Senior AI-Driven Security Data & Detection Engineer

Simba telecom; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Simba telecom in Singapore seeks a hands-on Security Data & Detection Engineer to build and enhance a next-generation AI-driven SOC (Agentic SOC) for telecom CII. You will architect telemetry pipelines, enrich data, and develop elastic security analytics to detect APTs and insider threats.

You will implement parsing, enrichment, and correlation using ECS/OCSF schemas while developing SIEM detections and threat-hunting queries.

Qualifications

• Strong experience in SIEM engineering and security analytics.
• Hands-on with Elasticsearch, Kibana, Elastic Security.
• Proficient in Python and security query languages (ES|QL, KQL, SPL, SQL).
• Strong understanding of MITRE ATT&CK, threat hunting and incident investigation.

Responsibilities

• Design and maintain telemetry ingestion pipelines across networks, endpoints, identities, cloud and telecoms.
• Develop and optimize security analytics, detections, and historical threat hunting.
• Create in-stream and SIEM rules to detect APT techniques and suspicious activity.
• Validate detections with adversary emulation and continuous tuning.
• Enable secure access to telemetry and detections for AI investigation agents.

Skills

SIEM engineering

Security analytics

Detection engineering

Security data engineering

Python

ES|QL

KQL

SPL

SQL

MITRE ATT&CK

Threat hunting

Tools

Elasticsearch

Kibana

Elastic Security

Job description

Simba telecom in Singapore seeks a hands-on Security Data & Detection Engineer to build and enhance a next-generation AI-driven SOC (Agentic SOC) for telecom CII. You will architect telemetry pipelines, enrich data, and develop elastic security analytics to detect APTs and insider threats.

You will implement parsing, enrichment, and correlation using ECS/OCSF schemas while developing SIEM detections and threat-hunting queries.