Cyber Security Engineer (Elastic Security)

About the role

BCS, a wholly owned subsidiary of NETS and part of the NETS Group, manages and operates the clearing and payment infrastructure for the Singapore Automated Clearing House, including FAST, IBG, CTS, and services for PayNow and SGQR. Its IT Security Team protects data and mitigates cyber threats in line with regulatory requirements, and the Security Engineering unit advances cybersecurity defense through vulnerability management and security solution design. The Cyber Security Engineer strengthens cyber defence using hands-on experience with Elastic Security (SIEM/ELK stack), covering monitoring, threat detection, incident investigation and solution administration.

Key responsibilities

• Manage, administer and optimise Elastic Security, including Elasticsearch, Kibana, Logstash and Beats
• Develop and tune SIEM use cases, correlation rules, dashboards and alerts
• Onboard logs, analyse them and monitor security events
• Hunt for threats and investigate security alerts and incidents
• Support incident response, including containment and recovery
• Operate and enhance Network Detection and Response (NDR) capabilities and analyse network security events
• Take part in cybersecurity projects, solution implementations and technology upgrades
• Support cybersecurity assurance activities such as VAPT, Red Team Exercises and table-top exercises
• Maintain operational and technical documentation and stay current with threats and best practices
• Learn and support additional platforms such as CyberArk, Trend Micro and other enterprise security solutions

Required profile

• Degree in Computer Science, Information Security, Information Technology, Engineering or a related discipline
• At least 4 years of hands-on experience administering cybersecurity solutions and supporting security operations, with proven expertise in Elastic Security (ELK stack) or comparable SIEM platforms
• Familiarity with MAS Cyber Hygiene, Technology Risk Management Notices, MAS Technology Risk Management Guidelines, the Cybersecurity Act and the Cybersecurity Code of Practice (CCoP)

Required skills

• Strong understanding of SIEM, security monitoring and log analytics
• Knowledge of threat detection techniques, adversary behaviour and the MITRE ATT&CK framework
• Networking fundamentals, including protocols, traffic analysis and common cybersecurity technologies
• Understanding of Linux, Unix and Windows operating systems
• Hands-on NDR experience, including monitoring, detection, investigation and incident response
• Excellent communication, analytical and problem-solving skills

Preferred certifications: Elastic Certified Engineer or Analyst, CompTIA Security+ / CySA+, CISSP, CyberArk certifications.