Threat Detection Engineer — Cybersecurity & SIEM

Assurity Trusted Solutions; Singapore; Vor Ort; SGD 90.000 - 130.000; Vollzeit

Zusammenfassung

Assurity Trusted Solutions (ATS) is seeking a Cybersecurity Engineer with a background in detection engineering to strengthen government security postures across on-premises and cloud environments. You will develop and tune detection rules using Sigma, KQL, SPL, EQL or YARA, analyze logs from SIEM/EDR, and collaborate with analysts to operationalise detections and incident response.

The role requires strong scripting skills (Python/PowerShell) and a solid understanding of MITRE ATT&CK within a

Qualifikationen

• Degree in Cybersecurity, Information Security, Computer Science or related field.
• 3+ years in security operations, incident response or related cybersecurity fields.
• Certifications from OffSec, SANS, GIAC or related institution.
• Understanding MITRE ATT&CK and attacker TTPs.
• Hands-on with SIEM, EDR, SOAR; scripting and automation tools.

Aufgaben

• Develop, implement and document detection rules for SIEM/EDR across government environments.
• Analyze security logs and alerts to differentiate true threats from benign activity and reduce false positives.
• Improve detection capabilities through research on threats targeting government networks and cloud environments.
• Collaborate with security analysts and incident responders on government incident response protocols.
• Coordinate with security engineers to integrate detection systems and optimize tool usage.

Kenntnisse

SIEM

EDR

SOAR

Python

PowerShell

Threat detection

Automation

Ausbildung

Degree in Cybersecurity / Information Security / Computer Science

Certifications: OffSec / SANS / GIAC or equivalent

Tools

Sigma

KQL

SPL

EQL

YARA

Jobbeschreibung

Assurity Trusted Solutions (ATS) is seeking a Cybersecurity Engineer with a background in detection engineering to strengthen government security postures across on-premises and cloud environments. You will develop and tune detection rules using Sigma, KQL, SPL, EQL or YARA, analyze logs from SIEM/EDR, and collaborate with analysts to operationalise detections and incident response.

The role requires strong scripting skills (Python/PowerShell) and a solid understanding of MITRE ATT&CK within a