Senior Cybersecurity Engineer, Defense Operations

motional singapore pte. limited; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Motional in Singapore is seeking an experienced cybersecurity operations professional to act as frontline incident responder, from detection through recovery, while driving improvements across people, processes, and systems. You will work with our MDR partner in APAC, optimize SIEM/EDR and cloud security tooling, and collaborate with DevOps, IT and engineering to mitigate risks.

This role demands hands-on analysis, strong communication, and the ability to work independently in a fast-paced

Qualifications

• 5+ years in cybersecurity operations, SOC, IR or security engineering.
• Hands-on AWS cloud security and security best practices.
• Experience analyzing logs/alerts from SIEM, EDR, and related tools.
• Experience with security frameworks (e.g., NIST, ISO).

Responsibilities

• Act as frontline incident responder from detection to remediation and recovery.
• Collaborate with MDR provider as APAC interface for triage and threat hunting.
• Administer and optimize SIEM/EDR, cloud, email security and vulnerability services.
• Improve cloud security operations in partnership with internal teams.
• Drive other Motional teams to identify and mitigate cybersecurity risks.
• Contribute to end-to-end vulnerability management and remediation timelines.
• Design and document security procedures, playbooks and runbooks for MDR activities.

Skills

Incident response

SOC operations

Cloud security (AWS)

SIEM/EDR

Threat hunting

Vulnerability management

Scripting (Python/Bash/Powershell)

Analytical thinking

Communication

3rd-party collaboration

Tools

Splunk

CrowdStrike

Microsoft Defender

EDR tools

Okta

Job description

What You’ll Be Doing:

• Act as a frontline incident responder, from detection and containment to eradication, remediation, and recovery. Facilitate post-incident reviews to drive continuous improvement in securing our people, information, and systems.
• Collaborate closely with our 3rd-party managed detection and response provider as the primary APAC region interface for incident triage, escalation, and threat hunting activities.
• Administer, monitor, and continuously optimize our core Defense Operations toolset including logging and monitoring (SIEM), endpoint detection and response (EDR), cloud security, email security, and vulnerability management services.
• Enhance cloud security operations across processes and tooling in collaboration with internal cybersecurity and engineering teams.
• Drive other Motional teams (DevOps, IT, HR, Engineering) to proactively identify, assess, and mitigate cybersecurity risks.
• Provide technical strategy and expertise to Motional’s end to end vulnerability management program, helping stakeholders address significant vulnerabilities in a timely manner.
• Design, document, and operationalize security procedures, playbooks, and runbooks for key Defense Operations functions, specifically those involving Managed Detection and Response (MDR) or other third-party security service providers

What We’re Looking for:

• 5+ years of full-time, hands-on experience in a cybersecurity operations, SOC, incident response, or cybersecurity engineering role.
• Strong hands-on experience with AWS and cloud-native security, including implementing security best practices across AWS infrastructure and services.
• Proven ability to analyze security alerts and logs from a wide range of cybersecurity and IT tools (SIEM, EDR, SEG, CNAPP, IAM, OS logs, application logs, etc.).
• Expertise in investigating and responding to cybersecurity incidents within frameworks such as NIST, ISO, or others.
• Background in deploying, administering, and using SIEM and/or EDR tools (e.g. Splunk, Microsoft, Crowdstrike).
• Vulnerability management skills including vulnerability scanning and CVE impact analysis.
• Ability to support security automation through basic scripting (e.g. Python, bash, Powershell)
• Excellent analytical, problem-solving, and troubleshooting skills.
• Strong written and verbal communication skills, including the ability to document technical information and present to diverse audiences.
• Ability to work independently and as part of a team in a fast-paced environment.
• Demonstrated experience in leveraging and collaborating with 3rd-party managed detection and response security partners.
• Curious and security focused mindset

Bonus Points:

• Familiarity with identity and access management tools and concepts are helpful for the role, even when not directly managing those tools (e.g. Okta, SSO, SAML).
• Terraform experience is beneficial