Senior Cybersecurity Threat Analyst (Detection Engineer)

About the role

PayPal is looking for a Detection Engineer to join its Threat Detection team within Security Operations in Singapore. The role builds high-fidelity, scalable detections that reduce risk and improve response across enterprise, cloud and product environments, working with Incident Response, Threat Intelligence, Product Security and Platform teams.

Key responsibilities

• Design, implement and tune detections across SIEM, EDR and cloud-native security platforms
• Correlate telemetry to identify complex, multi-stage attack patterns
• Own the detection lifecycle, from hypothesis and use cases to deployment, tuning, validation and documentation
• Build and maintain SOAR playbooks and automation workflows
• Conduct threat hunting and partner with engineering teams to improve logging quality and telemetry coverage
• Take part in red and purple team exercises and develop metrics for detection coverage and signal-to-noise ratio
• Translate findings into clear insights for leadership and support SIEM and SOAR migrations and detection standardization

Required profile

• 5+ years of cybersecurity experience focused on detection engineering, threat hunting or security automation
• Strong hands-on experience with SIEM and EDR tools
• Solid understanding of adversary behavior, attack lifecycles and detection engineering
• Ability to collaborate with and influence cross-functional teams

Required skills

• SIEM platforms such as Splunk, Sentinel and Google SecOps
• EDR tools such as CrowdStrike and SentinelOne
• Query languages such as SPL or KQL
• Scripting such as Python or PowerShell for automation

The role is offered under a balanced hybrid model (3 days in the office, 2 days at the office or home). PayPal does not charge candidates any fees for applications or interviews.