Job Description
JOB DESCRIPTION
- Lead a team of engineers to oversee operations, administration, and management of security platforms, including SIEM, EDR, Email and Mobile security platforms.
- Responsible for technical capability development to uplift engineers to become the subject matter experts on security platforms used by Keppel.
- Ensure that all security platforms are fully implemented, optimised, and maintained to serve security use cases relevant to Keppel, adopting a cradle-to-grave ownership approach.
- Stay up to date on the latest security technologies and actively explore options to fulfil Keppel’s security use cases in a more efficient manner.
- Responsible for overall efficiency improvement of security platform operations and administration through automation and streamlining.
- Responsible for overall metrics and reporting of security platforms (e.g. data ingestion volumes, system health, coverage metrics).
- Oversee and manage outsourced cyber engineering resources in day-to-day platform operations, ensuring service quality and adherence to operational standards.
JOB REQUIREMENTS
- Degree in Computer Science, Computer Engineering, Information Security, Information Technology, or related field.
- Candidates with strong hands-on experience in security platform engineering are required.
- Experience with SIEM and EDR platforms (preferably Microsoft Sentinel and Defender) and other enterprise security tools.
- Strong understanding of cybersecurity threats, MITRE ATT&CK framework, associated attack vectors and mitigation controls.
- Ability to articulate security platform features, formulate security use cases, deployment approaches, and operating models.
- Scripting, query language and automation knowledge such as Python, KQL, or PowerShell is essential.
- Strong analytical skills with the ability to correlate technical findings with business risk.
- Experience in Digital Forensics and Incident Response will be an advantage.
