Security Platform Engineer: SOAR & Automation

RED ALPHA CYBERSECURITY PTE. LTD.; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

RED ALPHA CYBERSECURITY PTE. LTD. is seeking a Cybersecurity Platform Engineer to maintain platform services, review and optimize security platforms such as Azure Sentinel and SOAR, and manage onboarding/offboarding of cloud subscriptions and projects.

The role designs and implements playbooks, develops detection rules and hunting queries, and provides architectural guidance to the security operations team while ensuring reliable performance and effective reporting.

Qualifications

• Minimum of three years of relevant cybersecurity platform management experience.
• Hands-on experience deploying and maintaining cybersecurity platforms with troubleshooting skills.
• Proficient in Python, PowerShell, Bash for automation.
• Strong knowledge of Windows and Linux operating systems, networking concepts, and cybersecurity frameworks.
• Familiar with cloud platforms such as AWS, Azure, or Google Cloud Platform and their security services.
• Professional information security qualifications such as CISSP, CISM, or CEH preferred.
• Strong analytical, communication, and problem-solving abilities in cybersecurity platform environments.

Responsibilities

• Design and implement playbooks and workflows.
• Develop KQL queries and SOAR capabilities.
• Create custom integrations and response automation.
• Lead datasource integration.
• Configure connectors and log parsing rules.
• Optimize log collection and retention.
• Build custom workbooks and dashboards.
• Develop detection rules and hunting queries.
• Perform operational and executive reporting.
• Provide architectural guidance.
• Manage performance optimization.
• Document procedures and train team members.

Job description

RED ALPHA CYBERSECURITY PTE. LTD. is seeking a Cybersecurity Platform Engineer to maintain platform services, review and optimize security platforms such as Azure Sentinel and SOAR, and manage onboarding/offboarding of cloud subscriptions and projects.

The role designs and implements playbooks, develops detection rules and hunting queries, and provides architectural guidance to the security operations team while ensuring reliable performance and effective reporting.