SOC Security Automation Engineer (Cloud & SIEM)

Jobtailor; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Jobtailor in Singapore is seeking a hands-on security automation engineer to design, develop, and maintain SOC tooling and integrations with SIEM, EDR, cloud services, and internal platforms.

You will build automation pipelines, APIs, and tools to enrich alerts, automate investigations, and support detection engineering and incident response, while participating in on-call rotations and security operations.

Qualifications

• Strong hands-on programming in Python, Golang, or Java.
• Experience writing production-quality code and working with RESTful APIs, authentication, pagination, rate limiting, and error handling.
• Experience with Git-based version control, CI/CD, containerization, and AWS services (IAM, EC2, S3, Lambda, CloudWatch).
• Hands-on SOC experience, SIEM, EDR familiarity, and security telemetry sources.
• Solid Linux fundamentals and experience developing security platforms or tools.

Responsibilities

• Design, develop, and maintain security automation and SOC tooling with SIEM/EDR/cloud integrations.
• Develop services, scripts, and pipelines for alert enrichment, correlation, response, and investigations.
• Build API-based integrations with security tools, AWS services, and internal systems.
• Support and enhance SIEM platforms for ingestion, alerting, and investigations.
• Participate in security detection engineering and incident response activities.
• Take part in SOC on-call rotations and respond to alerts and incidents.

Skills

Python Programming

Golang Programming

Java Programming

RESTful APIs

Git Version Control

CI/CD

Containerization

Linux Fundamentals

Security Incident Response

Alert Enrichment

Log Parsing

Tools

Docker

AWS (CloudWatch, EC2, S3, Lambda)

VS Code

IntelliJ

PyCharm

Job description

Jobtailor in Singapore is seeking a hands-on security automation engineer to design, develop, and maintain SOC tooling and integrations with SIEM, EDR, cloud services, and internal platforms.

You will build automation pipelines, APIs, and tools to enrich alerts, automate investigations, and support detection engineering and incident response, while participating in on-call rotations and security operations.