Senior Engineer, Security Platform & Infrastructure

Starhub Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

StarHub Ltd seeks a Senior Engineer for Security Platform and Infrastructure to manage endpoint security across telecommunications environments in Singapore. You will drive Day 1 design and Day 2 operations, coordinating with MSSP partners and OEMs to implement secure platforms.

The role requires expertise in endpoint security, threat detection, and governance, with collaboration across internal teams and vendors to ensure reliable operations.

Qualifications

• Bachelor’s degree in IT, CS, Cyber Security, or related field.
• 2–4 years in cybersecurity operations, EDR management, SOC ops, or endpoint security engineering in telecom/large-scale envs.
• Familiarity with EDR/XDR platforms such as Palo Alto XDR, CrowdStrike Falcon, SentinelOne, or VMware Carbon Black.
• Experience with MSSP/SOC providers and operational governance.
• Familiarity with Windows, Linux, macOS, cloud (AWS, Ali) and hybrid infra.
• Scripting knowledge (PowerShell, Python, Bash) is a plus.
• Understanding of MITRE ATT&CK framework and endpoint techniques.
• Certifications like CEH, CISSP, Security+, GIAC, or vendor EDR certs are nice to have.

Responsibilities

• Lead deployment, configuration, and onboarding of EDR across servers, workstations, cloud workloads, and remote endpoints.
• Deploy EDR agents, verify health, configure policies, and integrate with ticketing, SIEM, and SOAR.
• Coordinate with infrastructure, network, cloud, and app teams for onboarding and rollout.
• Collaborate with MSSP partners and vendors during implementation, transition, and go-live.
• Validate log forwarding, alerting, telemetry collection, and endpoint visibility.
• Support readiness activities: sizing, connectivity, firewall rules, proxies, cloud integrations.
• Participate in POCs, product evaluations, testing, and tool assessments.
• Create onboarding docs, runbooks, procedures, and knowledge transfer materials.
• Align EDR deployment with security standards via governance teams.
• Tune policies, rules, exclusions, and alert thresholds to reduce false positives.
• Monitor agent health, policy compliance, coverage gaps, and performance.
• Perform Day 2 ops: upgrades, patches, troubleshooting, policy mgmt, maintenance.
• Support vulnerability remediation and hardening initiatives.
• Assist audit, compliance, and regulatory activities for endpoints.
• Coordinate with vendors/MSSP for issue resolution and roadmap discussions.
• Provide 24x7 on-call support when required.

Skills

Endpoint security

SOC operations

EDR management

Threat detection

Stakeholder management

Documentation

Education

Bachelor’s degree in information technology, Computer Science, Cyber Security, or related discipline

Tools

Palo Alto XDR

CrowdStrike Falcon

SentinelOne

VMware Carbon Black

Job description

Select how often (in days) to receive an alert:

Senior Engineer, Security Platform & Infrastructure

Date: 18 Jul 2026

Location: SG

Job Description

Overview

As the Senior Engineer for Security Platform and Infrastructure, you will manage and enhance endpoint security across telecommunication environments. The role includes Day 1 implementation and Day 2 operational support activities related to Design, Implement and Manage the Security platforms and coordination with Managed Security Service Providers (MSSP) and OEMs.

This role requires expertise in endpoint security technologies, threat detection, operational governance, and collaboration with internal teams, vendors, and MSSP partners to ensure secure and reliable operations. On top of this desire to learn, think out of the box and introduce new security initiatives to support Day 1 and Day 2’s responsibilities.

Job Duties and Responsibilities

• Lead and participate in the deployment, configuration, and onboarding of EDR solutions across telecommunications environments including servers, workstations, cloud workloads, and remote endpoints.
• Perform EDR agent deployment, health verification, policy configuration, and integration with other platforms like ticketing, SIEM and SOAR platforms.
• Coordinate with infrastructure, network, cloud, and application teams for successful onboarding and rollout activities.
• Work closely with MSSP partners and vendors during implementation, transition, and go-live phases.
• Validate log forwarding, alert generation, telemetry collection, and endpoint visibility across environments.
• Support infrastructure readiness activities including sizing, connectivity validation, firewall rules, proxy configurations, and cloud integrations.
• Participate in Proof of Concepts (POC), product evaluations, feature testing, and security tool assessments.
• Develop onboarding documentation, operational runbooks, implementation procedures, and knowledge transfer materials.
• Collaborate with cybersecurity architecture and governance teams to align EDR deployment with security standards and compliance requirements.
• Conduct tuning and optimization of EDR policies, detection rules, exclusions, and alert thresholds to reduce false positives.
• Manage endpoint security posture by monitoring agent health, policy compliance, coverage gaps, and platform performance.
• Perform Day 2 operational activities including upgrades, patching, troubleshooting, policy management, and platform maintenance.
• Support Infra related vulnerability, remediation coordination, and hardening initiatives.
• Support audit, compliance, and regulatory activities related to endpoint security platform and operations.
• Coordinate with vendors and MSSP partners for issue resolution, feature enhancements, and product roadmap discussions related to the platform.
• Participate in 24x7 on-call support and incident related to the platform and infra whenever required and need to be on standby.
• Lead and work with cross-functional stakeholders and processes to meet the business requirements.

Qualifications

• Bachelor’s degree in information technology, Computer Science, Cyber Security, or related discipline.
• 2 – 4 years of experience in cybersecurity operations, EDR management, SOC operations, or endpoint security engineering within telecommunication or large-scale environments.
• Familiarity with EDR/XDR platforms such as Palo Alto XDR or CrowdStrike Falcon or Sentinel One or VMware Carbon Black.
• Experience working with MSSP/SOC providers and managing operational governance.
• Familiarity with Windows, Linux, macOS, cloud (AWS and Ali), and hybrid infra environments.
• Familiarity with PowerShell, Python, or Bash scripting is an advantage.
• Understanding of MITRE ATT&CK framework and endpoint attack techniques.
• Good to have certifications such as CEH, CISSP, Security+, GIAC, or vendor-specific EDR certifications.

Essential Skills

• Strong analytical and troubleshooting skills.
• Experience in endpoint security and security operations.
• Effective stakeholders, vendors, and MSSP management capabilities.
• Good communication and incident coordination skills.
• Knowledge of operational governance, SLA management, and service delivery.
• Strong documentation, reporting, and problem-solving abilities.
• Ability to work collaboratively with SOC, infrastructure, application, and security teams.