Senior Specialist, Security Operations - Cybersecurity

SIA Engineering Company; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

SIA Engineering Company is seeking an experienced cybersecurity professional to manage tickets, triage, and lead vulnerability management, policy compliance, and web application security initiatives. You will identify threats, analyze logs, and support EDR/MDR/XDR platforms while providing advisory on emerging risks.

The role requires 5+ years in cybersecurity, relevant certifications, and strong governance knowledge, with exposure to cloud security and incident handling.

Qualifications

• Degree in Computer Engineering or equivalent.
• Certified in CISSP/CISM/CISA/CEH/CRISC or equivalent.
• At least 5 years of cybersecurity work experience.
• Strong knowledge of information security governance and risk management, controls, vulnerability assessments and incidents.
• Knowledge of ISO27001, IEC62443, NIST CSF and CSA Code of Practice.

Responsibilities

• Responsible for all cyber security tickets and triage process.
• Plan, deploy and operate vulnerability management, policy compliance and web app security functions.
• Identify cyber security threats and analyze logs from multiple sources.
• Manage EDR technologies and support MDR/XDR platforms.
• Provide advisory on new threats and vulnerabilities.

Skills

Cybersecurity expertise

Threat detection

Penetration testing

Incident management

Governance & risk

Education

Degree in Computer Engineering or equivalent

Tools

SIEM

EDR/MDR-XDR

Job description

• Responsible for all cyber security tickets raised and the triage process
• Plan, deploy and operate the vulnerability management, policy compliance and web application security functions
• Identify cyber security threats to systems and detect security anomalous activities and perform analysis of security logs from multiple sources
• Manage Endpoint Detection Response (EDR) technologies and to be part of MDR/XDR platform support
• Possess working knowledge in handling phishing attacks and containment steps
• Demonstrate strong IT background with expert level knowledge of multiple security practices (Email security solutions, vulnerability management, network security (firewall, IPS/IDS, SIEM, threat intelligence, etc.) in addition to forensics and incident management
• Provide advisory and solutions for new security threats and vulnerabilities
• Possess basic to moderate experience in Threat detection, Penetration testing and red teaming
• Perform security analysis to Cloud platform such as AWS, Azure as well M365 services

Requirements:

• Degree in Computer Engineering or equivalent
• Trained in Cybersecurity, Information Security, Forensics or equivalent
• At least 5 years of cybersecurity work experience
• CISSP/CISM/CISA/CEH/ CRISC or equivalent certification
• Strong domain knowledge of information security governance and risk management, controls, vulnerability assessment/penetration testing, compliance, business continuity, investigations, system architecture and design, legal, and industry IT/OT and cyber security bestpractices
• Knowledge on ISO27001 and IEC62443, NIST Cybersecurity Framework, CSA Code of Practice (CCoP)
• Experience in Threat detection, Penetration testing and red/purple teaming
• Knowledge in Network, Web Security and Application Security would be highly valued.
• Experience with information security tools (SIEM, anti-virus tools etc.)
• Experience in forensics and incident management