SOC Security Engineer

Jobtailor; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Jobtailor in Singapore is seeking a hands-on security automation engineer to design, develop, and maintain SOC tooling and integrations with SIEM, EDR, cloud services, and internal platforms.

You will build automation pipelines, APIs, and tools to enrich alerts, automate investigations, and support detection engineering and incident response, while participating in on-call rotations and security operations.

Qualifications

• Strong hands-on programming in Python, Golang, or Java.
• Experience writing production-quality code and working with RESTful APIs, authentication, pagination, rate limiting, and error handling.
• Experience with Git-based version control, CI/CD, containerization, and AWS services (IAM, EC2, S3, Lambda, CloudWatch).
• Hands-on SOC experience, SIEM, EDR familiarity, and security telemetry sources.
• Solid Linux fundamentals and experience developing security platforms or tools.

Responsibilities

• Design, develop, and maintain security automation and SOC tooling with SIEM/EDR/cloud integrations.
• Develop services, scripts, and pipelines for alert enrichment, correlation, response, and investigations.
• Build API-based integrations with security tools, AWS services, and internal systems.
• Support and enhance SIEM platforms for ingestion, alerting, and investigations.
• Participate in security detection engineering and incident response activities.
• Take part in SOC on-call rotations and respond to alerts and incidents.

Skills

Python Programming

Golang Programming

Java Programming

RESTful APIs

Git Version Control

CI/CD

Containerization

Linux Fundamentals

Security Incident Response

Alert Enrichment

Log Parsing

Tools

Docker

AWS (CloudWatch, EC2, S3, Lambda)

VS Code

IntelliJ

PyCharm

Job description

• Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
• Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
• Build and maintain API-based integrations with security tools, AWS services, and internal systems
• Support and enhance SIEM platforms for ingestion, alerting, and investigation
• Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation
• Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis
• Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required

Requirements

• Programming & Engineering Skills: Strong hands-on programming experience in one or more languages, such as: Python (preferred)/Golang/Java
• Experience writing production-quality code, not just ad-hoc scripts, solid experience with RESTful APIs, including authentication, pagination, rate limiting, and error handling, familiarity with modern IDEs (VS Code, IntelliJ, PyCharm) and debugging techniques
• Experience with Git-based version control and collaborative development workflows, Cloud, CI/CD & Containerization, practical experience working with AWS environments, including common services such as IAM, EC2, S3, Lambda, and CloudWatch, experience building, deploying, and maintaining Docker-based applications
• Security & SOC Knowledge: Hands-on experience working in or closely with a Security Operations Center (SOC), like experience using SIEM platforms and familiarity with EDR solutions, understanding of common security telemetry sources
• Platform & System Skills, experience developing or extending security platforms or internal security tools, solid Linux fundamentals

Core Competencies

Demonstrates strong programming skills in Python, Golang, or Java, with a focus on developing security automation and SOC tooling. Proficient in working with AWS services, CI/CD, and Docker, while possessing hands-on experience in Security Operations Center environments and SIEM platforms.

Highest-signal resume keywords

• Python Programming
• AWS Services
• SIEM Platforms
• Security Automation
• Docker-Based Applications

ATS Optimization Keywords

Hard Skills

• Golang Programming
• Java Programming
• RESTful APIs
• Git Version Control
• CI/CD
• Containerization
• Linux Fundamentals
• Security Incident Response
• Alert Enrichment
• Log Parsing

Industry Keywords

• Security Operations Center
• SOC
• Security Telemetry
• Incident Triage
• Data Normalization
• Detection Logic
• Alerting
• Investigation Workflows
• Automation Pipelines
• Security Platforms

Tools & Technologies

• VS Code
• IntelliJ
• PyCharm
• Docker
• CloudWatch
• EC2
• S3
• IAM
• Lambda
• EDR Solutions