SIEM Technical Manager
Our client is looking for an experienced SIEM Technical Manager to be responsible for overseeing the engineering, development, and continuous improvement of threat detection use cases within the SIEM (Splunk ES).
Responsibilities:
- Involved in engineering and developing custom rules in the EDR (CrowdStrike) to swiftly detect potential threats and attacks.
- Create transparency regarding existing detection capabilities by aligning them with the MITRE ATT&CK framework.
- Support the planning and execution of regional IT infrastructure strategy aligned with company goals.
- Proactively create, test, and optimize new detection use cases in the SIEM and custom rules in the EDR.
- Enhance existing detection use cases using techniques such as Machine Learning or User & Entity Behavior Analytics (UEBA).
- Map detection use cases to the MITRE ATT&CK framework to assess SIEM monitoring coverage.
- Regularly update threat detection engineering playbooks, processes, and documentation.
- Collaborate closely with the SOC to validate and enhance detection and prevention capabilities.
- Implement SIEM use cases to address identified blind spots.
- Coordinate with the log onboarding team and SIEM architect to ensure new log sources comply and enhance SIEM backend performance.
- Collaborate with the Service Operations team to address challenges, fulfill processes, documentations, and improve service quality.
Requirements:
- Degree in Information Technology, Computer Science/Engineering or equivalent
- Over 5 years of experience in Cybersecurity
- At least 3 years of experience in SIEM use-case engineering.
- Intense knowledge in using Splunk Enterprise Security (ES) and developing and tuning detection use-cases (Correlation Searches) in Splunk based on Data Models
- Effective oral and written communication skills
- Good timekeeping ability to cope with a tight deadline and achieve operational objectives
- Self-motivated with the ability to carry out assigned tasks with minimum supervision
Location : Central Singapore
Kindly indicate your current/last salary details and your notice period
If the above speaks to you, we’d love to hear from you. Please send in your updated CV to [email protected] (Ezmir, Reg No: R22105085) if you feel there is a fit with your experience and interest. You may forward this great opportunity to someone who would be a great fit for this role.
All information will be kept strictly confidential. We regret to inform that only successful applicants will be contacted.
PeopleSearch Pte Ltd
EA License No: 16S8057
