Job Title: Software Engineer - SIEM (Splunk)
Location: Singapore
Job Summary
We are looking for a Software Engineer with hands-on experience in SIEM and Splunk to design, develop, and optimize security monitoring solutions. The role involves working closely with SOC teams to enhance threat detection and ensure efficient SIEM operations.
Key Responsibilities
- Develop and maintain SIEM solutions using Splunk Enterprise/Cloud
- Onboard and integrate security log sources (Windows, Linux, Firewall, Cloud, etc.)
- Create dashboards, alerts, and correlation rules using SPL
- Perform performance tuning, monitoring, and troubleshooting
- Support upgrades, patching, and automation using Python/Bash
- Collaborate with SOC teams to reduce false positives and improve detection
Requirements
- Strong experience with Splunk and SIEM concepts
- Proficiency in SPL and log analysis
- Knowledge of Linux/Unix systems
- Basic scripting (Python/Bash)
- Understanding of security frameworks is a plus
