L2 Cybersecurity Engineer

About the role

The L2 Cybersecurity Engineer is responsible for protecting Thales' data and systems in Singapore. You will manage day‑to‑day security infrastructure, monitor alerts, investigate incidents, and implement technical solutions to reduce risk.

Key responsibilities

• Investigate and respond to security incidents escalated from L1, performing root‑cause analysis.
• Monitor security alerts from SIEM platforms (e.g., QRADAR) and dashboards.
• Conduct regular vulnerability assessments and coordinate penetration‑testing activities.
• Implement, configure, troubleshoot, and maintain firewalls (Palo Alto, Fortigate), IDS/IPS, EDR/AV, CipherTrust Tokenization Server, HSM, 2FA, PAM, IBM Guardium and Rapid7.
• Develop, maintain and enforce security policies, procedures and documentation.
• Proactively hunt for hidden threats, malware and vulnerabilities.
• Collaborate with IT, development and L3 teams; mentor junior security staff.
• Prepare detailed incident reports for management and compliance.
• Participate in a 24/7 on‑call rotation for critical incidents.

Required profile

• Deep understanding of network protocols and security tools.
• Ability to work under pressure during security incidents.
• Experience collaborating across IT, development and operations teams.
• Strong analytical and problem‑solving skills.

Required skills

• SIEM (QRADAR)
• Firewalls: Palo Alto, Fortigate
• IDS/IPS
• Endpoint Detection & Response (EDR) and Antivirus
• CipherTrust Tokenization Server
• Hardware Security Module (HSM)
• Two‑Factor Authentication (2FA)
• Privileged Access Management (PAM)
• IBM Guardium
• Rapid7
• Vulnerability assessment and penetration testing
• Threat hunting