SIEM Engineer — Cloud Security & SOC Automation

Ensign Services; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

Ensign Services is seeking an experienced SIEM Engineer to join our security operations team in Singapore. You will configure and administer the SIEM to support SOC needs, maintain platform health, and perform regular patching and upgrades.

The role involves integrating diverse log sources, developing detection capabilities, and ensuring data replication between primary and DR sites. You will work with 3rd party consultants, operate SIEM, PAM, EDR, IDS/IPS, and WAF, and automate processes using

Qualifications

• Advanced knowledge of Cyber Security with SIEM engineering experience.
• Experience configuring, operating and troubleshooting SIEM platforms.
• Experience building use cases and operational models for customers.
• Knowledge of networking and AWS/Azure Cloud Security practices.

Responsibilities

• Configure and administer the SIEM to support SOC needs.
• Maintain health and uptime of the SIEM platform.
• Perform regular patching and upgrades on the SIEM.
• Integrate log sources via parsers/forwarders to SIEM.
• Develop detection capabilities for threats across SIEM/EDR/IDS.
• Ensure data replication between Primary and DR sites.
• Integrate data feeds from on-premises and cloud devices into SIEM.
• Work with consultants to cover security aspects and operate SIEM, PAM, EDR, IDS/IPS, WAF.
• Automate processes using PowerShell, Python, Bash; develop SOAR.
• Monitor AWS GuardDuty and other security monitoring.
• Support SOC analysts with investigations and risk assessment.
• Create and tune advanced protective monitoring use cases.
• Provide security consultancy on SIEM matters to internal teams.

Skills

Cyber Security

SIEM Engineer

Security Operations

Threat Detection

Cloud Security

AWS/Azure

Scripting (PowerShell, Python, Bash)

Incident Response

Log Analytics

EDR

Tools

Splunk

Job description

Ensign Services is seeking an experienced SIEM Engineer to join our security operations team in Singapore. You will configure and administer the SIEM to support SOC needs, maintain platform health, and perform regular patching and upgrades.

The role involves integrating diverse log sources, developing detection capabilities, and ensuring data replication between primary and DR sites. You will work with 3rd party consultants, operate SIEM, PAM, EDR, IDS/IPS, and WAF, and automate processes using