Threat Detection Engineer - SIEM/EDR/NDR & Threat Hunting

ICE DATA SERVICES SINGAPORE PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

ICE Data Services Singapore Pte. Ltd. seeks a cybersecurity threat detection engineer to design, tune, and maintain detections across SIEM, EDR, and NDR platforms, while mapping coverage to MITRE ATT&CK and aligning with threat intelligence. The role emphasizes proactive hunting and reducing false positives within a globally distributed infrastructure.

You will implement detection logic, build internal tooling, and collaborate with security operations to strengthen coverage and telemetry health.

Qualifications

• 3+ years of experience in threat detection, security operations, or threat hunting.
• Hands-on experience with SIEM, EDR, and NDR platforms and writing/tuning detection logic.
• Proficient in a scripting language for automation to build internal tooling.
• Ability to investigate suspicious activity end to end from logs to conclusions.
• Familiarity with MITRE ATT&CK and reasoning about adversary tradecraft.
• Solid understanding of OS internals, networking, and authentication as seen in security telemetry.

Responsibilities

• Design, build, test, and maintain detection content across SIEM, EDR, and NDR platforms.
• Own false positives, alert volume, and rule health for detection areas.
• Map detection coverage to MITRE ATT&CK; identify gaps and propose telemetry to close them.
• Convert threat intelligence into prioritized detection and hunting work.
• Develop and execute focused threat hunts; produce durable production detections.
• Take ownership of red team gap remediation and validate post-retest coverage.
• Validate log source health and onboard/update SIEM sources as needed.
• Apply a developer mindset to create internal tooling and automate repeat tasks.

Skills

Threat detection

Security operations

Scripting

Investigating logs

MITRE ATT&CK knowledge

OS internals

Networking

Authentication

Education

University degree in Engineering, MIS, CIS

Tools

SIEM

EDR

NDR

Splunk

Elasticsearch

Tanium

CrowdStrike

SentinelOne

Job description

ICE Data Services Singapore Pte. Ltd. seeks a cybersecurity threat detection engineer to design, tune, and maintain detections across SIEM, EDR, and NDR platforms, while mapping coverage to MITRE ATT&CK and aligning with threat intelligence. The role emphasizes proactive hunting and reducing false positives within a globally distributed infrastructure.

You will implement detection logic, build internal tooling, and collaborate with security operations to strengthen coverage and telemetry health.