Senior SIEM Engineer - CSIRT & Automation

WE-PLUS PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

WE-PLUS PTE. LTD. is seeking an ICT Security Engineering professional in Singapore to enhance detection and reaction to cyber threats by deploying and maintaining SIEM infrastructure.

You will collaborate with Production Infrastructure & Observability teams and be part of the Production CSIRT / SIEM Engg team. Responsibilities include deploying SIEM servers, building automation, integrating new log sources, and developing GROK parsers while complying with regulatory guidelines.

Qualifications

• Bachelor's Degree in Information Technology or relevant fields.
• 7+ years of experience with minimum 4-5 years on relevant scope, e.g. ELK stack for large platform or architecture.
• Working knowledge of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics (Mandatory).
• In-depth experience with Kafka.
• Good working knowledge of Linux (RedHat/Ubuntu).
• Programming skills are a MUST (Python or Bash).
• Experienced production support engineer.
• Platform integration skills are a plus – installation, configuration, documentation and administration of multiple production platforms in virtual and physical environments.
• Experience & skills in automation tools (e.g., Ansible) & DevOps pipelines are appreciated.
• Rigorous and strong problem-solving skills.
• Positive attitude, willingness to upskill and perform in-depth troubleshooting.
• Ability to work autonomously.
• Good interpersonal skills and team player.
• High energy level and willingness to take on responsibility and multi-task.

Responsibilities

• Install and administer the servers of the SIEM infrastructure.
• Develop automation on various tasks and self-service tools.
• Participate in integrating new technologies logs.
• Support logs parsing using custom parser / GROK development.
• Project management.
• Be a full-time member of the Production CSIRT / SIEM Engg team and participate in team activities.
• Contribute to the Permanent Control framework for Day-to-Day policies and procedures.
• Comply with regulatory requirements and internal guidelines.
• Contribute to reporting of incidents according to the Incident Management System.

Skills

ELK stack

Kafka

Python

Bash

Linux

Automation

DevOps pipelines

Problem-solving

Team player

Self-motivated

Education

Bachelor's Degree in Information Technology

Tools

Elasticsearch

Logstash

Kibana

Beats

GROK

Ansible

Job description

WE-PLUS PTE. LTD. is seeking an ICT Security Engineering professional in Singapore to enhance detection and reaction to cyber threats by deploying and maintaining SIEM infrastructure.

You will collaborate with Production Infrastructure & Observability teams and be part of the Production CSIRT / SIEM Engg team. Responsibilities include deploying SIEM servers, building automation, integrating new log sources, and developing GROK parsers while complying with regulatory guidelines.