Security Detection & SIEM Engineer

About the Role

Join our security team and help strengthen how we identify, investigate and respond to security threats. You will work hands-on with security alerts, logs, detection rules and vulnerability findings, turning technical evidence into clear and actionable outcomes.

What You’ll Do

Manage daily SIEM operations and security monitoring activities.

Investigate security alerts and cases through TheHive, including evidence review, analysis, documentation and case handling.

Analyse CVE findings, identify affected systems and potential impact, and coordinate remediation tracking and follow-up.

Tune and maintain security detection rules and basic correlation logic to improve detection effectiveness.

Investigate security incidents and determine the appropriate escalation or case closure.

Analyse suspicious commands, logs, scripts and system activities, validating findings before reaching conclusions.

Prepare security monitoring reports, metrics, dashboards and operational summaries.

Work with infrastructure and application teams to support incident handling and continuous improvement.

What We’re Looking For (Must Have)

Bachelor’s degree inInformation Security, Cybersecurity, Computer Science or a related field.

At least 3 years of relevant experience in SIEM operations, security monitoring, security analysis or security engineering.

Hands-on experience with SIEM, log management or security monitoring platforms.

Hands-on OpenSearch experience covering log queries, log analysis, security event investigation and basic index management.

Strong knowledge of Linux andWindows administration fundamentals and security log analysis.

Practical experience insecurity event investigation, incident analysis and detection tuning.

Strong analytical, troubleshooting and problem-solving skills, with the ability to investigate unfamiliar technical behaviour independently.

Effective communication inEnglish and Mandarin, as the role works with regional stakeholders who primarily communicate in these languages.

Good to Have

Experience using TheHive for alert or case investigation.

Familiarity with event correlation, behavioural analysis and detection engineering concepts.

Experience in CVE analysis and vulnerability remediation tracking.

Python, Shell scripting or security automation experience.