SIEM Engineer: Threat Detection & Automation

WE-PLUS PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

WE-PLUS PTE. LTD. is seeking an ICT Security Engineering professional to elevate its capability to detect and respond to cyber threats by deploying, maintaining, and improving a new SIEM infrastructure.

You will collaborate with Production Infrastructure & Observability teams and join the Production CSIRT / SIEM Engg team with opportunities to expand. Key responsibilities include SIEM server administration, automation development, log-source integration, GROK patterns, and contributing to policy

Qualifications

• Bachelor's degree in information technology or related field.
• 7+ years of experience with at least 4–5 years in large-scale SIEM/logging deployments.
• Experience with Logstash and regular expressions.

Responsibilities

• Install and administer the SIEM infrastructure servers.
• Build and maintain automation (Ansible playbooks, Python/Bash scripts).
• Integrate new log sources and Kafka-based pipelines.
• Develop parsers/GROK patterns; apply regex expertise.
• Participate in small-scale project-management tasks.
• Act as a full-time member of Production CSIRT / SIEM Engg team.
• Contribute to the Control/Policy framework and day-to-day compliance.
• Report incidents per Incident Management System.

Skills

SIEM Admin

Regex

Python

Ansible

Linux Admin

CI/CD

Datadog

Logstash

GROK

Production CSIRT

Threat detection

Education

Bachelor's Degree in Information Technology

Tools

Logstash

Vector

Datadog

Ansible

Kafka

SQL

Job description

WE-PLUS PTE. LTD. is seeking an ICT Security Engineering professional to elevate its capability to detect and respond to cyber threats by deploying, maintaining, and improving a new SIEM infrastructure.

You will collaborate with Production Infrastructure & Observability teams and join the Production CSIRT / SIEM Engg team with opportunities to expand. Key responsibilities include SIEM server administration, automation development, log-source integration, GROK patterns, and contributing to policy