Senior Security Engineer, Logstash & Logging Infra

Sopra Steria; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Training programs and certifications

Annual bonus

Team-building activities

Hybrid working mode

Job summary

Sopra Steria in Singapore is seeking a Senior Security Engineer (Logstash / Logging Infrastructure) to join our Production CSIRT / SIEM Engineering team and help secure large-scale data flows for a leading financial client.

You will install and administer SIEM servers, build automation with Ansible and CI/CD pipelines, integrate new log sources, develop GROK patterns, and contribute to control frameworks and incident reporting.

Qualifications

• Total professional experience ≥7 years, with ≥4–5 years in large-scale Logstash setups.
• Banking-sector experience is a plus.
• Strong regex, SQL, and IT security fundamentals.

Responsibilities

• Install and administrate the servers of the SIEM Infrastructure.
• Build & maintain automation (Ansible playbooks, python/bash scripts) and self-service tools to minimize manual work.
• Integrate new log sources and emerging technologies (including Kafka-based pipelines).
• Develop custom parsers/GROK patterns; apply regular-expression expertise.
• Act as a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.
• Contribute to the Permanent Control framework for implementation of policies and procedures in day-to-day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System.

Skills

Regex

SQL

Ansible

CI/CD

IT Security

SIEM

Logstash

Python

Bash

Tools

Python

Bash

Job description

Sopra Steria in Singapore is seeking a Senior Security Engineer (Logstash / Logging Infrastructure) to join our Production CSIRT / SIEM Engineering team and help secure large-scale data flows for a leading financial client.

You will install and administer SIEM servers, build automation with Ansible and CI/CD pipelines, integrate new log sources, develop GROK patterns, and contribute to control frameworks and incident reporting.