Cybersecurity Operations Engineer

Assurity Trusted Solutions Pte Ltd

. Monitor and investigate security alerts, suspicious activity, vulnerabilities and incidents across cloud, SaaS, application and infrastructure environments.

Posted 10/31/2026contractSingapore • SingaporeMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in monitoring and investigating security alerts across cloud and SaaS environments, with a strong focus on vulnerability management and incident response. Proficient in utilizing security platforms and maintaining operational documentation to enhance security posture and automate workflows.

Highest-signal resume keywords

AWS ExperienceDatadog SIEM ManagementIncident Response Case ManagementVulnerability Management WorkflowsSecurity+ Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Alert MonitoringVulnerability AnalysisIncident Response CoordinationDetection Logic DevelopmentLog Source Validation

Soft Skills

OwnershipCollaborationCommunication

Tools & Technologies

WizTenableElasticMicrosoft SentinelSplunk

Certifications & Qualifications

Security+CySA+GCIHGCDASC-200

Industry Keywords

Cloud SecuritySaaS PlatformsAttack-Surface ManagementSecurity OrchestrationAutomated Response Workflows

Tech Stack

Tools & technologies

AWSAzureCloudSplunk

About the role

Key responsibilities & impact

Monitor and investigate security alerts, suspicious activity, vulnerabilities and incidents across cloud, SaaS, application and infrastructure environments.
Triage security findings, determine relevance and severity, identify affected systems and coordinate remediation with product and platform teams.
Drive findings from detection to mitigation, evidence collection, risk acceptance where appropriate and formal closure.
Maintain ownership, due dates and escalation paths for security findings.
Operate and improve attack-surface management, including asset discovery, domain and service exposure, stale or unmanaged assets, ownership tracking and remediation follow-up.
Manage vulnerability information from security scanners, cloud-security platforms and security alerts; correlate duplicate findings and focus on exploitable attack paths and material risk.
Support onboarding and validation of production security logs to central monitoring.
Operate and improve automated baseline and privileged-activity log review.
Maintain the Datadog SIEM platform, including log-source health, parsing, dashboards, alerting and coverage.
Write and tune customised detection rules for GovTech-specific security use cases.
Develop and maintain detection logic, queries, dashboards and alert workflows for cloud and SaaS platforms.
Support incident response through timeline establishment, evidence collection, containment and recovery coordination, documentation and follow-up validation.
Build and maintain workflow automation for incidents and recurring operational tasks.
Support insider-risk monitoring and related security investigations.
Maintain operational runbooks, detection documentation, log-source inventories, incident records, lessons learned and response-performance metrics.

Requirements

What you’ll need

Experience with AWS, Microsoft Azure, Google Cloud, Microsoft 365, Google Workspace or other cloud and SaaS platforms.
Experience with Wiz, Tenable, Datadog SIEM, Elastic, Microsoft Sentinel, Chronicle, Splunk, Defender, GuardDuty or comparable cloudsecurity, vulnerability-management, monitoring and security platforms.
Experience with incident-response case management, ticketing, security orchestration and automated response workflows.
Experience analysing security logs, onboarding log sources, validating coverage, normalising events, tuning detections or maintaining detection-as-code practices.
Experience with vulnerability scanners, cloud-security platforms, vulnerability-management workflows and attack-surface management.
Relevant certifications such as Security+, CySA+, GCIH, GCDA, SC-200 or equivalent practical experience. Certifications are useful but do not replace investigation ability.

Benefits

Comp & perks

A wholly-owned subsidiary of GovTech.
We promote a learning culture and encourage you to grow and learn.
Contract Staff enjoys the same benefits as Permanent Employees.