Senior Threat Detection Engineer - Singapore - Experis

Experis

Verified Company

Singapore

1 week ago

Posted by:

Wei Jie

beBee Recruiter

Description

Looking Senior Threat Detection Engineer to join the Global Security Incident Response Team (GSIRT) Security Operations Center (SOC), responsible for threat detection content development, threat hunting, and innovation in the areas of intrusion analysis, detection, and related activities.

What you will be doing

Investigate and review computer intrusions focusing on initial infection vector determination, identification of new indicators of compromise (IOCs), and tactics, techniques, and procedures (TTPs) in support of threat detection and prevention development.
Research, build, and maintain detection capabilities for the latest threats across SIEM correlations and security tool signatures.
Contribute to and lead efforts to improve the SOC's effectiveness, advancing technical capabilities at pace with the latest threats.
Support and integrate with incident response, threat intelligence, and overall security strategy as needed.
Generate high quality documentation of research and analysis results, including processes and findings clearly and concisely to both technical and nontechnical audiences

What you should have

At least 5 years of experience performing handson log analysis and host/network forensic analysis in support of incident response OR applicable training/certification
At least 4 years of experience developing threat detection content in support of incident response.
At least 2 years of experience with Splunk and Splunk Enterprise Security.
Solid understanding of TCP/UDP traffic, SIEM and log analysis technologies.
Solid understanding of Windows and Linux operating systems, as well as command line tools.
Solid understanding of Cloud architecture and security monitoring of cloud environments
Solid interest in Endpoint Detect Response (EDR) technologies.
Basic experience with programming languages such as Python and Powershell.
Exposure to malware analysis (static and dynamic).
Ability to manage multiple activities and events simultaneously, with ability to prioritize multiple tasks and respond to high priority events; organizing and scheduling work effectively.
Operate effectively as part of a geographically dispersed team

Sharma
Kristine Joy Padua License No: 02C3423

Personnel Registration No:
R2090931