational guidelines.
• Participate in security audits and third-party risk assessments.
• Provide security recommendations and guidance to IT teams and business users.
• Support cybersecurity awareness initiatives, including phishing simulation exercises.
• Identify opportunities to improve security processes through automation, monitoring enhancements and operational reporting.
• Prepare security performance reports, risk metrics and management updates.

Requirements

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• Minimum 3 years of relevant IT experience, preferably in cybersecurity operations, security monitoring or incident response.
• Good understanding of IT infrastructure, networking, server environments and endpoint security.
• Experience using cybersecurity solutions such as SIEM, endpoint protection and vulnerability assessment tools.
• Familiarity with security technologies such as Microsoft Sentinel, Securonix, CyberArk or Tenable Nessus.
• Knowledge of security incident investigation, threat detection, vulnerability management and remediation processes.
• Understanding of cybersecurity frameworks and regulatory requirements, including ISO 27001, NIST, PDPA, GDPR or SOC 2.
• Ability to analyze security events, identify potential threats and recommend appropriate mitigation measures.
• Strong analytical, troubleshooting, communication and stakeholder coordination skills.
• Ability to work independently and collaborate effectively with technical and business teams.

Preferred Qualifications

• Professional certifications such as CISSP, CompTIA Security+, QISP or Cybersecurity Nexus.
• Experience with SIEM/SOAR, EDR/XDR, DLP or CASB solutions.
• Exposure to security automation, threat intelligence and security detection optimization.
• Experience supporting security audits, risk assessments or cybersecurity awareness programmes.