Senior SOC Engineer, Digital Infrastructure

Kerry Consulting; Singapore; On-site; SGD 110,000 - 180,000; Full time

Job summary

Kerry Consulting is recruiting a Senior SOC Engineer to strengthen security operations and incident response across SIEM, endpoint, identity, network, and cloud environments. You will perform investigations, root-cause analysis, and containment of cybersecurity incidents, while contributing to SOC process improvements through automation and AI/ML.

The role requires deep expertise and hands-on security experience in a global tech setting.

Qualifications

• Degree required in cybersecurity, CS, engineering, or related field.
• At least 8 years in SOC operations or incident response.
• Hands-on investigations of phishing, malware, compromised accounts, and unauthorized access.
• Experience with SIEM/EDR/XDR, cloud and identity security platforms; MITRE ATT&CK knowledge.
• Experience using scripting, automation, AI, or ML to improve alert triage or response is advantageous.

Responsibilities

• Lead security incident investigations and containment efforts across multiple environments.
• Assess alerts from SIEM/EDR/XDR, perform root cause and impact analysis.
• Enhance SOC processes through automation and scripting; apply AI/ML for triage.
• Support development of security governance for emerging technologies.

Skills

Incident response

Threat hunting

Automation scripting

AI/ML for security

Education

Degree in Cybersecurity, CS, or Engineering

Tools

SIEM

EDR/XDR

Cloud security

Identity security

Job description

Our client is a global technology company operating across digital infrastructure, high-performance computing, and AI cloud services. With an international presence spanning multiple data centre markets, the organisation develops and manages advanced computing environments while continuing to invest in next-generation technology and infrastructure capabilities.

Role

As a Senior SOC Engineer, you will play a key role in strengthening the organisation's security operations and incident response capabilities. You will assess and investigate alerts across areas such as SIEM, endpoint, identity, network, and cloud environments, while conducting root-cause analysis, impact assessment, and containment of cybersecurity incidents. The role will also contribute to enhancing SOC processes through automation, scripting, and the application of AI or machine learning, as well as supporting the development of security governance practices for emerging technologies.

Requirements

• Degree in Cybersecurity, Computer Science, Engineering, or a related discipline.
• At least 8 years of relevant experience in Security Operations Centre operations, cybersecurity incident response, or a closely related area.
• Strong hands-on experience in security incident investigations and/or threat hunting, including cases involving phishing, malware, compromised accounts, and unauthorised access.
• Practical knowledge of SIEM, EDR/XDR, cloud security, or identity security platforms, with a sound understanding of attack chains, MITRE ATT&CK, and forensic investigation techniques.
• Experience using scripting, automation, AI, or machine learning to improve security alert triage, log analysis, or incident response is advantageous.