We are seeking a skilled ICT Security Engineer to join the Production Security team of a leading financial institution in Singapore. This role is focused on strengthening the bank's ability to detect and respond to cyber threats through the deployment, maintenance, and continuous improvement of its SIEM infrastructure.
The successful candidate will work closely with Production Infrastructure and Observability teams, and will be a full-time member of the Production CSIRT / SIEM Engineering team, with opportunities to expand the scope of activities within the team.
This role requires deep technical expertise in the Elastic Stack (ELK) , Kafka, Linux administration, and scripting (Python or Bash) , with a strong focus on production support and platform management. The ideal candidate is rigorous, self-driven, and comfortable working autonomously in a fast-paced environment.
⇒ Main Responsibilities
- Install, configure, and administer servers within the SIEM infrastructure.
- Develop automation scripts and self-service tools to streamline operational tasks.
- Participate in the integration of new technology logs into the SIEM platform.
- Support log parsing using custom parser development and GROK.
- Manage project deliverables and contribute to platform improvements.
- Be a full-time member of the Production CSIRT / SIEM Engineering team and participate in various team activities.
- Contribute to the Permanent Control framework by implementing policies and procedures in day-to-day business activities, such as the Control Plan.
- Comply with regulatory requirements and internal guidelines.
- Contribute to the reporting of all incidents according to the Incident Management System.
⇒ Qualifications & Experience
- Bachelor's Degree in Information Technology or a related field.
- Minimum 7 years of total professional experience, with at least 4–5 years focused on large-scale Elastic Stack (ELK) design, deployment, and support.
- Mandatory: Production-grade experience with the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) , including data ingestion, indexing, monitoring, and analytics.
- Mandatory: Strong hands-on experience with Kafka.
- Proficient in Linux administration (RedHat / Ubuntu).
- Minimum 2 years of scripting/programming experience in Python or Bash.
- Experience with automation/orchestration tools (e.g., Ansible or equivalent) and CI/CD pipelines.
- Proven background in production support across both virtual and physical environments.
- Platform integration skills, including installation, configuration, documentation, and administration of pre-production and production platforms.
- Rigorous and detail-oriented approach to work.
- Strong analytical and problem-solving skills.
- Self-driven — able to work autonomously and take ownership of tasks.
- Excellent communication skills and a collaborative team player.
- High energy, proactive attitude, and a willingness to upskill.
- Ability to manage multiple priorities simultaneously.
- Banking sector experience is optional but regarded as a plus.