Our SIEM & Automation team works closely with other security analysts to deliver security content to monitor security threats, and automate the escalation / response for our customers. You will play a part in the team to research, design, architect and implement security use case and automation playbooks.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security monitoring use cases and automation playbooks.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Create, finetune and maintain SOAR playbooks
• Create and maintain UEBA use cases

Requirements

• At least 3 years of experience in security operations in a SOC environment
• At least 2 years of experience in creating, finetuning and maintaining correlation rules and playbooks
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as AWS Certified SysOps Administrator Associate, Microsoft Azure Administrator Associate, GCP Associate Cloud Engineer, equivalent or more.
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications
• Professional certificates such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage

Our SIEM & Automation team works closely with other security analysts to deliver security content to monitor security threats, and automate the escalation / response for our customers. You will play a part in the team to research, design, architect and implement security use case and automation playbooks.

If you are someone with a strong passion in security technologies and is a team player who strives in a team setting, we welcome your application!

Key Responsibilities

• Carry out implementation, maintenance, support and operation of the project's security monitoring use cases and automation playbooks.
• Maintain understanding of the architecture and work with security team to understand the use case and playbooks to be created.
• Identity, evaluate and recommend new areas of improvements for the implementation.
• Perform day to day operational task, scheduled change requests, troubleshooting and maintenance of the implementation.
• Create, finetune and maintain SIEM data sources, use cases, correlation rules and security alerts classifications
• Create, finetune and maintain SOAR playbooks
• Create and maintain UEBA use cases

Requirements

• At least 3 years of experience in security operations in a SOC environment
• At least 2 years of experience in creating, finetuning and maintaining correlation rules and playbooks
• Working experience in powershell, bash and/or python scripting
• Strong troubleshooting and analytical skills for resolving issues and delivering updates to stakeholders
• Basic project management skills
• Positive working attitude and a team player
• Passionate in information security and keen attitude to learn
• Professional certificates such as AWS Certified SysOps Administrator Associate, Microsoft Azure Administrator Associate, GCP Associate Cloud Engineer, equivalent or more.
• Disciplines in Computer Science, Computer or Electronics Engineering, Information Technology or related qualifications
• Professional certificates such as SANS (such as SANS GCDA, GCIA, GDSA, GMON) would be an advantage

Roles & Responsibilities

Responsibilities

• Maintain a deep understanding of DevOps practice, tools, and their architecture for on-premise and cloud projects delivery. (i.e. Ansible, Chef, Puppet, UIPath, Jenkins, Git, CodeCommit, Terraform, Packer, CloudFormation, Pulumi)
• Drive adoption of DevOps and Automation lifecycle with proper processes and versioning control.
• Implementing DevOps platform with best practices and framework for continuous delivery pipeline; meeting customer environment security requirements.
• Work closely with project leads to understand existing processes, issues, or requirements for DevOps practice adoption in different key areas. (i.e. Application Delivery, Application Integration, Infrastructure as a Code, Security Assessment and Remediation)
• Analyze, measure, and prioritize requirements for delivery.
• Develop playbooks, automation scripts, workflows for discussion and recommendation to meet the delivery requirements in sprints.
• Plan, develop, test, and implement the basic structure to aid project members in DevOps adoption in delivery of identified project requirements.
• Mentor and guide project engineers during their implementation and their continual practice during operations.
• Maintain DevOps technology stack for practice and training purposes (i.e. GIT, Kubernetes, OpenShift, Ansible, UIPath)
• Does active research on the new and emerging DevSecOps trends, practices, and technologies to meet market changes.
• Maintain strong interest and keen understanding of cybersecurity solutions and their delivery formats to customers.

Requirements

• Degree in Engineering, Computer Science/Information Technology or its equivalent;
• At least 5 years of experience in leading technical requirements and team for delivery as a technical lead;
• At least 3 years of experience and proficiency in DevOps and automation technologies;
• Able to demonstrate architecture and delivery principles for three or more of the following technologies or similar i.e. Ansible, Chef, Puppet, UIPath, Jenkins, Git, CodeCommit, Terraform, Packer, CloudFormation, Pulumi, Docker, Kubernetes, OpenShift
• Strong Linux and Unix operating system experience
• Excellent communication / stakeholder skills and emotional intelligence to influence key decisions, mediate conflicts and build consensus;
• Demonstrated ability to work with people at all levels within an organization;
• Thrives in ambiguous and complex environment with ability to analyse, make decisions and overcome show-stoppers/difficulties

Interested applicants are invited to apply directly at the NUS Career Portal.

