Senior Engineer, Security & Observability Platform - A26270 at Activate Interactive Pte Ltd

Activate Interactive Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Fun working environment

Employee Wellness Program

Growth opportunities

Job summary

Activate Interactive Pte Ltd in Singapore seeks a Senior Engineer to design and operate a unified security and observability platform. You will architect telemetry pipelines, build detection workflows, and manage the stack end-to-end in a containerized environment.

The role focuses on governance, vendor-independence, and collaboration with open-source communities to keep the platform current and robust.

Qualifications

• 5+ years in platform engineering, SRE, or security engineering roles.
• Experience with telemetry collection frameworks and storage architectures.
• Solid Linux fundamentals.

Responsibilities

• Design unified telemetry pipelines using open standards for SRE observability and security data.
• Architect security detection workflows with vendor-neutral formats for portability.
• Deploy and operate observability and security stacks on Kubernetes and containers.
• Define runbooks and governance for vendor-independence and license reviews.
• Engage with open-source communities to stay current on project maturity and roadmaps.

Skills

Telemetry collection

Columnar storage

Metrics scraping

SIEM operations

Open-source governance

Kubernetes

Education

Bachelor's degree in Computer Science or equivalent

Tools

Kubernetes

Docker

GitOps

Open-source tooling

Job description

Senior Engineer, Security & Observability Platform – A26270 at Activate Interactive Pte Ltd in Singapore, S00, SG. This Full time on site position offers great opportunities for career growth. This is a 12 months fixed-term contract role.

Activate Interactive Pte Ltd ("Activate") is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency. We believe in positively impacting the lives of people around us and the environment we live in through the use of technology. Hence, we are committed to providing a conducive environment for all employees to realize their full potential, who in turn have the opportunity to continuously drive innovation. We are searching for our next team members to join our growing team. If you love the idea of being part of a growing company with exciting prospects in mobile and web technologies that create positive impact on people’s lives, then we would love to hear from you.

What will you do?

• Evaluation & Research
  • Conduct structured evaluation of candidate tools against criteria including license compliance, community governance, vendor independence, and technical fitness
  • Perform proof-of-concept exercises to validate architectural decisions (e.g. ingestion throughput, storage efficiency, query latency, operational complexity)
  • Assess and track governance posture of selected tools; maintain contingency paths for vendor-led dependencies
  • Engage with upstream open-source communities and foundations to stay current on project maturity and roadmap changes
• Design & Architecture
  • Design unified telemetry pipelines using open standards to serve both SRE observability and security operations from a single data layer
  • Architect security detection workflows using vendor-neutral detection languages to ensure portability of detection content across backends
  • Design vulnerability aggregation and management workflows spanning container scanning, software composition analysis, static analysis, infrastructure vulnerability scanning, and software bill of materials generation
  • Design supply chain security controls including image signing, provenance attestation, and registry policy enforcement
  • Design exposure path analysis using graph-based tooling to map relationships across compute orchestration, identity, source control, and vulnerability data
  • Design automated remediation and orchestration workflows integrated with alerting, ChatOps, and ticketing
  • Produce and maintain architecture decision records documenting design rationale, trade-offs, and change history
• Implementation & Operations
  • Deploy and operate the observability stack: telemetry collection, columnar storage, dashboarding, metrics scraping, alerting, and log routing
  • Deploy and operate the security monitoring stack: endpoint/hostbased detection, detection rule evaluation, vulnerability aggregation, and infrastructure scanning
  • Deploy and operate CI pipeline security scanning: container image scanning, dependency scanning, SBOM generation, static analysis, infrastructure-as-code scanning, and secrets detection
  • Implement image registry security with integrated vulnerability scanning and admission policy enforcement
  • Implement identity, directory, secrets management, and certificate lifecycle infrastructure
  • Implement collaboration and incident management tooling (ChatOps, ticketing)
  • Build and maintain detection rules, alerting rules, and automation playbooks
  • Operate all components on a container orchestration platform with fleet-wide deployment tooling
• Process & Governance
  • Define and document operational runbooks for each capability area
  • Establish and maintain vendor-independence contingency entries for all vendor-led tools
  • Conduct periodic licence and governance re-assessment of selected tools
  • Collaborate with legal/compliance on copyleft licence reviews before deployment
  • Define SLOs for telemetry pipeline availability, ingestion latency, and detection coverage
  • Participate in security incident response using the tooling you build and operate

Requirements

• 5+ years in platform engineering, SRE, or security engineering roles
• Strong hands-on experience with at least 3 of the following: Telemetry collection frameworks and instrumentation standards Columnar or analytical databases for log/trace/event storage Metrics scraping and alerting ecosystems SIEM operations and detection engineering (vendor-neutral detection rule formats preferred) Search-based log analytics platforms (to understand migration context) Production experience deploying and operating on Kubernetes or equivalent container orchestration platforms Experience with container security scanning and software composition analysis tooling Familiarity with supply chain security concepts: SBOM, image signing, provenance attestation, admission control Experience with at least one SOAR or automation/orchestration platform Solid understanding of log collection and routing architectures Experience writing detection rules or correlation logic for security monitoring Ability to evaluate open-source projects for governance health, license risk, and production readiness Strong Linux systems fundamentals

Preferred Skills

• Experience with host-based intrusion detection or endpoint detection and response tooling Experience with graph databases and asset/infrastructure relationship mapping Familiarity with vulnerability management and aggregation platforms Experience with identity providers, directory services, and secrets management Contributions to open-source security or observability projects Experience operating in government or regulated environments with strict vendor-independence or sovereignty requirements Familiarity with enterprise Linux and container platform ecosystems Experience with GitOps workflows for deploying infrastructure services Static/dynamic application security testing tooling experience

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience
• Relevant certifications are a plus but not required (e.g. Kubernetes security, Linux administration, offensive security, or cloud security specializations)

Benefits

• Fun working environment
• Employee Wellness Program
• To work in Singapore Government Agencies projects
• We provide structured development framework and growth opportunities. (We are a “SHRI 2025 Gold winner” in “Learning & Development; Coaching & Mentoring”)

Why you’ll love working with us?

If you are looking for opportunities to collaborate with leading industry experts and be surrounded by highly motivated and talented peers, we welcome you to join us. We provide all employees with equal opportunities to grow and develop with us. We believe your success is our success.

Activate Interactive Singapore is an equal opportunity employer.

Employment decisions will be based on merit, qualifications and abilities.

Activate Interactive Pte Ltd does not discriminate in employment opportunities or practices on the basis of race, colour, religion, gender, sexuality, national origin, age, disability, marital status or any other characteristics protected by law.

Protecting your privacy and the security of your data are longstanding top priorities for Activate Interactive Pte Ltd. Your personal data will be processed for the purposes of managing Activate Interactive Pte Ltd’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results, and as is otherwise needed in the recruitment and hiring processes. Please consult our Privacy Notice (https://www.activate.sg/privacy-policy) to know more about how we collect, use, and transfer the personal data of our candidates. Here you can find how you can request for access, correction and/or withdrawal of your Personal Data.