Senior Security Specialist

aramco; Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

ARAMCO in Singapore seeks an experienced cybersecurity engineer to execute core operations across security monitoring, threat hunting, incident response and remediation. You will review architectures, support cloud and on‑prem environments, and coordinate with vendors for testing and remediation.

The role emphasizes automation, process improvements and governance, with mentoring for junior staff and involvement in breach simulations and security controls enhancement.

Qualifications

• Bachelor’s degree in computer science or cybersecurity is required.
• 8+ years of experience in security engineering or monitoring.
• Proven ability in managing SIEM, Log Management and SOAR solutions.
• Strong technical knowledge and troubleshooting skills.
• Ability to work independently and drive new initiatives.
• Knowledge of Azure and AWS cloud components.
• Familiarity with securing on-prem and cloud infrastructure.
• Certifications such as CISSP, CCSP, GIAC are a plus.
• Automation using scripts or platforms like SOAR/Power Automate is preferred.

Responsibilities

• Execute core cybersecurity operations including monitoring, threat hunting, incident response, and remediation.
• Support incident response planning and containment efforts.
• Review architectures and designs for security compliance.
• Coordinate breach simulations and refine security controls.
• Collaborate with vendors on pentesting and remediation tracking.
• Design and maintain security solutions across on‑prem and cloud environments.
• Drive continuous improvement through automation and processes.
• Lead enhancement initiatives including vendor evaluation and procurement.
• Develop and manage budgets and resource forecasting for cybersecurity.
• Onboard logs to SIEM; perform patching and upgrades for servers.

Skills

Threat hunting

Incident response

Security monitoring

Automation

Vendor coordination

Stakeholder engagement

Independent work

Cloud deployment patterns

Education

Bachelor's degree in computer science/cybersecurity

Tools

SIEM

Log Management

SOAR

Job description

• Execute core cybersecurity operations, including security monitoring, use case/content management, threat hunting, incident response, and remediation.


• Contribute to incident response planning and coordinate effective containment, eradication, and recovery actions.


• Review and assess existing and proposed system architectures, configurations, and designs to ensure compliance with security standards, controls, and baselines.


• Collaborate with HQ to conduct quarterly breach and attack simulations and continuously refine security controls to improve effectiveness.


• Support and coordinate with vendors on penetration testing activities, including scoping, execution, and remediation tracking.


• Assess proposed technology or process changes and implement action plans to enhance security posture, resilience, and risk mitigation.


• Design, implement, operate, and maintain security solutions across on-premises and cloud environments (e.g., M365 Conditional Access, Intune, endpoint protection, web and network security, perimeter defenses, and advanced detection tools) with minimal supervision.


• Drive continuous improvement of cybersecurity operations through process optimization, automation, and stakeholder engagement.


• Lead cybersecurity enhancement initiatives, including vendor evaluation, scope definition, business justification, contract review, negotiation, and procurement coordination.


• Develop and manage business plans, budgets, and resource forecasting for cybersecurity initiatives.


• Responsible for onboarding logs to SIEM solution.


• Perform patching and upgrade for syslog servers and SOAR servers.


• Mentor and guide junior cybersecurity team members to build capability and expertise.


• Define, execute, and communicate cybersecurity enhancement strategies using measurable objectives, performance tracking, and regular reporting.

Requirements :

• Bachelor’s degree in computer science/cybersecurity.


• Minimal 8 years of work experience in security engineering or monitoring in information security division.


• Proven ability in managing SIEM, Log Management and SOAR solutions.


• Possess strong technical knowledge, technology integration and troubleshooting skills


• Able to work independently and drive new initiatives proactively.


• Knowledge of modern cloud technology components and deployment patterns (Azure, AWS)


• Understand and familiar with securing On-Prem and cloud infrastructure.


• Possess relevant professional certifications such as CISSP, CCSP or GIAC certifications - GCIH, GNFA, GPEN, GCAD, GDSA.


• Ability to implement automation using script or via automation platforms such as SOAR, Power Automate is preferred.