Your application will be processed only if you apply via NUS Career Portal.

We regret that only shortlisted candidates will be notified.

Job Description

• We are working with plant derived molecules that have chemical toxicity and photodynamic antiviral and antibacterial properties as naturally derived agents.

• The successful candidate will need to work with viruses and bacteria and be able to perform some chemical synthesis and characterization.

• Interested parties, please submit your CV via the portal. Send enquiries to David Leong ([email protected]).
• Regrettably, only potential candidates will be contacted for an interview.

Job Requirements

• A Bachelor degree in the life sciences or chemical engineering or biotechnology disciplines. Masters degree holders in the above disciplines are welcomed to apply.

• Bacterial and/or viral work experience are essential skills.

• Molecular cloning will be an advantage for the job.

More Information

Location: Kent Ridge Campus

Organization: College of Design and Engineering

Department : Chemical and Biomolecular Engineering

Employee Referral Eligible: No

Job requisition ID : 23105

The SIEM engineer will architect, implement, and maintain various SIEM solutions for our customers to support our security analysts. This role will primarily setup, maintain, and enhance various SIEMs.

• Configure and administer the SIEM to support the needs of SOC.
• Responsible for maintaining the health of the SIEM tool and ensuring agreed uptime of the respective platform.
• Perform regular patching and version upgrades on the SIEM platform.
• Configure respective parsers, forwarders (engage principal vendors if needed) to integrate various log sources with SIEM platform for log monitoring.
• Research, build, and maintain detection capabilities for the latest threats across SIEM, log analytic, and security tool platforms.
• Ensure real time data and Configuration replication between Primary and DR sites.
• Integrate data feeds (logs) into SIEM/Splunk from on-premises and cloud deployed devices and applications.
• Explore leading cybersecurity products. Work with 3rd party security consultants and service providers to ensure all security aspects are covered. Operate security solutions such as SIEM, PAM, EDR, IDS/IPS and Web Application Firewall while ensuring compliance to regulatory standards and procedures.
• Security Automation: Automating processes using well-known frameworks such as PowerShell, Python, Bash, etc. As well as SOAR build out. (look like using AWS lambda to integration (CloudFront/WAF/ALB) and automating your work.)
• Continuous Monitoring: Management AWS Guard duty and intrusion detection, User Behavior, and other security monitoring.
• Support the SOC Analysts in the use of the toolset and with investigations to establish the facts surrounding potential suspicious activities and to understand the impact and possible risks associated.
• Creation, amendment, tuning and supporting the engineering of advanced or complex protective monitoring use cases.
• Provide security consultancy to other internal teams for matters relating to the SIEM.
• Troubleshooting complex issues that may occur within the SIEM and resolving them with the help of vendor support
• Advise clients of security standards, best practice and solutions relating to SIEM and SOC solutions.

Requirements

• Advanced knowledge and experience of Cyber Security and evidence of working as a SIEM Engineer with previous experience of the software, including architectural design, configuring, operating and problem-solving activities.
• A good understanding of implementing use cases and operational models or specific security solutions to meet the customer’s requirement and understand how SIEM solution
• Hands-on experience in a two or more of the key security domains such as: security operations (SIEM, EDR, vulnerability management), Cloud security, Data security, Identity and access management, and secure software development lifecycle
• Knowledge of networking and AWS/Azure Cloud Security practices and tools.
• SIEM related certifications for Administration, implementation, deployment, architecture.

• Diploma/Degree in Information Technology or equivalent
• Good working experience in the related field - preferably with retail sector.
• Good knowledge of Microsoft windows operating systems
• On-site support and resolution of all software and equipment issues
• Proven analytical and troubleshooting abilities.
• Excellent analytical, troubleshooting and communication skills.
• Microsoft MCSE or Cisco CCNA certified but not compulsory.
• Good understanding of Microsoft SQL server and scripts