Security Monitoring & SIEM Engineer

Singapore  |  SGD5,500–6,500  |  Full-time

职位重点： WazuhAgent 部署、日志接入、SIEM平台健康状态、日志保存及存储运维。

职位简介

我们正在招聘一名安全监控与SIEM 工程师，负责支持公司的安全监控、日志管理及SIEM 平台运维。该职位主要负责Wazuh Agent 部署、日志接入、系统安全监控、SIEM平台健康状态、日志保存及存储管理，以及监控基础设施整合工作。

主要职责

负责在Linux、Windows 及相关基础设施系统中部署及管理Wazuh Agent。

负责安全日志接入，并监控日志覆盖率、数据完整性及接入状态。

负责监控SIEM 平台健康状态、运行状态、稳定性及整体服务可用性。

负责日志保存周期、存储使用情况、容量规划及日志生命周期管理。

负责监控Linux 及Windows 系统的安全状态及相关日志活动。

负责排查日志采集异常、Agent故障、日志接入失败及SIEM 平台运行问题。

支持安全监控与基础设施监控及自动化平台的整合。

支持持续维护及优化SIEM 监控及日志管理能力。

任职资格

信息安全、网络安全、计算机科学或相关专业本科及以上学历。

至少3 年 SIEM 运维、安全监控、日志管理或相关基础设施／安全工程工作经验。

具备Wazuh、SIEM、日志管理或安全监控平台的实际操作经验。

具备扎实的Linux 和Windows 系统管理、系统日志及安全监控知识。

具备OpenSearch 实际操作及运维经验，包括日志查询、日志分析、索引及基本平台问题排查。

具备日志采集、Agent部署、日志接入及日志接入异常排查经验。

具备较强的故障排查、分析及问题解决能力，并注重工作细节。

具备良好的英语及华文沟通能力，能够与区域相关团队进行有效协作。

优先经验

具备存储管理、日志保存周期及监控平台容量管理经验。

具备Shell、Python、Ansible 或其他自动化工具经验。

具备安全监控与基础设施监控或自动化平台整合经验。

具备公司环境Wazuh 或相关监控平台运维经验。

职位影响

该职位确保安全团队有完整、及时的日志数据，为有效的安全检测及事件调查提供基础。

Role focus: Wazuh Agent deployment, log onboarding, SIEM platform health, retention and storage operations.

About the Role

Join our security team and help keep our monitoring environment reliable, complete and ready for investigation. This isa hands-on engineering role for someone who enjoys solving log collection,Agent, platform and infrastructure problems across Linux and Windows environments.

What You’ll Do

Deploy and manage Wazuh Agents across Linux, Windows and relevant infrastructure systems.

Onboard security logs and monitor log coverage, completeness and ingestion status.

Monitor SIEM platform health, stability, operational status and service availability.

Manage log retention, storage utilisation, capacity planning and log lifecycle requirements.

Monitor system security status and relevant log activities across Linux and Windows environments.

Troubleshoot log collection issues, Agent failures, ingestion problems and SIEM platform incidents.

Support integrations with infrastructure monitoring and automation platforms.

Maintain and continuously improve SIEM monitoring and log management capabilities.

What We’re Looking For (Must Have)

Bachelor’s degree inInformation Security, Cybersecurity, Computer Science or a related field.

At least 3 years of relevant experience in SIEM administration, security monitoring, log management or infrastructure/security engineering.

Hands-on experience with Wazuh, SIEM, log management or security monitoring platforms.

Strong Linux and Windows system administration knowledge, including system logs and security monitoring.

Hands-on OpenSearch operations experience covering log queries, log analysis, index management and basic platform troubleshooting.

Practical experience in log collection, Agent deployment, log onboarding and ingestion troubleshooting.

Strong analytical and troubleshooting skills, with the ability to investigate unfamiliar system,Agent or platform behaviour independently.

Effective communication inEnglish and Mandarin, as the role works with regional stakeholders who primarily communicate in these languages.

Good to Have

Experience managing storage utilisation, log retention and monitoring platform capacity.

Shell scripting, Python, Ansible or other automation experience.

Experience integrating security monitoring with infrastructure monitoring or automation platforms.

Experience operating Wazuh or a similar monitoring platform at scale.

Why This Role Matters

You will help ensure that the security team has reliable, complete and timely log data—the foundation needed for effective threat detection and incident investigation.