SIEM & Threat Detection Lead — Security Operations

Ensign InfoSecurity; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A leading cybersecurity firm in Singapore is seeking an experienced professional to manage and improve security monitoring use cases. The ideal candidate has over 3 years in a SOC environment, expertise in SIEM, and strong analytical skills. Responsibilities include the creation and maintenance of correlation rules, analyzing security events, and ensuring effective monitoring processes. Certifications such as Splunk and SANS are advantageous. Join a dynamic team to enhance security operations.

Qualifications

• 3+ years of experience in security operations within a SOC environment.
• 2+ years of experience with correlation rules and SIEM dashboards.
• Familiarity with Regex and/or scripting.
• Strong problem-solving and analytical skills.

Responsibilities

• Implement and maintain security monitoring use cases.
• Create and fine-tune SIEM data sources and alerts.
• Analyze security events and network traffic.

Skills

Security operations expertise

SIEM knowledge

Regex and scripting

Critical thinking

Analytical skills

Stakeholder management

Attention to detail

Education

Splunk Enterprise Certified Administrator

SANS certification (GCDA, GCIA, GDSA, GMON)

Job description

A leading cybersecurity firm in Singapore is seeking an experienced professional to manage and improve security monitoring use cases. The ideal candidate has over 3 years in a SOC environment, expertise in SIEM, and strong analytical skills. Responsibilities include the creation and maintenance of correlation rules, analyzing security events, and ensuring effective monitoring processes. Certifications such as Splunk and SANS are advantageous. Join a dynamic team to enhance security operations.