VP, Security Operations & SIEM

EAMES CONSULTING GROUP (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 180,000 - 300,000; Full time

Job summary

EAMES CONSULTING GROUP (Singapore) PTE. LTD. seeks a VP of Security Operations & SIEM to own the organisation's security monitoring, SIEM, and MDR capabilities. You will manage daily operations, onboarding and detection engineering across cloud, endpoint, network, and identity.

The role requires a senior security leader with 10+ years in cyber security and expertise in SIEM platforms (Splunk, Sentinel, QRadar or Elastic) along with MAS TRM, NIST and MITRE ATT&CK knowledge.

Qualifications

• Minimum 10 years of cyber security experience with hands-on SIEM and SOC.
• Proven experience with MDR/SOC operations, detection engineering, and threat hunting.
• Experience in financial services with knowledge of MAS TRM, NIST and MITRE ATT&CK.
• Strong SIEM administration, log onboarding, rule tuning and platform maintenance.

Responsibilities

• Own day-to-day SIEM management, log onboarding, ingestion and troubleshooting.
• Develop and tune detection rules, correlation searches and security use cases.
• Manage security platforms including SIEM, SOAR, EDR and DLP.
• Collaborate with MDR/SOC providers on monitoring, alert triage and service performance.
• Support incident response and threat hunting across cloud, endpoint, network and identity.

Skills

SIEM

Security Operations

Threat Hunting

Incident Response

MDR/SOC Operations

Splunk

Microsoft Sentinel

QRadar

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

SOAR

EDR

Job description

We are looking for a VP Security Operations & SIEM to take ownership of the organisation's security monitoring, SIEM and Managed Detection & Response capabilities.The role focuses on the day-to-day management and maintenance of the security environment, including SIEM administration, log onboarding, detection use cases and platform optimisation.

What You'll Do

• Own the day-to-day management, maintenance and optimisation of the SIEM environment, including log onboarding, ingestion, parsing and troubleshooting.
• Develop, maintain and tune detection rules, correlation searches and security use cases to improve detection coverage and reduce false positives.
• Manage and optimise security platforms including SIEM, SOAR, EDR and DLP, ensuring they remain effective and fit for purpose.
• Work closely with MDR/SOC providers on monitoring, alert triage, escalation and service performance, while acting as a senior technical escalation point.
• Support incident response, threat hunting and detection engineering, including improving detection coverage and security monitoring across cloud, endpoint, network and identity environments.

What You'll Bring

• Minimum 10 years of Cyber Security experience with strong hands‑on expertise in SIEM and Security Operations, ideally with platforms such as Splunk, Microsoft Sentinel, QRadar or Elastic.
• Proven experience in SIEM administration, log source onboarding, detection rule development, tuning, troubleshooting and platform maintenance.
• Strong understanding of MDR/SOC operations, Detection Engineering, Threat Hunting and Incident Response, with experience working across EDR, SOAR and security automation.
• Experience within a financial services, banking or insurance environment, with good knowledge of security frameworks such as MAS TRM, NIST and MITRE ATT&CK.