Security Operations Architect — Threat Detection & IR

PERCEPT SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PERCEPT SOLUTIONS PTE. LTD. is seeking an experienced Cybersecurity Architect to support security monitoring, incident response, threat detection, and vulnerability management across enterprise environments in Singapore.

The role requires hands-on experience with SIEM monitoring, incident investigation, and compliance support to strengthen security posture. You will work with IT, infrastructure, application, compliance, and business stakeholders to ensure timely detection, response, and

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• 4 to 10 years of experience in Security Operations, Cybersecurity, Incident Response, Threat Detection, or a similar role.

Responsibilities

• Monitor security alerts and events from SIEM, EDR, and other security monitoring tools.
• Investigate and triage security incidents, including malware infections, phishing attempts, suspicious activities, and unauthorised access attempts.
• Perform root cause analysis for security incidents and recommend appropriate remediation actions.
• Escalate incidents based on severity, business impact, and defined incident response procedures.
• Prepare incident reports and support post‑incident reviews.
• Analyse logs from servers, endpoints, network devices, applications, and security platforms.
• Identify anomalies, suspicious behaviours, and potential threats using correlation rules, alerts, and security use cases.
• Support threat hunting activities to proactively identify hidden threats and attack patterns.
• Assist in improving threat detection capabilities through rule tuning and use case enhancement.
• Manage, operate, and optimise security tools such as SIEM, EDR, IAM platforms, and vulnerability scanners.
• Work with SIEM platforms such as Splunk to monitor events, investigate alerts, and generate reports.
• Assist in fine-tuning detection rules to reduce false positives and improve alert quality.
• Support integration and onboarding of new security technologies, log sources, and monitoring use cases.
• Conduct vulnerability assessments and track remediation progress with relevant system owners.
• Review vulnerability scan results, prioritise risks, and support remediation planning.
• Work with infrastructure, application, and operations teams to address identified security risks.
• Support risk assessments for legacy systems, exceptions, and technology changes.
• Ensure adherence to internal security policies, standards, procedures, and baseline configurations.
• Support internal and external audits by gathering evidence, preparing documentation, and responding to audit queries.
• Assist in maintaining compliance with security and regulatory frameworks such as ISO 27001, MAS TRM, NIST, and other applicable standards.
• Support security governance activities, including risk tracking, control validation, and policy compliance reviews.
• Monitor critical system configuration changes across infrastructure, applications, and security platforms.
• Validate compliance with system hardening baselines and security configuration standards.
• Identify, document, and report deviations from approved baselines.
• Work with relevant teams to ensure deviations are properly assessed, remediated, or risk‑accepted.
• Prepare security dashboards, incident reports, vulnerability reports, and security metrics.
• Document incident response playbooks, standard operating procedures, detection use cases, and investigation steps.
• Provide regular updates to stakeholders on security posture, incident trends, vulnerabilities, and remediation status.
• Maintain accurate records of incidents, risks, exceptions, and remediation activities.

Skills

Security Operations

Incident Response

Threat Detection

Vulnerability Management

Compliance

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline

Tools

Splunk

EDR

IAM

Vulnerability Scanners

Job description

PERCEPT SOLUTIONS PTE. LTD. is seeking an experienced Cybersecurity Architect to support security monitoring, incident response, threat detection, and vulnerability management across enterprise environments in Singapore.

The role requires hands-on experience with SIEM monitoring, incident investigation, and compliance support to strengthen security posture. You will work with IT, infrastructure, application, compliance, and business stakeholders to ensure timely detection, response, and