Senior Security Platform Engineer | MSSP Automation & SIEM

Lumen; Singapore; Remote; SGD 120,000 - 180,000; Full time

Job summary

Lumen is hiring a Security Platform & SecOps Engineer to design, build, automate, operate, and improve MSSP security platforms powering 24x7 SOC services. The role requires end-to-end ownership across SIEM, XDR, SOAR, data pipelines, threat intel, cloud and identity security, and SecOps automation.

You will own platform architectures, ingestion pipelines, and automated playbooks, collaborating with SOC analysts and customers to deliver scalable, resilient security operations.

Qualifications

• 5+ years of cybersecurity engineering, security platform engineering, SOC engineering, security data engineering, or security infrastructure experience.
• 3+ years designing, deploying, maintaining, or upgrading SIEM and/or SOAR platforms in enterprise, MSSP, MDR, SOC, or security consulting.
• Hands-on with at least one major SIEM platform (e.g., Sentinel, Splunk, XSIAM, QRadar).
• Hands-on with at least one SOAR or automation platform (e.g., XSOAR, FortiSOAR, Splunk SOAR).
• Experience with agent deployment, patching, connectors, upgrades, and production validation.
• Strong understanding of telemetry across cloud, SaaS, identity, endpoint, network, app, DB, and infra.
• Knowledge of APIs, scripting, automation, secrets handling, and secure integration design.

Responsibilities

• Design and implement MSSP-grade security platform architectures for multi-customer SOC service delivery.
• Engineer unified SecOps capabilities across SIEM, XDR, SOAR, EDR, NDR, cloud security, identity security, threat intelligence, ITSM, vulnerability and exposure management.
• Develop reference architectures, integration standards, data flow diagrams, onboarding patterns, and guardrails.
• Build and maintain reliable telemetry ingestion with diverse data sources and OpenTelemetry where applicable.
• Design and implement SOAR playbooks for enrichment, triage, escalation, evidence collection, reporting, and case management.
• Onboard new MSSP customers from discovery to SOC handover; create data flow diagrams and runbooks.

Skills

Cybersecurity engineering

SOC engineering

Security platform engineering

Threat intelligence

Cloud security

Automation & scripting

APIs & secure integration

Education

Bachelor's or higher in CS/Engineering or equivalent

Tools

Microsoft Sentinel

Splunk

Cortex XSIAM

Google SecOps

FortiSIEM

QRadar

Cortex XSOAR

FortiSOAR

Splunk SOAR

Azure Logic Apps

Job description

Lumen is hiring a Security Platform & SecOps Engineer to design, build, automate, operate, and improve MSSP security platforms powering 24x7 SOC services. The role requires end-to-end ownership across SIEM, XDR, SOAR, data pipelines, threat intel, cloud and identity security, and SecOps automation.

You will own platform architectures, ingestion pipelines, and automated playbooks, collaborating with SOC analysts and customers to deliver scalable, resilient security operations.