Ensign InfoSecurity

End-to-end cybersecurity advisory and defense

Security Engineer

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeSingaporeNo salary listedIn-person

About the Job

Requirements

Advanced knowledge and experience in cybersecurity, with evidence of prior work as a SIEM Engineer and experience in architectural design, configuring, operating, and troubleshooting SIEM software.
A good understanding of implementing use cases and operational models or specific security solutions to meet customer requirements, and understanding SIEM solutions.
Hands-on experience in at least two key security domains, such as security operations (SIEM, EDR, or vulnerability management), cloud security, data security, identity and access management, or secure software development lifecycle.
Knowledge of networking and AWS/Azure cloud security practices and tools.
SIEM-related certifications in administration, implementation, deployment, or architecture.

Responsibilities

Configure and administer the SIEM to support SOC needs.
Maintain the health of the SIEM tool and ensure agreed uptime of the platform.
Perform regular patching and version upgrades on the SIEM platform.
Configure parsers and forwarders to integrate log sources with the SIEM platform for monitoring, engaging principal vendors when needed.
Research, build, and maintain detection capabilities for the latest threats across SIEM, log analytics, and security tool platforms.
Ensure real-time data and configuration replication between primary and disaster recovery sites.
Integrate log data feeds into SIEM/Splunk from on-premises and cloud-deployed devices and applications.
Explore leading cybersecurity products and work with third-party security consultants and service providers to ensure security coverage.
Operate security solutions including SIEM, PAM, EDR, IDS/IPS, and web application firewall, while ensuring compliance with regulatory standards and procedures.
Automate processes using frameworks such as PowerShell, Python, and Bash, and build out SOAR capabilities, including AWS Lambda integration with CloudFront, WAF, or ALB.
Manage AWS GuardDuty, intrusion detection, user behavior monitoring, and other continuous security monitoring.
Support SOC analysts in using the toolset and investigating potential suspicious activities to establish facts, impact, and risks.
Create, amend, tune, and support the engineering of advanced or complex protective monitoring use cases.
Provide SIEM-related security consultancy to other internal teams.
Troubleshoot complex SIEM issues and resolve them with vendor support.
Advise clients on security standards, best practices, and solutions relating to SIEM and SOC solutions.

Ensign is hiring !

Configure and administer the SIEM to support the needs of SOC.
Responsible for maintaining the health of the SIEM tool and ensuring agreed uptime of the respective platform.
Perform regular patching and version upgrades on the SIEM platform.
Configure respective parsers, forwarders (engage principal vendors if needed) to integrate various log sources with SIEM platform for log monitoring.
Research, build, and maintain detection capabilities for the latest threats across SIEM, log analytic, and security tool platforms.
Ensure real time data and Configuration replication between Primary and DR sites.
Integrate data feeds (logs) into SIEM/Splunk from on-premises and cloud deployed devices and applications.
Explore leading cybersecurity products. Work with 3rd party security consultants and service providers to ensure all security aspects are covered. Operate security solutions such as SIEM, PAM, EDR, IDS/IPS and Web Application Firewall while ensuring compliance to regulatory standards and procedures.
Security Automation: Automating processes using well-known frameworks such as PowerShell, Python, Bash, etc. As well as SOAR build out. (look like using AWS lambda to integration (CloudFront/WAF/ALB) and automating your work.)
Continuous Monitoring: Management AWS Guard duty and intrusion detection, User Behavior, and other security monitoring.
Support the SOC Analysts in the use of the toolset and with investigations to establish the facts surrounding potential suspicious activities and to understand the impact and possible risks associated.
Creation, amendment, tuning and supporting the engineering of advanced or complex protective monitoring use cases.
Provide security consultancy to other internal teams for matters relating to the SIEM.
Troubleshooting complex issues that may occur within the SIEM and resolving them with the help of vendor support
Advise clients of security standards, best practice and solutions relating to SIEM and SOC solutions.

Requirements

Advanced knowledge and experience of Cyber Security and evidence of working as a SIEM Engineer with previous experience of the software, including architectural design, configuring, operating and problem-solving activities.
A good understanding of implementing use cases and operational models or specific security solutions to meet the customer’s requirement and understand how SIEM solution
Hands-on experience in a two or more of the key security domains such as: security operations (SIEM, EDR, vulnerability management), Cloud security, Data security, Identity and access management, and secure software development lifecycle
Knowledge of networking and AWS/Azure Cloud Security practices and tools.
SIEM related certifications for Administration, implementation, deployment, architecture.

About the Company

Ensign InfoSecurity

End-to-end cybersecurity advisory and defense

Ensign InfoSecurity delivers end-to-end cybersecurity services in Asia, including advisory and assurance, architecture design and systems integration, and managed security services such as advanced threat detection, threat hunting, and incident response, backed by in-house R&D. Its offerings cover the full security lifecycle from risk assessment to secure infrastructure and continuous monitoring and response. The company differentiates itself as a pure-play security provider with a region-focused approach, two decades of hands-on experience, and active in-house research and development. Its goal is to protect Asia-Pacific organizations by providing comprehensive, trusted security services that prevent, detect, and respond to cyber threats.

Company size: 501-1,000
Company stage: Acquired
Total funding: Not listed
Headquarters: Singapore, Singapore
Founded: 2000

Recently Posted Jobs

Explore more opportunities at Ensign InfoSecurity

See more jobs