Threat Detection Engineer — Cybersecurity & SIEM

Assurity Trusted Solutions; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Assurity Trusted Solutions (ATS) is seeking a Cybersecurity Engineer with a background in detection engineering to strengthen government security postures across on-premises and cloud environments. You will develop and tune detection rules using Sigma, KQL, SPL, EQL or YARA, analyze logs from SIEM/EDR, and collaborate with analysts to operationalise detections and incident response.

The role requires strong scripting skills (Python/PowerShell) and a solid understanding of MITRE ATT&CK within a

Qualifications

• Degree in Cybersecurity, Information Security, Computer Science or related field.
• 3+ years in security operations, incident response or related cybersecurity fields.
• Certifications from OffSec, SANS, GIAC or related institution.
• Understanding MITRE ATT&CK and attacker TTPs.
• Hands-on with SIEM, EDR, SOAR; scripting and automation tools.

Responsibilities

• Develop, implement and document detection rules for SIEM/EDR across government environments.
• Analyze security logs and alerts to differentiate true threats from benign activity and reduce false positives.
• Improve detection capabilities through research on threats targeting government networks and cloud environments.
• Collaborate with security analysts and incident responders on government incident response protocols.
• Coordinate with security engineers to integrate detection systems and optimize tool usage.

Skills

SIEM

EDR

SOAR

Python

PowerShell

Threat detection

Automation

Education

Degree in Cybersecurity / Information Security / Computer Science

Certifications: OffSec / SANS / GIAC or equivalent

Tools

Sigma

KQL

SPL

EQL

YARA

Job description

Assurity Trusted Solutions (ATS) is seeking a Cybersecurity Engineer with a background in detection engineering to strengthen government security postures across on-premises and cloud environments. You will develop and tune detection rules using Sigma, KQL, SPL, EQL or YARA, analyze logs from SIEM/EDR, and collaborate with analysts to operationalise detections and incident response.

The role requires strong scripting skills (Python/PowerShell) and a solid understanding of MITRE ATT&CK within a