Senior Cybersecurity Engineer, Defense Operations

Motional; Singapore; Sur place; SGD 150 000 - 190 000; Plein temps

Résumé du poste

Motional is seeking a highly skilled Senior Cybersecurity Engineer to join our Defense Operations team in Singapore. This operations-focused role puts you on the front lines of our security program, acting as a senior resource for security monitoring, incident response, and vulnerability management across on-premise, SaaS and cloud platform services.

You will work with internal and external security teams and MDR partners in APAC to drive continuous improvement and risk mitigation.

Qualifications

• BS/MS in Computer Science, Cybersecurity, Information Systems or IT.
• 5+ years in cybersecurity operations, SOC, incident response or engineering.
• Experience with AWS and cloud-native security.
• Ability to analyze security alerts and logs from SIEM/EDR/CNAPP/IAM/OS logs.
• Experience with SIEM/EDR tools such as Splunk and CrowdStrike.

Responsabilités

• Act as frontline incident responder from detection to recovery and post-incident reviews.
• Coordinate with 3rd-party MDR for APAC incident triage and threat hunting.
• Administer and optimize SIEM, EDR, cloud security, email security, and vulnerability services.
• Enhance cloud security operations in collaboration with other teams.
• Drive risk identification and mitigation with DevOps, IT, HR, and Eng teams.
• Contribute to vulnerability management strategy and timely remediation.
• Design and document defense runbooks and MDR-related procedures.

Connaissances

Incident response

Security monitoring

Threat hunting

Cloud security

Vulnerability management

Scripting

Communication

Formation

Bachelor's or Master's degree in Computer Science / Cybersecurity / IT

Outils

Splunk

Microsoft Defender

CrowdStrike

Description du poste

Motional is seeking a highly skilled Senior Cybersecurity Engineer to join our Defense Operations team. This operations-focused role puts you on the front lines of our security program, acting as a senior resource for security monitoring, system ownership, and the continuous improvement of Motional's Defense Operations on-premise, SaaS and cloud platform services. In this role you will collaborate closely with your internal cybersecurity team members, external cybersecurity partners, and Motional teams and stakeholders across the organization.

What You'll Be Doing:

• Act as a frontline incident responder, from detection and containment to eradication, remediation, and recovery. Facilitate post-incident reviews to drive continuous improvement in securing our people, information, and systems.
• Collaborate closely with our 3rd-party managed detection and response provider as the primary APAC region interface for incident triage, escalation, and threat hunting activities.
• Administer, monitor, and continuously optimize our core Defense Operations toolset including logging and monitoring (SIEM), endpoint detection and response (EDR), cloud security, email security, and vulnerability management services.
• Enhance cloud security operations across processes and tooling in collaboration with internal cybersecurity and engineering teams.
• Drive other Motional teams (DevOps, IT, HR, Engineering) to proactively identify, assess, and mitigate cybersecurity risks.
• Provide technical strategy and expertise to Motional's end to end vulnerability management program, helping stakeholders address significant vulnerabilities in a timely manner.
• Design, document, and operationalize security procedures, playbooks, and runbooks for key Defense Operations functions, specifically those involving Managed Detection and Response (MDR) or other third-party security service providers

What We're Looking for:

• BS or MS in Computer Science, Cybersecurity, Information Systems, Information Technology or equivalent knowledge and work experience.
• 5+ years of full-time, hands-on experience in a cybersecurity operations, SOC, incident response, or cybersecurity engineering role.
• Strong hands-on experience with AWS and cloud-native security, including implementing security best practices across AWS infrastructure and services.
• Proven ability to analyze security alerts and logs from a wide range of cybersecurity and IT tools (SIEM, EDR, SEG, CNAPP, IAM, OS logs, application logs, etc.).
• Expertise in investigating and responding to cybersecurity incidents within frameworks such as NIST, ISO, or others.
• Background in deploying, administering, and using SIEM and/or EDR tools (e.g. Splunk, Microsoft, Crowdstrike).
• Vulnerability management skills including vulnerability scanning and CVE impact analysis.
• Ability to support security automation through basic scripting (e.g. Python, bash, Powershell)
• Excellent analytical, problem-solving, and troubleshooting skills.
• Strong written and verbal communication skills, including the ability to document technical information and present to diverse audiences.
• Ability to work independently and as part of a team in a fast-paced environment.
• Demonstrated experience in leveraging and collaborating with 3rd-party managed detection and response security partners.
• Curious and security focused mindset

Bonus Points:

• Familiarity with identity and access management tools and concepts are helpful for the role, even when not directly managing those tools (e.g. Okta, SSO, SAML).