Security Operations / SIEM Engineer (Expression of Interest)

Recruit123 is inviting Expressions of Interest (EOI) from experienced Security Operations / SIEM Engineers for upcoming confidential mandates with enterprise and financial services clients in Singapore. In this role, you will be responsible for architecting, deploying, and fine-tuning SIEM infrastructure, building high-fidelity detection rules, and automating incident response capabilities across hybrid environments.

Note: This is an Expression of Interest to connect with qualified professionals for active and pipeline opportunities.

Key Responsibilities:

Deploy, administer, and maintain enterprise SIEM platforms (e.g., Microsoft Sentinel, Splunk ES, IBM QRadar, or Elastic Security).

Design, build, and optimize detection rules and correlation use cases mapped directly to the MITRE ATT&CK framework.

Lead log ingestion, event source onboarding, custom data parsing, and data pipeline health monitoring across cloud, on-premises, and SaaS environments.

Develop automated Security Orchestration, Automation, and Response (SOAR) playbooks to accelerate alert triage and incident containment.

Partner with SOC analysts and incident response teams to minimize false positives, analyze alert noise, and improve overall detection efficacy.

Integrate threat intelligence feeds (CTI) into detection workflows to identify emerging attacker tactics, techniques, and procedures (TTPs).

Ensure enterprise log collection meets security audit standards, retention requirements, and Singapore regulatory baselines (e.g., MAS TRM Guidelines, CSA CCoP).

Assist in periodic security incident investigations, root cause analyses, and post-incident detection tuning.

Requirements

Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or a related field.

Minimum 3 to 6 years of direct experience in SIEM engineering, SOC operations (Tier 2/3), or detection engineering.

Strong hands-on proficiency with query languages (e.g., KQL, SPL) and administration of modern SIEM tools.

Practical scripting and automation skills (e.g., Python, PowerShell, Bash, REST APIs).

Solid understanding of network protocols, operating system internals (Windows/Linux), and log telemetry (Syslog, Windows Event Logs, NetFlow).

Relevant industry certifications are strongly regarded (e.g., Microsoft SC-200, Splunk Certified Enterprise Security Admin / Architect, GIAC GCDA / GMON / GCIH, CISSP).

Good communication skills with a structured approach to technical troubleshooting and stakeholder collaboration.

What’s on Offer / What to Expect:

Competitive market compensation ranging from SGD 6,000 to SGD 9,500 / month.

Confidential consultation on high-impact roles aligned with your career goals and technical strengths.

Access to enterprise-scale detection engineering, cloud-native SOC, and automation-driven environments.

Recruit123 Pte Ltd

EA Personnel: Lian Cher Chieh (Steffan)

EA Personnel Registration No.: R1217705

EA License No.: 25C2810EA

Email: steffan.lian@recruit-123.com