Security Operations Engineer

dtcpay; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

dtcpay is seeking a Security Operations professional to lead day-to-day security operations, monitor threats, and respond to incidents across its systems. The role involves handling core security platforms, conducting triage and root-cause analysis, and producing incident reports.

You will perform regular security assessments, track threat intelligence, and support enterprise security planning. Phishing simulations and security awareness initiatives are part of the program.

Qualifications

• Bachelor's degree or higher in CS, InfoSec, Data Science, or related field.
• 3+ years in security operations or penetration testing.
• Willingness to on-call / incident response duties.

Responsibilities

• Own day-to-day security operations, monitoring, alert analysis, and incident response to ensure security, stability, and compliance of company systems.
• Operate and maintain core security platforms (NDR, WAF, firewalls, EDR, SIEM, bastion hosts), tuning detection rules and policies.
• Perform initial triage, classification, root-cause analysis, and remediation of security incidents; produce incident analysis reports.
• Conduct regular security assessments and penetration testing of web systems, mobile apps, and firmware to identify vulnerabilities.
• Track emerging threat intelligence, 0-day vulnerabilities, and offensive/defensive techniques; assess business impact.
• Support enterprise security planning, compliance assessments (e.g., MLPS), and broader security program initiatives.
• Support security awareness initiatives such as phishing simulations and training.

Skills

Ownership mindset

Incident response readiness

Education

Bachelor's degree or higher in CS, InfoSec, Data Science, or related field

Tools

Burp Suite

Nmap

AWVS

Nessus

WAF

Firewall

EDR

SIEM

Bastion hosts

Python

Mobile security testing

Reverse engineering

Cloud security (AWS/Alibaba/Tencent)

Job description

• Own day-to-day security operations, monitoring, alert analysis, and incident response to ensure the security, stability, and compliance of company systems.
• Operate and maintain core security platforms (NDR, WAF, firewalls, EDR, SIEM, bastion hosts, etc.), continuously tuning detection rules and policies.
• Perform initial triage, classification, root-cause analysis, and remediation of security incidents; produce incident analysis reports.
• Conduct regular security assessments and penetration testing of web systems, mobile apps, and firmware to identify potential vulnerabilities.
• Track emerging threat intelligence, 0-day vulnerabilities, and offensive/defensive techniques; assess business impact.
• Support enterprise security planning, compliance assessments (e.g., MLPS), and broader security program initiatives.
• Support security awareness initiatives such as phishing simulations and training.

Requirements

Basic Requirements

• Bachelor's degree or above in Computer Science, Information Security, Data Science, or a related field.
• 3+ years of experience in security operations or penetration testing.
• Strong sense of ownership and readiness for on-call / incident response duties.

Technical Skills

• Proficient with mainstream penetration testing tools (Burp Suite, Nmap, AWVS, Nessus, etc.).
• Familiar with common web vulnerabilities and exploitation techniques (XSS, SQL injection, CSRF, etc.).
• Hands‑on experience operating security devices — WAF, firewalls, EDR, SIEM, bastion hosts — including deployment, policy tuning, and daily operations.
• Familiar with threat intelligence collection and analysis; capable of incident root‑cause tracing.
• Proficient in Python; able to independently build security tools (scanners, PoCs/exploits, etc.) is a plus.
• Familiar with mobile (APP) security testing and reverse engineering is a plus.
• Experience securing hybrid cloud environments (AWS, Alibaba Cloud, Tencent Cloud, etc.) is a plus.