Recruit123 is inviting Expressions of Interest (EOI) from experienced Security Operations / SIEM Engineers for upcoming confidential mandates with enterprise and financial services clients in Singapore. In this role, you will be responsible for architecting, deploying, and fine-tuning SIEM infrastructure, building high-fidelity detection rules, and automating incident response capabilities across hybrid environments.

Note: This is an Expression of Interest to connect with qualified professionals for active and pipeline opportunities.

Key Responsibilities:

• Deploy, administer, and maintain enterprise SIEM platforms (e.g., Microsoft Sentinel, Splunk ES, IBM QRadar, or Elastic Security).

• Design, build, and optimize detection rules and correlation use cases mapped directly to the MITRE ATT&CK framework.

• Lead log ingestion, event source onboarding, custom data parsing, and data pipeline health monitoring across cloud, on-premises, and SaaS environments.

• Develop automated Security Orchestration, Automation, and Response (SOAR) playbooks to accelerate alert triage and incident containment.

• Partner with SOC analysts and incident response teams to minimize false positives, analyze alert noise, and improve overall detection efficacy.

• Integrate threat intelligence feeds (CTI) into detection workflows to identify emerging attacker tactics, techniques, and procedures (TTPs).

• Ensure enterprise log collection meets security audit standards, retention requirements, and Singapore regulatory baselines (e.g., MAS TRM Guidelines, CSA CCoP).

• Assist in periodic security incident investigations, root cause analyses, and post-incident detection tuning.

Requirements:

• Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or a related field.

• Minimum 3 to 6 years of direct experience in SIEM engineering, SOC operations (Tier 2/3), or detection engineering.

• Strong hands-on proficiency with query languages (e.g., KQL, SPL) and administration of modern SIEM tools.

• Practical scripting and automation skills (e.g., Python, PowerShell, Bash, REST APIs).

• Solid understanding of network protocols, operating system internals (Windows/Linux), and log telemetry (Syslog, Windows Event Logs, NetFlow).

• Relevant industry certifications are strongly regarded (e.g., Microsoft SC-200, Splunk Certified Enterprise Security Admin / Architect, GIAC GCDA / GMON / GCIH, CISSP).

• Good communication skills with a structured approach to technical troubleshooting and stakeholder collaboration.

What’s on Offer / What to Expect:

• Competitive market compensation ranging from SGD 6,000 to SGD 9,500 / month.

• Confidential consultation on high-impact roles aligned with your career goals and technical strengths.

• Access to enterprise-scale detection engineering, cloud-native SOC, and automation-driven environments.

Recruit123 Pte Ltd

EA Personnel: Lian Cher Chieh (Steffan)

EA Personnel Registration No.: R1217705

EA License No.: 25C2810EA

Email: [email protected]