SIEM & SOC Engineer - Cloud & Automation

Ensign InfoSecurity; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

Ensign InfoSecurity, headquartered in Singapore, seeks an experienced SIEM Engineer to configure and administer the SIEM, maintain health and uptime, perform patching, and integrate diverse log sources for thorough monitoring across on-prem and cloud. You will craft detection use cases, support SOC analysts, and coordinate with vendors to cover all security aspects.

The role requires hands-on experience in security operations (SIEM/EDR), cloud security, and secure software practices, with

Qualifications

• Advanced knowledge and experience of Cyber Security with SIEM engineering.
• Experience implementing use cases and operational models for SIEM.
• Hands-on with multiple security domains: SIEM, EDR, cloud security.
• Knowledge of networking and AWS/Azure Cloud Security practices.
• SIEM administration certifications preferred.

Responsibilities

• Configure and administer the SIEM to support SOC needs.
• Maintain health and uptime of the SIEM platform; patch and upgrade.
• Integrate log sources via parsers/forwarders for monitoring.
• Develop and maintain detection capabilities for threats.
• Coordinate data feeds into SIEM from on-prem and cloud devices.
• Work with third-party consultants to cover security aspects.
• Operate SIEM, PAM, EDR, IDS/IPS, WAF; ensure regulatory compliance.
• Automate security processes using PowerShell, Python, Bash; explore SOAR.
• Research leading cybersecurity products and cloud integrations.
• Support SOC analysts with investigations and protective monitoring use cases.

Skills

SIEM administration

Cybersecurity knowledge

Networking basics

AWS/Azure security knowledge

Security use case development

Tools

Splunk

PAM

EDR

IDS/IPS

WAF

Job description

Ensign InfoSecurity, headquartered in Singapore, seeks an experienced SIEM Engineer to configure and administer the SIEM, maintain health and uptime, perform patching, and integrate diverse log sources for thorough monitoring across on-prem and cloud. You will craft detection use cases, support SOC analysts, and coordinate with vendors to cover all security aspects.

The role requires hands-on experience in security operations (SIEM/EDR), cloud security, and secure software practices, with