Senior Security Engineer, SIEM/EDR & AI SecOps

SEA Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Sea Limited Singapore is seeking a Lead Security Engineer to join the Corporate IT Security Operations team. You will support IT Security Operations Manager in engineering, operation, and continuous improvement of enterprise security platforms, including SIEM modernisation, EDR/XDR operations, automation, and data pipelines.

The ideal candidate will bring hands-on security engineering experience, investigations, SIEM/EDR operations, automation, and data-driven SecOps improvements, helping the

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or a related discipline.
• Certifications in cybersecurity, cloud, SIEM, incident response, or security engineering (e.g., CISSP, GCIH, GCIA, Security+).
• Minimum 5+ years of hands-on experience in Security Engineering, SecOps Engineering, SIEM Engineering, Detection Engineering, Incident Response, or related cybersecurity roles; 2+ years in investigation, alert triage, detection tuning, incident response, threat hunting, or SOC operations.
• Strong understanding of logs across firewalls, proxies, VPN, DNS, DHCP, AD, endpoints, identity, cloud, apps, and infrastructure.
• Hands-on experience with intrusion analysis, malware analysis, incident response, or security engineering.
• Experience with at least one major SIEM or security analytics platform (Elastic, Splunk, etc.).
• Hands-on experience with EDR/XDR platforms (CrowdStrike or similar).
• Experience with security automation using scripting, APIs, SOAR tools, n8n, Python, PowerShell, Bash, etc.
• Experience with AI-assisted SecOps including alert enrichment, anomaly detection, investigation support, and SOC workflow automation.
• Strong interpersonal, leadership, and problem-solving skills.

Responsibilities

• Support the IT Security Operations Manager in IT security engineering, security platform operations, SIEM modernisation, and SecOps process automation.
• Engineer, operate, and continuously improve enterprise security platforms, including SIEM, EDR/XDR, automation/orchestration tools, and security data pipelines.
• Support the migration and modernisation of the SIEM environment to Elastic on GCP, including log ingestion, pipeline development, dashboards, alerting, rule tuning, and platform optimisation.
• Build and maintain security data pipelines for logs from corporate IT systems, networks, endpoints, identity platforms, cloud services, applications, and security tools.
• Improve alert enrichment, investigation workflows, case routing, ticketing integration, dashboards, and reporting.
• Support security monitoring, alert triage, threat investigation, incident response, detection tuning, and mitigation activities.
• Translate investigation experience and SecOps pain points into practical engineering improvements, including detections, false-positive reduction, automation playbooks, and runbooks.
• Explore and support AI-enabled SecOps use cases, including anomaly detection, alert enrichment, investigation assistance, behavioural analytics, and automation of repetitive SOC workflows.
• Partner with infrastructure, network, cloud, endpoint, identity, application, and cybersecurity teams to improve security visibility and operational effectiveness.

Skills

Security engineering

Incident response

SIEM engineering

Detection engineering

EDR/XDR

Security automation

Python

PowerShell

Bash

SOAR tools

APIs

AI-assisted SecOps

Threat hunting

Team leadership

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Security

Tools

Elastic Security

Splunk

CrowdStrike

GCP

Job description

Sea Limited Singapore is seeking a Lead Security Engineer to join the Corporate IT Security Operations team. You will support IT Security Operations Manager in engineering, operation, and continuous improvement of enterprise security platforms, including SIEM modernisation, EDR/XDR operations, automation, and data pipelines.

The ideal candidate will bring hands-on security engineering experience, investigations, SIEM/EDR operations, automation, and data-driven SecOps improvements, helping the