Senior Security Engineer

Sea; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Sea is seeking a Security Engineer for its Corporate IT Security Operations team in Singapore. The role focuses on engineering and operating Identity and Access Management (IAM) and Endpoint Detection and Response (EDR) platforms, plus developing security solutions across the enterprise.

You will monitor threats, respond with mitigations, and drive improvements. Requirements include a bachelor’s degree in information security or related field and >=4 years in cybersecurity, with hands-on

Qualifications

• Bachelor's degree or equivalent in information security or related technical discipline.
• Minimum 4 years in computer/network defense or related cybersecurity roles.
• Hands-on experience with intrusion analysis, email analysis, malware analysis, incident response, or security engineering.
• Strong knowledge of Windows, Linux, and/or macOS.
• Good knowledge of TCP/IP, HTTP, SMTP, and other networking/web technologies.
• Familiarity with security operations or incident response processes.

Responsibilities

• Design, test, deploy, and maintain security solutions optimizing tools and processes.
• Monitor security alerts, triage, investigate, mitigate, escalate, and document issues.
• Develop detection use cases, alerts, metrics, dashboards, and related automation.
• Participate on standby/on-call roster for critical security escalations.

Skills

Security operations

Incident response

Threat detection

Cybersecurity

Education

Bachelor's degree in Information Security or related field

Tools

Identity Access Management

Endpoint Detection and Response

Vulnerability Management

Threat Intelligence

Email Security

Job description

The Corporate IT Security Operations team plays an important role in securing our business operations globally, supporting Corporate IT's mission of helping Sea develop competitive advantages to achieve strategic goals and meet operational requirements.

The Security Engineer’s overall responsibilities are in the engineering and operation of the enterprise Identity and Access Management, and Endpoint Detection and Response platforms. Additional responsibilities include the development and deployment of security solutions across the enterprise, monitoring the enterprise for cybersecurity threats, and responding with mitigating actions.

Job Description

• Research, design, test, recommend, deploy, and maintain security solutions, ensuring tools and associated processes are continuously optimized for effectiveness.
• Monitor security alerts, triage, investigate, mitigate, escalate, and document security issues.
• Develop advanced detection use cases, alerts, metrics, dashboards, reports, tools, automations, documentations, and related work around the incumbent security solutions.
• Participate as a point of contact on standby/on-call roster for critical security escalations.

Requirements

• Bachelor’s degree in Information Security, Computer Science or related technical discipline, or equivalent professional experience related to cybersecurity.
• Minimum 4 years of professional experience in computer/network defense or related cybersecurity roles. Experience in Security Operations or Incident Response is a plus.
• Hands-on experience with intrusion analysis, email analysis, malware analysis, incident response, or security engineering.
• Strong knowledge of common operating systems - Windows, Linux and/or macOS.
• Good knowledge of common networking/web technologies - TCP/IP, HTTP, SMTP, etc.
• Good knowledge of common security principles and techniques.
• Good understanding of Security Operations or Incident Response processes is a plus.
• Hands-on experience with relevant security tools a plus - Identity Access Management, Endpoint Detection and Response, Vulnerability Management, Threat Intelligence, or Messaging/Email Security.
• Strong interpersonal, leadership, and problem-solving skills, with ability to play both leading and supporting roles.
• Initiative, resourceful, enthusiastic, and eager to learn in a fluid and fast-paced environment.
• Relevant security-related certifications a plus - CISSP, GSEC, CEH, CySA+, or equivalent.