Security Operations

• Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
• Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
• Build and maintain API-based integrations with security tools, AWS services, and internal systems
• Support and enhance SIEM platforms for ingestion, alerting, and investigation
• Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation
• Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis
• Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required

SOC Security Engineer

• As part of the team, you will develop and maintain cybersecurity standards, procedures, configurations or rulesets for the systems and services.
• For validation of security procedures, you will conduct security exercises which may include table-top or simulation exercises.
• Participate in security incident response that includes understanding alerts, coordination with various system or service operators, identifying potential threats and performing basic triaging prior to escalation to next level security responder.
• Coordinate in Indicators-Of-Compromise (IOC) scanning, collating the reports from various system operators with consolidated update to the stakeholders.
• Perform vulnerability assessment using automated and manual tools with recommendation for actionable remediation controls. Understand the published vulnerabilities with their respective security patches with context to the deployed system and perform risk assessment onto them.
• Monitor and notify security patches releases for the various products. Involve in the security patch assessment rating based on standards like Common Vulnerability Scoring System (CVSS) as well as with the context of the deployed environment.
• Engage with stakeholders with presentation or reporting on the vulnerability scanning results, security testing results, security incident or security posture of the systems.

Cybersecurity Engineer – IT Security Operations

• Design, deploy, and optimize DLP solutions across network, endpoint, and cloud.
• Build and refine data classification schemes for sensitive assets (wallets, trading algorithms, customer PII).
• Configure DLP policies to prevent data exfiltration while minimizing false positives.
• Monitor, analyze, and tune alerts and incidents for continuous improvement.
• Lead investigations of DLP incidents and insider threats.
• Conduct threat hunting and forensic analysis of data exfiltration attempts.
• Integrate DLP monitoring into broader SOC workflows and incident response playbooks.
• Build custom DLP tools and integrations (e.g., macOS Swift endpoint protection, Unix socket monitoring).
• Develop automation scripts, APIs, regexes and integrations to enhance detection and response.
• Explore AI/LLM-driven methods for anomaly detection and response efficiency.
• Ensure controls align with crypto and financial regulations (AML, KYC, GDPR, CCPA).
• Support audits and regulatory reviews related to data protection.
• Assess and mitigate data loss risks across trading platforms, onboarding systems, and blockchain infrastructure.

Security Operations jobs in Singapore

See all jobs on JobTailor

SOC Security Engineer

Cybersecurity Engineer – IT Security Operations

SOC Engineer – Incident Response