Threat Detection Engineer - Cybersecurity & SIEM Expert

Assurity Trusted Solutions Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Assurity Trusted Solutions Pte Ltd is seeking a Cybersecurity Engineer with a focus on detection engineering to join our team in Singapore. You will develop, tune, and document detection rules across SIEM/EDR platforms and create playbooks to identify threats targeting government systems.

The role requires hands-on experience with detection languages such as Sigma, KQL, SPL, EQL or YARA, and scripting skills (Python, PowerShell).

Qualifications

• Bachelor's degree in Cybersecurity or related field.
• 3+ years in security operations or threat detection.
• Certifications from OffSec/SANS/GIAC preferred.
• Knowledge of MITRE ATT&CK.
• Ability to translate threats into detection rules.
• Experience with detection rule languages and automation.

Responsibilities

• Develop, implement, and document effective security detection rules for SIEM/EDR and playbooks.
• Analyze security logs/alerts to differentiate true threats from benign activity and reduce false positives.
• Tune rules/signatures for enhanced detection and automate where possible.
• Collaborate with analysts and incident responders on incident response protocols.
• Collaborate with security engineers to integrate detection systems and optimize workflows.
• Maintain awareness of evolving threats and translate TTPs into detections.

Skills

Sigma rules

KQL

SPL

EQL

YARA

Python

PowerShell

SIEM

EDR

SOAR

Education

Cybersecurity degree

Cybersecurity certifications

Tools

SIEM tools

EDR tools

SOAR platforms

Git

Job description

Assurity Trusted Solutions Pte Ltd is seeking a Cybersecurity Engineer with a focus on detection engineering to join our team in Singapore. You will develop, tune, and document detection rules across SIEM/EDR platforms and create playbooks to identify threats targeting government systems.

The role requires hands-on experience with detection languages such as Sigma, KQL, SPL, EQL or YARA, and scripting skills (Python, PowerShell).